last executing test programs: 2m51.559316758s ago: executing program 32 (id=648): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x1, 0x626, &(0x7f0000001140)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2m48.305125028s ago: executing program 33 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) setrlimit(0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0xb0ffffff}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.544543749s ago: executing program 34 (id=781): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30001300000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m30.934487893s ago: executing program 35 (id=819): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710448001700000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m25.816318385s ago: executing program 36 (id=854): r0 = syz_io_uring_setup(0x18fc, &(0x7f00000011c0)={0x0, 0xa83b, 0x1000, 0x2, 0x3b}, &(0x7f00000001c0)=0x0, &(0x7f0000001080)=0x0) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m24.947594439s ago: executing program 37 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xa}, 0x3013, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) shutdown(r6, 0x0) r7 = getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = syz_pidfd_open(r7, 0x0) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000018c0), 0x0, 0x0, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) fremovexattr(r8, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) 2m22.387885889s ago: executing program 38 (id=888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x14, 0x301, 0x70bd2d, 0x25dfdbfc, {0xb}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @empty, 0xfffffffd}, 0x1c) 2m7.644950928s ago: executing program 39 (id=1033): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r0, 0xd3) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e, 0x80000) r3 = accept$unix(r2, &(0x7f0000000500)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/182, 0xb6}], 0x2, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x2022) 1m56.233147883s ago: executing program 40 (id=1146): socket$kcm(0x1e, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syncfs(r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0xa, &(0x7f00000000c0)={[0x3]}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getdents(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES64=r2], 0x10b8}, 0x8000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="840100000b060102ee2ccb00000000000000000a00000638000780080006400000000c0a001a00746d7066730000000a001100aaaaaaaaaa3f00000900120073797a310000000008000940000000000900020073797a32000000001c0007801800018014000240ff02000000000000000000000000000105000100070000002c0008801c0007801800168014000240fc0100000000000000000000000000fd0c000780060004404e23000008000940fffffffb940008800c00078008000840000000510c00078008000840000000200c000780080009400000000d100007800a001100ffffffffffff0000100007800c001b40000000000000000c1c0007801800018014000240fe8000000000000000000000000000aa100007800c00168008000140e0000002100007800900120073797a3100000000100007800c00028008000140ac14142e08000940000000010500010007000000300007800900120073797a30000000001800168014000240fe80000000000000000000000000003e060004404e3e97162ff0302691dd6e8190ceaac3a40f10bf69cd5a60d6b1ff2c19b640629467ecb48f5ccc523c361a73ded70bc045ccea60"], 0x184}, 0x1, 0x0, 0x0, 0x4008050}, 0x20008080) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f00000000c0)=ANY=[@ANYRES8=r0]) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) 1m51.700835373s ago: executing program 41 (id=1162): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, {0xa, 0x4e23, 0x1000, @mcast2, 0x6}, 0x1, {[0x8000, 0x3, 0x8984, 0x10000, 0x10000, 0xc, 0x8, 0x7]}}, 0x5c) getpid() syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, 0x0) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r3, &(0x7f0000000100)="240000001a007f0214f9f4070009040f03000000000000000002000008000f40fe00000e", 0x24) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}}, 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080001000100000040231c0d104dfeffd9438a81bf89de6ec4b1a899718ecbf2c7b165ecdae1e9cf344096f8aa3b4a33bf3da1e607557266edfd38fdec12cd055cdb5fedc8b01ddfa0eee38997ea6131ce076d98bb339c87ac3e014c1be840bc3f62017f883f9626d5de56bd1ec571ded3b4"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x20}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0xc01) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000003c0)={0x1f, 0x1, &(0x7f0000000340)="ff"}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xc0463b18c99bb568, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) getpeername$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) socket$netlink(0x10, 0x3, 0x0) 1m50.55168438s ago: executing program 42 (id=1174): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x90}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c15}, 0x24048844) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) 1m50.00610115s ago: executing program 43 (id=1179): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 1m47.4958373s ago: executing program 3 (id=1187): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@init_itable}], [{@pcr={'pcr', 0x3d, 0x28}}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@smackfstransmute}, {@permit_directio}, {@audit}, {@subj_user={'subj_user', 0x3d, '@]**&]^!%&!'}}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9sG1UaAPBvxnbTP9lNVtqVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6naeoUJ8RxiX8/yfF788b+3pvx9+IZzcgB9K1jjT9pxH8i4lISMbShLR9Z47HmeqsrS6UHK0ulJOr1yz8lkUTE/ZWlUmv9JHs+EhHLEfHviPiqEHEiXX/LA61CbWFxarxSKc9m9ZG56WsjtYXFk1enxyfLk+WZ08+/cPbcmbNjp8Y2dvdBfWOtsL2x3vz+1ts3v3npzq2PPzm6XHp3PInzMZi1bRzHbmpuk0Kc37T8TDeC9VDS6w6wI7kszxup9K8YilyW9e3UN04OA3vSPaCL6gMR9XUbikAfSCQ99KnW94DG8W/rsZffP+5eaB6ANOKuriyV3oql4WZLvnluIg6uHZsc/jl55Mikcbw5vJcdZV9avhERo/n845//JPv87dzobnSQrvryQnNHPb7/0/X5J9rMP4Otc6d/Umv+W83mv9U28XNbzH+XOozx66s/fLBl/BsD8d+28ZP1+Emb+GlEvN5h/NuvfH5uq7b6hxHHo338luTJ54dHrlytlEebf9vG+OL40Re3Hn/E4S3iN8/ZHlzryMbxH8j6lHY4/s++/vR/y0+I/+z/n7z/223/QxHxTofx/3H/o5e3art7I7nX+Baw3f2fRCHudBj/ufPHvsuKzhoCAAAAAAAAAMAuSteuZUvS4no5TYvF5j28/4zDaaVamztxpTo/M9G85m04CmnrSquhZj1p1Mey63Fb9VOb6qdzWcDcobV6sVStTPR47AAAAAAAAAAAAAAAAAAAAPC0OLLp/v9fcmv3/2/+uWpgv9r6J7+B/U7+Q/96NP+TnvUD2Hv+/0Pfqst/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgK64dPFi41F/sLJUatQn8gvzU9U3Tk6Ua1PF6flSsVSdvVacrFYnK+ViqTr9R++XVKvXRmNm/vrIXLk2N1JbWHxtujo/0/pN0XKh6yMCAAAAAAAAAAAAAAAAAACAv57BtUeSFiMKzXqaFosRf4uI4SSSK1cr5dGI+HtEfJsrDDTqY73uNAAAAAAAAAAAAAAAAAAAAOwztYXFqfFKpTzbvUI+C9XFEJ0X8ttZOSKWd7cbjXfc9qsK2Qbs8abbH4Xc0/E5fPoLPZyUAAAAAAAAAAAAAAAAAACgTz286bfTV/zW3Q4BAAAAAAAAAAAAAAAAAABAX0p/TCKi8Tg+9Mzg5tYDyWpu7Tki3rx9+b3r43Nzs2ON5ffWl8+9ny0/tf6y/N6OAehEK0/TiGjkMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQbWFxarxSKc/usDDQwTq9HiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATvweAAD//7M9zgI=") bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001200310227b776d6258e3829b0920dbd", @ANYRES32=0x0, @ANYBLOB="0001000080100000080029"], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r5, 0x0, 0x0, 0x4fed0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r8, 0x7}}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 1m47.227808696s ago: executing program 44 (id=1188): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_clone3(&(0x7f00000006c0)={0x122c080, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380), {0x13}, &(0x7f00000004c0)=""/146, 0x92, &(0x7f0000000580)=""/245, &(0x7f0000000680)}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @empty, 0x8009}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x3, 0x4000000000000000, &(0x7f0000000280)=[{&(0x7f0000000200)="1a", 0x1}], 0x10000000000002e4, 0x0, 0x0, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x5975, 0xb94f, 0x2, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_FSYNC={0x3, 0x27, 0x0, @fd_index=0x4}) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffbf}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xa9, @loopback, 0x80000008}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000840)="3efde9e5f5e524b7add5893b", 0xc}], 0x1}}], 0x1, 0x2000fffc) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) statfs(0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_dev$loop(&(0x7f0000000240), 0x100000001, 0x14b000) renameat(0xffffffffffffffff, &(0x7f0000000180)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file1\x00') capset(&(0x7f0000000780)={0x20071026, r0}, &(0x7f00000007c0)={0x3, 0x3, 0x9, 0x30, 0x800, 0x9}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB="000000000000f13d98b2ecdb05cb129800"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1m46.614138971s ago: executing program 3 (id=1190): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000000000000ff0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000021062c3fa7e7d98b1cbefa1dfd928cf00123d41d603841223de6724474fe21645b63ebb9ce0a65126375be0b045b89ff769d97f30"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008"], 0x38}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000feeedf2503000000080c0008002c060000000000000c00020001000000000000000c00080002000000000000000c000200ff0100"/70], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="bf000000000000003c001a80380004"], 0x5c}}, 0x8000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="005f1506c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r6, r5, 0x5, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f0000000840)=[0x0, 0x40, 0xaa8], &(0x7f0000000880)=[0x2, 0x0, 0x5], 0x2f, 0x3}}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) unshare(0x22020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) 1m46.090605595s ago: executing program 3 (id=1191): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0xffffffc3, 0x0, 0x24008050}, 0x20008000) 1m46.006365968s ago: executing program 3 (id=1192): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c6, &(0x7f0000000900)="$eJzs3b1rJGUcB/DfZF8Pi93CSgQHtLA6LlaCzQbJQXArJYVa6OHl4NhscwcBX3Avla2NpX+EnWBnb2MhWAq2gpWmCI7MzszuTrJJdiGb+PL5NHn2mec7z0ue2ZBin/3wxfHoYRqPjj/7JbrdJLYGMYiTJPqxFZVnUTP4MgCAf7OTLIvfs8I6uSQiupsbFgCwQev9/f8u4pubGBUAsEnvvPveWzvD4e7badqN++Mvjvbz/+zzn8X1nUfxOA7jIO5FL04jspmifD/LskkzzfXjlfHkaD9Pjj/4obz/zm8R0/x29KI/rarn94a722lhIT8pxjH1eJDnX4tePL+k/73h7ujn8/lWRLz68sL470Yvfvwovv/jfP7z7TR9M/vqz0/fz7vL88nkaL8TD2srlTVu7rcCAAAAAAAAAAAAAAAAAAAAAMB/3d3y7J1OTM/vyavK83cap/mLVqSVfv18niI/O6XnzPlAkyy+rs7XuZemaVY2nOeb8UIzmrczawAAAAAAAAAAAAAAAAAAAPhnefrxJ6MHh4cHT66lUJ0GUH2sf7VU3rpeM1ho81IsSfVjVtOZd7lVdntJX9Go2iRnOz1TyO+41iK06r3nxRXjdyKyxrIVSyKeXRnPZz2r6V491NZl63M9hWp3jR4kcVC9WGzTiapxt5ryt4v3aa+6dO2LLmUrb7+80F56qbf23NvPTQuTi9v89fqlA3vj12Kx5hug3rg9XdWl8VZZKJ6FxT1fPl/dtfbz+feKpHys71zXmw8AAAAAAAAAAAAAAAAAAFAz/9DvkovHF4R+2iu+5D/6Gx4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyM+ff/r1GYlOEVGrfjydNbniIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//68SW7g=") mount$nfs(0x0, 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) 1m45.884251173s ago: executing program 3 (id=1193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() sync() fsopen(&(0x7f0000000140)='ncpfs\x00', 0x1) r0 = dup(0xffffffffffffffff) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000011070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 1m44.935789281s ago: executing program 3 (id=1194): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00180000b4"], 0x50) 1m44.935616981s ago: executing program 45 (id=1194): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00180000b4"], 0x50) 1m44.04450313s ago: executing program 1 (id=1196): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xfffffffffffffffb]}, 0x8, 0x80000) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1) rt_sigqueueinfo(r1, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x5, 0x440}}) 1m43.887099858s ago: executing program 1 (id=1197): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0xef9d, 0x0, 0x3, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) r4 = dup(r3) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x8050) r5 = socket(0x1, 0x4, 0xffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x10}, &(0x7f00000002c0)=0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r9, 0x0, 0x9, 0x2000403) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x80, 0x0, 0xa1, 0x6, 0xfc, 0xfd, 0x0, 0x0, 0xff, 0x1}, 0x1f) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r10, 0x8000000}, 0x8) r11 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x11) pwritev(r11, &(0x7f0000000180)=[{0x0}], 0x1, 0xffffff01, 0xa) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) 1m42.935721395s ago: executing program 1 (id=1198): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m42.643749686s ago: executing program 1 (id=1199): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2c6, &(0x7f0000000900)="$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") mount$nfs(0x0, 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) 1m42.4680054s ago: executing program 1 (id=1200): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32], 0x4, 0x2cc, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\x00', 0xfffffdc5, 0x3) rmdir(&(0x7f0000000600)='./file0\x00') 1m42.393668255s ago: executing program 8 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2b, 0x2, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r0, r2, 0x2) (async) close_range(r0, r2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x9) accept(r3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xbb7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xbb7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m42.103842626s ago: executing program 1 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000001d00050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m42.102571996s ago: executing program 46 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000001d00050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m41.451811264s ago: executing program 8 (id=1205): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") unshare(0x2a020480) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180), 0x5, 0x512, &(0x7f0000000840)="$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") r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fcntl$getown(r0, 0x9) 1m41.058988045s ago: executing program 8 (id=1207): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1m40.963819495s ago: executing program 8 (id=1208): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c6, &(0x7f0000000900)="$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") mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) 1m40.800216442s ago: executing program 8 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0xfffffffffffffffe, {0x1, 0xff}}, 0x18) sendmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000000040)=@can={0x1d, r2, 0xc7}, 0x80, &(0x7f0000001100)=[{0x0}, {&(0x7f0000000100)="abdbec", 0x3}], 0x2}}], 0x1, 0xf5) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1b8, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x814}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa23}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xabb}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8c1}, 0x4041) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808008080000000000006fe0ee43951e12f0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000003c68010000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m40.684982448s ago: executing program 9 (id=1211): syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0), 0x2, 0x487, &(0x7f0000000340)="$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") unlink(&(0x7f0000000280)='./file1\x00') r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x25) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@bridge_getlink={0x20, 0x12, 0x29, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0x18400, 0x8}}, 0x20}, 0x1, 0x0, 0x0, 0x20044680}, 0x8080) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/222, 0xde}], 0x1}, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x387640, 0x1ed) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000001780)={0x4, 0xf, 0x0, 0xf2e4}) 1m40.311313003s ago: executing program 9 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x20000000000006}, 0x0, 0x200000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e78", 0xa) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r1, @ANYBLOB="de4ce25b728ba604660053b2686d7d5ba28c6f99ca8fd22d8aded159f0c23fb1e2919778a8b86593c0cbf9fa95005d5d6eb67a3d7f10bb9a3a39efdd3325fcdae346276391d165df3d78090d00020000f897cef5c9bcab360307d9f874edfe7d5d2e7e85fd423af01e94e1d1bdee2072f0df78b49b9c6e08d5f4"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) unshare(0x2040400) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') getdents64(r8, &(0x7f0000002f40)=""/4098, 0x1002) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) (async) unshare(0x20040600) 1m40.110665212s ago: executing program 8 (id=1215): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c03", 0x17}], 0x1}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume_offset', 0x8501, 0x16) write$P9_RWALK(r1, &(0x7f0000000680)=ANY=[], 0x4a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fallocate(r1, 0x48, 0x9, 0x101) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/235, 0x79c5}], 0x1, 0x4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="a1ab23bd7000fdffffff32000000080017017900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x24008000) fchdir(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x746, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x1a, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r10, r11], &(0x7f0000000380)=[{0x3, 0x2, 0x8}, {0x2, 0x5, 0x8, 0x6}]}, 0x94) 1m40.013678382s ago: executing program 47 (id=1215): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c03", 0x17}], 0x1}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume_offset', 0x8501, 0x16) write$P9_RWALK(r1, &(0x7f0000000680)=ANY=[], 0x4a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fallocate(r1, 0x48, 0x9, 0x101) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/235, 0x79c5}], 0x1, 0x4, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="a1ab23bd7000fdffffff32000000080017017900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x24008000) fchdir(r7) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x746, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x1a, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r10, r11], &(0x7f0000000380)=[{0x3, 