last executing test programs: 5m13.105821368s ago: executing program 32 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000010", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 3m53.185786978s ago: executing program 5 (id=1826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044094}, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r6, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)={0x32}, 0x8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff803}, 0x1c) r7 = socket(0x11, 0x2, 0x10001) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'ip6erspan0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x2f1, 0xdff}, {0x1000b, 0xfffffffb}]}}) 3m51.816708215s ago: executing program 5 (id=1838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080) 3m36.757772842s ago: executing program 33 (id=1838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080) 2m14.334663769s ago: executing program 1 (id=2551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000a000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m14.306819081s ago: executing program 1 (id=2553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904bb6dc6fa7ab47f282128d04f28a1d1ad5bb8a195af3dad8d48a60700d16250fa7e0720d25d3ee26697b1f6c15e3617b8ac454ecceb1a247b2a0f6872ac0706d686589c025e242e9010c5"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect$midi(0x6, 0x0, 0x0, &(0x7f0000000a80)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x0, 0x4, 0x3, 0x40, 0x4}, 0xa1, &(0x7f0000000700)={0x5, 0xf, 0xa1, 0x3, [@generic={0x8a, 0x10, 0xa, "c8eae88d136a99e6d0c6c0900e3490a2ee6a85ce93fdbb38d7cf6493284c46d467a1d0721e82cd0df03f2dc53d8dff68277e848bd41045ef1cbff6e70db227276ebd7846952c27de136a4c9f3ac2195c39ab6156dff9d5b610f75cd6c3b3e650aa1f5e0425dfd65422b2de1c7a85f481f3164b7a28505f6ae4b574a21161b57c0bba901bde34fe"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x80, 0x6f, 0x6, 0x3}]}, 0x6, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc0c}}, {0x0, 0x0}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x402}}, {0x7d, &(0x7f0000000a00)=@string={0x7d, 0x3, "be10feef44ea33b42441c6640b6170786ee80ecce7732ee35ab2552241085a6d17178b4144027d828d08a0545acd6f85f191a5119dda8dbeebde90de9dcf4611afc9ac47b175a8875c2bfde87ee84b28d8988bd28907cd6f15226577fff65396cd45c1d458b6479309ff9c73da27672c96e0e9e692a1998294e39c"}}]}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4c, 0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x7c, r1, 0x1, 0x70bd27, 0x25ffdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x48040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50058}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_bridge\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x80) inotify_init() r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x4d, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "a78ce54006"}]}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m13.495787952s ago: executing program 1 (id=2571): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) pselect6(0x40, &(0x7f0000000100)={0x20006, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100004, 0x10000000002}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2m12.697232064s ago: executing program 1 (id=2574): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000040)=0x4) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./bus\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$eJzs3MtvG8UfAPCv17Gbvn7Jr5RHSwuBgqh4JE36oAcuRSBxAAkJDkWcQpJWpW6DmiDRqoLCoRxRJe6IIxJ/ARfKBQEnJK5wR0gV6oXCyWjtXedR24ldJy715yM5ntkZZ+a7u2OPZ20HMLDG0j+FiB0R8WtEjNSzKyuM1e9u3bw88/fNyzOFqFbf+LNQq/fXzcszedX8cdvrmWq1TbtX346YrlTmLmT5icVz700sXLz03Jlz06fnTs+dnzq+cOTw/vKxqaM9iXNn2te9H87v2/PKW9demzl57Z0fv077uyMrXx5Hr4zV925TT/a6sT7buSxdGOpjR+hIMSLSw1Wqjf+RKMbWRtlIvPxJXzsHbKhqNaluaV18pQrcw9KJOjCI8hf69P1vftukqcdd4caJaKxj3Mpu9ZKhSLI6pew90kYYi4iTV/754uRwPT9o+x8A2HzXT0TEs83mf0k8sKze/7JrQ6MR8f+I2BUR90XE7oi4P6JW98GIeKjD9ldfIbl9/lMd6SqwdUrnfy9k17ZWzv/y2V+MFrPczlr8pcKpM5W5Q9k+ORilLWl+sk0b3730y2etyhrzv+yWtp/eL9VI/hhatUA3O704Hauv03XpxscRe4eW4h9uxF9ozHnTdvZExN4u2zjz9Ff7WpWtHX8bPZiUV7+MeKp+/K/EiuO/tHcLza9PHj9yePL5Y1NHJ4ajMndoIj8rbvfTz1dfb9X+HcXfAzeuV2Nb0/O/Ef9oYThi4eKls7XrtQudt3H1t09bvqfp9vwvF96spcvZtg+mFxcvTEaUC6/evn1q6bF5Pq+fnv8HDzQf/7tiaU88HBHpSbw/Ih6JiEezvj8WEY9HxIE28f/w4hPvdh5/m1X5Hkrjn13r+Mfy479m4lJErNhSPPv9N53Hn0uP/5Fa6mC2JX/+a2ddPe3qbAYAAID/nqT2GfhCMt5IJ8n4eP0z/LtjW1KZX1h85tT8++dn65+VH41SsnylK18PnczWhvP81Kr84Wzd+PPi1lp+fGa+Mtvn2GHQbW8x/lO/F/vdO2DD+b4WDC7jHwAGj9d/GFzGPwyuZuP/oz70A9h8a7z+b92sfgCbz/wfBpfxD4PL+IeB1PK78UlalNZY5xfpJe4gUe7ZP/y23NFvNdxBIpK7YtfdQ4lSNC0aWvePWXSZ2NK0qN/PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//gELc7A==") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) write$cgroup_pid(r2, &(0x7f0000000880), 0x60) r6 = fsmount(r0, 0x0, 0x1) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffa7, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800) 2m11.71772392s ago: executing program 1 (id=2579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008004) 2m8.838772588s ago: executing program 1 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10003) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000086119040000000000950000003b000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0xf}, 0xb6) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x27) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) 2m8.77926413s ago: executing program 34 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x10003) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000086119040000000000950000003b000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0xf}, 0xb6) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x27) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) 1m5.49189523s ago: executing program 6 (id=3167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000050000000000000000000000000000000000008401050064010100000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe8000000000000000000000000000000100000000000000000800000008000000000000000000000000000000000000000000010000000032"], 0x23c}}, 0x0) 1m5.176164938s ago: executing program 6 (id=3170): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000003e000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 1m5.084655951s ago: executing program 6 (id=3175): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20008, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x3a0020, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)={{r1}, {@val, @actul_num={@void, 0x0, 0x6d}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0x2}, {0x3, 0x7}, {0xfff3, 0x7}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040090}, 0x20044085) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0xfb, &(0x7f0000003b00)=""/251, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x81, 0x8, 0x4, 0x8, 0x0, 0x2, 0x40000, 0x56c717451f3297d2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x1af, 0x307}, 0x10000, 0xd, 0x4eeea2ac, 0x3, 0x2, 0x8, 0x4, 0x0, 0x80000000, 0x0, 0xf0d}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001"], 0x290}}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) mmap$binder(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x4) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000280)) 1m4.970122234s ago: executing program 6 (id=3178): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000ffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x2000002, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000108000000000000000000008500000041000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x7) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r4 = socket(0x2, 0xa, 0x1) preadv(r2, 0x0, 0x0, 0x188, 0x9) epoll_create1(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000840)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f0000000140)={[{@nombcache}, {@test_dummy_encryption}, {@norecovery}], [{@smackfshat}, {@fowner_eq={'fowner', 0x3d, r5}}]}, 0xfe, 0x451, &(0x7f000001a240)="$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") close_range(r4, r1, 0x2) r6 = syz_open_dev$evdev(0x0, 0x0, 0x180) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000040)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x3f}, 0x38) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8880) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x8}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="02d27fe71fa72008c860dc60cbd3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) 1m4.311829052s ago: executing program 6 (id=3187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r2, r3+10000000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000205f"], 0x0, 0x34}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/power/reserved_size', 0x40042, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='\v\x00\x00'], 0x1eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfffffff9}, 0x94) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, r10, r10) sendmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20, 0x24040805}}], 0x2, 0x0) 1m3.64116384s ago: executing program 6 (id=3203): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) 1m3.555346083s ago: executing program 35 (id=3203): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) 45.832632611s ago: executing program 7 (id=3414): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="4c12", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffffffffffd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 45.49837349s ago: executing program 7 (id=3421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x3e}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 45.415379643s ago: executing program 7 (id=3423): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_setup(0x4fee, &(0x7f00000001c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0xe}, 0x2090, 0x81, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0) io_submit(r8, 0x2, &(0x7f0000000740)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000000000000}, 0x0]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x2c, 0x1, 0x20, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xa, 0x6}, 0x0, 0x5, 0x0, 0xa57e3374fac170bf, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0xbd18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x530, &(0x7f0000001340)="$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") close(r4) 44.583674205s ago: executing program 7 (id=3440): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 29.514597633s ago: executing program 36 (id=3440): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f008500000019000000bc600000000008009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 21.871337659s ago: executing program 0 (id=3672): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x9, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="fae5e00c048a7ce33b7be457c6826a99", 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(r2, 0x28, 0x1, 0xfffffffffffffffc, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003900093af036d6760000000004000000040000000c0001800600060086dd"], 0x24}}, 0x10) 21.755820972s ago: executing program 0 (id=3674): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in=@rand_addr=0x64010102, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}]}}]}, 0x48}}, 0x4000010) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @local}, {[], @mld={0x83, 0x0, 0x0, 0x7, 0x5, @mcast1}}}}}}, 0x0) 21.754608552s ago: executing program 0 (id=3676): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000001240)=[{&(0x7f0000000a40)}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954da4", 0x16}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b61", 0x5b}], 0x9) 21.720813663s ago: executing program 0 (id=3678): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0/file0\x00', 0xc8d0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7dab303111bbb6170a06454a122e66f0b048d203703722ebc525da241a521b52cdf7dc6974199"], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073796f237be8e4e67a30000000000800054000000021280011800a00010071756f74610000001800028008000240000000030c0001400100000000000e4e140000001000010000000000000000000084000a2cef97082de6d1818aa483e1e80ed7fa6a67"], 0xac}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r6, &(0x7f0000000000)=""/34, 0x22) getdents(r6, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r4, 0x24020000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x4580, &(0x7f0000000080)={0x0, 0x85650, 0x1, 0x0, 0x251}, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 20.581097074s ago: executing program 0 (id=3680): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_setup(0x4fee, &(0x7f00000001c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}}, 0x4040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) 19.772231176s ago: executing program 0 (id=3685): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x8, 0x2a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(0x0, 0x4000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x1008, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 19.690453148s ago: executing program 37 (id=3685): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x8, 0x2a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(0x0, 0x4000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x1008, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 15.967471719s ago: executing program 2 (id=3704): syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r0) epoll_create1(0x0) read$nci(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000847c48bce065e15de26932c41405152f831caa819053c71551e8933b474391", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400074002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000001400)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="0807000300d6bf8c35ae5caa73c3aa38e804ce74b8dfea4a810e0dfc234c9682bd456800000000000000", @ANYRES32=r6, @ANYBLOB="0c009900f30000006d000000"], 0x28}}, 0x4010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0400100000000000297e6ded4d0d9bbd70e31c55f608cad307484d27aefb95b47eec2f2aa7e307b9e5f14f033e07b84653af645c4c650ee72cf730206e38218cc21329d8da7cfd39536a3705beccb8bc9112d8faa2d0525b62fffdbff5fc52040d4e070000000000000022cf3646d462f70de74486082e6633532bd270e7b171cd34368b0266baba9e1c4c4072c7499a7451949177e69a10014e7fbdd8b546b7b44ada82b70580f0b15b26f632923eaa80a909eb0d9a58b07c2d385f08acb753767dbfcf736e29e2aa268cfc94170c0ce982b651c0b42487eaa3", @ANYRES32=r6, @ANYBLOB="0600b300000000000600b400de0000000600b400430100000600b4006f1200000600b300030000000600b4008b0f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) 14.929415616s ago: executing program 2 (id=3707): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r2, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) recvfrom$inet(r2, 0x0, 0x0, 0x2042, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000083"], 0x0, 0x4e, 0x0, 0x3}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000040)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000df83000400000000837000100000000000000020", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES16=r1], 0x24, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x1) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r6, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0xffffffff) 12.926734021s ago: executing program 2 (id=3712): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x11, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x8000, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000060}, 0x40000000) set_mempolicy(0x8000, &(0x7f0000000040)=0x97e8, 0x4) 12.819458414s ago: executing program 2 (id=3716): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone3(&(0x7f0000000680)={0x100000000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00') r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x6a8f}, 0x8) sendfile(r3, r3, 0x0, 0x800000009) 12.443803403s ago: executing program 2 (id=3721): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 11.895864168s ago: executing program 2 (id=3727): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000005000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff000000000000000000000000840005"], 0x1ac}}, 0x0) 11.894988058s ago: executing program 38 (id=3727): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x5000000000, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000005000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff000000000000000000000000840005"], 0x1ac}}, 0x0) 8.329964605s ago: executing program 3 (id=3743): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x6, 0x21c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xc) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0xd0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r4, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006"], 0x24}}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) 6.234369242s ago: executing program 3 (id=3746): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x5000, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDADDIO(r0, 0x4b34, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f646f74732c6e3964a83ae02fb3426f646f74732c6e6f646f74732c6e6f646f74732c666d61736b3d30303030303030303030303030302030303030303030312c6e6f636173652c636865636b3d"], 0x0, 0x239, &(0x7f0000000380)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001000010000000000fcdbdf25e0000001000000000000000000000000ac1e010100"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000002000004d632000000e00000020000000000000000000000000000000000000000000000000000000001000000000000000100000000000080010000f2feffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff0000000000000000000000002cbd7000003500000a000000080000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x24002850) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000302fff4000000000000000082f21cce6df0441527b679c7bd16280ec57edafee1c2a080c071c222f29cec68ce5fce7867d1b7216dea39737f3f0ca69a68332e66842f4fb21a498351296bbeacd39f01ce55d88e457826f8c8f3a8503937d90cd86190bdc0c14e928700972b"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) dup(r2) 5.251570948s ago: executing program 4 (id=3748): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000100), 0x5, 