0x2, 0x8}, {0x2, 0x5, 0x8, 0x6}]}, 0x94) 1m39.55783469s ago: executing program 4 (id=1216): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f00000001c0)=[{0x6, 0x77, 0xc1, 0xb}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) uname(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = semget$private(0x0, 0x7, 0x191) semtimedop(r6, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r6, &(0x7f0000000180)=[{0x2, 0x6, 0x1800}, {0x2, 0x5, 0x3000}], 0x2) semop(r6, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2) 1m38.495825514s ago: executing program 9 (id=1217): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000913030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m38.478698721s ago: executing program 9 (id=1218): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c6, &(0x7f0000000900)="$eJzs3b1rJGUcB/DfZF8Pi93CSgQHtLA6LlaCzQbJQXArJYVa6OHl4NhscwcBX3Avla2NpX+EnWBnb2MhWAq2gpWmCI7MzszuTrJJdiGb+PL5NHn2mec7z0ue2ZBin/3wxfHoYRqPjj/7JbrdJLYGMYiTJPqxFZVnUTP4MgCAf7OTLIvfs8I6uSQiupsbFgCwQev9/f8u4pubGBUAsEnvvPveWzvD4e7badqN++Mvjvbz/+zzn8X1nUfxOA7jIO5FL04jspmifD/LskkzzfXjlfHkaD9Pjj/4obz/zm8R0/x29KI/rarn94a722lhIT8pxjH1eJDnX4tePL+k/73h7ujn8/lWRLz68sL470Yvfvwovv/jfP7z7TR9M/vqz0/fz7vL88nkaL8TD2srlTVu7rcCAAAAAAAAAAAAAAAAAAAAAMB/3d3y7J1OTM/vyavK83cap/mLVqSVfv18niI/O6XnzPlAkyy+rs7XuZemaVY2nOeb8UIzmrczawAAAAAAAAAAAAAAAAAAAPhnefrxJ6MHh4cHT66lUJ0GUH2sf7VU3rpeM1ho81IsSfVjVtOZd7lVdntJX9Go2iRnOz1TyO+41iK06r3nxRXjdyKyxrIVSyKeXRnPZz2r6V491NZl63M9hWp3jR4kcVC9WGzTiapxt5ryt4v3aa+6dO2LLmUrb7+80F56qbf23NvPTQuTi9v89fqlA3vj12Kx5hug3rg9XdWl8VZZKJ6FxT1fPl/dtfbz+feKpHys71zXmw8AAAAAAAAAAAAAAAAAAFAz/9DvkovHF4R+2iu+5D/6Gx4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyM+ff/r1GYlOEVGrfjydNbniIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//68SW7g=") mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 1m38.419308659s ago: executing program 9 (id=1219): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = syz_io_uring_setup(0x1215, &(0x7f00000001c0)={0x0, 0x7d0d, 0x80, 0x100000, 0x1a3}, &(0x7f0000000000), &(0x7f0000000580)) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x9, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m38.091527752s ago: executing program 9 (id=1221): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000a80)=0x80000) 1m38.03189265s ago: executing program 48 (id=1221): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000a80)=0x80000) 1m37.410289344s ago: executing program 4 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)=""/142, 0x3b, 0x8e, 0x1, 0x10}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xfb}]) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000100)=""/234, &(0x7f0000000040)=0xea) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080005"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 1m37.254214072s ago: executing program 4 (id=1226): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a300000000009f5030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m37.207075882s ago: executing program 4 (id=1227): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c6, &(0x7f0000000900)="$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") mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 1m37.099531181s ago: executing program 4 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850080041100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) 1m36.835757837s ago: executing program 4 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6161, 0x0, 0x0) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m36.817371424s ago: executing program 49 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6161, 0x0, 0x0) r5 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.811722925s ago: executing program 2 (id=1936): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000001740)) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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") bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r7 = openat(0xffffffffffffff9c, 0x0, 0x400000, 0x0) pwrite64(r7, 0x0, 0x0, 0x4fed0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0) 6.940320819s ago: executing program 2 (id=1949): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x200, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000002000), &(0x7f00000001c0)=0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={0xffffffffffffffff, 0x2000000}, 0x8) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x240480d1) 5.141938954s ago: executing program 2 (id=1960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() sync() fsopen(&(0x7f0000000140)='ncpfs\x00', 0x1) r0 = dup(0xffffffffffffffff) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000012008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 4.451812224s ago: executing program 0 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a301c0000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.298787173s ago: executing program 0 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3818746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@orlov}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x21e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x40, 0x3}}]}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4.196324202s ago: executing program 2 (id=1966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() sync() fsopen(&(0x7f0000000140)='ncpfs\x00', 0x1) r0 = dup(0xffffffffffffffff) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000048008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 3.466714154s ago: executing program 6 (id=1972): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_dev$loop(0x0, 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6161, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0xeae7, 0x0, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r2, 0x2afd, 0x308b, 0xc, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.011910331s ago: executing program 2 (id=1973): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000018c0)='./file0/file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x14) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYRESOCT]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r1, 0x0, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0xea, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x60) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000280)="$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") 2.546939647s ago: executing program 6 (id=1976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r6, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048021}, 0x40080) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0xb, 0x0, {}, 0x9, 0xfffffffffffffffe}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0xbc, 0x24, 0x200, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {0xa}, {0x6, 0x9}, {0x2, 0x6}}, [@TCA_STAB={0x98, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x9, 0x9}}, {0x16, 0x2, [0x3, 0xf801, 0x6, 0x0, 0x4, 0x0, 0x1, 0x0, 0x8]}}, {{0x1c, 0x1, {0x5, 0x0, 0x81, 0xfffff23f, 0x0, 0xffff58e6, 0x8, 0x7}}, {0x12, 0x2, [0x1, 0x3f1f, 0x6, 0x3, 0x8, 0xeb, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x1, 0x3, 0x0, 0x8, 0xfffffdb2, 0x7}}, {0x12, 0x2, [0x8, 0x4, 0x200, 0x81, 0x400, 0x87fe, 0x81]}}]}]}, 0xbc}}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x5, 0x2, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.426123273s ago: executing program 6 (id=1977): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x30, r3, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) io_setup(0x239f, &(0x7f0000000380)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0xdf68, 0x2, 0x3, 0x10f}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc, &(0x7f0000000240)=""/206, 0x41100, 0x29, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x50, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x40800) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.195066896s ago: executing program 0 (id=1978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) unshare(0x60000600) sync() sync() fsopen(&(0x7f0000000140)='ncpfs\x00', 0x1) r0 = dup(0xffffffffffffffff) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000048008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 2.006518648s ago: executing program 5 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710448000000000018000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.852197216s ago: executing program 7 (id=1980): r0 = io_uring_setup(0x194f, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x351}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.783652112s ago: executing program 5 (id=1981): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0xfeffffff, 0x24008050}, 0x20008000) 1.757138937s ago: executing program 7 (id=1982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}], 0x1, 0x8800) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x800, 0x7aececb3}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.72428738s ago: executing program 5 (id=1983): io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x42bc0, 0x1d0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = msgget$private(0x0, 0x483) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0xee01, r7, 0x0, 0x6a, 0x2}, 0x0, 0x0, 0x3ff, 0x2, 0x7, 0x3, 0x2, 0x7, 0x6, 0x3, r8, r9}) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpid() kcmp(r13, r13, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001780)={{r0, &(0x7f0000001080)='!][*+^\x00', 0x101000, &(0x7f00000010c0)={@_ha_fsid={[0x5, 0x7]}, {0x7, 0x0, 0x5, 0x9}}, 0x8f, &(0x7f0000001100)={@_ha_fsid}, &(0x7f0000001140)}, 0x6, &(0x7f00000016c0)=[{0xcfe718ecbee3544d, 0x73c, &(0x7f0000001180)='\\\x00', &(0x7f00000011c0)="a08d88f8ee84f14f6a8a69089626e4561708d816de9e1da3290650a094423d7cbc8dd32b8f99c580a81e17f8014f8ffde706cdc89e3ce99878b448bc729a1352c3dc287bea477c0b9f7bca7a8512e6e64f03fd7bbd4e18cd55b3e3369f8719f6652c544d09511f19b716e92b63e54cc3e6c6ab01512f5dddca9682d24741826d206dec7cc786dd2e35e5d1d011d8e5116e1e33929cfa8ab3ad23199c3b23547d6f98f1b3ef3f0084d1", 0xa9, 0x20}, {0x1, 0x5, &(0x7f0000001280)='/dev/ttyS3\x00', &(0x7f00000012c0)="a6a8bbf5df8acd14849b7a4f71028b18f1cd", 0x12, 0x20}, {0x1, 0xf, &(0x7f0000001300)='\x00', &(0x7f0000001340)="ff85491b0938e36302c3bf46e917b56759148afd340f2a3dc0f4203145b8518c6805afe0d849a997a2f09bd69b5cf18bd7e07e141070b63fe6cbfb533429dfee92295a11707fbaeee8e4d6c166014a8a32baabbd42c2b6b9286d879693fbbe507da3ab04a505b5cb8cefad9dfdb2c522b14028a0df9c33d6754d9e1714eda546c5607bc1e73be3e5a72734e99210d2251aafe43535088830f346d190938434f99e4e772aad99765e9fd89105b84ba41c6f73357c27b9cc3ccd0b44a3d7d9d338aa2078eac375fab37f5bab797a8acdddb7814f3271137c38114b0a6d728472f63d786dee98e868a721", 0xe9, 0xa}, {0x3, 0x16, &(0x7f0000001440)='.pending_reads\x00', &(0x7f0000001480)="14e0704e3251a1c3c10bff22f970224bfff32b864d6ec68e6bfb8b7be093f981bd5f5163f93c0d0c1a0e18f8025c371699882b11b36a69535e8781c6f78ba3ff2d89167fc11ea0e9ac24ec0aa574774d195623da8abac901cde0aecf4a56b999cd63ad111308cacafbd9370ede7f1fa68af953d820aaed277560a376cea75352aba92fac922f06be407de4c4fc6a05ae1fdc3e19df", 0x95, 0x20}, {0x2, 0xfffffdfd, &(0x7f0000001540)='/dev/ttyS3\x00', &(0x7f0000001580)="2b180a0f8045eb5e7df83358480747905789be28d73525ddc70290caad96b6fb339270eff931048ba0518acb93213daef0ba356b38a13fc99c4c75b2ff2af4c95e0c3efa1c81ed44a1c1", 0x4a}, {0x3, 0x9, &(0x7f0000001600)='.pending_reads\x00', &(0x7f0000001640)="d8e5ffc5dc5d46237776dfba3cb3e36b86d140a8f44e2ff31046fd66d44c6d18d244d0c71fc0b7d4ede1e6052a1d23a660246df56c50540fd99df7de5cd787c154ad3262c65251bb53035e76d362712c136e1dccc48d2798e6ffbe12ad5861e1213e458abe1c0a7cc62f", 0x6a, 0x1a}]}) r15 = getpid() statx(r0, &(0x7f0000001800)='./file0\x00', 0x4000, 0x100, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() sendmmsg$unix(r0, &(0x7f00000019c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="66507519141e62ee9af6fbc1829ddbf26733d3d57a3eca449d4e81c6845436251b5e3b1b99df295eaa776c88afdbadee6714ff80e5676fc80fd42eb0f940d2af5a2c232e9f75444ac57dda6969f7f569ba4f", 0x52}, {&(0x7f00000001c0)="13eacf202fcc50334d3a5ecf2c06ff628871c4f32c9ad344bbe9767327994a10b63497b518552e2ff3aaf061f1c4a660ac483731432657321dae6f6f54c2c0c4c8a3b2066027f5ef007935154550bb68eb4243f1b2a50798bb853e650b208b48db8c1e62dbe381a1d9fdd41dc1edbacdaf42c874a71ac3315e9c05cf40cc1d0c16b079963edab8a3de1ee89e29b1d989e727e12d0dff5e6e948f350cceadbeb86f1b5350298b81c9ca8ea07f62", 0xad}, {&(0x7f0000000280)="b620d0f6c405930be24c3763bde901d75af9a83244d3ffd90e84e69db4b28898dd8dba835c9c2f753b47dab25c9b21f37385b9bc1e528a3d8264b7", 0x3b}, {&(0x7f00000002c0)="148a32294a5892bad60d2324328713daf56811c1ff33138d2dddc99f384df5edb31e948a2ae6e09ff94701178e6c", 0x2e}, {&(0x7f0000000300)}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000005b6a90b76a6c5a8ed381bc01000100faffffff", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x20041000}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000a40)="fb6342adb4b81f8936edc35411f206f7457a058d0ce52cfabe381a9a7b0194fa6da3a967a09294b909ae587a30c8a618806ea5b7b8490b4efecd2f3b1b1889c3db2ad17c56a60cf4549f61b84cb043fe88a3b4b9e7f2629158b62bc34f3d200bbabff6027326ead178f168b478a17254fe059f5a133232d0e649f01286cb7067c922db6982b6c5e7871ba8ebcf99a957ca738517a32cca5efe9d81646531f1c62a95a25c94612a02e38c69cd0928ae7a6172223f48522da40d96b8c514c877f30b061a1d36f54c4605c5ea46eef16a91c00380ff552f64f7f91c840577ba67d4cf1c7d", 0xe3}, {&(0x7f0000000b40)="98f96514808739024e44e1bd8ba858dee3f6dc1e6f24e4284e656992e8629b6f8ab55893bf3ea5e3aadbc9ba4619383980c6365a957ed647547ef57826a6df27bef5b674a3c9885aac3e8c167e1240221b370846342c9e8cc107a8693aaaa3d32d118ab71fc87358df3c5bbc3f792044d7e35a5baaf5e0f88444fc11e671bf8bb9", 0x81}, {&(0x7f0000000c00)="3cb20776375a1b5db2e9596cdd", 0xd}, {&(0x7f0000000c40)="ea6a619553a288e2b71a66316559e60d9cc6599c0c82ec1c6cfceffc1f07871c8516a14252f45f71e144c9fde6fe2a48788f9318fb918a73ef32f9f4cd91fd76dc746e94efea4da2d1bd3abad9b8c1e488aa5a64011f41b09132c67b09bc28db70b094b7286eccc32135349c43c155b13ba648e7131d67101d7408a78b4caa9426fa76af76256c281442284338b343f4237c060cfa6b7b38f8ba50c11f0edb48d728c7d666dd260f9013311586cad48ece4cdd4f0239bb3602977ec385dae96325ce778a69b6be150cd9ed5cff166a2c6607325fd7059937ee5a8850", 0xdc}, {&(0x7f0000000d40)="e89be9b96d3bdaa09e6af4313fce0dd11db0bce8e7f0cabf019ef356eb86787a25a7b7b39b70a5fdc4c4537ced26e72d09561a3308aed3112d9a6f64718064271649b8dfe360e8acbd99c2a3fbf074a7e8d5d2c6e441da98142ac8362c8f3eb4550cc8cd", 0x64}, {&(0x7f0000000dc0)="5080766258e3c54582652a5515e0e9eeefecfce4ef6c8bbf02b1f70f76cbccca421d1a14e98c6390d8d0c7404a3e0ef2e252dbc562fffa425ed716a0d839ad3db30a6cb2d533aa6fd813623023242ad7978e675c9456e7464afcb937447e00057295562faf9d0825d3c58ec619326727e1a70ee543950c7fe6599345074524d25639177e1816bceaef6aeb5ed1c6cf4a7449be65b7d152dc35d9504a2f81c54198829a8aca12054a26232741cc63480495e6b7a22d", 0xb5}, {&(0x7f0000000e80)="67669b86", 0x4}, {&(0x7f0000000ec0)="e543e5a87d1a14e13dec1eef2f1260dafcbc7bd7047597252e2e6135f5a7f410563d4cd83e4291820b1b46debc11be1fbba5ec36b9067adf4ad051deb6ca4b293deb7e85e954f06e9a4bf108133e050d3f13036acfcf366276226cd08ceb698371d1a6076216", 0x66}, {&(0x7f0000000f40)="cd9f7850ac824db8e6ae1a09100994eaac5de668829d336e63c496a5c348fd248ad766a9b8d3cb37b1a33c65a6a3c4a7e6b587d0c4130e7779684ba2166d0fa82ad3a6139c459e41b603c81cabb85930014375237d41a034ea03dc4381875662312100dc2d1a628ce274ad2026a462667f15", 0x72}], 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000004000000000100000002000000b0e7c502", @ANYRES32=r13, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r14, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x4000000}}], 0x2, 0x40800) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x0, 0x3, 0x6, 0x2bb, 0x80000001, 0x4}) 1.42779025s ago: executing program 6 (id=1984): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x226443, 0x41) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpu'}, {0x2b, 'rlimit'}, {0x2d, 'perf_event'}, {0x2b, 'memory'}]}, 0x21) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='syzkaller0\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (async) read$eventfd(r1, &(0x7f00000001c0), 0x8) 1.18179528s ago: executing program 0 (id=1985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a301e0000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012"], 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.107292615s ago: executing program 2 (id=1986): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000018c0)='./file0/file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x14) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYRESOCT]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r1, 0x0, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0xea, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x60) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xaec, 0xd, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2d1, &(0x7f0000000280)="$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") 1.051781904s ago: executing program 6 (id=1987): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x10002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x23) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0xf, 0x7, 0x0, 0x7, 0x3ff, 0x100, 0x6, 0x7, r5}, &(0x7f00000001c0)=0x20) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 1.03083345s ago: executing program 0 (id=1988): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) gettid() (async, rerun: 32) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x7, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) (async) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 860.358305ms ago: executing program 7 (id=1989): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000200000000100da"], 0x0, 0x52}, 0x28) 723.694477ms ago: executing program 7 (id=1990): r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r2], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x4, 0xfffffffffffffffb}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x6, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x1}) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[], 0x7c}}, 0x814) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x3ff, 0x1) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc03f935b9b725a60, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) 