0x451, &(0x7f0000000940)="$eJzs281vFOUfAPDv7LblnfZH+Km8qFU04ltLCyIHLxpNPGhiogc81rYQZKGG1kQIUTQGj4bEkxfj0cS/wJNejHoy8ap3Q0IMF9DTmtmdobvL7tIt+1LZzyeZ5XlmZnm+3515Zp+ZpxvA0JpMX5KI7RHxe0SMV6v1O0xW/7l5/eL839cvzidRLr/5V1LZ78b1i/P5rvn7tuWVkYjCp0nsa9Lu8vkLp+dKpcVzWX165cx708vnLzx76szcycWTi2dnjx07cnjm+aOzz3UlzzSvG3s/XNq/59W3r7w+f/zKOz9/m+T5N+TRJZPtNj5eLne5ucHaUVNORgYYCB0pVrtpjFb6/3gUY/Xgjccrnww0OKCnyuVy+b7Wmy+VgXtYEoOOABiM/Is+vf/Nlz4NPTaEay9Wb4DSvG9mS3XLSBSyfUYb7m+7aTIijl/656t0id48hwAAqPN9Ov55ptn4rxC1z4V2ZnMoExHxv4jYFRFHI2J3RPw/orLv/RHxQIftN06S3D7+KVxdV2JrlI7/XsjmturHf/noLyaKWW1HJf/R5MSp0uKh7DM5GKOb0vpMmzZ+ePm3z1ttqx3/pUvafj4WzOK4OrKp/j0Lcytzd5NzrWsfR+wdqeS/OeryT27NBCQRsSci9q6zjVNPfbO/1bY7599GF+aZyl9HPFE9/pca888l7ecnpzdHafHQdH5W3O6XXy+/0ar9u8q/C9Ljv7Xp+X8r/4mkdr52uZP//csn09fLf3zW8p5mvef/WPJW3boP5lZWzs1EjCWvVYOuXT/bsN/s6v5p/gcPNO//u2L1k9gXEelJ/GBEPBQRD2exPxIRj0bEgTafwk8vPfbu+vPvrTT/hY6O/2phLBrXNC8UT//4XV2jE53knx7/I5XSwWzNWq5/a4mr07MZAAAA/qsKEbE9ksLUrXKhMDVV/Rv+3bG1UFpaXnn6xNL7ZxeqvxGYiNFC/qRrvOZ56Ex2W5/XZxvqh7Pnxl8Ut1TqU/NLpYVBJw9DbluL/p/6szjo6ICe83stGF76Pwwv/R+Gl/4Pw6tJ/98yiDiAvqr082bf/x/d+b1jO3sQENBfDf3ftB8MEff/MLzW0/9dM+De0LYvj/UvDqCvlrfEnX8k37dCfiHaKPEotC5EYUOEodCjwoAvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3ybwAAAP//8bbi/A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000, 0x8000}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x197) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 4.647838274s ago: executing program 8 (id=3750): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) unshare(0x20000680) inotify_rm_watch(r2, r1) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xac40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x780, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x8}, 0x880, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(r2, &(0x7f0000000180)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r5) recvmsg(r5, 0x0, 0x100) write$cgroup_devices(r5, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x40, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x5}, 0x8084, 0xa2, 0xffffffff, 0x5, 0x7f, 0xa, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7], 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x9b5, &(0x7f0000000040)={0x0, 0xc89f, 0x4, 0x2, 0x20002f7, 0x0, r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x541, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 4.595684136s ago: executing program 4 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0xf2ff, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x6, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x80, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x5, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x200007, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0xb, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0x5b86, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0x9b91}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x329, 0x8, 0x7fff, 0x4, 0x9, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x5, 0x1ff, 0x7437ec77, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x2, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0xffff, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0x8ac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0x2}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7f7f, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x800000e4, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x8, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x1}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5206, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x808f}, {0x740, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x0, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x4f}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0x2, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff05, 0x3}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x4007, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0xb71, 0x80000000, 0x2}, {0x9, 0xffff8000, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff, 0xd}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x6, 0x10, 0x3, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x0, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0x6da, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0xb, 0x7}, {0x20000006, 0x5, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80040000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x40003, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.499774489s ago: executing program 8 (id=3752): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.488552429s ago: executing program 8 (id=3753): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d02697274696f2c64666c747569643d1019964220d40ab05a5b61279925a3715b9f5e4ce8926a4089185bd9792117fa5075c9538ad2a4e247f3bf0adb380374c23adf9e7c480d072199ded2d8965a92be7533616a59bc27e9f2ef7059a9ca854a09e11f869c4e3077feff2270120639884f4fd1a06733f4c6595031c6a1d7f258e32d34f93d3fbe1258403fbb9e975afc75bc0af6fc067636e3c8f51d2f03774f9d87e58b2edd2a0f4a2e949e747eea539755b8b92fddc43bb296", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x21081e, &(0x7f0000000000), 0xfe, 0x51e, &(0x7f0000000880)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2010, 0xffffffffffffffff, 0xf8e77000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newtaction={0x14, 0x1d, 0x1, 0x30bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004440)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x9, @remote, 0x6}, 0x1c, &(0x7f0000001040)=[{&(0x7f00000001c0)="c7bba0811136792eede9b565648b10a2b55015ad498eb41b93d145066af36490772b19ae1a6adf714c294f1e25bc90f85444", 0x32}, {&(0x7f0000000dc0)="639406f707c40c05e1562195639b292504395305b89d7ae5c84af1465808d0750783c982c4d691e8f3688f5e58a4bb9b6ae53230c312c74546b25612d8a06038e4020a2578a6dc5ce64fdcc7ab7827d9058ae6a8510f916e6bdbdaf74a8ec6f4b3fbdff388d6d99edadbb1930d9fd7c4619884df4b20793282512bac9c5aee794401f1112fba2429f5555c4b9991110b5e3cd54a0fe2632ac85da9e1b16c162dd74ec64db53626fb0b93f3ba5898b9579056f156ae02e4bb2bc4bb0d9b598eb5816edb146787590e4608f9bcdf8af4d2299b1232d41e63284bea93ffd20db69d4e886912034f6e95e91be4cbe5351b349a101b599dc2c7a8", 0xf8}, {&(0x7f0000000ec0)="2125e46d39ea7bcf1114a278ad72966bf7d87e972dd2e93a317edf6c7a", 0x1d}, {&(0x7f0000000f00)="e79c71d68fecc7d40503f2b08db94aa5b931a1bbd6", 0x15}, {&(0x7f0000000f40)="4c63fb4a7dfe2881928c7c669d90a13ae0bcbcbe304c43c370a91bc03543945d6687a03f010058aa7b26f760ba434514ff042a88b285662c4fc19d1998999542d2b293b112a14f9dec72ab1c20d268b91dbe1df90f8d1410a1e0fdc547356ceae300a013cdf47ba0652cb817ae598eb3d4493252763002e6f831820d7e60cb141f9ee7fcc7d3feecd7e78d92f6974f684a96eebe825386c131c9a54f8bbcf7a5bedc5ca58812bd589744c515041c582fb0a65209b7bfa0a34c2fb0d2f24fe4df9be56e7e4cbf8cb5a7f35b1f1470a089b22d9dce7a7fdd0d0295f64bba608fab01", 0xe1}], 0x5, &(0x7f00000021c0)=ANY=[@ANYBLOB="580000000000000029000000370000007307000000000000c20400000fd70730000000010a09080002000000000000000200000000000000780000000000000006000000000000000800000000000000050200390000000024000000000000002900000032000000200100"/120, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000029000000390000003302010600000000fe8000000000000000000000000000bb24000000000000002900000032000000fe800000000000000000000000000017", @ANYRES32=0x0, @ANYBLOB="00000000280000000000000029000000390000008402011e00000000de8000000000000000000000000000aaa8000000000000002900000036000000731100000000000007280000000308030008dc0a0000000000003e40000000000000f9ffffffffffffff00000000ffffffff050607ff074800000001100003000900000000000000020000000000000009000000000000000000000000200000050000000000000008000000000000000100000000000000c0ffffffffffffffc910fe80000000000000000000000000001e000000000000140000000000000029000000430000000300000000000000140000000000000029000000080000000400000000000000800000000000000029000000360000003b0c000000000000c91000000000000000000000ffff64010100c910fc0200000000000000000000000000000740000000000e00ff7f0600000000000000ff7f0000000000000200000000000000040000000000000000000080000000001000000000000000040000000000000000001400000000000000290000003e0000000400000000000000"], 0x268}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0xf76, @private1, 0x7}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000001cc0)="fe4d48517e7bf8be40339c3455b5a779474ef5bb123b9833c08ca2477ba8216c419ed82ff8a5666a22863c950399d82aad53933c1c22f4a4b2f28550a9b39fd4459d9c597a7ad8dd1ea7b066a847f762b58d278ec93d1adb68394c31ed144c6b0b2c94b3c4e04cb3d55ec3142c7f9045672a59c885d721504785cee5b444de240b0bf0b5fef826eee34c293d844d2ec91e9fb9c49134fbe0b8d691c6d98aac9872a2c0188cd2567422c861a444612a13b07c63", 0xb3}, {&(0x7f0000001d80)="978394fe2b924b4120329a4f2d6206a22476cd2f634173ea85fc0365c607a168662e0bef664d5ac6bb6c876f2fccaef8dd2f135176a88ffd709612614243c549829859fedc3310", 0x47}, {&(0x7f0000001e00)="d10aabdd1e75c6f25f585719f4ea29e5a1cdb4e2e9189a2232f472b04f3996a14775404f594e13a326ec3a4ca218775deff3c84e5d39f8dbf86d10294a3e16c5c2e5d804593d4bd681ad7c3efb5413aac15bb449140d39e3e56eb76dfd37c985bb00c27327ab4c1db65b4b600136691ca8288dc5417d9fa5046867372838ed713968280f8b42b3aa08887a23b3ec18cc8dad15c6e91029a8f81f90179baef03b9bd4e60ca7019d18b0f4ac07147cd2b5cb", 0xb1}, {&(0x7f0000001ec0)="ffac20a4d66fea", 0x7}, {&(0x7f0000001f00)="85d88938980465a8737b7e14e6f2ed858c75f1e1f963086435d4d14964b0be56aafe26ed8e343ae2e4a9ac0a2eb46f4435fb44772f2693975a85de8953819170c12674b042def1ec4eed2b5a150b9f44e71a1f873f43d7bcd282046fb96e1acf491cff3598df75cb419b19f20725970b16d2bb48c12d23c2a3ed53a3efc3f5861f830a46dc72256952928a6cf101be786ca0aebf15ec3859d27c18d899eedec70811f80aad32c50dcb7a1782a20c22", 0xaf}, {&(0x7f0000001fc0)="d4b0bbd5aebfdf0ca958a3c70923a2abbb", 0x11}, {&(0x7f0000002000)="6aa7e7c22c41fe6bd100629ac5cda445327fe6659c8ed923d652c15d6a29079041c2ee484fa985385e9311a5c9c362b049c1dd0552fd26991b61e7dde15f0500e84c60f5029a84161b6cf5ec03e2001edc86f9ba014cfa9a36ccaa9880e197f75b2f521821fa87e9fdec1fc89de0b11f6835c39c7f3ed1073e1cdda79d058fbcf9e90b7d4d40", 0x86}, {&(0x7f00000020c0)="bb8471a2d8f0b126886fe2ec56ed614cc077826a4de946e5fc329fb168b02d59a0cc4c81c53d3948dcfa4d8a7f4062ec52779d42ea15702601f1b73eca4c7fc0651d32e54c8aa2bca702ac90679f02fb5b293dab5a9d3361fe4c32d470f28ed908acaadeadec974a602ffe6e8932f245b947f88714ff1524c26206f9e3a546e08080919e83d0b5bf6383e02f3d6a48aae8c6257f9dd2fd837d56681319cdd478e9fd83b91e731c9d7aa6d4b7071683702718cca68c36895c96de94619e5e27d0857e90066e25477d88f2655e6ad2ac4f09de2f552bf28c608f3102437b70ad874e98", 0xe2}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="dd72b3548e6e6a9c06f6a56f666a75469031210fb22e04c8331fe84e2a3d5c30f0c6785f07ede7eba0b75988104fa520ce214ada3377e7", 0x37}], 0xa}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000240)="fc3dc6d6c347", 0x6}, {&(0x7f0000003f40)="608e4fa577cef1b6babc8c743d8ddf", 0xf}, {&(0x7f0000003f80)="cbb9578b6be5917208f522f50ceb18160254502af8399bd7202118cbff4f560e3aacb38fd9e7b35589878b5e7d52064c6211b59a46fb82fd32343e096d8a3c58df453e010bed1e2afd8236cc3706639abe61e401c635571f6dc89eadbf74e09752db36e66740933cb144084b75011b96562e7a61c4cea2df177c782deed6353a4dd3a26b7b4d2fddf49fa2aedfc658ce1d3686092d5aebf6780da9cc255b61147701b77270d2424aaceb12f62d2a18982122d0c057238d437a123d98b3a82b6f9468f8868b296fcfba22804260d490c4d72ad4a42037f5c7d17483f93b6ec967961089610ef640dda262d34a3cfca574070437024737", 0xf6}], 0x3, &(0x7f00000040c0)}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004100)}, {&(0x7f0000004140)="3e0218ade0bf66b97c936933f7c1cb1787fb04c4dd328dfefa12d7ab241b99ba03b253faec1840278260b6a2b7a8ac09b114ee03b5b3bb5b3febaf6c0d91c88d085f70abeee032f6279ffc5b426d90122a8bf2e33c8620d7f4e75cf5aca371c9650cecde53d5f2d857b7cdc9891504c5c26ba8258c81499a3400ad83d0942363dcf3811333b864d1a4486a1e6e11d67c3e5d16b5babecd3a922c164988b4b3bc13b24d509f1c13de4e5719456d0bb8aee527a0e54870071b0c80a82b37e69f4bd5c894c72ec5be9f4e81eefb23f5238e93c1a5da6da4e527b06e666df72b90ee93fa60", 0xe3}], 0x2, &(0x7f0000004280)=ANY=[@ANYBLOB="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"], 0x1c0}}], 0x5, 0x4000001) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000386dd6001012000103afffe8000000000000000000000000000bbff02000000000000000300000000000000009078000008400040000000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) 4.379586702s ago: executing program 3 (id=3755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ffffffd0000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) 4.378216832s ago: executing program 4 (id=3756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003003c0000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 4.362349132s ago: executing program 3 (id=3757): fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003580)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x8a8, 0x19, 0x0, 0x8a8, 0x0, 0x980, 0x1f0, 0x1f0, 0x980, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x70, 0x90, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0xff84}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x21, 0xffffffff, 0x3, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) ftruncate(r2, 0x3000000006) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) rmdir(&(0x7f0000000000)='\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000740)={0x1, 0x0, 0x18, 0x1d, 0x111, &(0x7f0000000340)}) 4.263367205s ago: executing program 4 (id=3759): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x20}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x28}}], 0x2, 0x4046040) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = gettid() sched_getparam(r4, &(0x7f0000000100)) 3.819180707s ago: executing program 9 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080005000100000014000200776731000000000000000000000000002400033fa0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 3.605526093s ago: executing program 9 (id=3763): r0 = open(&(0x7f0000000100)='.\x00', 0x40080, 0x150) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f00000002c0)={[{@dax_never}, {@abort}, {@data_writeback}, {@noblock_validity}, {@norecovery}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@jqfmt_vfsold}]}, 0x1, 0x4b2, &(0x7f0000000580)="$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") socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000002500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x2, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) epoll_create1(0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18, r0}, 0x18) open(0x0, 0x1607c0, 0x78e22799f4a46ffe) 3.33201217s ago: executing program 5 (id=3728): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.355439686s ago: executing program 3 (id=3764): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003d00)=@newtaction={0x14, 0x30, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x40814) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x40814) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f00000000c0), 0xf, 0x1, &(0x7f00000001c0), &(0x7f00000003c0)=0x1, 0x2) (async) futex(&(0x7f00000000c0), 0xf, 0x1, &(0x7f00000001c0), &(0x7f00000003c0)=0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000740)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x6}}, {@auto_da_alloc}, {@nojournal_checksum}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r6 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)={0xc, r6, 0x100000000, 0x54, 0x2, 0x293}) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)={0xc, r6, 0x100000000, 0x54, 0x2, 0x293}) epoll_create1(0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r8, 0x40047459, 0x0) 2.20452644s ago: executing program 8 (id=3765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005"], 0x198}}, 0x0) 2.123851092s ago: executing program 9 (id=3766): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f00000002c0)='./control\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r3, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) 2.117711162s ago: executing program 9 (id=3767): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000440)) sendfile(r8, r8, 0x0, 0x7a680000) getpeername$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) bind$packet(r8, &(0x7f0000000500)={0x11, 0x2, r9, 0x1, 0xf8, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c000780080005"], 0x198}}, 0x0) 2.035790835s ago: executing program 8 (id=3768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x80ffffff, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}}, 0x0) 1.975714306s ago: executing program 8 (id=3769): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2002c066}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb7, &(0x7f0000001f00)="$eJzs3M9rHOUbAPBnJpvf+TbpF1FbBANSFcVt2pQKPVXPooIePDYmmxKy/WESwYQe0npXDyIeCtI/QfBuL54ED/Wg9S8oYpGil7aHldkf6ZpktzHZ3WnTzwfezPvOu7vP8+xsd96BnQbwxJrM/qQRhyLiTBIxXt+fRsRAtTcUsV573L07l2azlkSl8t6fSSQRcffOpdnGayX17Wh9MBQRN95M4v+fbo27vLq2OFMul5bq46Mr5y4eXV5de23h3MzZ0tnS+RPTr5+YPjk93cFab1388Ovnfn77xSvXPpt656sDPyZxOsbqc811dMpkTG68J80KETHT6WA56avX01xnUsgxIQAA2kqb1nBPx3j0xYPF23j88EuuyQEAAAAdUemLqAAAAAD7XOL6HwAAAPa5xu8A7t65NNto+f4iobduvxERE7X6G/c312YKsV7dDkV/RIz8lUTzba1J7Wl7NplF+u6nUtaiS/cht7N+OSKe3e74J9X6J6p3cW+tP42IqQ7En9w0flTqn9hB/aeH9x4/7/oBeDJdz9Y/p7c7/6cb65/Y5vxX2ObctRt5n/8a6797W9Z/D+rva7H+e3eHMQ7ff+VGq7nm9d8Hn/82l8XPtnsq6j+4fTnicGG7+pON+pMW9Z/ZYYzR2VtXW81l9Wf1Nlqv669cizhSXc1trb8haff/Ex2dXyiXpmp/t3n91ZPt4zcf/6xl8RvXAr2QHf+R2N3xv7jDGBPP/HGo1dzD609/H0jer/YG6ns+mVlZWToWMZC8tXX/8fa5NB7TeI2s/pdfaP/vf7v6s++E9fr7kH16Lte32fjKppijR45/u/v6uyurf26Xx/+LHcb45vurH7Way7t+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4PaUSMRZIWN/ppWixGjEbEUzGSli8sr7w6f+Hj83PZXMRE9KfzC+XSVESM18ZJNj5W7T8YH980no6IgxHx5fhwdVycvVCey7t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANoxGxFgkaTEi0oj4ezxNi8W8swIAAAA6biLvBAAAAICuc/0PAAAA+9+W6//Cv0ZDvcwFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfeng89dvJhGxfmq42jID9bn+XDMDui3d2cNGup0H0Ht9eScA5KbQ1K9UKpUcUwF6zDU+kDxkfqjlzGDHcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0fXSoes3k4hYPzVcbZmB+lx/rpkB3ZbmnQCQm752k8lDdwCPsULeCQC5cY0P1Fb29ys1W+eHWj5zcM9RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh8jFVbkhYjIq3207RYjPhfRExEfzK/UC5NRcSBiPh1vH8wGx/LO2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6bnl1bXGmXC4t6XSnk9Tf6EclH50edYajZ7GG23/GBnf18cvxSwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNwsr64tzpTLpaXlvDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ra8urY4Uy6XlrrY2RxzKJ9SAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIwT8BAAD///vKBmw=") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x9, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x41, 0x0, 0xcf, 0x0, 0x0, 0x200, 0x2003f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0xf3358d87ebd646b4, 0x400000, 0x5de4, 0x0, 0x9, 0xfffffffe, 0xe2d, 0x0, 0xe9c7, 0x0, 0x2}, 0x0, 0xe, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r10 = openat(0xffffffffffffffff, &(0x7f0000000e80)='./bus\x00', 0x1c5182, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r9, 0x0, 0x7fffffff) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) 1.975526106s ago: executing program 5 (id=3770): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000017824000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x4000814) 1.84409465s ago: executing program 5 (id=3771): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001e00)=""/4069, 0xfe5}, {&(0x7f0000002e00)=""/4122, 0x101a}, {&(0x7f0000000dc0)=""/4125, 0x101d}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000cc0)=""/242, 0xf2}], 0x6}, 0x40000142) socket$inet(0x2, 0x4000000000000001, 0x0) 1.84262353s ago: executing program 4 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xb) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250100030008000100010000000c0004800500031c80ff00000800020001000000200008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8d) lseek(r6, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100290100000000000000", @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800310700000000000000000a00"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x140, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb863}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x290}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x9f4dfad22eadefd8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) pread64(r1, &(0x7f0000002200)=""/87, 0x57, 0xfffd) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r11, @ANYBLOB="0203b00000002400", @ANYRES32=0x0, @ANYBLOB="6c00308005000200010000002400030072e39f5a926020eb519e78c4bae35814a1986967a5e36260c3172d540f385b981400040095e3dd6fbb801586bb1d7a2f0b76ae4114000400ff6982b49c6f2210cfcb50f316d6952e14000400ae9670d34ad352072abe97a1f321059c0c0006000200000002000000040030800c000600000000000000000008000300", @ANYRES32=r12, @ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0x11000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='%*.\x00', 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r13, @ANYRES16=r13, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) 492.951717ms ago: executing program 3 (id=3773): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r5, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000040)=""/178, 0xb2}, {&(0x7f00000002c0)=""/25, 0x19}], 0x2, 0x8, 0xfffffffb) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x9, 0x7, {"c1ec52e153d1245d27ebbcf0c74475cb"}, 0x2c, 0x7, 0x5}, @in={0x2, 0x4000, @multicast2}}}, 0x118) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000480)={r8}) setsockopt$inet6_opts(r11, 0x29, 0x0, &(0x7f00000004c0)=@srh={0x89, 0x8, 0x4, 0x4, 0x8, 0x10, 0xfff8, [@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x48) dup3(r1, r0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b, 0x0, 0x0, 0x0}, 0x94) 123.756136ms ago: executing program 9 (id=3774): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x25, 0x2, @val=@tracing={0xffffffffffffffff, 0x8000000000000001}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, r1}, 0x10) r3 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r3, &(0x7f0000000180), 0x0, 0x0, 0x8800) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000240)={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) write$cgroup_pid(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x4, @mcast2, 0x20001000}, {0x2, 0xbff9, 0xc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r4, 0x9dffffff}}, 0x48) 110.347007ms ago: executing program 5 (id=3775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x6, 0x7, @l2={'eth', 0x3a, 'vcan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40841}, 0x4040044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1e}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3859}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf493}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40080}, 0x20004000) close(r3) 65.167868ms ago: executing program 4 (id=3776): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) unshare(0x28040680) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x14, r2, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x800, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@noextend}, {@access_any}, {@privport}, {@cache_none}, {@uname={'uname', 0x3d, '\x00'}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_fscache}, {@cache_loose}, {@fscache}], [{@euid_gt={'euid>', r7}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x62, 0x62, 0x32, 0x7, 0x35, 0x65, 0x38], 0x2d, [0x62, 0x35, 0x65, 0x32], 0x2d, [0x64, 0x37, 0x61, 0x36], 0x2d, [0x30, 0x30, 0x31, 0x65], 0x2d, [0x37, 0x37, 0x39, 0x33, 0x34, 0x62, 0x36, 0x62]}}}]}}) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=3777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {@abort}, {@stripe={'stripe', 0x3d, 0x9587}}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@usrquota}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x569, &(0x7f0000000380)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x9000) fallocate(r3, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) kernel console output (not intermixed with test programs): tent: 25 vs 1305 free clusters [ 450.834001][T14786] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 556 with error 28 [ 450.858298][T14786] EXT4-fs (loop8): This should not happen!! Data will be lost [ 450.858298][T14786] [ 450.884003][T14786] EXT4-fs (loop8): Total free blocks count 0 [ 450.897057][T14786] EXT4-fs (loop8): Free/Dirty block details [ 450.903046][T14786] EXT4-fs (loop8): free_blocks=20480 [ 450.908341][T14786] EXT4-fs (loop8): dirty_blocks=560 [ 450.918699][T14796] loop0: detected capacity change from 0 to 128 [ 450.930866][T14796] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.953775][T14786] EXT4-fs (loop8): Block reservation details [ 450.972522][T14786] EXT4-fs (loop8): i_reserved_data_blocks=35 [ 450.993013][T13176] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.019567][T12770] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 451.037591][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 451.320089][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 451.329358][T14805] loop0: detected capacity change from 0 to 128 [ 451.342390][T14805] loop0: detected capacity change from 0 to 764 [ 451.349343][T14805] iso9660: Unknown parameter '01777777777777777777777' [ 451.397087][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 451.427665][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 451.523028][T14824] loop2: detected capacity change from 0 to 512 [ 451.547134][T14828] loop0: detected capacity change from 0 to 256 [ 451.557931][T14824] EXT4-fs: Ignoring removed nobh option [ 451.587692][T14824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 451.598967][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3276'. [ 451.608532][T14827] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 451.618787][T14830] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 451.650756][T14824] EXT4-fs (loop2): 1 truncate cleaned up [ 451.657721][T14824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.772503][T14841] EXT4-fs: Ignoring removed nobh option [ 451.795252][T14841] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.3280: Bad quota inum: 1, type: 0 [ 451.812224][T14845] EXT4-fs: Ignoring removed bh option [ 451.820331][T14841] loop4: lost filesystem error report for type 5 error -117 [ 451.821567][T13992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.840625][T14845] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 451.850522][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 451.850592][ C0] EXT4-fs (loop4): initial error at time 451: ext4_quota_enable:7221 [ 451.850689][ C0] EXT4-fs (loop4): last error at time 451: ext4_quota_enable:7221 [ 451.877199][T14841] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 451.922522][T14841] EXT4-fs (loop4): mount failed [ 451.934011][T14845] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 451.962306][T14845] EXT4-fs error (device loop8): __ext4_fill_super:5596: inode #2: comm syz.8.3282: iget: special inode unallocated [ 452.038888][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3285'. [ 452.109429][T14857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.117221][T14845] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 452.117880][T14845] EXT4-fs (loop8): Remounting filesystem read-only [ 452.127034][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 452.127100][ C1] EXT4-fs (loop8): initial error at time 452: __ext4_fill_super:5596: inode 2 [ 452.127149][ C1] EXT4-fs (loop8): last error at time 452: __ext4_fill_super:5596: inode 2 [ 452.169235][T14845] EXT4-fs (loop8): get root inode failed [ 452.175558][T14845] EXT4-fs (loop8): mount failed [ 452.192453][T14855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.216608][T14857] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 452.230445][T14857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 452.239282][T14857] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 452.250247][T14857] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 452.260558][T14857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 452.463687][T14760] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 453.235382][T14865] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3286: dx entry: limit 65535 != root limit 120 [ 453.247515][T14865] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3286: Corrupt directory, running e2fsck is recommended [ 453.273123][T14868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3287'. [ 453.303398][T12770] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 453.503600][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.481210][T13176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.716403][T14894] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 454.767416][T14896] macvtap1: entered promiscuous mode [ 454.774689][T14896] macvtap1: entered allmulticast mode [ 454.780473][T14896] veth1_vlan: entered allmulticast mode [ 454.816635][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 454.816650][ T28] audit: type=1400 audit(454.882:8680): avc: denied { bind } for pid=14897 comm="syz.0.3297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.865452][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3300'. [ 454.896614][ T28] audit: type=1400 audit(454.962:8681): avc: denied { map } for pid=14902 comm="syz.2.3300" path="socket:[43581]" dev="sockfs" ino=43581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.920488][T14900] set_capacity_and_notify: 6 callbacks suppressed [ 454.920502][T14900] loop7: detected capacity change from 0 to 4096 [ 454.957734][T14909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3299'. [ 454.992547][ T28] audit: type=1400 audit(454.972:8682): avc: denied { accept } for pid=14902 comm="syz.2.3300" path="socket:[43581]" dev="sockfs" ino=43581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.121523][T14900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.137381][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 455.150882][T14900] selinux_netlink_send: 24 callbacks suppressed [ 455.150915][T14900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14900 comm=syz.7.3298 [ 455.161045][T14917] Cannot find add_set index 0 as target [ 455.207356][T14920] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3298'. [ 455.379414][T14911] geneve3: entered promiscuous mode [ 455.429861][T14911] geneve3: entered allmulticast mode [ 455.463744][ T57] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 455.463858][ T57] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 455.463971][ T57] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 455.464012][ T57] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 455.466941][T14926] sctp: [Deprecated]: syz.0.3297 (pid 14926) Use of int in maxseg socket option. [ 455.466941][T14926] Use struct sctp_assoc_value instead [ 455.492903][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.632792][ T28] audit: type=1400 audit(455.692:8683): avc: denied { accept } for pid=14938 comm="syz.8.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.649682][T14940] loop4: detected capacity change from 0 to 256 [ 455.699192][T14942] random: crng reseeded on system resumption [ 455.825954][T14951] __nla_validate_parse: 1 callbacks suppressed [ 455.826003][T14951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3314'. [ 455.879547][T14958] loop2: detected capacity change from 0 to 512 [ 455.883870][T14958] EXT4-fs: Ignoring removed nobh option [ 455.916478][T14958] EXT4-fs (loop2): too many log groups per flexible block group [ 455.916826][T14958] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 455.916906][T14958] EXT4-fs (loop2): mount failed [ 456.115454][T14978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.137822][T14978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.139367][T14974] tipc: Started in network mode [ 456.153879][T14974] tipc: Node identity 8e9e74714128, cluster identity 4711 [ 456.161729][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3324'. [ 456.234068][T14987] loop2: detected capacity change from 0 to 1024 [ 456.275394][T14987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.857625][T14914] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 457.122541][T14974] tipc: Enabled bearer , priority 0 [ 457.134599][T14986] syzkaller0: entered promiscuous mode [ 457.252366][T14986] syzkaller0: entered allmulticast mode [ 457.259779][T14988] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 457.271353][T14993] tipc: Resetting bearer [ 457.305360][T15004] batman_adv: batadv0: Adding interface: dummy0 [ 457.311666][T15004] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.337399][T15004] batman_adv: batadv0: Interface activated: dummy0 [ 457.345624][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3327'. [ 457.358294][T15004] batadv0: mtu less than device minimum [ 457.364478][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.378682][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.389493][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.401017][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.412061][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.425460][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.438442][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.449257][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.462289][T15004] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 457.483477][T15005] Cannot find add_set index 0 as target [ 457.491851][T14993] tipc: Resetting bearer [ 457.499633][T14993] tipc: Disabling bearer [ 457.886406][T13992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 457.930453][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'. [ 458.030617][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3334'. [ 458.053406][T15024] random: crng reseeded on system resumption [ 458.057498][T15022] IPv6: Can't replace route, no match found [ 458.084316][T15022] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3334'. [ 458.153434][T15030] loop7: detected capacity change from 0 to 512 [ 458.192931][T15030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.218683][T15034] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 458.245128][T15040] loop8: detected capacity change from 0 to 164 [ 458.254115][T15040] /dev/loop8: Can't open blockdev [ 458.268767][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.379195][T15050] loop7: detected capacity change from 0 to 512 [ 458.402535][T15050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.427943][T15050] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 458.449756][T15050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 458.462052][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3344'. [ 458.475152][T15050] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 458.491206][T15058] Cannot find add_set index 0 as target [ 458.496246][T15050] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 458.506986][T15060] loop2: detected capacity change from 0 to 512 [ 458.515617][T15050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 458.571256][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3347'. [ 458.580528][T15063] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3347'. [ 458.611202][T15065] loop4: detected capacity change from 0 to 1024 [ 458.617934][T15065] EXT4-fs: Ignoring removed bh option [ 458.652008][T15060] EXT4-fs (loop2): 1 truncate cleaned up [ 458.652857][T15065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.658309][T15060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.668341][T15060] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.3346: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 458.752068][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.763585][T15070] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.3342: dx entry: limit 65535 != root limit 120 [ 458.776384][T15070] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3342: Corrupt directory, running e2fsck is recommended [ 458.829797][T15060] dummy0: entered promiscuous mode [ 458.838762][T15060] erspan0: entered promiscuous mode [ 458.875378][T15060] hsr1: entered allmulticast mode [ 458.880943][T15060] dummy0: entered allmulticast mode [ 458.893789][T15060] erspan0: entered allmulticast mode [ 458.957842][T13992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.151762][T15074] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3349'. [ 459.172326][T15076] bridge1: entered promiscuous mode [ 459.249731][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.517269][T15099] loop8: detected capacity change from 0 to 1024 [ 459.604839][T15099] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.648790][T15099] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3355: bg 0: block 3: invalid block bitmap [ 459.663356][T15099] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 459.675839][T15099] EXT4-fs (loop8): This should not happen!! Data will be lost [ 459.675839][T15099] [ 459.686364][T15099] EXT4-fs (loop8): Total free blocks count 0 [ 459.693236][T15099] EXT4-fs (loop8): Free/Dirty block details [ 459.699674][T15099] EXT4-fs (loop8): free_blocks=0 [ 459.708782][T15099] EXT4-fs (loop8): dirty_blocks=64 [ 459.713964][T15099] EXT4-fs (loop8): Block reservation details [ 459.720202][T15099] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 460.588944][T15119] loop7: detected capacity change from 0 to 128 [ 460.652184][T15119] loop7: detected capacity change from 0 to 512 [ 460.652534][T15119] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.655761][T15119] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 460.661382][T15119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 460.661516][T15119] EXT4-fs (loop7): orphan cleanup on readonly fs [ 460.661857][T15119] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3363: bg 0: block 361: padding at end of block bitmap is not set [ 460.661885][T15119] loop7: lost filesystem error report for type 5 error -117 [ 460.662271][T15119] EXT4-fs (loop7): Remounting filesystem read-only [ 460.663576][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 460.663592][ C0] EXT4-fs (loop7): initial error at time 460: ext4_validate_block_bitmap:441 [ 460.663637][ C0] EXT4-fs (loop7): last error at time 460: ext4_validate_block_bitmap:441 [ 460.665354][T15119] EXT4-fs (loop7): 1 truncate cleaned up [ 460.665826][T15119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 460.695729][ T28] audit: type=1400 audit(460.762:8684): avc: denied { create } for pid=15118 comm="syz.0.