676.435557ms ago: executing program 0 (id=1991): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r2, &(0x7f0000000100)="4b95132dbfdce425086cac80886d7d9f", 0x10, 0x0, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x1, @random="3bd6b1fa3104", 'ip6gretap0\x00'}}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x10001}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x546df31d, 0x6, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f00000001c0)='logon\x00', &(0x7f0000000280)='net/igmp6\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) 596.472791ms ago: executing program 5 (id=1992): r0 = io_uring_setup(0x194f, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x351}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 515.766855ms ago: executing program 7 (id=1993): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r1, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0xffff0000, 0x24008050}, 0x20008000) 490.20019ms ago: executing program 5 (id=1994): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) wait4(r0, &(0x7f00000004c0), 0x8, &(0x7f0000000680)) 477.073537ms ago: executing program 7 (id=1995): socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000740)={[{@clone_children}]}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004) r0 = epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000a0900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f616400340002800800044000000000080002400000000008000540000000000800034000000004080008"], 0x9c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) fstat(r5, &(0x7f0000000880)) ioctl$int_in(r0, 0x5452, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006f24b5a58d43f1aa299b0b3d61248af5fd0000a5ebce140012800c0001006d616331274b3543deb6633aa02467256176746170000400f40280080005b173bb6a16265e5e7b6d5d40ade0ecde62ff41496f8d74af244677546fde94c9f1165a5c9ed19b59395d3619b25d690d38f0b577f983cc07282b099555e8254e6efed014e17107159dc1aa1839d1143d40eb276290cdfb3b8f16bd431723db53794314582f0aa0f80ec86b77f2f853f8", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 279.473987ms ago: executing program 6 (id=1996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r4) epoll_create1(0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000017c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7, 0x4e0b, 0x3, 0x1, 0x100, 0x3fb}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) close(r6) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x170, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x15c, 0x1, [@m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10800, 0xffffffff, 0x4, 0x800004, 0xe4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x88, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x5a, 0x6, "1ed0822c77a64017dbc62f5d14d932ebc6c446abdf4e3b55ee394ff3584b3ff2343a4bc881d5a39c75329c72fdd0502d07e3e31ee946760a0bd1b8c15746bc650ea566065111d61657a7809f15e5419a64620bc81588"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0004}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4189850e7fa14a5515f4a69aee4ea06dedc05e664bb28ba8852bf901f8fef11179ceb42e4b0b06441cfe9e94542fc315af0e3c4a575148ee50d74d5b730979774deacd17d723e11a36eecb121b52439a3b64697fa4ab227c2a9cd8edb649a0fe501e53a04077997eec60e9cc696008f9ea44e5d0f60337156004f80bd4277a79afeac0dee8df5bdc98953d21bfaee32a28e2af3bda3b314df6f9b4720f8165ea0757378120561042def6ea9ed620c9133cb0e520b9f62d86dd6007943c42d653f373e4", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00fcffffff06001600070000000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0081000000060016000200000005001200010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000001000006001600070000000500120000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4005}, 0x4000000) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 5 (id=1997): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000018c0)='./file0/file0\x00', 0x18000, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x14) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYRESOCT]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044084}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r1, 0x0, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0xea, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x60) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2d1, &(0x7f0000000280)="$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") kernel console output (not intermixed with test programs): d). [ 240.272209][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 240.282398][T11704] sg_read: process 151 (syz.7.1503) changed security contexts after opening file descriptor, this is not allowed. [ 240.294230][T11706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11706 comm=syz.2.1501 [ 240.300329][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1503'. [ 240.341013][T11710] loop5: detected capacity change from 0 to 512 [ 240.372260][T11704] xfrm0 speed is unknown, defaulting to 1000 [ 240.474450][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1503'. [ 240.569364][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1503'. [ 240.583285][T11704] geneve0: entered promiscuous mode [ 240.846794][T11730] loop6: detected capacity change from 0 to 512 [ 240.862691][T11730] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.062724][T11730] vfat filesystem being mounted at /55/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 241.732827][T11737] loop5: detected capacity change from 0 to 2048 [ 241.913562][T11751] loop5: detected capacity change from 0 to 128 [ 241.945025][T11751] tmpfs: Unknown parameter '01777777777777777777777' [ 241.960268][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.997785][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.042993][T11753] loop2: detected capacity change from 0 to 512 [ 242.086522][T11753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.121876][T11753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.171138][T11755] loop5: detected capacity change from 0 to 256 [ 242.177637][T11753] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.206721][T11753] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1511: corrupted xattr block 32: bad e_name length [ 242.271024][T11753] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 242.280884][T11755] vfat filesystem being mounted at /64/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 242.315774][T11753] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1511: corrupted xattr block 32: bad e_name length [ 242.356114][T11753] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 242.382668][T11659] xfrm0 speed is unknown, defaulting to 1000 [ 242.420958][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.608427][T11761] raw_sendmsg: syz.7.1513 forgot to set AF_INET. Fix it! [ 242.642256][T11771] loop2: detected capacity change from 0 to 256 [ 242.726762][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 242.726781][ T28] audit: type=1400 audit(3919866348.533:13147): avc: denied { accept } for pid=11780 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.766211][T11784] macvlan0: entered allmulticast mode [ 242.795078][T11784] veth1_vlan: entered allmulticast mode [ 242.916967][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.002003][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1516: corrupted inode contents [ 243.014032][T11786] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 243.014545][T11786] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.1516: mark_inode_dirty error [ 243.023693][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 243.023726][ C0] EXT4-fs (loop7): initial error at time 3919866348: ext4_do_update_inode:5569: inode 3 [ 243.023751][ C0] EXT4-fs (loop7): last error at time 3919866348: ext4_do_update_inode:5569: inode 3 [ 243.061053][T11786] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 243.070087][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1516: corrupted inode contents [ 243.091314][T11786] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 243.091742][T11786] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.1516: mark_inode_dirty error [ 243.113852][T11786] Quota error (device loop7): write_blk: dquota write failed [ 243.121546][T11786] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 243.131672][T11786] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1516: Failed to acquire dquot type 0 [ 243.143472][T11786] loop7: lost filesystem error report for type 5 error -117 [ 243.149085][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1516: corrupted inode contents [ 243.169990][T11786] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.1516: mark_inode_dirty error [ 243.185920][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1516: corrupted inode contents [ 243.198435][T11786] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1516: mark_inode_dirty error [ 243.210681][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1516: corrupted inode contents [ 243.223473][T11786] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 243.232422][T11786] loop7: lost filesystem error report for type 5 error -117 [ 243.232839][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1516: corrupted inode contents [ 243.252713][T11786] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.1516: mark_inode_dirty error [ 243.264378][T11786] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 243.273400][T11786] loop7: lost filesystem error report for type 5 error -117 [ 243.274242][T11786] EXT4-fs (loop7): 1 truncate cleaned up [ 243.288631][T11786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.301537][T11786] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.329579][ T50] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.469290][ T50] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 243.571592][ T28] audit: type=1400 audit(3919866348.583:13148): avc: denied { getopt } for pid=11780 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.591899][ T28] audit: type=1400 audit(3919866348.583:13149): avc: denied { setopt } for pid=11780 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 243.611862][ T28] audit: type=1400 audit(3919866349.193:13150): avc: denied { ioctl } for pid=11778 comm="syz.7.1516" path="socket:[35432]" dev="sockfs" ino=35432 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 243.645935][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.803626][T11819] set_capacity_and_notify: 1 callbacks suppressed [ 243.803645][T11819] loop2: detected capacity change from 0 to 512 [ 243.890639][T11819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.107161][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1521'. [ 244.126078][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1521'. [ 244.198649][T11819] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.439914][T11819] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 244.536693][ T28] audit: type=1400 audit(3919866350.343:13151): avc: denied { ioctl } for pid=11818 comm="syz.2.1525" path="socket:[35480]" dev="sockfs" ino=35480 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 244.584549][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.667130][T11842] loop2: detected capacity change from 0 to 256 [ 244.741445][ T28] audit: type=1400 audit(3919866350.553:13152): avc: denied { read } for pid=11839 comm="syz.6.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 244.781845][ T28] audit: type=1400 audit(3919866350.553:13153): avc: denied { accept } for pid=11839 comm="syz.6.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.782616][T11851] netlink: 'syz.0.1526': attribute type 2 has an invalid length. [ 244.811651][T11852] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 244.859965][T11851] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1526'. [ 244.880010][T11853] tracefs: Bad value for 'uid' [ 244.884891][T11853] tracefs: Bad value for 'uid' [ 244.918116][T11842] msdos filesystem being mounted at /66/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 245.669123][T11838] loop0: detected capacity change from 0 to 128 [ 245.689354][T11751] syz.5.1510 (11751) used greatest stack depth: 7224 bytes left [ 245.744811][T11870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1531'. [ 245.834040][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.842370][T11870] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.872709][T11838] vfat filesystem being mounted at /60/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 246.204410][T11905] loop0: detected capacity change from 0 to 1024 [ 246.350548][T11905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.557633][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'. [ 247.256004][T11930] netlink: 'syz.6.1542': attribute type 3 has an invalid length. [ 247.278111][T11927] netlink: 'syz.0.1539': attribute type 9 has an invalid length. [ 247.288973][T11930] netlink: 'syz.6.1542': attribute type 8 has an invalid length. [ 247.296783][T11930] netlink: 199720 bytes leftover after parsing attributes in process `syz.6.1542'. [ 247.350971][T11935] loop5: detected capacity change from 0 to 512 [ 247.364239][T11938] loop7: detected capacity change from 0 to 1024 [ 247.443382][T11935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.469095][T11938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.469490][T11935] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.516235][T11938] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 247.553151][T11927] EXT4-fs error (device loop0): __ext4_iget:5378: inode #12: block 2: comm syz.0.1539: invalid block [ 247.559579][T11938] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 247.571634][T11935] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 247.602125][T11905] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1539: Allocating blocks 497-513 which overlap fs metadata [ 247.619705][T11948] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 60 with error 28 [ 247.632127][T11938] EXT4-fs (loop7): This should not happen!! Data will be lost [ 247.632127][T11938] [ 247.664626][T11953] loop2: detected capacity change from 0 to 128 [ 247.685407][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1546'. [ 247.689811][T11938] EXT4-fs (loop7): Total free blocks count 0 [ 247.704713][T11948] EXT4-fs (loop7): This should not happen!! Data will be lost [ 247.704713][T11948] [ 247.733323][T11953] vfat filesystem being mounted at /71/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 247.746783][T11948] EXT4-fs (loop7): Total free blocks count 0 [ 247.753392][T11905] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1539: Allocating blocks 497-513 which overlap fs metadata [ 247.769068][T11938] EXT4-fs (loop7): Free/Dirty block details [ 247.775010][T11938] EXT4-fs (loop7): free_blocks=20480 [ 247.780979][T11938] EXT4-fs (loop7): dirty_blocks=80 [ 247.788194][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 247.788210][ T28] audit: type=1326 audit(3919866353.593:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b02bc799 code=0x7ffc0000 [ 247.821289][ T28] audit: type=1326 audit(3919866353.623:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.7.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b02bc799 code=0x7ffc0000 [ 247.889156][T11903] EXT4-fs (loop0): pa ffff888107db3e00: logic 48, phys. 177, len 21 [ 247.897239][T11903] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 247.974870][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.298429][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1550'. [ 248.755926][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'. [ 248.789247][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.878632][T11999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.978784][T12022] program syz.2.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.048683][T12025] netlink: 'syz.5.1558': attribute type 3 has an invalid length. [ 249.092124][T12025] netlink: 'syz.5.1558': attribute type 8 has an invalid length. [ 249.129141][T12025] netlink: 199720 bytes leftover after parsing attributes in process `syz.5.1558'. [ 249.167211][T12036] xfrm0 speed is unknown, defaulting to 1000 [ 249.266928][T12051] loop0: detected capacity change from 0 to 512 [ 249.288529][T12055] loop6: detected capacity change from 0 to 512 [ 249.336640][T12051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.356548][T12051] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.378647][T12055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.505202][T12055] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.565041][T12051] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1563: corrupted inode contents [ 249.712789][T12051] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.1563: mark_inode_dirty error [ 249.804925][T12055] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1564: corrupted inode contents [ 249.905311][T12051] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.1563: corrupted inode contents [ 249.918599][T12055] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.1564: mark_inode_dirty error [ 249.948067][T12051] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1563: mark_inode_dirty error [ 249.967985][T12055] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.1564: corrupted inode contents [ 250.033893][T12055] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1564: mark_inode_dirty error [ 250.057572][T12079] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1564: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 250.057572][T12079] [ 250.059665][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1569'. [ 250.219403][T12092] netlink: 'syz.7.1569': attribute type 4 has an invalid length. [ 250.235963][T12092] loop7: detected capacity change from 0 to 512 [ 250.249470][T12092] EXT4-fs: Ignoring removed nobh option [ 250.315163][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.340580][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 250.535765][T12092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.592190][T12092] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.794171][T12089] netlink: 'syz.7.1569': attribute type 4 has an invalid length. [ 250.944177][T12118] program syz.5.