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 460.869070][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 461.405479][T15137] __nla_validate_parse: 6 callbacks suppressed [ 461.405498][T15137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3369'. [ 461.456519][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 461.457341][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 461.485278][T15141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3373'. [ 461.716620][ T28] audit: type=1400 audit(461.772:8685): avc: denied { write } for pid=15147 comm="syz.8.3375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 461.999941][T15160] loop2: detected capacity change from 0 to 256 [ 462.001900][T15148] loop8: detected capacity change from 0 to 512 [ 462.021831][T15164] loop7: detected capacity change from 0 to 1024 [ 462.041835][T15160] FAT-fs (loop2): Directory bread(block 64) failed [ 462.046472][T15164] EXT4-fs: Ignoring removed orlov option [ 462.064962][T15166] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 462.074941][T15160] FAT-fs (loop2): Directory bread(block 65) failed [ 462.090556][T15148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.096161][T15160] FAT-fs (loop2): Directory bread(block 66) failed [ 462.125520][T15164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.139298][T15160] FAT-fs (loop2): Directory bread(block 67) failed [ 462.146526][T15160] FAT-fs (loop2): Directory bread(block 68) failed [ 462.153123][T15160] FAT-fs (loop2): Directory bread(block 69) failed [ 462.162702][T15160] FAT-fs (loop2): Directory bread(block 70) failed [ 462.169264][T15160] FAT-fs (loop2): Directory bread(block 71) failed [ 462.176935][T15160] FAT-fs (loop2): Directory bread(block 72) failed [ 462.183562][T15160] FAT-fs (loop2): Directory bread(block 73) failed [ 462.191302][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.223150][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.249912][T15181] loop8: detected capacity change from 0 to 1024 [ 462.268183][T15181] EXT4-fs: Ignoring removed orlov option [ 462.307910][T15188] loop7: detected capacity change from 0 to 512 [ 462.328366][T15181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.346233][T15188] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.390580][T15188] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 462.423292][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3393'. [ 462.443430][T15188] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 462.457796][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.528747][T15205] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 462.539337][T15205] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 462.552818][T15205] netlink: 'syz.4.3392': attribute type 10 has an invalid length. [ 462.560714][T15205] ipvlan0: entered allmulticast mode [ 462.566729][T15205] veth0_vlan: entered allmulticast mode [ 462.574974][T15205] team0: Device ipvlan0 failed to register rx_handler [ 462.654234][T15202] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3393'. [ 462.681807][ T28] audit: type=1400 audit(462.742:8686): avc: denied { map } for pid=15203 comm="syz.2.3394" path="socket:[43995]" dev="sockfs" ino=43995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 462.720603][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'. [ 462.843040][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3394'. [ 462.878898][T15211] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3394'. [ 462.909044][T15211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3394'. [ 463.010430][T15188] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3386: Failed to acquire dquot type 1 [ 463.021743][T15188] loop7: lost filesystem error report for type 5 error -5 [ 463.023639][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 463.037210][ C0] EXT4-fs (loop7): last error at time 463: ext4_acquire_dquot:7034 [ 463.047629][T15188] EXT4-fs (loop7): 1 truncate cleaned up [ 463.054078][T15188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 463.116764][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 463.131602][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3398'. [ 463.166643][T15220] loop7: detected capacity change from 0 to 1024 [ 463.174575][T15220] EXT4-fs: Ignoring removed i_version option [ 463.195311][T15220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.288261][T15220] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 463.302897][T15220] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1144 with error 28 [ 463.316142][T15220] EXT4-fs (loop7): This should not happen!! Data will be lost [ 463.316142][T15220] [ 463.325872][T15220] EXT4-fs (loop7): Total free blocks count 0 [ 463.332018][T15220] EXT4-fs (loop7): Free/Dirty block details [ 463.339678][T15220] EXT4-fs (loop7): free_blocks=20480 [ 463.346428][T15220] EXT4-fs (loop7): dirty_blocks=1152 [ 463.353378][T15220] EXT4-fs (loop7): Block reservation details [ 463.360260][T15220] EXT4-fs (loop7): i_reserved_data_blocks=72 [ 463.399234][T15230] loop8: detected capacity change from 0 to 512 [ 463.418580][T15230] EXT4-fs (loop8): unsupported inode size: 8192 [ 463.431308][T15230] EXT4-fs (loop8): blocksize: 2048 [ 463.451718][T12187] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 463.489698][T12187] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.533791][T15236] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 463.631386][T15244] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 463.637066][T15245] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3403'. [ 463.700677][T15250] Cannot find add_set index 0 as target [ 463.779165][T15253] loop4: detected capacity change from 0 to 4096 [ 463.795942][T15260] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 463.798087][T15258] random: crng reseeded on system resumption [ 463.808691][T15253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.848238][T15260] EXT4-fs (loop0): 1 truncate cleaned up [ 463.867350][T15260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.940834][ T28] audit: type=1400 audit(464.002:8687): avc: denied { rename } for pid=15256 comm="syz.0.3413" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.979570][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.009401][ T28] audit: type=1400 audit(464.002:8688): avc: denied { rename } for pid=15256 comm="syz.0.3413" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.132735][T15288] tls_set_device_offload: netdev not found [ 464.245867][T15299] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 464.272320][ T28] audit: type=1400 audit(464.332:8689): avc: denied { bind } for pid=15296 comm="syz.2.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 464.446578][T15312] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3431: corrupted in-inode xattr: invalid ea_ino [ 464.464482][T15312] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.464693][T15312] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3431: couldn't read orphan inode 15 (err -117) [ 464.473986][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 464.474013][ C0] EXT4-fs (loop8): initial error at time 464: ext4_iget_extra_inode:5128: inode 15 [ 464.474070][ C0] EXT4-fs (loop8): last error at time 464: ext4_iget_extra_inode:5128: inode 15 [ 464.511011][T15312] loop8: lost filesystem error report for type 5 error -117 [ 464.511820][T15312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.535988][T15310] EXT4-fs: Ignoring removed bh option [ 464.556176][T15310] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 464.566349][T15310] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 464.592605][T15310] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.3430: iget: special inode unallocated [ 464.622223][T15310] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 464.622522][T15310] EXT4-fs (loop2): Remounting filesystem read-only [ 464.631665][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 464.631694][ C1] EXT4-fs (loop2): initial error at time 464: __ext4_fill_super:5596: inode 2 [ 464.631781][ C1] EXT4-fs (loop2): last error at time 464: __ext4_fill_super:5596: inode 2 [ 464.666586][T15310] EXT4-fs (loop2): get root inode failed [ 464.669715][T13176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.672661][T15310] EXT4-fs (loop2): mount failed [ 464.777665][T15317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.806540][T15325] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 464.820256][ T28] audit: type=1400 audit(464.882:8690): avc: denied { create } for pid=15315 comm="syz.2.3433" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 464.963698][T13992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.006393][ T3568] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 465.082476][ T28] audit: type=1326 audit(465.142:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89e89cdd9 code=0x7ffc0000 [ 465.221662][T15334] EXT4-fs: Ignoring removed nobh option [ 465.261671][T15334] EXT4-fs (loop0): orphan cleanup on readonly fs [ 465.273174][T15334] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3439: EA inode hash validation failed [ 465.299389][T15334] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 465.316382][T15334] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3439: corrupted inode contents [ 465.320061][T15347] msdos: Unknown parameter 'n9d:/Bodots' [ 465.331535][T15334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.338170][T15334] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.3439: mark_inode_dirty error [ 465.348622][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 465.348902][ C1] EXT4-fs (loop0): initial error at time 465: ext4_do_update_inode:5690: inode 15 [ 465.349421][ C1] EXT4-fs (loop0): last error at time 465: ext4_do_update_inode:5690: inode 15 [ 465.414201][T15334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.414866][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.416537][T15334] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.3439: corrupted inode contents [ 465.475830][T15349] macvlan2: entered allmulticast mode [ 465.491489][T15349] dummy0: entered allmulticast mode [ 465.493150][T15334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.500703][T15347] hub 9-0:1.0: USB hub found [ 465.530309][T15334] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.3439: mark_inode_dirty error [ 465.531201][T15334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.552997][T15352] x_tables: duplicate underflow at hook 1 [ 465.553247][T15352] net_ratelimit: 11 callbacks suppressed [ 465.553264][T15352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.553297][T15352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.553370][T15352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.553398][T15352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.553600][T15352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.553632][T15352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.557524][T15334] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.3439: mark inode dirty (error -117) [ 465.566392][T15349] dummy0: entered promiscuous mode [ 465.583322][T15352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.597818][T15347] hub 9-0:1.0: 8 ports detected [ 465.600164][T15352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.641759][T15334] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 465.658152][T15352] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 465.658335][T15352] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 465.709518][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 465.709532][ T28] audit: type=1326 audit(465.772:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 465.764254][ T28] audit: type=1326 audit(465.792:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 465.771846][T15358] tipc: Enabling of bearer rejected, failed to enable media [ 465.806126][T15334] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 465.827065][ T28] audit: type=1326 audit(465.792:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 465.857914][T15334] EXT4-fs (loop0): 1 orphan inode deleted [ 465.875988][T15334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 465.915255][ T28] audit: type=1326 audit(465.792:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 465.944783][T15364] set_capacity_and_notify: 10 callbacks suppressed [ 465.944802][T15364] loop4: detected capacity change from 0 to 256 [ 465.955921][ T28] audit: type=1326 audit(465.792:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.034383][ T28] audit: type=1326 audit(465.792:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.077774][ T28] audit: type=1326 audit(465.792:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.101649][ T28] audit: type=1326 audit(465.792:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.148457][ T28] audit: type=1326 audit(465.792:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.175348][ T28] audit: type=1326 audit(465.802:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc89e85d60e code=0x7ffc0000 [ 466.247197][T13176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.820182][T15388] __nla_validate_parse: 16 callbacks suppressed [ 466.820197][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3457'. [ 466.839322][T15388] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3457'. [ 466.872697][T15376] loop8: detected capacity change from 0 to 1024 [ 466.999225][T15376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.050376][T15376] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3453: bg 0: block 3: invalid block bitmap [ 467.091190][T15376] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 467.142234][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3459'. [ 467.217874][T15376] EXT4-fs (loop8): This should not happen!! Data will be lost [ 467.217874][T15376] [ 467.239957][T15376] EXT4-fs (loop8): Total free blocks count 0 [ 467.271098][T15376] EXT4-fs (loop8): Free/Dirty block details [ 467.287761][T15376] EXT4-fs (loop8): free_blocks=0 [ 467.298446][T15376] EXT4-fs (loop8): dirty_blocks=64 [ 467.310765][T15376] EXT4-fs (loop8): Block reservation details [ 467.322878][T15376] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 467.383766][T15407] netlink: 'syz.4.3461': attribute type 39 has an invalid length. [ 467.407663][T15407] hsr_slave_0 (unregistering): left promiscuous mode [ 467.442568][T15410] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.647455][T15418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3465'. [ 467.717521][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 467.718904][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3468'. [ 467.753165][T15424] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3468'. [ 467.762994][ T3396] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 467.875361][T15430] loop2: detected capacity change from 0 to 512 [ 467.895958][T15430] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 467.918090][T15430] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3470: Failed to acquire dquot type 1 [ 467.940369][T15430] loop2: lost filesystem error report for type 5 error -5 [ 467.940939][T15430] EXT4-fs (loop2): 1 truncate cleaned up [ 467.948205][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 467.948229][ C1] EXT4-fs (loop2): last error at time 468: ext4_acquire_dquot:7034 [ 467.995411][T15430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 468.072095][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3467'. [ 468.109768][T15435] loop2: detected capacity change from 0 to 256 [ 469.025115][T15444] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3473'. [ 469.131809][T15446] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.159663][T15450] FAULT_INJECTION: forcing a failure. [ 469.159663][T15450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.243405][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.0.3476 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.243444][T15450] Tainted: [W]=WARN [ 469.243453][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.243469][T15450] Call Trace: [ 469.243477][T15450] [ 469.243486][T15450] __dump_stack+0x1d/0x30 [ 469.243509][T15450] dump_stack_lvl+0x95/0xd0 [ 469.243590][T15450] dump_stack+0x15/0x1b [ 469.243677][T15450] should_fail_ex+0x263/0x280 [ 469.243708][T15450] should_fail_alloc_page+0xf2/0x100 [ 469.243747][T15450] __alloc_frozen_pages_noprof+0x108/0x350 [ 469.243779][T15450] alloc_pages_mpol+0xb3/0x260 [ 469.243855][T15450] ? __memcg_slab_post_alloc_hook+0x34f/0x7d0 [ 469.243886][T15450] alloc_pages_noprof+0x8f/0x140 [ 469.243914][T15450] pgd_alloc+0x40/0x290 [ 469.244017][T15450] mm_init+0x381/0x680 [ 469.244060][T15450] copy_mm+0x100/0x370 [ 469.244087][T15450] copy_process+0x1084/0x23a0 [ 469.244137][T15450] kernel_clone+0x1a5/0x5e0 [ 469.244177][T15450] ? vfs_write+0x86e/0x9f0 [ 469.244234][T15450] __x64_sys_clone+0x143/0x180 [ 469.244275][T15450] x64_sys_call+0x1222/0x3020 [ 469.244304][T15450] do_syscall_64+0x12c/0x3b0 [ 469.244410][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.244490][T15450] RIP: 0033:0x7fef2e73cdd9 [ 469.244506][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.244524][T15450] RSP: 002b:00007fef2d196fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 469.244544][T15450] RAX: ffffffffffffffda RBX: 00007fef2e9b5fa0 RCX: 00007fef2e73cdd9 [ 469.244563][T15450] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 000000002b00b000 [ 469.244658][T15450] RBP: 00007fef2d197090 R08: 0000000000000000 R09: 0000000000000000 [ 469.244693][T15450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 469.244705][T15450] R13: 00007fef2e9b6038 R14: 00007fef2e9b5fa0 R15: 00007ffd32e77fe8 [ 469.244726][T15450] [ 469.463657][T15461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3479'. [ 469.493362][T15461] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3479'. [ 469.578756][T15465] random: crng reseeded on system resumption [ 469.726636][T15471] syzkaller0: entered promiscuous mode [ 469.749874][T15471] syzkaller0: entered allmulticast mode [ 469.777680][T15473] hsr0: entered promiscuous mode [ 469.795764][T15473] hsr0: entered allmulticast mode [ 469.810380][T15473] hsr_slave_0: entered allmulticast mode [ 469.827977][T15473] hsr_slave_1: entered allmulticast mode [ 469.949241][T15491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=15491 comm=syz.4.3486 [ 469.979169][T15492] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 470.005398][T15480] loop4: detected capacity change from 0 to 512 [ 470.046573][T15480] EXT4-fs: Ignoring removed nobh option [ 470.097549][T15480] EXT4-fs (loop4): too many log groups per flexible block group [ 470.105585][T15480] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 470.118174][T15480] EXT4-fs (loop4): mount failed [ 470.314612][T15524] lo: entered promiscuous mode [ 470.618426][T15549] net_ratelimit: 1991 callbacks suppressed [ 470.618464][T15549] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 470.820649][T15565] loop2: detected capacity change from 0 to 1024 [ 470.835150][T15565] EXT4-fs: test_dummy_encryption option not supported [ 471.185219][T15594] loop2: detected capacity change from 0 to 164 [ 471.210963][T15594] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 471.243434][T15594] xt_hashlimit: size too large, truncated to 1048576 [ 471.270720][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 471.389163][T15613] netlink: 'syz.2.3507': attribute type 10 has an invalid length. [ 471.408652][T15618] loop8: detected capacity change from 0 to 512 [ 471.422198][T15618] EXT4-fs (loop8): 1 truncate cleaned up [ 471.440635][T15613] team0 (unregistering): Port device team_slave_0 removed [ 471.441588][T15618] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.3508: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 471.486584][T15613] team0 (unregistering): Port device team_slave_1 removed [ 471.567650][T15618] dummy0: entered promiscuous mode [ 471.601831][T15618] erspan0: entered promiscuous mode [ 471.615202][T15618] debugfs: 'hsr1' already exists in 'hsr' [ 471.633337][T15618] Cannot create hsr debugfs directory [ 471.650845][T15618] hsr1: entered allmulticast mode [ 471.676478][T15632] loop2: detected capacity change from 0 to 512 [ 471.683755][T15618] dummy0: entered allmulticast mode [ 471.696593][T15618] erspan0: entered allmulticast mode [ 471.719542][T15632] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.785425][T15632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3509: Allocating blocks 41-42 which overlap fs metadata [ 471.800388][T15632] loop2: lost filesystem error report for type 5 error -117 [ 471.801904][T15632] __quota_error: 66 callbacks suppressed [ 471.801950][T15632] Quota error (device loop2): write_blk: dquota write failed [ 471.822471][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 471.822545][ C0] EXT4-fs (loop2): initial error at time 471: ext4_mb_mark_diskspace_used:4222 [ 471.822697][ C0] EXT4-fs (loop2): last error at time 471: ext4_mb_mark_diskspace_used:4222 [ 471.919826][T15632] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 471.949794][T15632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3509: Allocating blocks 41-42 which overlap fs metadata [ 471.979591][T15632] loop2: lost filesystem error report for type 5 error -117 [ 471.995293][T15632] Quota error (device loop2): write_blk: dquota write failed [ 472.029808][T15632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 472.051965][T15666] __nla_validate_parse: 12 callbacks suppressed [ 472.052138][T15666] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3513'. [ 472.068423][T15666] netlink: 212 bytes leftover after parsing attributes in process `syz.8.3513'. [ 472.075572][T15632] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3509: Failed to acquire dquot type 1 [ 472.088545][T15666] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3513'. [ 472.110970][T15632] loop2: lost filesystem error report for type 5 error -117 [ 472.113315][T15632] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 472.152879][T15632] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.3509: corrupted inode contents [ 472.154273][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3514'. [ 472.188651][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.191117][T15632] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.3509: mark_inode_dirty error [ 472.241527][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.247412][T15632] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.3509: corrupted inode contents [ 472.270227][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.274665][T15632] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.3509: mark_inode_dirty error [ 472.295827][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.300660][T15632] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.3509: corrupted inode contents [ 472.323755][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.340297][T15632] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 472.341373][T15678] loop0: detected capacity change from 0 to 512 [ 472.361383][T15632] loop2: lost filesystem error report for type 5 error -117 [ 472.374415][T15632] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.3509: corrupted inode contents [ 472.389275][T15678] EXT4-fs: Ignoring removed nobh option [ 472.413431][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.415672][T15632] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.3509: mark_inode_dirty error [ 472.430737][T15685] loop8: detected capacity change from 0 to 512 [ 472.468409][T15685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 472.474536][T15632] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 472.475402][T15632] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 472.476660][T15678] EXT4-fs (loop0): too many log groups per flexible block group [ 472.484536][T15632] loop2: lost filesystem error report for type 5 error -117 [ 472.506961][T15685] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 472.522511][T15678] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 472.530480][T15632] EXT4-fs (loop2): 1 truncate cleaned up [ 472.530496][T15678] EXT4-fs (loop0): mount failed [ 472.530570][T15685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 472.552308][T15685] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 472.589566][T15632] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3509: Allocating blocks 41-42 which overlap fs metadata [ 472.606182][T15685] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 472.616165][T15632] Quota error (device loop2): write_blk: dquota write failed [ 472.631441][T15690] loop0: detected capacity change from 0 to 1024 [ 472.641095][T15632] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 472.655160][T15690] EXT4-fs: test_dummy_encryption option not supported [ 472.698906][T15632] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3509: Failed to acquire dquot type 1 [ 472.865651][T15694] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.3519: dx entry: limit 65535 != root limit 120 [ 472.877953][T15694] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3519: Corrupt directory, running e2fsck is recommended [ 473.622260][T15695] loop0: detected capacity change from 0 to 1024 [ 473.635262][T15695] ext4: Unknown parameter 'nouser_xattr' [ 473.691123][T15691] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.3509: iget: bad i_size value: 360287970189639690 [ 474.888435][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'. [ 474.975330][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3524'. [ 475.007949][T15707] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3524'. [ 475.011647][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3525'. [ 475.041064][T15707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3524'. [ 475.136162][T15718] loop4: detected capacity change from 0 to 164 [ 475.146481][T15723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3531'. [ 475.447962][T15735] SET target dimension over the limit! [ 475.835322][T15743] SELinux: Context A)t'*'ĺkشL&z [ 475.835322][T15743] :_t 0H^B>&Zw8 lX&D;td BIݛ~L [ 475.835322][T15743] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 475.942945][T15748] loop4: detected capacity change from 0 to 512 [ 476.095655][T15754] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 476.105616][T15754] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 476.119329][T15754] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 476.127272][T15754] ipvlan0: entered allmulticast mode [ 476.132628][T15754] veth0_vlan: entered allmulticast mode [ 476.480918][T15762] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 476.665915][T15766] loop8: detected capacity change from 0 to 1024 [ 476.680649][T15766] EXT4-fs: Ignoring removed i_version option [ 476.715871][T15766] EXT4-fs mount: 8 callbacks suppressed [ 476.715891][T15766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.738769][T15764] syzkaller0: entered promiscuous mode [ 476.745157][T15764] syzkaller0: entered allmulticast mode [ 476.764782][T15768] bridge1: entered promiscuous mode [ 476.819571][T15766] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 476.891957][T15766] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 892 with error 28 [ 476.940358][ T28] audit: type=1400 audit(477.002:8925): avc: denied { create } for pid=15787 comm="syz.4.3552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 476.945881][T15766] EXT4-fs (loop8): This should not happen!! Data will be lost [ 476.945881][T15766] [ 476.985722][T15790] loop2: detected capacity change from 0 to 1024 [ 476.992738][ T28] audit: type=1400 audit(477.042:8926): avc: denied { write } for pid=15787 comm="syz.4.3552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 477.031461][T15790] random: crng reseeded on system resumption [ 477.043116][T15766] EXT4-fs (loop8): Total free blocks count 0 [ 477.055719][ T28] audit: type=1400 audit(477.042:8927): avc: denied { sendto } for pid=15787 comm="syz.4.3552" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 477.063449][T15766] EXT4-fs (loop8): Free/Dirty block details [ 477.088890][T15794] __nla_validate_parse: 10 callbacks suppressed [ 477.088904][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3551'. [ 477.108486][ T28] audit: type=1400 audit(477.112:8928): avc: denied { shutdown } for pid=15791 comm="syz.0.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 477.129661][T15766] EXT4-fs (loop8): free_blocks=20480 [ 477.135327][T15766] EXT4-fs (loop8): dirty_blocks=896 [ 477.172143][T15766] EXT4-fs (loop8): Block reservation details [ 477.185079][T15766] EXT4-fs (loop8): i_reserved_data_blocks=56 [ 477.234021][ T3568] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 477.240639][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 477.256324][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 477.274430][T15805] SET target dimension over the limit! [ 477.327933][T15810] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 477.370915][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3561'. [ 477.417477][T15819] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3563'. [ 477.427206][T15819] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3563'. [ 477.463064][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3564'. [ 477.477350][T15823] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3560'. [ 477.553494][T15827] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 477.761929][T15830] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 477.809714][T15833] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 477.865862][T15841] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 477.880650][T15840] loop4: detected capacity change from 0 to 512 [ 477.887588][T15840] ext3: Bad value for 'max_batch_time' [ 477.898318][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3571'. [ 477.923032][ T28] audit: type=1400 audit(477.982:8929): avc: denied { shutdown } for pid=15839 comm="syz.4.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 477.942890][ T28] audit: type=1400 audit(477.982:8930): avc: denied { read } for pid=15839 comm="syz.4.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.021802][T15846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3573'. [ 478.067595][T15849] FAULT_INJECTION: forcing a failure. [ 478.067595][T15849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.080967][T15849] CPU: 0 UID: 0 PID: 15849 Comm: syz.0.3574 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.080999][T15849] Tainted: [W]=WARN [ 478.081014][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.081030][T15849] Call Trace: [ 478.081037][T15849] [ 478.081046][T15849] __dump_stack+0x1d/0x30 [ 478.081088][T15849] dump_stack_lvl+0x95/0xd0 [ 478.081112][T15849] dump_stack+0x15/0x1b [ 478.081134][T15849] should_fail_ex+0x263/0x280 [ 478.081232][T15849] should_fail+0xb/0x20 [ 478.081279][T15849] should_fail_usercopy+0x1a/0x20 [ 478.081315][T15849] _copy_from_user+0x1c/0xb0 [ 478.081371][T15849] do_ip_getsockopt+0x12c/0x10c0 [ 478.081394][T15849] ? __rcu_read_unlock+0x4e/0x70 [ 478.081420][T15849] ? avc_has_perm_noaudit+0xab/0x130 [ 478.081558][T15849] ? avc_has_perm+0x101/0x190 [ 478.081670][T15849] ip_getsockopt+0x5c/0x180 [ 478.081689][T15849] ? selinux_socket_getsockopt+0x120/0x1c0 [ 478.081775][T15849] ? selinux_socket_getsockopt+0x120/0x1c0 [ 478.081858][T15849] tcp_getsockopt+0xad/0xe0 [ 478.081882][T15849] sock_common_getsockopt+0x60/0x70 [ 478.081911][T15849] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 478.082026][T15849] do_sock_getsockopt+0x2f5/0x570 [ 478.082063][T15849] __x64_sys_getsockopt+0x11d/0x1a0 [ 478.082235][T15849] x64_sys_call+0x2dcf/0x3020 [ 478.082263][T15849] do_syscall_64+0x12c/0x3b0 [ 478.082288][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.082385][T15849] RIP: 0033:0x7fef2e73cdd9 [ 478.082468][T15849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.082492][T15849] RSP: 002b:00007fef2d197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 478.082516][T15849] RAX: ffffffffffffffda RBX: 00007fef2e9b5fa0 RCX: 00007fef2e73cdd9 [ 478.082529][T15849] RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 [ 478.082541][T15849] RBP: 00007fef2d197090 R08: 0000200000000c80 R09: 0000000000000000 [ 478.082557][T15849] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 478.082613][T15849] R13: 00007fef2e9b6038 R14: 00007fef2e9b5fa0 R15: 00007ffd32e77fe8 [ 478.082699][T15849] [ 478.359432][ T28] audit: type=1400 audit(478.422:8931): avc: denied { accept } for pid=15842 comm="syz.8.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 478.397163][T15854] loop8: detected capacity change from 0 to 1024 [ 478.465178][T15854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.982138][T15863] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 479.154585][T15870] tmpfs: Bad value for 'nr_inodes' [ 479.257457][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 479.273763][T15871] gretap1: entered promiscuous mode [ 479.401152][T15877] loop4: detected capacity change from 0 to 1024 [ 479.444876][T15877] ext4: Bad value for 'journal_ioprio' [ 479.451642][ T28] audit: type=1400 audit(479.512:8932): avc: denied { mount } for pid=15879 comm="syz.0.3585" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 479.565452][T15881] SET target dimension over the limit! [ 479.646985][T15878] loop2: detected capacity change from 0 to 8192 [ 479.682913][ T28] audit: type=1326 audit(479.742:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15879 comm="syz.0.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 479.734194][ T28] audit: type=1326 audit(479.742:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15879 comm="syz.0.