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.983884][T12110] loop6: detected capacity change from 0 to 8192 [ 251.026877][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.042753][ T8104] loop6: p1 < > p2 p4 < p5 > [ 251.052538][ T8104] loop6: partition table partially beyond EOD, truncated [ 251.080932][ T8104] loop6: p1 start 134217728 is beyond EOD, truncated [ 251.101146][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1575'. [ 251.110214][ T8104] loop6: p2 size 591360 extends beyond EOD, truncated [ 251.155254][ T8104] loop6: p5 size 591360 extends beyond EOD, truncated [ 251.270260][T12110] loop6: p1 < > p2 p4 < p5 > [ 251.280507][T12110] loop6: partition table partially beyond EOD, truncated [ 251.288582][T12110] loop6: p1 start 134217728 is beyond EOD, truncated [ 251.313241][T12141] macvlan0: entered allmulticast mode [ 251.319741][T12139] netlink: 'syz.5.1576': attribute type 3 has an invalid length. [ 251.332930][T12110] loop6: p2 size 591360 extends beyond EOD, truncated [ 251.349995][T12141] veth1_vlan: entered allmulticast mode [ 251.355667][T12139] netlink: 'syz.5.1576': attribute type 8 has an invalid length. [ 251.357067][T12110] loop6: p5 size 591360 extends beyond EOD, [ 251.365165][T12139] netlink: 199720 bytes leftover after parsing attributes in process `syz.5.1576'. [ 251.399779][T12110] truncated [ 251.607607][T12152] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1580'. [ 251.725129][T12137] xfrm0 speed is unknown, defaulting to 1000 [ 252.648165][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.777075][T12183] netlink: 'syz.7.1585': attribute type 4 has an invalid length. [ 252.793193][T12185] loop0: detected capacity change from 0 to 256 [ 252.824741][T12183] loop7: detected capacity change from 0 to 512 [ 252.849710][T12185] vfat filesystem being mounted at /66/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 252.866934][T12183] EXT4-fs: Ignoring removed nobh option [ 252.890055][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 252.908598][T12183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.921620][T12185] FAT-fs (loop0): Filesystem has been set read-only [ 252.928795][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 252.937920][T12183] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.950161][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 252.960307][T12183] netlink: 'syz.7.1585': attribute type 4 has an invalid length. [ 252.960439][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 252.976148][T12178] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 252.978624][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 253.028484][T12178] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 253.067075][T12178] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 253.075902][T12178] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 253.097967][T12185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 253.128600][T12202] loop2: detected capacity change from 0 to 128 [ 253.235919][T12204] xfrm0 speed is unknown, defaulting to 1000 [ 253.497248][ T28] audit: type=1400 audit(3919866615.323:13168): avc: denied { read } for pid=12203 comm="syz.5.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.648710][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.823124][T12234] random: crng reseeded on system resumption [ 253.846645][ T28] audit: type=1400 audit(3919866615.666:13169): avc: denied { write } for pid=12225 comm="syz.2.1592" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 253.928143][T12237] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1594'. [ 254.016520][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'. [ 254.045471][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1593'. [ 254.244204][ T28] audit: type=1400 audit(3919866615.766:13170): avc: denied { bind } for pid=12236 comm="syz.6.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.865804][ T28] audit: type=1400 audit(3919866616.703:13171): avc: denied { create } for pid=12256 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 254.936365][ T28] audit: type=1400 audit(3919866616.713:13172): avc: denied { create } for pid=12256 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 254.960640][ T28] audit: type=1400 audit(3919866616.713:13173): avc: denied { ioctl } for pid=12256 comm="syz.0.1599" path="socket:[37017]" dev="sockfs" ino=37017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 254.989706][ T28] audit: type=1400 audit(3919866616.713:13174): avc: denied { write } for pid=12256 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 255.013081][ T28] audit: type=1400 audit(3919866616.713:13175): avc: denied { nlmsg_write } for pid=12256 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 255.053516][ T28] audit: type=1400 audit(3919866616.895:13176): avc: denied { create } for pid=12259 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=x25_socket permissive=1 [ 255.075262][ T28] audit: type=1400 audit(3919866616.895:13177): avc: denied { create } for pid=12259 comm="syz.7.1600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 255.095495][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1602'. [ 255.104758][T12271] netlink: 'syz.6.1602': attribute type 26 has an invalid length. [ 255.112944][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1602'. [ 255.131884][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1602'. [ 255.140819][T12271] netlink: 'syz.6.1602': attribute type 26 has an invalid length. [ 255.161992][T12274] netlink: 'syz.0.1603': attribute type 4 has an invalid length. [ 255.176554][T12274] loop0: detected capacity change from 0 to 512 [ 255.182864][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1602'. [ 255.195635][T12274] EXT4-fs: Ignoring removed nobh option [ 255.224580][T12274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.243784][T12274] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.275646][T12274] netlink: 'syz.0.1603': attribute type 4 has an invalid length. [ 255.602922][T12286] xfrm0 speed is unknown, defaulting to 1000 [ 255.696790][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.724117][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.007632][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.032619][T12303] loop2: detected capacity change from 0 to 512 [ 256.090384][T12303] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.122463][T12303] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 256.174126][T12303] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1614: Corrupt directory, running e2fsck is recommended [ 256.223592][T12303] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 256.249716][T12303] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1614: corrupted in-inode xattr: invalid ea_ino [ 256.249755][T12303] fserror_report: 8 callbacks suppressed [ 256.249832][T12303] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.250057][T12303] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1614: couldn't read orphan inode 15 (err -117) [ 256.250089][T12303] loop2: lost filesystem error report for type 5 error -117 [ 256.263745][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 256.263769][ C0] EXT4-fs (loop2): initial error at time 3919866618: ext4_iget_extra_inode:5025: inode 15 [ 256.263814][ C0] EXT4-fs (loop2): last error at time 3919866618: ext4_orphan_get:1396 [ 256.264442][T12303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.307398][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.334556][T12316] xt_TCPMSS: Only works on TCP SYN packets [ 256.532374][T12318] netlink: 'syz.6.1617': attribute type 3 has an invalid length. [ 256.532398][T12318] netlink: 'syz.6.1617': attribute type 8 has an invalid length. [ 256.532417][T12318] netlink: 199720 bytes leftover after parsing attributes in process `syz.6.1617'. [ 256.539427][T12323] xfrm0 speed is unknown, defaulting to 1000 [ 256.968478][T12331] loop0: detected capacity change from 0 to 512 [ 257.000797][T12333] netlink: 'syz.6.1623': attribute type 4 has an invalid length. [ 257.012218][T12331] ext4: Unknown parameter 'subj_type' [ 257.090186][T12335] loop6: detected capacity change from 0 to 512 [ 257.134266][T12335] EXT4-fs: Ignoring removed nobh option [ 257.256713][T12335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.313724][T12335] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.441123][T12333] netlink: 'syz.6.1623': attribute type 4 has an invalid length. [ 257.507293][T12342] loop0: detected capacity change from 0 to 128 [ 257.540665][T12342] vfat filesystem being mounted at /74/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 257.981105][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 258.038161][T12352] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1627'. [ 258.369789][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.499827][T12369] program syz.7.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.694244][T12397] xfrm0 speed is unknown, defaulting to 1000 [ 258.733477][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 258.801220][T12403] netlink: 'syz.0.1638': attribute type 11 has an invalid length. [ 258.892336][T12409] 9p: Bad value for 'rfdno' [ 258.977505][T12410] bridge_slave_0: left allmulticast mode [ 258.983300][T12410] bridge_slave_0: left promiscuous mode [ 258.989172][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.011066][T12410] bridge_slave_1: left allmulticast mode [ 259.017203][T12410] bridge_slave_1: left promiscuous mode [ 259.023228][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.037731][T12410] bond0: (slave bond_slave_0): Releasing backup interface [ 259.046895][T12410] bond_slave_0: left promiscuous mode [ 259.065077][T12408] loop2: detected capacity change from 0 to 512 [ 259.077400][T12410] bond0: (slave bond_slave_1): Releasing backup interface [ 259.096723][T12410] bond_slave_1: left promiscuous mode [ 259.114095][T12410] team0: Port device team_slave_0 removed [ 259.128121][T12410] team0: Port device team_slave_1 removed [ 259.137311][T12410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.144951][T12410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.159820][T12410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.339487][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 259.339506][ T28] audit: type=1326 audit(3919866621.154:13183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12407 comm="syz.7.1642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72b02bc799 code=0x7ffb0000 [ 259.413857][T12408] EXT4-fs: Ignoring removed nobh option [ 259.697567][T12408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.885584][T12408] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.071312][T12408] netlink: 'syz.2.1641': attribute type 4 has an invalid length. [ 260.228643][T12438] loop0: detected capacity change from 0 to 128 [ 260.345403][T12438] tmpfs: Unknown parameter '01777777777777777777777' [ 260.574686][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.727805][T12448] loop0: detected capacity change from 0 to 256 [ 261.005932][T12451] xfrm0 speed is unknown, defaulting to 1000 [ 261.006751][T12453] loop5: detected capacity change from 0 to 512 [ 261.020908][T12448] vfat filesystem being mounted at /79/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 261.066758][T12453] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 261.097493][T12453] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1649: bad orphan inode 14 [ 261.115835][T12453] loop5: lost filesystem error report for type 5 error -117 [ 261.116213][T12453] ext4_test_bit(bit=13, block=18) = 1 [ 261.123610][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 261.123636][ C1] EXT4-fs (loop5): initial error at time 3919866623: ext4_orphan_get:1417 [ 261.123664][ C1] EXT4-fs (loop5): last error at time 3919866623: ext4_orphan_get:1417 [ 261.152932][T12453] is_bad_inode(inode)=0 [ 261.157261][T12453] NEXT_ORPHAN(inode)=0 [ 261.161431][T12453] max_ino=32 [ 261.164783][T12453] i_nlink=1 [ 261.168503][T12453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.180688][T12453] ext2 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.235547][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.328092][T12463] loop5: detected capacity change from 0 to 2048 [ 261.525698][T12444] syz.0.1646 (12444) used greatest stack depth: 7000 bytes left [ 261.576457][ T28] audit: type=1400 audit(3919866623.460:13184): avc: denied { create } for pid=12464 comm="syz.5.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 261.654989][T12471] program syz.5.1655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.782603][T12483] loop2: detected capacity change from 0 to 512 [ 261.809583][T12483] EXT4-fs: Ignoring removed nobh option [ 261.858896][T12483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.887514][T12483] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.945497][T12483] netlink: 'syz.2.1658': attribute type 4 has an invalid length. [ 262.077307][T12505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1664'. [ 262.269914][T12513] loop7: detected capacity change from 0 to 2048 [ 262.286637][T12517] loop5: detected capacity change from 0 to 1764 [ 262.383709][T12516] program syz.6.1667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.397901][ T28] audit: type=1400 audit(3919866624.295:13185): avc: denied { mount } for pid=12510 comm="syz.5.1666" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 262.476894][T12525] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1668'. [ 262.543439][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 262.565255][T12534] vlan0: entered promiscuous mode [ 262.573798][T12534] gretap0: entered promiscuous mode [ 262.584983][T12536] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 262.610098][ T28] audit: type=1400 audit(3919866624.506:13186): avc: denied { unmount } for pid=9202 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 262.661496][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.678806][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 262.693192][ T28] audit: type=1400 audit(3919866624.597:13187): avc: denied { connect } for pid=12541 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.762261][ T28] audit: type=1400 audit(3919866624.617:13188): avc: denied { accept } for pid=12542 comm="syz.5.1671" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.791105][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 262.800209][ T28] audit: type=1400 audit(3919866624.637:13189): avc: denied { write } for pid=12542 comm="syz.5.1671" path="socket:[37599]" dev="sockfs" ino=37599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 262.827399][T12552] netlink: 'syz.7.1675': attribute type 13 has an invalid length. [ 262.839478][T12549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1673'. [ 262.856039][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.863591][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.916580][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.926805][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.056970][T12562] loop0: detected capacity change from 0 to 512 [ 263.112647][T12562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.136910][T12562] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.164101][T12552] veth1_vlan: left allmulticast mode [ 263.290028][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.402227][T12574] loop7: detected capacity change from 0 to 512 [ 263.430906][T12549] geneve2: entered promiscuous mode [ 263.446196][T12549] geneve2: entered allmulticast mode [ 263.456448][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1675: iget: bad extra_isize 90 (inode size 256) [ 263.475943][ T3758] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.485010][ T3758] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.512833][T12574] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.513232][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1675: error while reading EA inode 11 err=-117 [ 263.522579][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 263.522624][ C1] EXT4-fs (loop7): initial error at time 3919866625: ext4_xattr_inode_iget:441: inode 11 [ 263.522674][ C1] EXT4-fs (loop7): last error at time 3919866625: ext4_xattr_inode_iget:441: inode 11 [ 263.567047][ T3758] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.591105][T12574] loop7: lost filesystem error report for type 5 error -117 [ 263.609121][ T3758] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.635921][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1675: iget: bad extra_isize 90 (inode size 256) [ 263.650006][ T3758] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.660532][T12585] netlink: 'syz.0.1678': attribute type 21 has an invalid length. [ 263.683327][ T3758] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.705171][T12574] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 263.705482][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1675: error while reading EA inode 11 err=-117 [ 263.778072][T12585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1678'. [ 263.799330][T12574] loop7: lost filesystem error report for type 5 error -117 [ 263.802778][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1675: iget: bad extra_isize 90 (inode size 256) [ 263.832635][T12585] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 263.872561][ T3758] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.881741][T12574] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 263.881720][ T3758] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.912000][T12593] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 263.918603][T12593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 263.920755][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1675: error while reading EA inode 18 err=-117 [ 263.938165][T12593] vhci_hcd vhci_hcd.0: Device attached [ 263.966487][T12602] netlink: 'syz.6.1680': attribute type 4 has an invalid length. [ 263.981104][T12574] loop7: lost filesystem error report for type 5 error -117 [ 263.981722][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1675: iget: bad extra_isize 90 (inode size 256) [ 264.018883][T12602] netlink: 'syz.6.1680': attribute type 4 has an invalid length. [ 264.041189][T12574] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 264.041566][T12574] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1675: error while reading EA inode 18 err=-117 [ 264.063792][T12574] loop7: lost filesystem error report for type 5 error -117 [ 264.076731][T12574] EXT4-fs (loop7): 1 orphan inode deleted [ 264.092774][T12574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.124770][T12594] vhci_hcd: connection closed [ 264.128293][T11798] vhci_hcd vhci_hcd.2: stop threads [ 264.143408][T11798] vhci_hcd vhci_hcd.2: release socket [ 264.170410][T11798] vhci_hcd vhci_hcd.2: disconnect device [ 264.180212][ T35] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 264.204763][ T35] usb 5-1: enqueue for inactive port 0 [ 264.215140][T12615] loop6: detected capacity change from 0 to 1024 [ 264.225434][ T35] usb 5-1: enqueue for inactive port 0 [ 264.240088][ T35] usb 5-1: enqueue for inactive port 0 [ 264.319363][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 264.344466][T12613] xfrm0 speed is unknown, defaulting to 1000 [ 264.369223][T12615] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 264.387130][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.420363][T12615] System zones: 0-1, 3-8 [ 264.460249][T12615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.472639][T12615] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.637090][T12640] SELinux: Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped). [ 264.642583][ T28] audit: type=1400 audit(3919866626.549:13190): avc: denied { relabelfrom } for pid=12639 comm="syz.0.1684" name="" dev="pipefs" ino=37650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 264.698360][ T28] audit: type=1400 audit(3919866626.559:13191): avc: denied { relabelto } for pid=12639 comm="syz.0.1684" name="" dev="pipefs" ino=37650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:ld_so_t:s0" [ 264.819780][T12644] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1686: inode has both inline data and extents flags [ 264.915361][T12644] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.915521][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 264.931433][ C1] EXT4-fs (loop0): initial error at time 3919866626: ext4_orphan_get:1391: inode 15 [ 264.940914][ C1] EXT4-fs (loop0): last error at time 3919866626: ext4_orphan_get:1391: inode 15 [ 264.997555][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.028660][T12644] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1686: couldn't read orphan inode 15 (err -117) [ 265.040946][T12644] loop0: lost filesystem error report for type 5 error -117 [ 265.041515][T12644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 265.063831][T12644] syz_tun: entered promiscuous mode [ 265.086377][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 265.305075][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1691'. [ 265.328347][T12666] set_capacity_and_notify: 1 callbacks suppressed [ 265.328366][T12666] loop2: detected capacity change from 0 to 2048 [ 265.329036][T12686] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 265.391495][T12666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.430225][T12686] bond2 (unregistering): Released all slaves [ 265.472396][T12696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1691'. [ 265.472425][ T28] audit: type=1400 audit(3919866627.395:13192): avc: denied { getopt } for pid=12685 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.794054][T12711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52752 sclass=netlink_route_socket pid=12711 comm=syz.7.1694 [ 265.955623][T12713] loop7: detected capacity change from 0 to 1764 [ 266.002895][T12713] ISOFS: Unable to identify CD-ROM format. [ 266.153600][T12721] loop6: detected capacity change from 0 to 512 [ 266.200813][T12721] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1696: couldn't read orphan inode 26 (err -116) [ 266.241491][T12721] loop6: lost filesystem error report for type 5 error -116 [ 266.243348][T12721] EXT4-fs (loop6): Remounting filesystem read-only [ 266.257288][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 266.257311][ C0] EXT4-fs (loop6): initial error at time 3919866628: ext4_orphan_get:1396 [ 266.272307][ C0] EXT4-fs (loop6): last error at time 3919866628: ext4_orphan_get:1396 [ 266.334360][T12721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.355641][T12732] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1698'. [ 266.414957][T12732] hub 8-0:1.0: USB hub found [ 266.420000][T12732] hub 8-0:1.0: 8 ports detected [ 266.573317][T12721] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.886218][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.950311][T12737] netlink: 'syz.6.1699': attribute type 2 has an invalid length. [ 267.002825][T12567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 267.316469][T12760] __nla_validate_parse: 1 callbacks suppressed [ 267.316545][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1701'. [ 267.374671][T12764] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1701'. [ 267.400120][T12756] loop0: detected capacity change from 0 to 512 [ 267.532053][T12756] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 267.573224][T12772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12772 comm=syz.5.1706 [ 267.608047][T12756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 267.672761][T12756] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1704: corrupted inode contents [ 267.722606][T12775] loop5: detected capacity change from 0 to 256 [ 267.772701][T12756] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 267.778187][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 267.794022][ C1] EXT4-fs (loop0): initial error at time 3919866629: ext4_do_update_inode:5569: inode 16 [ 267.803912][ C1] EXT4-fs (loop0): last error at time 3919866629: ext4_do_update_inode:5569: inode 16 [ 267.817914][T12756] EXT4-fs (loop0): Remounting filesystem read-only [ 267.824725][T12756] EXT4-fs (loop0): 1 truncate cleaned up [ 267.829830][T12775] msdos: Bad value for 'dmask' [ 267.836099][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 267.851765][ T50] Quota error (device loop0): write_blk: dquota write failed [ 267.860755][ T50] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 267.872809][ T50] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 267.883840][ T50] Quota error (device loop0): write_blk: dquota write failed [ 267.891592][ T50] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 267.901884][ T50] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 267.912691][ T50] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 267.921933][ T50] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 267.952724][T12756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.034006][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.073789][ T28] audit: type=1400 audit(3919866630.000:13193): avc: denied { ioctl } for pid=12753 comm="syz.0.1704" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 268.075340][T12756] team0: Device xfrm1 is of different type [ 268.303093][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.448413][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1713'. [ 268.483158][ T35] IPVS: starting estimator thread 0... [ 268.583386][T12811] IPVS: using max 2256 ests per chain, 112800 per kthread [ 268.905743][T12827] loop5: detected capacity change from 0 to 4096 [ 269.002429][T12835] loop7: detected capacity change from 0 to 512 [ 269.434192][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1717: corrupted inode contents [ 269.446177][T12835] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.446965][T12835] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.1717: mark_inode_dirty error [ 269.456087][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 269.456111][ C0] EXT4-fs (loop7): initial error at time 3919866631: ext4_do_update_inode:5569: inode 3 [ 269.456148][ C0] EXT4-fs (loop7): last error at time 3919866631: ext4_do_update_inode:5569: inode 3 [ 269.490287][T12827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.493850][T12835] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.514375][T12851] loop6: detected capacity change from 0 to 1024 [ 269.519316][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.1717: corrupted inode contents [ 269.541857][T12835] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.542539][T12835] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.1717: mark_inode_dirty error [ 269.563030][T12835] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 269.573771][T12835] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1717: Failed to acquire dquot type 0 [ 269.594373][T12835] loop7: lost filesystem error report for type 5 error -117 [ 269.595534][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1717: corrupted inode contents [ 269.614903][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.615667][T12835] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.1717: mark_inode_dirty error [ 269.616724][T12851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.625096][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.636520][T12851] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.660441][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 269.660514][ T28] audit: type=1400 audit(3919866631.610:13211): avc: denied { rename } for pid=12850 comm="syz.6.1724" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.688658][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1717: corrupted inode contents [ 269.709857][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.823688][T12835] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.1717: mark_inode_dirty error [ 269.844205][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.844571][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1717: corrupted inode contents [ 269.865682][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.866025][T12835] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 269.883947][T12835] loop7: lost filesystem error report for type 5 error -117 [ 269.884517][T12835] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1717: corrupted inode contents [ 269.904266][T12835] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 269.907677][T12835] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.1717: mark_inode_dirty error [ 269.929990][T12835] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 269.938989][T12835] loop7: lost filesystem error report for type 5 error -117 [ 269.939748][T12835] EXT4-fs (loop7): 1 truncate cleaned up [ 269.954374][T12835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.967011][T12835] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.037032][T12864] loop2: detected capacity change from 0 to 256 [ 270.075323][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.130194][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.496862][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.537093][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 270.565697][T12889] futex_wake_op: syz.5.1732 tries to shift op by 32; fix this program [ 270.575214][T12887] program syz.2.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.613035][T12889] netlink: 'syz.5.1732': attribute type 1 has an invalid length. [ 270.641263][T12895] loop6: detected capacity change from 0 to 512 [ 270.653847][T12889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.695046][T12907] veth0_vlan: entered allmulticast mode [ 270.769841][T12910] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 270.843784][T12926] loop5: detected capacity change from 0 to 256 [ 270.865467][T12926] vfat filesystem being mounted at /117/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 270.992328][T12940] 9p: Bad value for 'wfdno' [ 271.002278][T12940] loop2: detected capacity change from 0 to 1024 [ 271.238069][T12940] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 271.246232][T12940] System zones: 0-1, 3-36 [ 271.287278][T12940] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1739: bad orphan inode 134217728 [ 271.352583][T12940] loop2: lost filesystem error report for type 5 error -117 [ 271.354471][T12940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.397752][T12996] loop0: detected capacity change from 0 to 512 [ 271.520328][T12996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.538794][T12996] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.614737][T12996] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 271.648050][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.687523][T12996] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 271.702296][T13034] ip6gre1: entered promiscuous mode [ 271.707763][T13034] ip6gre1: entered allmulticast mode [ 271.768453][T13047] program syz.2.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.024364][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.120664][T13045] loop7: detected capacity change from 0 to 512 [ 272.134261][T13081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1752'. [ 272.148625][T13045] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 272.181943][T13045] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 272.202823][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 272.202844][T13045] EXT4-fs (loop7): 1 truncate cleaned up [ 272.216009][ C0] EXT4-fs (loop7): initial error at time 3919866634: ext4_mb_generate_buddy:1315 [ 272.226463][ C0] EXT4-fs (loop7): last error at time 3919866634: ext4_mb_generate_buddy:1315 [ 272.239085][T13045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.282241][T13068] loop2: detected capacity change from 0 to 512 [ 272.448706][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.558487][T13105] loop7: detected capacity change from 0 to 1024 [ 272.585920][T13105] EXT4-fs: Ignoring removed i_version option [ 272.629116][T13112] loop0: detected capacity change from 0 to 2048 [ 272.641131][T13105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.696051][T13105] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 272.724937][T13105] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 272.745279][T13105] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1754: Failed to acquire dquot type 0 [ 272.800082][T13126] loop2: detected capacity change from 0 to 256 [ 272.825618][T13126] vfat filesystem being mounted at /111/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 272.841446][T13105] loop7: lost filesystem error report for type 5 error -117 [ 272.847200][T13105] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, [ 272.854651][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 272.854672][ C1] EXT4-fs (loop7): initial error at time 3919866634: ext4_acquire_dquot:7001 [ 272.854697][ C1] EXT4-fs (loop7): last error at time 3919866634: ext4_acquire_dquot:7001 [ 272.886236][T13105] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 272.965628][ T28] audit: type=1326 audit(3919866634.928:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.2.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a01cc799 code=0x7ffc0000 [ 272.996187][T13105] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1754: corrupted inode contents [ 273.040955][T13105] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #13: comm syz.7.1754: mark_inode_dirty error [ 273.068060][ T28] audit: type=1326 audit(3919866634.928:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.2.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a01cc799 code=0x7ffc0000 [ 273.074274][T13144] loop2: detected capacity change from 0 to 1024 [ 273.096424][T13105] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1754: corrupted inode contents [ 273.140861][T13105] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.1754: mark_inode_dirty error [ 273.160734][ T28] audit: type=1326 audit(3919866634.928:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.2.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a01cc799 code=0x7ffc0000 [ 273.171629][T13144] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 273.200102][T13144] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 273.209820][T13144] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1765: Failed to acquire dquot type 0 [ 273.221230][T13144] loop2: lost filesystem error report for type 5 error -5 [ 273.221425][ T28] audit: type=1326 audit(3919866634.928:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.2.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a01cc799 code=0x7ffc0000 [ 273.228613][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 273.228642][ C0] EXT4-fs (loop2): initial error at time 3919866635: ext4_acquire_dquot:7001 [ 273.228673][ C0] EXT4-fs (loop2): last error at time 3919866635: ext4_acquire_dquot:7001 [ 273.238256][T13144] EXT4-fs (loop2): 1 truncate cleaned up [ 273.253727][ T28] audit: type=1326 audit(3919866634.928:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13135 comm="syz.2.