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 479.766995][T15878] loop2: p1 < > p2 p4 < p5 > [ 479.777869][T15878] loop2: partition table partially beyond EOD, truncated [ 479.809992][T15878] loop2: p1 start 134217728 is beyond EOD, truncated [ 479.836665][T15878] loop2: p2 size 591360 extends beyond EOD, truncated [ 479.886932][T15878] loop2: p5 size 591360 extends beyond EOD, truncated [ 479.929568][T15890] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 480.066635][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 480.237681][T15902] SET target dimension over the limit! [ 480.274700][T15907] Cannot find add_set index 0 as target [ 480.677733][T12770] bond1 (unregistering): (slave veth3): Releasing active interface [ 480.697188][T12770] bond1 (unregistering): Released all slaves [ 480.717249][T12770] bond0 (unregistering): Released all slaves [ 480.750986][T15928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.758499][T15928] IPv6: NLM_F_CREATE should be set when creating new route [ 480.776403][T12770] tipc: Left network mode [ 480.801206][T12770] hsr_slave_0: left promiscuous mode [ 480.811939][T12770] hsr_slave_1: left promiscuous mode [ 480.821693][T15940] loop8: detected capacity change from 0 to 512 [ 480.825271][T12770] dummy0: left allmulticast mode [ 480.850063][T15940] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.908354][T15940] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3600: Failed to acquire dquot type 1 [ 480.934907][T15940] loop8: lost filesystem error report for type 5 error -5 [ 480.935479][T15940] EXT4-fs (loop8): 1 truncate cleaned up [ 480.948396][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 480.948416][ C1] EXT4-fs (loop8): last error at time 481: ext4_acquire_dquot:7034 [ 481.008859][T15940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 481.080307][T15900] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.103444][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.124112][T15900] bridge_slave_0: entered allmulticast mode [ 481.146203][T15900] bridge_slave_0: entered promiscuous mode [ 481.155275][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 481.174448][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 481.200173][T15900] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.220332][T15900] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.242287][T15900] bridge_slave_1: entered allmulticast mode [ 481.266029][T15900] bridge_slave_1: entered promiscuous mode [ 481.349007][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.381085][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.468875][T15900] team0: Port device team_slave_0 added [ 481.491120][T15900] team0: Port device team_slave_1 added [ 481.542685][T15972] loop8: detected capacity change from 0 to 8192 [ 481.569765][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.598111][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.624544][T15972] syz.8.3607: attempt to access beyond end of device [ 481.624544][T15972] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 481.662316][T15972] buffer_io_error: 2 callbacks suppressed [ 481.662331][T15972] Buffer I/O error on dev loop8, logical block 57847, async page read [ 481.708984][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.724271][T15970] syz.8.3607: attempt to access beyond end of device [ 481.724271][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 481.750906][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.765355][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 481.779979][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.811780][T15970] syz.8.3607: attempt to access beyond end of device [ 481.811780][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 481.839540][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 481.858676][T15970] syz.8.3607: attempt to access beyond end of device [ 481.858676][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 481.873280][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.912114][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 481.925507][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 481.949476][T15970] syz.8.3607: attempt to access beyond end of device [ 481.949476][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 481.980245][T15900] hsr_slave_0: entered promiscuous mode [ 481.993625][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.002590][T15900] hsr_slave_1: entered promiscuous mode [ 482.013859][T15900] debugfs: 'hsr0' already exists in 'hsr' [ 482.019656][T15970] syz.8.3607: attempt to access beyond end of device [ 482.019656][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 482.043224][T15900] Cannot create hsr debugfs directory [ 482.054380][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.084800][T15970] syz.8.3607: attempt to access beyond end of device [ 482.084800][T15970] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 482.121433][T15970] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.148630][T15972] syz.8.3607: attempt to access beyond end of device [ 482.148630][T15972] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 482.179807][T15972] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.204071][T15972] syz.8.3607: attempt to access beyond end of device [ 482.204071][T15972] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 482.246509][T15972] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.282612][T15972] syz.8.3607: attempt to access beyond end of device [ 482.282612][T15972] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 482.306088][T15900] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.323687][T15972] Buffer I/O error on dev loop8, logical block 57847, async page read [ 482.356969][T15900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.368601][T15900] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.397581][T15900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.445552][T15900] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.676010][T16007] loop8: detected capacity change from 0 to 128 [ 482.980951][T15900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.995377][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 483.004894][T15900] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 483.015338][T15900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.172138][T15900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.181635][T16024] loop0: detected capacity change from 0 to 1024 [ 483.196762][T16033] SELinux: Context WXE][O:Ѹo߭ObZDfq :~ is not valid (left unmapped). [ 483.203451][T15900] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.233519][T14600] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.240638][T14600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.268088][T16024] __nla_validate_parse: 9 callbacks suppressed [ 483.268104][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3610'. [ 483.325448][T16039] random: crng reseeded on system resumption [ 483.338889][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.346034][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.373598][T16043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3610'. [ 483.387470][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3614'. [ 483.402187][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 483.417321][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 483.433025][T16046] SET target dimension over the limit! [ 483.495319][T15900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.518736][T16055] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 483.670783][T16071] loop8: detected capacity change from 0 to 512 [ 483.707112][T16071] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 483.737519][T16071] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.3619: corrupted xattr entries [ 483.750596][T16071] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.750761][T16071] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 483.759931][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 483.759945][ C0] EXT4-fs (loop8): initial error at time 483: xattr_find_entry:337: inode 15 [ 483.759966][ C0] EXT4-fs (loop8): last error at time 483: xattr_find_entry:337: inode 15 [ 483.798314][T16071] EXT4-fs (loop8): 1 truncate cleaned up [ 483.818864][T16071] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.858165][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.068674][T15900] veth0_vlan: entered promiscuous mode [ 484.078876][T15900] veth1_vlan: entered promiscuous mode [ 484.096479][T15900] veth0_macvtap: entered promiscuous mode [ 484.104263][T15900] veth1_macvtap: entered promiscuous mode [ 484.116470][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.129708][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.141453][T16098] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3619'. [ 484.142487][T12770] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.167876][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 484.167889][ T28] audit: type=1400 audit(484.232:8974): avc: denied { watch } for pid=16070 comm="syz.8.3619" path="/75/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.205207][T12770] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.220039][T16102] loop2: detected capacity change from 0 to 128 [ 484.232321][T12770] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.236596][ T28] audit: type=1326 audit(484.302:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.265464][ T28] audit: type=1326 audit(484.302:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.268065][T12770] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.295225][ T28] audit: type=1326 audit(484.302:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.321801][ T28] audit: type=1326 audit(484.302:8978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.362450][ T28] audit: type=1326 audit(484.302:8979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.401572][ T28] audit: type=1326 audit(484.302:8980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.433815][ T28] audit: type=1326 audit(484.302:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.564520][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3626'. [ 484.572537][ T28] audit: type=1326 audit(484.302:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.618583][T16116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.625080][T16116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.666938][ T28] audit: type=1326 audit(484.302:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16084 comm="syz.0.3622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fef2e73cdd9 code=0x7ffc0000 [ 484.690805][T16116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.697222][T16116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.715767][T16115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16115 comm=syz.2.3628 [ 484.734481][T16116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.740885][T16116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.750842][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.762044][T16116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.768433][T16116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.775223][T16116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 484.781666][T16116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 484.821266][T16120] syzkaller0: entered promiscuous mode [ 484.827650][T16120] syzkaller0: entered allmulticast mode [ 484.855728][T16120] loop9: detected capacity change from 0 to 512 [ 484.898394][T16120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.090455][T16144] xt_hashlimit: size too large, truncated to 1048576 [ 485.295746][T16161] loop0: detected capacity change from 0 to 1024 [ 485.302681][T16161] EXT4-fs: Ignoring removed orlov option [ 485.310421][T16162] netlink: 'syz.8.3634': attribute type 4 has an invalid length. [ 485.321369][T16162] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3634'. [ 485.333019][T16161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.735149][T13176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.446945][T16174] loop0: detected capacity change from 0 to 512 [ 486.478376][T16174] EXT4-fs: Ignoring removed bh option [ 486.491270][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3644'. [ 486.518656][T16174] EXT4-fs: Mount option(s) incompatible with ext2 [ 486.538525][T16180] loop8: detected capacity change from 0 to 1024 [ 486.563337][T16180] EXT4-fs: Ignoring removed i_version option [ 486.607900][T16182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3646'. [ 486.631876][T16180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.708585][T16180] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 486.742849][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.829203][T16180] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1536 with error 28 [ 486.883168][T16180] EXT4-fs (loop8): This should not happen!! Data will be lost [ 486.883168][T16180] [ 486.900406][T16192] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3647'. [ 486.925389][T16180] EXT4-fs (loop8): Total free blocks count 0 [ 486.956884][T16180] EXT4-fs (loop8): Free/Dirty block details [ 486.972984][T16180] EXT4-fs (loop8): free_blocks=20480 [ 486.983094][T16180] EXT4-fs (loop8): dirty_blocks=1552 [ 486.994202][T16180] EXT4-fs (loop8): Block reservation details [ 487.013700][T16180] EXT4-fs (loop8): i_reserved_data_blocks=97 [ 487.078598][T16196] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeo is not valid (left unmapped). [ 487.203171][ T3568] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 487.247103][T16200] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 487.248105][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 487.421575][T16231] Cannot find add_set index 0 as target [ 487.441212][T16223] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[a is not valid (left unmapped). [ 487.594130][T16248] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 487.860083][T16273] netlink: 'syz.8.3677': attribute type 12 has an invalid length. [ 487.947684][T16275] loop0: detected capacity change from 0 to 128 [ 489.631836][T16285] __nla_validate_parse: 6 callbacks suppressed [ 489.631851][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 489.875293][T16290] loop9: detected capacity change from 0 to 512 [ 489.921608][T16290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.047793][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.152961][T16306] loop8: detected capacity change from 0 to 1024 [ 490.292551][T16306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.317702][T16306] net_ratelimit: 1991 callbacks suppressed [ 490.317715][T16306] openvswitch: netlink: Key type 3846 is out of range max 32 [ 490.355858][T16306] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3684: bg 0: block 112: padding at end of block bitmap is not set [ 490.378125][T16306] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 490.391882][T16306] EXT4-fs (loop8): This should not happen!! Data will be lost [ 490.391882][T16306] [ 490.406293][T16306] EXT4-fs (loop8): Total free blocks count 0 [ 490.413496][T16306] EXT4-fs (loop8): Free/Dirty block details [ 490.419875][T16306] EXT4-fs (loop8): free_blocks=0 [ 490.425556][T16306] EXT4-fs (loop8): dirty_blocks=64 [ 490.431432][T16306] EXT4-fs (loop8): Block reservation details [ 490.438143][T16306] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 490.587773][T16315] veth5: entered promiscuous mode [ 490.843853][T16316] loop2: detected capacity change from 0 to 2048 [ 490.874177][T16316] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.3689: inode has both inline data and extents flags [ 490.929846][T16316] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 490.929987][T16316] EXT4-fs (loop2): get root inode failed [ 490.939071][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 490.939086][ C0] EXT4-fs (loop2): initial error at time 490: __ext4_fill_super:5596: inode 2 [ 490.939106][ C0] EXT4-fs (loop2): last error at time 490: __ext4_fill_super:5596: inode 2 [ 491.076809][T16316] EXT4-fs (loop2): mount failed [ 491.818795][T14582] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 491.834500][T16333] loop9: detected capacity change from 0 to 512 [ 491.873507][T16333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 491.883427][T16333] System zones: 0-2, 18-18, 34-34 [ 491.913446][T16333] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 491.930654][T16333] EXT4-fs (loop9): Remounting filesystem read-only [ 491.937735][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 491.937915][ C0] EXT4-fs (loop9): initial error at time 492: ext4_mb_generate_buddy:1317 [ 491.938044][ C0] EXT4-fs (loop9): last error at time 492: ext4_mb_generate_buddy:1317 [ 491.967914][T16333] EXT4-fs (loop9): 1 truncate cleaned up [ 491.979577][T16333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.010037][T14602] __quota_error: 140 callbacks suppressed [ 492.010141][T14602] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 492.110248][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 492.161930][T16337] loop2: detected capacity change from 0 to 512 [ 492.174691][T14602] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 492.191107][T16298] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.210998][T16298] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.214694][T14602] Quota error (device loop9): write_blk: dquota write failed [ 492.225687][T16298] bridge_slave_0: entered allmulticast mode [ 492.225796][T14602] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 492.232021][T14602] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 492.256727][T16337] EXT4-fs (loop2): 1 truncate cleaned up [ 492.266535][T16337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.279981][T16298] bridge_slave_0: entered promiscuous mode [ 492.286968][T16298] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.294396][T16298] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.301619][T16298] bridge_slave_1: entered allmulticast mode [ 492.308862][T16298] bridge_slave_1: entered promiscuous mode [ 492.329095][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.344412][T16337] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.3692: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 492.354020][T14602] Quota error (device loop9): write_blk: dquota write failed [ 492.369641][T16298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.382056][T16298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.391166][T14602] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 492.391587][T14602] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 492.391611][T14602] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 492.427469][T16298] team0: Port device team_slave_0 added [ 492.443215][T16298] team0: Port device team_slave_1 added [ 492.463604][T14602] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 492.479779][T16298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.484228][T14602] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 492.494163][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.532987][T16298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.537774][T13992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.552712][T16298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.560736][T16298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.610425][T16341] loop2: detected capacity change from 0 to 256 [ 492.623233][T16298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.635683][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3693'. [ 492.651819][T16345] netlink: 'syz.8.3691': attribute type 11 has an invalid length. [ 492.667693][T16341] FAT-fs (loop2): Directory bread(block 64) failed [ 492.670845][T16345] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3691'. [ 492.678974][T16341] FAT-fs (loop2): Directory bread(block 65) failed [ 492.722324][T16346] loop8: detected capacity change from 0 to 512 [ 492.730364][T16341] FAT-fs (loop2): Directory bread(block 66) failed [ 492.738439][T16346] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 492.741568][T16341] FAT-fs (loop2): Directory bread(block 67) failed [ 492.756631][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3695'. [ 492.767370][T16298] hsr_slave_0: entered promiscuous mode [ 492.773418][T16348] netlink: 212 bytes leftover after parsing attributes in process `syz.9.3695'. [ 492.783689][T16346] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3691: bg 0: block 142: padding at end of block bitmap is not set [ 492.798072][T16348] FAULT_INJECTION: forcing a failure. [ 492.798072][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 