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff9a01cc799 code=0x7ffc0000 [ 273.287532][T13105] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1754: corrupted inode contents [ 273.327571][T13144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.396509][T13105] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 273.398014][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.416332][T13105] loop7: lost filesystem error report for type 5 error -117 [ 273.417618][T13105] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1754: corrupted inode contents [ 273.458853][T13105] EXT4-fs error (device loop7): ext4_truncate:4587: inode #13: comm syz.7.1754: mark_inode_dirty error [ 273.491083][T13105] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 273.528291][T13105] loop7: lost filesystem error report for type 5 error -117 [ 273.528809][T13105] EXT4-fs (loop7): 1 truncate cleaned up [ 273.543623][T13105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.619120][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.671000][T13158] FAULT_INJECTION: forcing a failure. [ 273.671000][T13158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.727402][T13158] CPU: 0 UID: 0 PID: 13158 Comm: syz.2.1767 Tainted: G W syzkaller #0 PREEMPT(full) [ 273.727446][T13158] Tainted: [W]=WARN [ 273.727455][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.727472][T13158] Call Trace: [ 273.727479][T13158] [ 273.727489][T13158] __dump_stack+0x1d/0x30 [ 273.727631][T13158] dump_stack_lvl+0x95/0xd0 [ 273.727655][T13158] dump_stack+0x15/0x1b [ 273.727681][T13158] should_fail_ex+0x263/0x280 [ 273.727722][T13158] should_fail+0xb/0x20 [ 273.727824][T13158] should_fail_usercopy+0x1a/0x20 [ 273.727885][T13158] _copy_to_user+0x20/0xa0 [ 273.727929][T13158] __x64_sys_wait4+0xbb/0x120 [ 273.727995][T13158] x64_sys_call+0x2aee/0x3020 [ 273.728141][T13158] do_syscall_64+0x12c/0x370 [ 273.728229][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.728254][T13158] RIP: 0033:0x7ff9a01cc799 [ 273.728272][T13158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.728360][T13158] RSP: 002b:00007ff99ec1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 273.728386][T13158] RAX: ffffffffffffffda RBX: 00007ff9a0445fa0 RCX: 00007ff9a01cc799 [ 273.728408][T13158] RDX: 0000000000000008 RSI: 00002000000004c0 RDI: 0000000000000165 [ 273.728425][T13158] RBP: 00007ff99ec1f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.728448][T13158] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 273.728461][T13158] R13: 00007ff9a0446038 R14: 00007ff9a0445fa0 R15: 00007ffc46b26aa8 [ 273.728528][T13158] [ 274.258255][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1769'. [ 274.316588][T13190] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1769'. [ 274.444707][T13193] vfat filesystem being mounted at /107/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 274.983037][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 274.983065][ T28] audit: type=1326 audit(3919866636.959:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.107052][T13201] vfat filesystem being mounted at /88/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 275.189588][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 275.347075][ T28] audit: type=1326 audit(3919866636.959:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.428431][T13216] EXT4-fs: Ignoring removed i_version option [ 275.524416][ T28] audit: type=1326 audit(3919866636.959:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.563597][T13216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.575734][ T28] audit: type=1326 audit(3919866636.959:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.608078][T13216] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 275.624529][ T28] audit: type=1326 audit(3919866636.959:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.653991][ T28] audit: type=1326 audit(3919866636.959:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.680172][ T28] audit: type=1326 audit(3919866636.959:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.704612][ T28] audit: type=1326 audit(3919866636.959:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdd9fdb19 code=0x7ffc0000 [ 275.728997][ T28] audit: type=1326 audit(3919866636.959:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.0.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 275.752744][T13216] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1779: Failed to acquire dquot type 0 [ 275.786660][T13214] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 275.802782][T13216] loop2: lost filesystem error report for type 5 error -117 [ 275.803159][T13216] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, [ 275.803223][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 275.824912][ C0] EXT4-fs (loop2): initial error at time 3919866637: ext4_acquire_dquot:7001 [ 275.833764][ C0] EXT4-fs (loop2): last error at time 3919866637: ext4_acquire_dquot:7001 [ 275.842520][T13216] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 275.863073][T13216] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #13: comm syz.2.1779: corrupted inode contents [ 275.885067][T13214] SELinux: failed to load policy [ 275.892488][T13216] fserror_report: 8 callbacks suppressed [ 275.892506][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.898515][T13216] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #13: comm syz.2.1779: mark_inode_dirty error [ 275.919357][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.919699][T13216] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #13: comm syz.2.1779: corrupted inode contents [ 275.941001][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.941168][T13216] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.1779: mark_inode_dirty error [ 275.965263][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.965540][T13216] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #13: comm syz.2.1779: corrupted inode contents [ 275.989025][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.989269][T13216] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 276.009348][T13216] loop2: lost filesystem error report for type 5 error -117 [ 276.009644][T13216] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #13: comm syz.2.1779: corrupted inode contents [ 276.029833][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 276.030006][T13216] EXT4-fs error (device loop2): ext4_truncate:4587: inode #13: comm syz.2.1779: mark_inode_dirty error [ 276.181895][T13216] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 276.182271][T13216] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 276.221469][T13216] loop2: lost filesystem error report for type 5 error -117 [ 276.241090][T13216] EXT4-fs (loop2): 1 truncate cleaned up [ 276.289261][T13216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.401335][T13263] set_capacity_and_notify: 3 callbacks suppressed [ 276.401410][T13263] loop6: detected capacity change from 0 to 512 [ 276.408586][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.434366][T13267] loop0: detected capacity change from 0 to 128 [ 276.473557][T13264] loop5: detected capacity change from 0 to 8192 [ 276.485507][T13267] tmpfs: Unknown parameter '01777777777777777777777' [ 276.494062][T13263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.530126][ T3306] loop5: p1 < > p2 p4 < p5 > [ 276.534968][ T3306] loop5: partition table partially beyond EOD, truncated [ 276.581773][ T3306] loop5: p1 start 134217728 is beyond EOD, truncated [ 276.620521][ T3306] loop5: p2 size 591360 extends beyond EOD, truncated [ 276.688755][ T3306] loop5: p5 size 591360 extends beyond EOD, truncated [ 276.729856][T13280] loop0: detected capacity change from 0 to 256 [ 276.764874][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.788475][T13264] loop5: p1 < > p2 p4 < p5 > [ 276.793252][T13264] loop5: partition table partially beyond EOD, truncated [ 276.820819][T13288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13288 comm=syz.2.1795 [ 276.853774][T13280] vfat filesystem being mounted at /124/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 276.866398][T13288] FAULT_INJECTION: forcing a failure. [ 276.866398][T13288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.879606][T13264] loop5: p1 start 134217728 is beyond EOD, truncated [ 276.886446][T13264] loop5: p2 size 591360 extends beyond EOD, truncated [ 276.918302][T13264] loop5: p5 size 591360 extends beyond EOD, truncated [ 276.967302][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.2.1795 Tainted: G W syzkaller #0 PREEMPT(full) [ 276.967362][T13288] Tainted: [W]=WARN [ 276.967370][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.967386][T13288] Call Trace: [ 276.967395][T13288] [ 276.967435][T13288] __dump_stack+0x1d/0x30 [ 276.967463][T13288] dump_stack_lvl+0x95/0xd0 [ 276.967486][T13288] dump_stack+0x15/0x1b [ 276.967586][T13288] should_fail_ex+0x263/0x280 [ 276.967612][T13288] should_fail+0xb/0x20 [ 276.967639][T13288] should_fail_usercopy+0x1a/0x20 [ 276.967739][T13288] _copy_to_user+0x20/0xa0 [ 276.967776][T13288] put_itimerspec64+0xe7/0x130 [ 276.967801][T13288] __x64_sys_timer_gettime+0xad/0x120 [ 276.967838][T13288] x64_sys_call+0x15c1/0x3020 [ 276.967866][T13288] do_syscall_64+0x12c/0x370 [ 276.967897][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.967920][T13288] RIP: 0033:0x7ff9a01cc799 [ 276.967937][T13288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.967956][T13288] RSP: 002b:00007ff99ec1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 276.968044][T13288] RAX: ffffffffffffffda RBX: 00007ff9a0445fa0 RCX: 00007ff9a01cc799 [ 276.968059][T13288] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 276.968138][T13288] RBP: 00007ff99ec1f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.968151][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.968164][T13288] R13: 00007ff9a0446038 R14: 00007ff9a0445fa0 R15: 00007ffc46b26aa8 [ 276.968185][T13288] [ 277.255206][T13292] xfrm0 speed is unknown, defaulting to 1000 [ 277.335972][T13300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13300 comm=syz.6.1796 [ 277.384867][ T8104] udevd[8104]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 277.396749][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 277.409408][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 277.434518][T13303] loop5: detected capacity change from 0 to 1024 [ 277.469986][T13303] EXT4-fs: Ignoring removed i_version option [ 277.519467][T13303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.566238][T13303] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1801: Failed to acquire dquot type 0 [ 277.584130][T13303] loop5: lost filesystem error report for type 5 error -117 [ 277.590504][T13303] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, [ 277.597912][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 277.597942][ C1] EXT4-fs (loop5): initial error at time 3919866639: ext4_acquire_dquot:7001 [ 277.597977][ C1] EXT4-fs (loop5): last error at time 3919866639: ext4_acquire_dquot:7001 [ 277.629914][T13303] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 277.667945][T13322] loop0: detected capacity change from 0 to 128 [ 277.686780][T13303] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #13: comm syz.5.1801: corrupted inode contents [ 277.699476][T13303] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 277.699810][T13303] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #13: comm syz.5.1801: mark_inode_dirty error [ 277.708273][T13322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.742521][T13303] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 277.744439][T13303] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #13: comm syz.5.1801: corrupted inode contents [ 277.765557][T13322] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.776806][T13303] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 277.782373][T13303] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.1801: mark_inode_dirty error [ 277.810369][T13329] loop2: detected capacity change from 0 to 512 [ 277.820425][T13303] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #13: comm syz.5.1801: corrupted inode contents [ 277.858933][ T9583] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.868123][T13303] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 277.880101][T13339] loop7: detected capacity change from 0 to 128 [ 277.886542][T13303] loop5: lost filesystem error report for type 5 error -117 [ 277.886791][T13303] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #13: comm syz.5.1801: corrupted inode contents [ 277.904975][T13329] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 277.914175][T13339] tmpfs: Unknown parameter '01777777777777777777777' [ 277.971672][T13329] EXT4-fs (loop2): 1 truncate cleaned up [ 277.987025][T13303] EXT4-fs error (device loop5): ext4_truncate:4587: inode #13: comm syz.5.1801: mark_inode_dirty error [ 277.999136][T13303] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 278.009174][T13329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.021644][T13303] loop5: lost filesystem error report for type 5 error -117 [ 278.022102][T13303] EXT4-fs (loop5): 1 truncate cleaned up [ 278.080895][T13303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.117781][T13348] loop7: detected capacity change from 0 to 256 [ 278.130708][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.172658][T13355] loop6: detected capacity change from 0 to 512 [ 278.212664][T13358] EXT4-fs: Ignoring removed orlov option [ 278.218983][T13355] EXT4-fs: Ignoring removed nobh option [ 278.247094][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.259291][T13358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.271927][T13355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.304175][T13355] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.314909][T13348] vfat filesystem being mounted at /96/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 278.328615][T13358] EXT4-fs (loop2): orphan cleanup on readonly fs [ 278.348752][T13358] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1818: bg 0: block 248: padding at end of block bitmap is not set [ 278.365817][T13355] netlink: 'syz.6.1821': attribute type 4 has an invalid length. [ 278.389927][T13358] loop2: lost filesystem error report for type 5 error -117 [ 278.390184][T13358] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1818: Failed to acquire dquot type 1 [ 278.409004][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 278.409052][ C0] EXT4-fs (loop2): last error at time 3919866640: ext4_validate_block_bitmap:441 [ 278.424821][T13358] loop2: lost filesystem error report for type 5 error -117 [ 278.427270][T13358] EXT4-fs (loop2): 1 truncate cleaned up [ 278.534048][T13358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.548986][ T8104] loop0: p1 < > p2 p4 < p5 > [ 278.557529][T13374] vfat filesystem being mounted at /128/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 278.568742][ T8104] loop0: partition table partially beyond EOD, truncated [ 278.576067][ T8104] loop0: p1 start 134217728 is beyond EOD, truncated [ 278.583347][ T8104] loop0: p2 size 591360 extends beyond EOD, truncated [ 278.631861][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.635898][ T8104] loop0: p5 size 591360 extends beyond EOD, truncated [ 278.705809][T13360] loop0: p1 < > p2 p4 < p5 > [ 278.745297][T13360] loop0: partition table partially beyond EOD, truncated [ 278.761486][T13360] loop0: p1 start 134217728 is beyond EOD, truncated [ 278.798039][T13360] loop0: p2 size 591360 extends beyond EOD, truncated [ 278.819257][T13360] loop0: p5 size 591360 extends beyond EOD, truncated [ 278.858097][T13376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 278.867142][T13376] System zones: 0-1, 3-36 [ 278.910940][T13386] FAT-fs (loop5): Directory bread(block 64) failed [ 278.933380][T13386] FAT-fs (loop5): Directory bread(block 65) failed [ 278.990201][T13386] FAT-fs (loop5): Directory bread(block 66) failed [ 278.996783][T13386] FAT-fs (loop5): Directory bread(block 67) failed [ 279.029110][T13376] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1828: bad orphan inode 134217728 [ 279.048297][T13386] FAT-fs (loop5): Directory bread(block 68) failed [ 279.055054][T13386] FAT-fs (loop5): Directory bread(block 69) failed [ 279.067071][T13376] loop2: lost filesystem error report for type 5 error -117 [ 279.078629][T13386] FAT-fs (loop5): Directory bread(block 70) failed [ 279.095418][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.117330][T13376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.132534][T13386] FAT-fs (loop5): Directory bread(block 71) failed [ 279.146305][ T8104] udevd[8104]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 279.157602][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 279.174043][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 279.183904][T13386] FAT-fs (loop5): Directory bread(block 72) failed [ 279.195886][T13386] FAT-fs (loop5): Directory bread(block 73) failed [ 279.227197][T13339] syz.7.1814 (13339) used greatest stack depth: 6856 bytes left [ 279.229898][T13386] vfat filesystem being mounted at /132/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 279.248982][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.288788][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.405482][T13390] infiniband syz1: set active [ 279.418446][T13390] infiniband syz1: added syz_tun [ 279.453901][T13390] RDS/IB: syz1: added [ 279.462534][T13390] smc: adding ib device syz1 with port count 1 [ 279.475832][T13390] smc: ib device syz1 port 1 has no pnetid [ 279.549444][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.582209][T13403] vfat filesystem being mounted at /100/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 280.390795][ T8104] loop0: p1 < > p2 p4 < p5 > [ 280.395531][ T8104] loop0: partition table partially beyond EOD, truncated [ 280.410084][ T8104] loop0: p1 start 134217728 is beyond EOD, truncated [ 280.417392][ T8104] loop0: p2 size 591360 extends beyond EOD, truncated [ 280.451774][ T8104] loop0: p5 size 591360 extends beyond EOD, truncated [ 280.462521][T13426] loop0: p1 < > p2 p4 < p5 > [ 280.467323][T13426] loop0: partition table partially beyond EOD, truncated [ 280.500977][T13426] loop0: p1 start 134217728 is beyond EOD, truncated [ 280.536727][T13426] loop0: p2 size 591360 extends beyond EOD, truncated [ 280.615833][T13426] loop0: p5 size 591360 extends beyond EOD, truncated [ 280.661439][T13409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.680294][T13439] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1850'. [ 280.694544][T13437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.717780][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1850'. [ 280.740384][T13439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1850'. [ 280.794973][ T9732] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.866011][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 280.866036][ T28] audit: type=1400 audit(3919866642.869:13252): avc: denied { reparent } for pid=13408 comm="syz.2.1842" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.933793][T13409] EXT4-fs error (device loop2): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.2.1842: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 280.957294][ T28] audit: type=1400 audit(3919866642.909:13253): avc: denied { remove_name } for pid=13408 comm="syz.2.1842" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 280.975491][T13452] vfat filesystem being mounted at /123/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 280.992365][ T28] audit: type=1400 audit(3919866642.909:13254): avc: denied { rmdir } for pid=13408 comm="syz.2.1842" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 280.997466][T13409] EXT4-fs error (device loop2): ext4_get_first_dir_block:3550: inode #12: comm syz.2.1842: directory missing '..' [ 281.056822][ T28] audit: type=1400 audit(3919866642.909:13255): avc: denied { rename } for pid=13408 comm="syz.2.1842" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.084556][ T28] audit: type=1400 audit(3919866642.909:13256): avc: denied { reparent } for pid=13408 comm="syz.2.1842" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.131228][T13458] netlink: 'syz.6.1854': attribute type 4 has an invalid length. [ 281.153965][T13458] netlink: 'syz.6.1854': attribute type 4 has an invalid length. [ 281.159155][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.201804][T13459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.238888][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 281.272402][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 281.282765][T13459] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.311768][T13467] EXT4-fs: Ignoring removed i_version option [ 281.320101][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 281.330139][T13467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.360194][T13467] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 281.379741][T13466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 281.420480][T13467] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 281.471789][T13476] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 281.483178][T13466] System zones: 0-1, 3-8 [ 281.488267][T13467] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.1858: Failed to acquire dquot type 0 [ 281.497787][T13466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.528278][T13466] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.539335][T13467] loop7: lost filesystem error report for type 5 error -117 [ 281.539927][T13467] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, [ 281.547359][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 281.547378][ C0] EXT4-fs (loop7): initial error at time 3919866643: ext4_acquire_dquot:7001 [ 281.547398][ C0] EXT4-fs (loop7): last error at time 3919866643: ext4_acquire_dquot:7001 [ 281.579207][T13467] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 281.616508][T13467] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1858: corrupted inode contents [ 281.659278][T13480] xfrm0 speed is unknown, defaulting to 1000 [ 281.703799][T13467] fserror_report: 4 callbacks suppressed [ 281.703898][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.715107][T13467] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #13: comm syz.7.1858: mark_inode_dirty error [ 281.755671][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.755938][T13467] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1858: corrupted inode contents [ 281.800684][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.800935][T13467] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.1858: mark_inode_dirty error [ 281.831761][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.832317][T13467] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1858: corrupted inode contents [ 281.860975][ T28] audit: type=1400 audit(3919866643.864:13257): avc: denied { mount } for pid=13481 comm="syz.2.1862" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 281.875991][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.902801][T13467] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 281.934971][T13490] set_capacity_and_notify: 14 callbacks suppressed [ 281.934993][T13490] loop2: detected capacity change from 0 to 128 [ 281.962826][T13467] loop7: lost filesystem error report for type 5 error -117 [ 281.963021][T13467] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #13: comm syz.7.1858: corrupted inode contents [ 281.993096][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.998470][T13467] EXT4-fs error (device loop7): ext4_truncate:4587: inode #13: comm syz.7.1858: mark_inode_dirty error [ 282.041908][T13467] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.043685][T13467] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 282.096360][T13494] loop6: detected capacity change from 0 to 128 [ 282.098788][T13467] loop7: lost filesystem error report for type 5 error -117 [ 282.103562][T13467] EXT4-fs (loop7): 1 truncate cleaned up [ 282.106689][T13494] vfat filesystem being mounted at /125/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 282.223646][T13490] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.365147][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1866'. [ 282.402729][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1866'. [ 282.441223][T13505] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 282.474284][T13504] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 282.499824][T13503] loop6: detected capacity change from 0 to 8192 [ 282.759598][T13503] loop6: p1 < > p2 p4 < p5 > [ 282.772410][T13503] loop6: partition table partially beyond EOD, truncated [ 282.780307][T13503] loop6: p1 start 134217728 is beyond EOD, truncated [ 282.787340][T13503] loop6: p2 size 591360 extends beyond EOD, truncated [ 282.815237][T13503] loop6: p5 size 591360 extends beyond EOD, truncated [ 282.883201][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1867'. [ 282.925776][T13510] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1867'. [ 283.195256][T13517] loop6: detected capacity change from 0 to 256 [ 283.248064][T13475] udevd[13475]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 283.261871][ T8104] udevd[8104]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 283.280070][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 283.302009][T13517] msdos filesystem being mounted at /127/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 283.537843][T13531] loop0: detected capacity change from 0 to 1024 [ 283.544660][T13531] ext4: Bad value for 'max_dir_size_kb' [ 283.609192][T13534] loop0: detected capacity change from 0 to 128 [ 283.636611][T13534] vfat filesystem being mounted at /139/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 283.780040][T13546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13546 comm=syz.7.1878 [ 283.784037][ T28] audit: type=1400 audit(3919866645.793:13258): avc: denied { map } for pid=13545 comm="syz.7.1878" path="socket:[39523]" dev="sockfs" ino=39523 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 283.905632][ T28] audit: type=1326 audit(3919866645.833:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdda5c799 code=0x7ffc0000 [ 284.005885][T13557] syzkaller0: entered promiscuous mode [ 284.011782][T13557] syzkaller0: entered allmulticast mode [ 284.090524][T13563] loop5: detected capacity change from 0 to 4096 [ 284.131736][T13562] loop0: detected capacity change from 0 to 128 [ 284.143958][T13567] loop7: detected capacity change from 0 to 512 [ 284.152568][T13563] EXT4-fs: Ignoring removed bh option [ 284.158045][T13563] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.194792][T13567] EXT4-fs: Ignoring removed nobh option [ 284.212510][T13562] vfat filesystem being mounted at /142/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 284.284031][T13567] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.332062][T13567] netlink: 'syz.7.1885': attribute type 4 has an invalid length. [ 284.481061][T13577] loop5: detected capacity change from 0 to 128 [ 284.515988][T13577] tmpfs: Unknown parameter '01777777777777777777777' [ 284.718229][T13580] vfat filesystem being mounted at /144/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 284.735253][T13583] vfat filesystem being mounted at /134/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 284.882551][T13562] bio_check_eod: 21 callbacks suppressed [ 284.882570][T13562] syz.0.1884: attempt to access beyond end of device [ 284.882570][T13562] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 284.908897][T13562] syz.0.1884: attempt to access beyond end of device [ 284.908897][T13562] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 284.933058][T13562] syz.0.1884: attempt to access beyond end of device [ 284.933058][T13562] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 284.958565][T13562] syz.0.1884: attempt to access beyond end of device [ 284.958565][T13562] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 284.998859][T13562] syz.0.1884: attempt to access beyond end of device [ 284.998859][T13562] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 285.022598][T13562] syz.0.1884: attempt to access beyond end of device [ 285.022598][T13562] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 285.056943][T12983] kworker/u8:14: attempt to access beyond end of device [ 285.056943][T12983] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 285.073405][T12983] kworker/u8:14: attempt to access beyond end of device [ 285.073405][T12983] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 285.093340][T13590] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 285.106479][T12983] kworker/u8:14: attempt to access beyond end of device [ 285.106479][T12983] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 285.127833][T12983] kworker/u8:14: attempt to access beyond end of device [ 285.127833][T12983] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 285.183102][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1891'. [ 285.199916][T13591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 285.266159][T13591] System zones: 0-1, 3-36 [ 285.312685][T13591] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1888: bad orphan inode 134217728 [ 285.396649][T13591] loop2: lost filesystem error report for type 5 error -117 [ 285.406466][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 285.420484][ C1] EXT4-fs (loop2): initial error at time 3919866647: ext4_orphan_get:1417 [ 285.429074][ C1] EXT4-fs (loop2): last error at time 3919866647: ext4_orphan_get:1417 [ 285.437989][T13591] EXT4-fs mount: 10 callbacks suppressed [ 285.438017][T13591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.450383][T13604] bridge_slave_0: left allmulticast mode [ 285.473016][T13604] bridge_slave_0: left promiscuous mode [ 285.516260][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.551108][T13603] 9pnet_fd: p9_fd_create_unix (13603): problem connecting socket: ./file0: -2 [ 285.651199][T13604] bridge_slave_1: left allmulticast mode [ 285.695321][T13604] bridge_slave_1: left promiscuous mode [ 285.701311][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.728075][T13604] bond0: (slave bond_slave_0): Releasing backup interface [ 285.765938][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.874668][T13604] bond0: (slave bond_slave_1): Releasing backup interface [ 285.997141][T13604] team0: Port device team_slave_0 removed [ 286.038254][T13603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.082058][T13604] team0: Port device team_slave_1 removed [ 286.147183][T13603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.181519][T13604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.222293][T13604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.255414][T13603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 286.285732][ T9202] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 286.298067][T13604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.333396][T13603] System zones: 0-1, 3-36 [ 286.512198][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 286.512298][ T9202] Tainted: [W]=WARN [ 286.512307][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.512323][ T9202] Call Trace: [ 286.512332][ T9202] [ 286.512354][ T9202] __dump_stack+0x1d/0x30 [ 286.512381][ T9202] dump_stack_lvl+0x95/0xd0 [ 286.512409][ T9202] dump_stack+0x15/0x1b [ 286.512438][ T9202] dump_header+0x80/0x240 [ 286.512468][ T9202] oom_kill_process+0x295/0x350 [ 286.512572][ T9202] out_of_memory+0x97d/0xb80 [ 286.512598][ T9202] try_charge_memcg+0x62e/0xa10 [ 286.512636][ T9202] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 286.512673][ T9202] __swap_cache_prepare_and_add+0x386/0x530 [ 286.512789][ T9202] swap_cache_alloc_folio+0xa2/0x120 [ 286.512862][ T9202] swap_cluster_readahead+0x26e/0x3d0 [ 286.512906][ T9202] swapin_readahead+0xde/0x840 [ 286.512945][ T9202] ? rcu_read_unlock_special+0x9f/0x200 [ 286.513039][ T9202] ? __rcu_read_unlock+0x4e/0x70 [ 286.513059][ T9202] ? swap_cache_get_folio+0x26f/0x280 [ 286.513159][ T9202] do_swap_page+0x309/0x2210 [ 286.513194][ T9202] ? __rcu_read_lock+0x36/0x50 [ 286.513213][ T9202] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 286.513261][ T9202] handle_mm_fault+0xb40/0x3020 [ 286.513301][ T9202] ? rcu_read_unlock_special+0x9f/0x200 [ 286.513328][ T9202] do_user_addr_fault+0x62f/0x1050 [ 286.513443][ T9202] ? trace_page_fault_user+0x1f/0xe0 [ 286.513538][ T9202] exc_page_fault+0x62/0xa0 [ 286.513577][ T9202] asm_exc_page_fault+0x26/0x30 [ 286.513607][ T9202] RIP: 0033:0x7fc83e097917 [ 286.513627][ T9202] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 286.513733][ T9202] RSP: 002b:00007fff13340e50 EFLAGS: 00010202 [ 286.513754][ T9202] RAX: 0000000000000000 RBX: 000055557a332500 RCX: 00007fc83e097917 [ 286.513768][ T9202] RDX: 00007fff13340e90 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.513912][ T9202] RBP: 00007fff13340efc R08: 0000000000000000 R09: 0000000000000000 [ 286.513928][ T9202] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 286.513950][ T9202] R13: 00000000000927c0 R14: 0000000000045d7f R15: 00007fff13340f50 [ 286.513974][ T9202] [ 286.514039][ T9202] memory: usage 307200kB, limit 307200kB, failcnt 684 [ 286.755357][T13603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.770453][T13615] pimreg: entered allmulticast mode [ 286.771123][ T9202] memory+swap: usage 267460kB, limit 9007199254740988kB, failcnt 0 [ 286.791628][T13620] vfat filesystem being mounted at /136/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 286.896010][T13624] EXT4-fs: Ignoring removed nobh option [ 286.922381][T13624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.945942][ T9202] kmem: usage 267004kB, limit 9007199254740988kB, failcnt 0 [ 286.953976][T13624] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.977178][ T9202] Memory cgroup stats for /syz5: [ 286.977427][ T9202] cache 0 [ 286.998708][ T9202] rss 0 [ 287.009499][ T9202] shmem 0 [ 287.019432][ T9202] mapped_file 0 [ 287.028335][ T9202] dirty 0 [ 287.043438][ T9202] writeback 0 [ 287.048844][ T9202] workingset_refault_anon 2201 [ 287.064159][ T9202] workingset_refault_file 34 [ 287.083133][ T9202] swap 204800 [ 287.096612][ T9202] swapcached 3305472 [ 287.105157][ T9202] pgpgin 212117 [ 287.109463][ T9202] pgpgout 212113 [ 287.113146][ T9202] pgfault 176429 [ 287.117073][ T9202] pgmajfault 328 [ 287.121174][ T9202] inactive_anon 0 [ 287.125441][ T9202] active_anon 4096 [ 287.129494][ T9202] inactive_file 0 [ 287.133302][ T9202] active_file 12288 [ 287.137534][ T9202] unevictable 0 [ 287.141474][ T9202] hierarchical_memory_limit 314572800 [ 287.147070][ T9202] hierarchical_memsw_limit 9223372036854771712 [ 287.154309][ T9202] total_cache 0 [ 287.157843][ T9202] total_rss 0 [ 287.162067][T13636] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 287.170023][ T9202] total_shmem 0 [ 287.173557][ T9202] total_mapped_file 0 [ 287.177819][ T9202] total_dirty 0 [ 287.182848][ T9202] total_writeback 0 [ 287.186915][ T9202] total_workingset_refault_anon 2201 [ 287.194213][ T9202] total_workingset_refault_file 34 [ 287.199510][ T9202] total_swap 204800 [ 287.203377][ T9202] total_swapcached 3305472 [ 287.208852][ T9202] total_pgpgin 212117 [ 287.213004][ T9202] total_pgpgout 212113 [ 287.217135][ T9202] total_pgfault 176429 [ 287.221636][ T9202] total_pgmajfault 328 [ 287.225869][ T9202] total_inactive_anon 0 [ 287.230431][ T9202] total_active_anon 4096 [ 287.234878][ T9202] total_inactive_file 0 [ 287.240066][ T9202] total_active_file 12288 [ 287.244677][ T9202] total_unevictable 0 [ 287.249347][ T9202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1886,pid=13576,uid=0 [ 287.264805][ T9202] Memory cgroup out of memory: Killed process 13576 (syz.5.1886) total-vm:96340kB, anon-rss:1224kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 287.405946][T13639] set_capacity_and_notify: 6 callbacks suppressed [ 287.405966][T13639] loop5: detected capacity change from 0 to 512 [ 287.422974][T13639] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 287.441791][T13639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 287.450427][T13639] EXT4-fs (loop5): orphan cleanup on readonly fs [ 287.457001][T13639] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1905: bad orphan inode 3 [ 287.468024][T13639] loop5: lost filesystem error report for type 5 error -117 [ 287.468190][T13639] EXT4-fs (loop5): Remounting filesystem read-only [ 287.482084][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 287.482108][ C1] EXT4-fs (loop5): initial error at time 3919866649: ext4_orphan_get:1417 [ 287.482148][ C1] EXT4-fs (loop5): last error at time 3919866649: ext4_orphan_get:1417 [ 287.508945][T13639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 287.522167][T13639] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1905: dx entry: limit 0 != root limit 125 [ 287.535841][T13639] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1905: Corrupt directory, running e2fsck is recommended [ 287.745367][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.771137][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.895065][T13646] netlink: 'syz.2.1906': attribute type 4 has an invalid length. [ 287.956458][T13649] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1909'. [ 287.977292][T13646] netlink: 'syz.2.1906': attribute type 4 has an invalid length. [ 287.977320][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 288.033150][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1910'. [ 288.065830][T13656] loop0: detected capacity change from 0 to 1024 [ 288.096170][T13659] loop2: detected capacity change from 0 to 1024 [ 288.116945][T13656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.130082][T13659] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 288.141445][T13659] System zones: 0-1, 3-8 [ 288.146665][T13659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.160654][T13659] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.213495][T13673] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1911: Allocating blocks 385-513 which overlap fs metadata [ 288.239435][T13673] EXT4-fs (loop0): shut down requested (0) [ 288.246385][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 288.246400][ T28] audit: type=1400 audit(3919866650.283:13282): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 288.277639][T11798] EXT4-fs (loop0): pa ffff888107db3cb0: logic 16, phys. 129, len 24 [ 288.285918][T11798] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 288.296284][ T28] audit: type=1400 audit(3919866650.283:13283): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.653987][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.821172][ T28] audit: type=1400 audit(3919866650.283:13284): avc: denied { search } for pid=2982 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.870890][T13688] loop6: detected capacity change from 0 to 128 [ 288.899652][T13688] vfat filesystem being mounted at /139/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 288.910762][ T28] audit: type=1400 audit(3919866650.283:13285): avc: denied { add_name } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.946511][T13692] loop0: detected capacity change from 0 to 512 [ 288.956317][ T28] audit: type=1400 audit(3919866650.283:13286): avc: denied { create } for pid=2982 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.969809][T13692] EXT4-fs: Ignoring removed nobh option [ 289.025958][ T28] audit: type=1400 audit(3919866650.283:13287): avc: denied { append open } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.052476][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.065791][ T28] audit: type=1400 audit(3919866650.283:13288): avc: denied { getattr } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.127633][T13692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.161959][T13692] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.239742][ T28] audit: type=1326 audit(3919866651.247:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13701 comm="syz.5.