492.811004][T16346] loop8: lost filesystem error report for type 5 error -117 [ 492.811150][T16348] CPU: 0 UID: 0 PID: 16348 Comm: syz.9.3695 Tainted: G W syzkaller #0 PREEMPT(full) [ 492.811182][T16348] Tainted: [W]=WARN [ 492.811189][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.811202][T16348] Call Trace: [ 492.811209][T16348] [ 492.811220][T16348] __dump_stack+0x1d/0x30 [ 492.811244][T16348] dump_stack_lvl+0x95/0xd0 [ 492.811342][T16348] dump_stack+0x15/0x1b [ 492.811373][T16298] hsr_slave_1: entered promiscuous mode [ 492.811364][T16348] should_fail_ex+0x263/0x280 [ 492.811438][T16348] ? netlbl_cipsov4_add+0x397/0x12a0 [ 492.811591][T16348] should_failslab+0x8c/0xb0 [ 492.811658][T16348] __kmalloc_cache_noprof+0x5f/0x400 [ 492.811801][T16348] netlbl_cipsov4_add+0x397/0x12a0 [ 492.811895][T16348] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 492.812082][T16348] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 492.812288][T16348] genl_family_rcv_msg_doit+0x187/0x1f0 [ 492.812467][T16348] genl_rcv_msg+0x432/0x470 [ 492.812614][T16348] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 492.812708][T16348] netlink_rcv_skb+0x123/0x220 [ 492.812793][T16348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.812898][T16348] genl_rcv+0x28/0x40 [ 492.813071][T16348] netlink_unicast+0x5a8/0x680 [ 492.813144][T16348] netlink_sendmsg+0x5c8/0x6f0 [ 492.813264][T16348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.813402][T16348] ____sys_sendmsg+0x563/0x5b0 [ 492.813476][T16348] ___sys_sendmsg+0x195/0x1e0 [ 492.813573][T16348] __x64_sys_sendmsg+0xd4/0x160 [ 492.813693][T16348] x64_sys_call+0x194c/0x3020 [ 492.813759][T16348] do_syscall_64+0x12c/0x3b0 [ 492.813825][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.813883][T16348] RIP: 0033:0x7fcf61c8cdd9 [ 492.813984][T16348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.814033][T16348] RSP: 002b:00007fcf606e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.814102][T16348] RAX: ffffffffffffffda RBX: 00007fcf61f05fa0 RCX: 00007fcf61c8cdd9 [ 492.814150][T16348] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 492.814260][T16348] RBP: 00007fcf606e7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.814304][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.814347][T16348] R13: 00007fcf61f06038 R14: 00007fcf61f05fa0 R15: 00007ffe636f9be8 [ 492.814413][T16348] [ 492.814513][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 492.823409][T16341] FAT-fs (loop2): Directory bread(block 68) failed [ 492.829664][ C0] EXT4-fs (loop8): initial error at time 492: ext4_validate_block_bitmap:441 [ 492.833909][T16346] EXT4-fs (loop8): Remounting filesystem read-only [ 492.843568][ C0] [ 492.843577][ C0] EXT4-fs (loop8): last error at time 492: ext4_validate_block_bitmap:441 [ 492.944488][T16298] debugfs: 'hsr0' already exists in 'hsr' [ 492.948317][T16341] FAT-fs (loop2): Directory bread(block 69) failed [ 492.953696][T16298] Cannot create hsr debugfs directory [ 492.968324][T16341] FAT-fs (loop2): Directory bread(block 70) failed [ 493.126038][T16346] EXT4-fs (loop8): 1 truncate cleaned up [ 493.131783][T16341] FAT-fs (loop2): Directory bread(block 71) failed [ 493.138371][T16341] FAT-fs (loop2): Directory bread(block 72) failed [ 493.145305][T16346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.159509][T16341] FAT-fs (loop2): Directory bread(block 73) failed [ 493.181172][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.328630][T16362] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aS is not valid (left unmapped). [ 493.475096][ T28] audit: type=1400 audit(493.542:9124): avc: denied { connect } for pid=16377 comm="syz.9.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 493.581485][T16298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.596140][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.604164][T16298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.653164][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.789224][ T28] audit: type=1326 audit(493.852:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16354 comm="syz.8.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430155cdd9 code=0x7ffc0000 [ 494.147554][T16298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 494.174182][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.191855][T16298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.211893][T16298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.265127][T16418] netlink: 'syz.2.3704': attribute type 21 has an invalid length. [ 494.317935][T16298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.359371][T16298] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.381699][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3705'. [ 494.405839][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3705'. [ 494.435239][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.442387][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.478062][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.485176][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.788541][T16445] loop9: detected capacity change from 0 to 764 [ 494.817855][T16445] Symlink component flag not implemented [ 494.823693][T16445] Symlink component flag not implemented [ 495.214291][T16298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.534619][T16298] veth0_vlan: entered promiscuous mode [ 495.544241][T16298] veth1_vlan: entered promiscuous mode [ 495.561073][T16298] veth0_macvtap: entered promiscuous mode [ 495.568715][T16298] veth1_macvtap: entered promiscuous mode [ 495.580346][T16298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.595459][T16298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.606147][T14602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.675584][T14602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.777311][T14602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.829294][T14602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.915430][T16465] tipc: Started in network mode [ 495.942350][T16465] tipc: Node identity 0047a2b78a0000000000000000000001, cluster identity 4711 [ 495.991182][T16465] tipc: Enabling of bearer rejected, failed to enable media [ 496.197155][T16473] loop3: detected capacity change from 0 to 512 [ 496.243820][T16473] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 496.301115][T16473] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 496.325972][T16459] loop2: detected capacity change from 0 to 1024 [ 496.357462][T16473] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3709: bad orphan inode 4 [ 496.406046][T16459] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.426144][T16473] loop3: lost filesystem error report for type 5 error -117 [ 496.427770][T16473] EXT4-fs (loop3): 1 orphan inode deleted [ 496.435143][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 496.435157][ C0] EXT4-fs (loop3): initial error at time 496: ext4_orphan_get:1423 [ 496.435173][ C0] EXT4-fs (loop3): last error at time 496: ext4_orphan_get:1423 [ 496.476631][T16459] EXT4-fs: quotafile must be on filesystem root [ 496.569111][T16487] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 496.587150][T16473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.700381][T16473] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.3709: lblock 0 mapped to illegal pblock 4 (length 1) [ 496.771162][T16503] program syz.9.3714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.800595][T16506] loop8: detected capacity change from 0 to 1024 [ 496.807586][T16509] loop2: detected capacity change from 0 to 512 [ 496.820200][T16506] EXT4-fs: Ignoring removed bh option [ 496.822246][T16298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.830568][T16509] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.3716: inode has both inline data and extents flags [ 496.850487][T16509] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 496.850654][T16509] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3716: couldn't read orphan inode 15 (err -117) [ 496.859826][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 496.859842][ C0] EXT4-fs (loop2): initial error at time 496: ext4_orphan_get:1397: inode 15 [ 496.859863][ C0] EXT4-fs (loop2): last error at time 496: ext4_orphan_get:1397: inode 15 [ 496.897222][T16509] loop2: lost filesystem error report for type 5 error -117 [ 496.903935][T16506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.926283][T16509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.998867][T16519] loop3: detected capacity change from 0 to 1024 [ 497.070575][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3718'. [ 497.134814][T16528] loop9: detected capacity change from 0 to 512 [ 497.144914][T16530] random: crng reseeded on system resumption [ 497.156770][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 497.156787][ T28] audit: type=1400 audit(497.222:9143): avc: denied { unlink } for pid=13992 comm="syz-executor" name="file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 497.173733][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 497.219031][T16528] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 497.240370][T16528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 497.248685][T16528] System zones: 0-1, 15-15, 18-18, 34-34 [ 497.254937][T16528] EXT4-fs (loop9): orphan cleanup on readonly fs [ 497.261499][T16528] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 497.271972][T16528] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 497.286761][T16528] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 497.295727][T16521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.307391][T16528] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.3720: bad orphan inode 16 [ 497.337656][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.358476][T16528] loop9: lost filesystem error report for type 5 error -117 [ 497.358692][T16528] ext4_test_bit(bit=15, block=18) = 1 [ 497.366207][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 497.366247][ C1] EXT4-fs (loop9): initial error at time 497: ext4_orphan_get:1423 [ 497.366321][ C1] EXT4-fs (loop9): last error at time 497: ext4_orphan_get:1423 [ 497.454242][T16528] is_bad_inode(inode)=0 [ 497.463850][T16528] NEXT_ORPHAN(inode)=0 [ 497.473653][T16528] max_ino=32 [ 497.478504][T16528] i_nlink=2 [ 497.487094][T16528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.649635][T16528] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.3720'. [ 497.675241][T16528] netlink: zone id is out of range [ 497.685777][T16528] netlink: zone id is out of range [ 497.691229][T16556] syzkaller0: entered promiscuous mode [ 497.697360][T16528] netlink: zone id is out of range [ 497.705131][T16528] netlink: zone id is out of range [ 497.710867][T16528] netlink: zone id is out of range [ 497.716496][T16528] netlink: zone id is out of range [ 497.719636][T16556] syzkaller0: entered allmulticast mode [ 497.732046][T16528] netlink: zone id is out of range [ 497.743258][T16528] netlink: zone id is out of range [ 497.754269][T16528] netlink: zone id is out of range [ 497.764714][T16528] netlink: zone id is out of range [ 497.803336][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.845936][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3729'. [ 497.855116][T16581] netlink: 212 bytes leftover after parsing attributes in process `syz.9.3729'. [ 497.864752][T16581] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3729'. [ 498.043025][T16583] loop9: detected capacity change from 0 to 512 [ 498.054094][T16583] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 498.114863][T16583] EXT4-fs (loop9): 1 truncate cleaned up [ 498.134970][T16583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.141804][T16600] loop8: detected capacity change from 0 to 1024 [ 498.228428][T16604] loop4: detected capacity change from 0 to 1024 [ 498.235209][T16604] EXT4-fs: Ignoring removed bh option [ 498.243643][T16604] ext4: Unknown parameter 'fsmagic' [ 498.458243][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.025260][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.041159][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.054254][T16570] bridge_slave_0: entered allmulticast mode [ 499.067936][T16570] bridge_slave_0: entered promiscuous mode [ 499.084597][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.099233][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.111914][T16600] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 499.126298][T16600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 499.136979][T16570] bridge_slave_1: entered allmulticast mode [ 499.143237][T16600] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.3735: lblock 2 mapped to illegal pblock 2 (length 1) [ 499.174513][T16570] bridge_slave_1: entered promiscuous mode [ 499.212335][T16600] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.212428][T16600] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 499.221649][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 499.221662][ C1] EXT4-fs (loop8): initial error at time 499: ext4_map_blocks:791: inode 3: block 2 [ 499.221686][ C1] EXT4-fs (loop8): last error at time 499: ext4_map_blocks:791: inode 3: block 2 [ 499.270674][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.287897][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.316731][T16570] team0: Port device team_slave_0 added [ 499.325686][T16600] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.3735: lblock 0 mapped to illegal pblock 48 (length 1) [ 499.346521][T16570] team0: Port device team_slave_1 added [ 499.369162][T16600] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 499.369663][T16600] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 499.400684][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.414972][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.455042][T16600] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3735: Failed to acquire dquot type 0 [ 499.480004][T16600] loop8: lost filesystem error report for type 5 error -117 [ 499.491630][T16600] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 499.506593][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.523699][T16600] loop8: lost filesystem error report for type 5 error -117 [ 499.523779][T16600] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.3735: mark_inode_dirty error [ 499.548024][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.557306][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.588102][T16600] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 499.588258][T16600] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 499.626605][T16600] EXT4-fs (loop8): 1 orphan inode deleted [ 499.632487][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.648897][T16600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.810575][T16570] hsr_slave_0: entered promiscuous mode [ 499.824203][T16570] hsr_slave_1: entered promiscuous mode [ 499.838665][T16570] debugfs: 'hsr0' already exists in 'hsr' [ 500.021905][T16659] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm syz.8.3735: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.039428][T16659] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 1 [ 500.049052][T16659] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 60928 [ 500.058874][T16659] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3735: Failed to acquire dquot type 0 [ 500.129897][T16570] Cannot create hsr debugfs directory [ 500.279721][T16664] loop4: detected capacity change from 0 to 512 [ 500.340364][T16664] EXT4-fs: Ignoring removed oldalloc option [ 500.389378][T16570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.411126][T16664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.431553][T16570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.448873][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.494522][T12770] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.513029][T12770] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 500.513257][T12770] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 500.537346][T16675] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3739'. [ 500.544633][T16664] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 500.571859][T12770] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 0 [ 500.587906][T12770] loop8: lost filesystem error report for type 5 error -117 [ 500.588710][T14582] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 500.609843][T16664] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 500.611621][ T28] audit: type=1400 audit(500.672:9144): avc: denied { lock } for pid=16677 comm="syz.9.3740" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 500.619020][T16664] EXT4-fs (loop4): orphan cleanup on readonly fs [ 500.647627][T14582] loop8: lost filesystem error report for type 5 error -117 [ 500.647717][T14582] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 500.647738][T14582] loop8: lost filesystem error report for type 5 error -117 [ 500.647851][T14582] EXT4-fs error (device loop8): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 500.647877][T14582] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 500.650108][T16570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.650145][T16570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.903599][T16664] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 500.913592][T16664] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 500.937857][T16664] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 500.954358][T16570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.992724][T16570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.993393][T16664] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3737: bg 0: block 40: padding at end of block bitmap is not set [ 501.033693][T16664] loop4: lost filesystem error report for type 5 error -117 [ 501.034757][T16664] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 501.043719][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 501.043958][ C1] EXT4-fs (loop4): initial error at time 501: ext4_validate_block_bitmap:441 [ 501.044158][ C1] EXT4-fs (loop4): last error at time 501: ext4_validate_block_bitmap:441 [ 501.144447][T16664] loop4: lost filesystem error report for type 5 error -117 [ 501.147507][T16664] EXT4-fs (loop4): 1 truncate cleaned up [ 501.167831][T16677] syz.9.3740 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 501.188242][T16570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.196452][T16664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.234815][T16677] CPU: 0 UID: 0 PID: 16677 Comm: syz.9.3740 Tainted: G W syzkaller #0 PREEMPT(full) [ 501.234851][T16677] Tainted: [W]=WARN [ 501.234859][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.234936][T16677] Call Trace: [ 501.234942][T16677] [ 501.234948][T16677] __dump_stack+0x1d/0x30 [ 501.234975][T16677] dump_stack_lvl+0x95/0xd0 [ 501.235055][T16677] dump_stack+0x15/0x1b [ 501.235078][T16677] dump_header+0x80/0x240 [ 501.235102][T16677] oom_kill_process+0x295/0x350 [ 501.235162][T16677] out_of_memory+0x97d/0xb80 [ 501.235195][T16677] try_charge_memcg+0x62f/0xa10 [ 501.235300][T16677] charge_memcg+0x6d/0x120 [ 501.235393][T16677] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 501.235422][T16677] __swap_cache_prepare_and_add+0x69/0x4a0 [ 501.235445][T16677] ? alloc_pages_mpol+0x217/0x260 [ 501.235475][T16677] swap_cache_alloc_folio+0xa2/0x120 [ 501.235506][T16677] swap_cluster_readahead+0x35c/0x3c0 [ 501.235559][T16677] swapin_readahead+0xde/0x840 [ 501.235652][T16677] ? _raw_spin_unlock+0x9/0x30 [ 501.235679][T16677] ? swap_put_entries_cluster+0x46c/0x490 [ 501.235715][T16677] ? __rcu_read_unlock+0x4e/0x70 [ 501.235742][T16677] ? swap_cache_get_folio+0x1e0/0x1f0 [ 501.235767][T16677] do_swap_page+0x31e/0x2180 [ 501.235904][T16677] ? css_rstat_updated+0xbb/0x280 [ 501.235927][T16677] ? __rcu_read_lock+0x36/0x50 [ 501.235953][T16677] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 501.235982][T16677] handle_mm_fault+0xb2e/0x2e70 [ 501.236024][T16677] ? vma_start_read+0x1c7/0x2c0 [ 501.236062][T16677] do_user_addr_fault+0x62f/0x1050 [ 501.236101][T16677] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 501.236140][T16677] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 501.236170][T16677] ? trace_page_fault_user+0x1f/0xa0 [ 501.236254][T16677] exc_page_fault+0x62/0xa0 [ 501.236320][T16677] asm_exc_page_fault+0x26/0x30 [ 501.236399][T16677] RIP: 0033:0x7fcf61b5a750 [ 501.236421][T16677] Code: c4 4c 0f 42 e0 83 3d 7a d6 3a 00 00 0f 8e d9 fd ff ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 e8 8a 31 13 00 [ 501.236446][T16677] RSP: 002b:00007ffe636f9d50 EFLAGS: 00010202 [ 501.236467][T16677] RAX: 000000000007a5c4 RBX: 00007fcf61f07da0 RCX: 000000000007a508 [ 501.236486][T16677] RDX: 00000000000000bc RSI: 00007ffe636f9d30 RDI: 0000000000000001 [ 501.236552][T16677] RBP: 00007fcf61f07da0 R08: 000000000b3b00d3 R09: 3fffffffffffffff [ 501.236571][T16677] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000007a704 [ 501.236604][T16677] R13: 00007fcf61f0609c R14: 000000000007a4fc R15: 00007fcf61f06090 [ 501.236630][T16677] [ 501.241783][T16570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 501.340240][T16661] EXT4-fs (loop4): shut down requested (2) [ 501.342586][T16677] memory: usage 307200kB, limit 307200kB, failcnt 230 [ 501.556176][T16661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 501.565831][T16661] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 501.583915][T16677] memory+swap: usage 271256kB, limit 9007199254740988kB, failcnt 0 [ 501.593268][T16677] kmem: usage 264324kB, limit 9007199254740988kB, failcnt 0 [ 501.602234][T16677] Memory cgroup stats for /syz9: [ 501.602632][T16677] cache 0 [ 501.611344][T16677] rss 24576 [ 501.614847][T16677] shmem 0 [ 501.617847][T16677] mapped_file 0 [ 501.621403][T16677] dirty 0 [ 501.625356][T16677] writeback 0 [ 501.637450][T16677] workingset_refault_anon 18 [ 501.695601][T16722] loop3: detected capacity change from 0 to 1024 [ 501.798707][T16722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.846706][T16722] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3743: bg 0: block 112: padding at end of block bitmap is not set [ 501.868233][T16722] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 501.884611][T16722] EXT4-fs (loop3): This should not happen!! Data will be lost [ 501.884611][T16722] [ 501.894705][T16722] EXT4-fs (loop3): Total free blocks count 0 [ 501.901064][T16722] EXT4-fs (loop3): Free/Dirty block details [ 501.907541][T16722] EXT4-fs (loop3): free_blocks=0 [ 501.912684][T16722] EXT4-fs (loop3): dirty_blocks=64 [ 501.924525][T16722] EXT4-fs (loop3): Block reservation details [ 501.930874][T16722] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 501.984945][T16677] workingset_refault_file 0 [ 502.011035][T16677] swap 192512 [ 502.029828][T16677] swapcached 1548288 [ 502.041055][T16717] loop8: detected capacity change from 0 to 1024 [ 502.047844][T16677] pgpgin 15075 [ 502.051318][T16677] pgpgout 15068 [ 502.078949][T16717] EXT4-fs: Ignoring removed bh option [ 502.088063][T16677] pgfault 18212 [ 502.091664][T16677] pgmajfault 14 [ 502.099431][T16717] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59032!=35945) [ 502.109780][T16677] inactive_anon 0 [ 502.113656][T16677] active_anon 20480 [ 502.117543][T16677] inactive_file 0 [ 502.121639][T16717] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 502.133873][T16677] active_file 0 [ 502.138136][T16677] unevictable 0 [ 502.141802][T16677] hierarchical_memory_limit 314572800 [ 502.152141][T16717] EXT4-fs error (device loop8): __ext4_fill_super:5596: inode #2: comm syz.8.3742: iget: special inode unallocated [ 502.195765][T16677] hierarchical_memsw_limit 9223372036854771712 [ 502.202121][T16677] total_cache 0 [ 502.209272][T16677] total_rss 24576 [ 502.213008][T16717] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 502.213396][T16717] EXT4-fs (loop8): Remounting filesystem read-only [ 502.222606][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 502.222635][ C1] EXT4-fs (loop8): initial error at time 502: __ext4_fill_super:5596: inode 2 [ 502.222753][ C1] EXT4-fs (loop8): last error at time 502: __ext4_fill_super:5596: inode 2 [ 502.256046][T16677] total_shmem 0 [ 502.259923][T16677] total_mapped_file 0 [ 502.264503][T16677] total_dirty 0 [ 502.268191][T16677] total_writeback 0 [ 502.272022][T16677] total_workingset_refault_anon 18 [ 502.277246][T16677] total_workingset_refault_file 0 [ 502.282510][T16677] total_swap 192512 [ 502.286697][T16677] total_swapcached 1548288 [ 502.291485][T16677] total_pgpgin 15075 [ 502.296234][T16677] total_pgpgout 15068 [ 502.300430][T16717] EXT4-fs (loop8): get root inode failed [ 502.306563][T16677] total_pgfault 18212 [ 502.310569][T16677] total_pgmajfault 14 [ 502.317852][T16717] EXT4-fs (loop8): mount failed [ 502.322818][T16677] total_inactive_anon 0 [ 502.328344][T16677] total_active_anon 20480 [ 502.332711][T16677] total_inactive_file 0 [ 502.337243][T16677] total_active_file 0 [ 502.341379][T16677] total_unevictable 0 [ 502.345518][T16677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3740,pid=16677,uid=0 [ 502.361223][T16677] Memory cgroup out of memory: Killed process 16677 (syz.9.3740) total-vm:100584kB, anon-rss:1268kB, file-rss:26492kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 502.461717][T16732] loop9: detected capacity change from 0 to 512 [ 502.472353][T16732] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 502.488826][T16732] EXT4-fs (loop9): 1 truncate cleaned up [ 502.495769][T16732] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.368746][T16723] ipvlan2: entered allmulticast mode [ 503.376362][T16298] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 503.387750][T16723] geneve0: entered allmulticast mode [ 503.499900][T16298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 503.675609][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3747'. [ 503.727033][T16570] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.849825][ T28] audit: type=1326 audit(503.812:9145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 503.892102][T16570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.933362][T16570] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.945451][ T28] audit: type=1326 audit(503.812:9146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 503.976962][T16570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.990723][T16570] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.003167][T16570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.014802][ T28] audit: type=1326 audit(503.812:9147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.043939][T16570] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.056756][T16570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.080232][ T28] audit: type=1326 audit(503.812:9148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.154499][ T28] audit: type=1326 audit(503.812:9149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.199383][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.223873][ T28] audit: type=1326 audit(503.812:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.260501][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.281941][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.289045][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.309648][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.327214][ T28] audit: type=1326 audit(503.822:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.373147][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.380241][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.421277][ T28] audit: type=1326 audit(503.822:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.488016][T16772] loop4: detected capacity change from 0 to 512 [ 504.525049][ T28] audit: type=1326 audit(503.822:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.551738][T16772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 504.584032][T16772] EXT4-fs (loop4): 1 truncate cleaned up [ 504.594549][T16772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.616641][ T28] audit: type=1326 audit(503.822:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16741 comm="syz.3.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f47f547cdd9 code=0x7ffc0000 [ 504.719304][T16746] loop3: detected capacity change from 0 to 128 [ 504.746243][T16746] msdos: Unknown parameter 'n9d:/Bodots' [ 504.906445][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.919479][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.959223][T16792] hub 9-0:1.0: USB hub found [ 504.995920][T16792] hub 9-0:1.0: 8 ports detected [ 505.005481][T13622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.164843][T16821] 9p: Could not find request transport: irtio [ 505.191510][T16826] loop8: detected capacity change from 0 to 512 [ 505.220176][T16826] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 0 [ 505.270125][T16834] loop3: detected capacity change from 0 to 512 [ 505.295795][T16834] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 505.308988][T16821] loop8: detected capacity change from 0 to 512 [ 505.332426][T16821] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 505.351734][T16834] EXT4-fs (loop3): 1 truncate cleaned up [ 505.374662][T16821] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 505.382265][T16834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.403535][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 505.407867][T16821] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3753: Failed to acquire dquot type 1 [ 505.410006][ C1] EXT4-fs (loop8): initial error at time 505: ext4_mb_generate_buddy:1317 [ 505.410024][ C1] EXT4-fs (loop8): last error at time 505: ext4_mb_generate_buddy:1317 [ 505.480599][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3760'. [ 505.510642][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3760'. [ 505.522008][T16570] veth0_vlan: entered promiscuous mode [ 505.536139][T16570] veth1_vlan: entered promiscuous mode [ 505.546565][T16821] loop8: lost filesystem error report for type 5 error -28 [ 505.548309][T16821] EXT4-fs (loop8): 1 truncate cleaned up [ 505.562917][T16821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.581240][T16821] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 505.604867][T16570] veth0_macvtap: entered promiscuous mode [ 505.610731][T16821] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 505.638487][T16570] veth1_macvtap: entered promiscuous mode [ 505.654185][T16853] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 505.673650][T16570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.744926][T16570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.838062][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.846962][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.905279][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.985651][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.051568][T16861] loop9: detected capacity change from 0 to 512 [ 506.125326][T16861] EXT4-fs: dax option not supported [ 507.360777][T16298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.395508][T14582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.466877][T16870] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3765'. [ 507.500974][T16870] netlink: 212 bytes leftover after parsing attributes in process `syz.8.3765'. [ 507.511517][T16870] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3765'. [ 507.777912][T16890] netlink: 452 bytes leftover after parsing attributes in process `syz.4.3772'. [ 507.791074][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3772'. [ 507.812113][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3772'. [ 508.899128][T16890] SELinux: ebitmap: truncated map [ 508.905916][T16890] SELinux: failed to load policy [ 509.191527][T16891] loop8: detected capacity change from 0 to 4096 [ 509.309942][T16891] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.3769: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 509.341318][T16891] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 509.341591][T16891] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.3769: Bad quota inode: 4, type: 1 [ 509.350754][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 509.350771][ C0] EXT4-fs (loop8): initial error at time 509: ext4_ext_check_inode:521: inode 4 [ 509.350797][ C0] EXT4-fs (loop8): last error at time 509: ext4_ext_check_inode:521: inode 4 [ 509.390117][T16891] loop8: lost filesystem error report for type 5 error -117 [ 509.391510][T16891] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 509.415786][T16891] EXT4-fs (loop8): mount failed [ 509.562149][T16906] tipc: Started in network mode [ 509.571594][T16906] tipc: Node identity , cluster identity 4711 [ 509.586457][T16907] loop9: detected capacity change from 0 to 1024 [ 509.591077][T16906] tipc: Failed to obtain node identity [ 509.603450][T16907] EXT4-fs (loop9): stripe (38279) is not aligned with cluster size (16), stripe is disabled [ 509.626992][T16906] tipc: Enabling of bearer rejected, failed to enable media [ 509.638632][T16909] netlink: 'syz.4.3776': attribute type 5 has an invalid length. [ 509.662731][T16907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.723641][T16894] ================================================================== [ 509.731921][T16894] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 509.741780][T16894] [ 509.744113][T16894] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 509.752195][T16894] tick_do_update_jiffies64+0x113/0x1c0 [ 509.757774][T16894] tick_nohz_handler+0x8d/0x3d0 [ 509.762673][T16894] __hrtimer_run_queues+0x276/0x4f0 [ 509.767889][T16894] hrtimer_interrupt+0x261/0x850 [ 509.772852][T16894] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 509.778788][T16894] sysvec_apic_timer_interrupt+0x6f/0x80 [ 509.784446][T16894] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 509.790458][T16894] kcsan_setup_watchpoint+0x404/0x410 [ 509.795856][T16894] should_skip_vma+0x1f/0x250 [ 509.800561][T16894] walk_pud_range+0x1369/0x16d0 [ 509.805428][T16894] walk_pgd_range+0x58d/0x1520 [ 509.810207][T16894] __walk_page_range+0xdd/0x340 [ 509.815097][T16894] walk_page_range_mm_unsafe+0x3e4/0x530 [ 509.820779][T16894] walk_page_range+0x56/0x70 [ 509.825404][T16894] try_to_inc_max_seq+0x766/0xa30 [ 509.830448][T16894] try_to_shrink_lruvec+0xba5/0xc20 [ 509.835684][T16894] shrink_lruvec+0x256/0x1bc0 [ 509.840380][T16894] shrink_node+0x697/0x20a0 [ 509.844903][T16894] do_try_to_free_pages+0x408/0xc90 [ 509.850119][T16894] try_to_free_mem_cgroup_pages+0x201/0x420 [ 509.856023][T16894] try_charge_memcg+0x373/0xa10 [ 509.860898][T16894] charge_memcg+0x6d/0x120 [ 509.865329][T16894] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 509.871329][T16894] __swap_cache_prepare_and_add+0x69/0x4a0 [ 509.877153][T16894] swap_cache_alloc_folio+0xa2/0x120 [ 509.882459][T16894] swap_cluster_readahead+0x25f/0x3c0 [ 509.887855][T16894] swapin_readahead+0xde/0x840 [ 509.892663][T16894] do_swap_page+0x31e/0x2180 [ 509.897302][T16894] handle_mm_fault+0xb2e/0x2e70 [ 509.902174][T16894] do_user_addr_fault+0x62f/0x1050 [ 509.907312][T16894] exc_page_fault+0x62/0xa0 [ 509.911835][T16894] asm_exc_page_fault+0x26/0x30 [ 509.916701][T16894] [ 509.919058][T16894] read to 0xffffffff86c07a00 of 8 bytes by task 16894 on cpu 1: [ 509.926707][T16894] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 509.933086][T16894] count_shadow_nodes+0x6a/0x250 [ 509.938038][T16894] do_shrink_slab+0x63/0x660 [ 509.942661][T16894] shrink_slab+0x545/0x8f0 [ 509.947098][T16894] shrink_node+0x6d4/0x20a0 [ 509.951620][T16894] do_try_to_free_pages+0x408/0xc90 [ 509.956837][T16894] try_to_free_mem_cgroup_pages+0x201/0x420 [ 509.962749][T16894] try_charge_memcg+0x373/0xa10 [ 509.967625][T16894] charge_memcg+0x6d/0x120 [ 509.972051][T16894] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 509.978048][T16894] __swap_cache_prepare_and_add+0x69/0x4a0 [ 509.983896][T16894] swap_cache_alloc_folio+0xa2/0x120 [ 509.989196][T16894] swap_cluster_readahead+0x25f/0x3c0 [ 509.994576][T16894] swapin_readahead+0xde/0x840 [ 509.999349][T16894] do_swap_page+0x31e/0x2180 [ 510.003948][T16894] handle_mm_fault+0xb2e/0x2e70 [ 510.008808][T16894] do_user_addr_fault+0x62f/0x1050 [ 510.013958][T16894] exc_page_fault+0x62/0xa0 [ 510.018489][T16894] asm_exc_page_fault+0x26/0x30 [ 510.023358][T16894] [ 510.025695][T16894] value changed: 0x00000001000051c5 -> 0x00000001000051c6 [ 510.032816][T16894] [ 510.035149][T16894] Reported by Kernel Concurrency Sanitizer on: [ 510.041312][T16894] CPU: 1 UID: 0 PID: 16894 Comm: syz.3.3773 Tainted: G W syzkaller #0 PREEMPT(full) [ 510.052270][T16894] Tainted: [W]=WARN [ 510.056083][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.066158][T16894] ================================================================== [ 510.223094][T15900] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.