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc83e0dc799 code=0x0 [ 289.319829][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.334249][T13706] loop7: detected capacity change from 0 to 4096 [ 289.357631][T13706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.433361][T13715] lo speed is unknown, defaulting to 1000 [ 289.439460][T13715] lo speed is unknown, defaulting to 1000 [ 289.445572][T13715] lo speed is unknown, defaulting to 1000 [ 289.452991][T13715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 289.489792][T13717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1923'. [ 289.559833][T13719] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 289.570275][T13717] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 289.668962][T13715] lo speed is unknown, defaulting to 1000 [ 289.675904][T13715] lo speed is unknown, defaulting to 1000 [ 289.683144][T13715] lo speed is unknown, defaulting to 1000 [ 289.690685][T13715] lo speed is unknown, defaulting to 1000 [ 289.698008][T13715] lo speed is unknown, defaulting to 1000 [ 289.704819][T13715] lo speed is unknown, defaulting to 1000 [ 289.753187][T13720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.899719][T13706] bond2: (slave ip6gretap1): making interface the new active one [ 289.909195][T13706] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 289.972686][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.992763][T13725] loop0: detected capacity change from 0 to 1024 [ 290.001093][T13727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 290.012180][T13725] EXT4-fs: Ignoring removed i_version option [ 290.096163][T13725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.133648][T13727] loop2: detected capacity change from 0 to 2048 [ 290.135059][T13725] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 290.159913][T13725] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 290.169826][T13725] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1928: Failed to acquire dquot type 0 [ 290.170155][T13727] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 290.181259][T13725] loop0: lost filesystem error report for type 5 error -117 [ 290.195644][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 290.209583][ C1] EXT4-fs (loop0): initial error at time 3919866652: ext4_acquire_dquot:7001 [ 290.218501][ C1] EXT4-fs (loop0): last error at time 3919866652: ext4_acquire_dquot:7001 [ 290.240752][T13727] EXT4-fs (loop2): group descriptors corrupted! [ 290.247499][T13725] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 290.262934][T13725] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.1928: corrupted inode contents [ 290.285185][T13727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13727 comm=syz.2.1929 [ 290.304045][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.313762][T13725] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.1928: mark_inode_dirty error [ 290.334826][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.338467][T13725] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.1928: corrupted inode contents [ 290.359985][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.360172][T13725] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.1928: mark_inode_dirty error [ 290.381861][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.382125][T13725] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.1928: corrupted inode contents [ 290.403794][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.403997][T13725] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 290.422520][T13725] loop0: lost filesystem error report for type 5 error -117 [ 290.422811][T13725] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.1928: corrupted inode contents [ 290.443279][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.446444][T13725] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.1928: mark_inode_dirty error [ 290.467082][T13725] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.467426][T13725] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 290.495728][T13725] loop0: lost filesystem error report for type 5 error -117 [ 290.502805][T13725] EXT4-fs (loop0): 1 truncate cleaned up [ 290.581253][T13725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.654817][T13748] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 290.677359][T13748] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 290.747879][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.779402][T13752] loop2: detected capacity change from 0 to 1024 [ 290.886703][T13752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 290.902794][T13752] System zones: 0-1, 3-8 [ 290.939397][T13752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 290.992088][T13768] netlink: 'syz.7.1941': attribute type 4 has an invalid length. [ 291.004555][T13752] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.033529][T13768] netlink: 'syz.7.1941': attribute type 4 has an invalid length. [ 291.163598][T13775] loop7: detected capacity change from 0 to 1024 [ 291.266316][T13784] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 291.274245][T13775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 291.288336][T13775] System zones: 0-1, 3-8 [ 291.302833][T13775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.371763][T13788] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 291.391980][T13775] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.525838][T13783] loop6: p1 < > p2 p4 < p5 > [ 291.557753][T13783] loop6: partition table partially beyond EOD, truncated [ 291.560871][ T9429] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.566864][T13783] loop6: p1 start 134217728 is beyond EOD, truncated [ 291.581682][T13783] loop6: p2 size 591360 extends beyond EOD, truncated [ 291.598203][T13783] loop6: p5 size 591360 extends beyond EOD, truncated [ 291.625639][T13795] netlink: 'syz.0.1947': attribute type 13 has an invalid length. [ 291.634991][T13795] gretap0: refused to change device tx_queue_len [ 291.641440][T13795] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.815384][T13797] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1950: inode has both inline data and extents flags [ 291.877620][T13797] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 291.880081][T13797] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1950: couldn't read orphan inode 15 (err -117) [ 291.889960][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 291.889986][ C1] EXT4-fs (loop5): initial error at time 3919866653: ext4_orphan_get:1391: inode 15 [ 291.890042][ C1] EXT4-fs (loop5): last error at time 3919866653: ext4_orphan_get:1391: inode 15 [ 292.115379][T13797] loop5: lost filesystem error report for type 5 error -117 [ 292.116242][ T9650] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 292.136471][T13797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.172410][T13797] xt_hashlimit: size too large, truncated to 1048576 [ 292.385213][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.156587][T13824] set_capacity_and_notify: 3 callbacks suppressed [ 293.156605][T13824] loop5: detected capacity change from 0 to 512 [ 293.187427][T13824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 293.216571][T13824] EXT4-fs (loop5): 1 truncate cleaned up [ 293.229798][T13824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.320051][T13828] loop0: detected capacity change from 0 to 512 [ 293.513076][T13828] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.1959: Directory hole found for htree index block 0 [ 293.531203][T13828] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 293.532076][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 293.547944][ C1] EXT4-fs (loop0): initial error at time 3919866655: dx_probe:791: inode 2 [ 293.556901][ C1] EXT4-fs (loop0): last error at time 3919866655: dx_probe:791: inode 2 [ 293.592777][T13830] xfrm0 speed is unknown, defaulting to 1000 [ 293.602297][T13828] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 293.668821][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1961'. [ 293.712088][T13843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1961'. [ 293.732002][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.777635][T13828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.993343][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.005906][T13830] lo speed is unknown, defaulting to 1000 [ 294.334195][T13855] xfrm0 speed is unknown, defaulting to 1000 [ 294.420937][T13853] loop0: detected capacity change from 0 to 512 [ 294.452444][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 294.452464][ T28] audit: type=1326 audit(3919866656.508:13308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.520233][T13853] EXT4-fs: Ignoring removed nobh option [ 294.531485][T13867] bridge_slave_0: left allmulticast mode [ 294.539145][T13853] EXT4-fs: Ignoring removed orlov option [ 294.549187][T13867] bridge_slave_0: left promiscuous mode [ 294.555082][ T28] audit: type=1326 audit(3919866656.508:13309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.583584][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.594264][ T28] audit: type=1326 audit(3919866656.508:13310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.624179][T13874] netlink: 'syz.5.1969': attribute type 39 has an invalid length. [ 294.643039][T13853] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.1965: invalid block [ 294.675894][T13867] bridge_slave_1: left allmulticast mode [ 294.682164][T13867] bridge_slave_1: left promiscuous mode [ 294.690921][T13853] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 294.692484][T13867] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.708891][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 294.715357][ C0] EXT4-fs (loop0): initial error at time 3919866656: __ext4_iget:5378: inode 11: block 1 [ 294.725528][ C0] EXT4-fs (loop0): last error at time 3919866656: __ext4_iget:5378: inode 11: block 1 [ 294.745401][T13853] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1965: couldn't read orphan inode 11 (err -117) [ 294.761565][ T28] audit: type=1326 audit(3919866656.508:13311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.796398][T13853] loop0: lost filesystem error report for type 5 error -117 [ 294.807553][T13853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.831605][ T28] audit: type=1326 audit(3919866656.508:13312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.860470][T13867] bond0: (slave bond_slave_0): Releasing backup interface [ 294.862089][ T28] audit: type=1326 audit(3919866656.508:13313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.906030][T13853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.919451][T13853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.928929][T13867] bond0: (slave bond_slave_1): Releasing backup interface [ 294.930427][ T28] audit: type=1326 audit(3919866656.508:13314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 294.961865][ T28] audit: type=1326 audit(3919866656.508:13315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 295.036212][ T28] audit: type=1326 audit(3919866656.508:13316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 295.070809][T13867] team0: Port device team_slave_0 removed [ 295.086825][ T28] audit: type=1326 audit(3919866656.508:13317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13861 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8326fc799 code=0x7ffc0000 [ 295.121522][T13867] team0: Port device team_slave_1 removed [ 295.147198][T13867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.176055][T13867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.209383][T13867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.245632][T13867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.273117][T13867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.325378][T13855] lo speed is unknown, defaulting to 1000 [ 295.366066][T13874] hsr_slave_1 (unregistering): left promiscuous mode [ 295.500193][T13887] loop2: detected capacity change from 0 to 128 [ 295.550114][T13887] tmpfs: Unknown parameter '01777777777777777777777' [ 295.603436][T13890] netlink: 'syz.5.1975': attribute type 4 has an invalid length. [ 295.649446][T13890] netlink: 'syz.5.1975': attribute type 4 has an invalid length. [ 295.726505][T13892] loop2: detected capacity change from 0 to 256 [ 295.777062][T13892] vfat filesystem being mounted at /145/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 295.780225][T13894] loop5: detected capacity change from 0 to 1024 [ 295.958358][T13894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 295.993426][T13894] System zones: 0-1, 3-8 [ 296.009809][T13894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.132126][T13894] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.252024][ T9583] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.359185][T13903] xfrm0 speed is unknown, defaulting to 1000 [ 296.490560][ T9202] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.683041][T13903] lo speed is unknown, defaulting to 1000 [ 297.131982][T13929] loop6: detected capacity change from 0 to 128 [ 297.358167][T13887] syz.2.1973 (13887) used greatest stack depth: 6072 bytes left [ 297.429351][T13937] loop2: detected capacity change from 0 to 128 [ 297.450995][T13937] tmpfs: Unknown parameter '01777777777777777777777' [ 297.796699][T13946] loop2: detected capacity change from 0 to 256 [ 297.807111][T13946] vfat filesystem being mounted at /146/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 298.340332][T13970] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1995'. [ 298.622452][T13975] loop5: detected capacity change from 0 to 128 [ 298.763455][T13975] tmpfs: Unknown parameter '01777777777777777777777' [ 298.804597][T13937] ================================================================== [ 298.812823][T13937] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 298.820652][T13937] [ 298.822978][T13937] write to 0xffffea00041dba98 of 8 bytes by task 13943 on cpu 1: [ 298.830791][T13937] __filemap_remove_folio+0x201/0x310 [ 298.836196][T13937] filemap_remove_folio+0x6d/0x1d0 [ 298.841336][T13937] truncate_inode_folio+0x42/0x50 [ 298.846403][T13937] shmem_undo_range+0x26d/0xb10 [ 298.851354][T13937] shmem_fallocate+0x881/0x920 [ 298.856321][T13937] vfs_fallocate+0x3b6/0x450 [ 298.860935][T13937] __x64_sys_fallocate+0x7a/0xd0 [ 298.865884][T13937] x64_sys_call+0x298e/0x3020 [ 298.870704][T13937] do_syscall_64+0x12c/0x370 [ 298.875310][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.881469][T13937] [ 298.883888][T13937] read to 0xffffea00041dba98 of 8 bytes by task 13937 on cpu 0: [ 298.891575][T13937] folio_mapping+0xa1/0xe0 [ 298.896085][T13937] evict_folios+0xdfa/0x35c0 [ 298.900679][T13937] try_to_shrink_lruvec+0x81b/0xbf0 [ 298.905985][T13937] shrink_lruvec+0x255/0x1c60 [ 298.910720][T13937] shrink_node+0x67a/0x2130 [ 298.915242][T13937] do_try_to_free_pages+0x408/0xc80 [ 298.920473][T13937] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 298.926382][T13937] try_charge_memcg+0x37e/0xa10 [ 298.931250][T13937] obj_cgroup_charge_pages+0x23/0xc0 [ 298.936548][T13937] __memcg_kmem_charge_page+0x9e/0x170 [ 298.942065][T13937] __alloc_frozen_pages_noprof+0x18a/0x360 [ 298.947937][T13937] alloc_pages_mpol+0xb3/0x260 [ 298.952739][T13937] alloc_pages_noprof+0x8f/0x130 [ 298.957788][T13937] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 298.963696][T13937] __kvmalloc_node_noprof+0x3d4/0x650 [ 298.969128][T13937] ip_set_alloc+0x24/0x30 [ 298.973477][T13937] hash_netiface_create+0x282/0x740 [ 298.978721][T13937] ip_set_create+0x3cf/0x970 [ 298.983818][T13937] nfnetlink_rcv_msg+0x509/0x5d0 [ 298.988777][T13937] netlink_rcv_skb+0x123/0x220 [ 298.993556][T13937] nfnetlink_rcv+0x167/0x1720 [ 298.998268][T13937] netlink_unicast+0x5c0/0x690 [ 299.003075][T13937] netlink_sendmsg+0x5c8/0x6f0 [ 299.007891][T13937] ____sys_sendmsg+0x5af/0x600 [ 299.012752][T13937] ___sys_sendmsg+0x195/0x1e0 [ 299.017625][T13937] __x64_sys_sendmsg+0xd4/0x160 [ 299.022615][T13937] x64_sys_call+0x194c/0x3020 [ 299.027500][T13937] do_syscall_64+0x12c/0x370 [ 299.032116][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.038032][T13937] [ 299.040443][T13937] value changed: 0xffff888103dc07c0 -> 0x0000000000000000 [ 299.047566][T13937] [ 299.049896][T13937] Reported by Kernel Concurrency Sanitizer on: [ 299.056228][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.2.1986 Tainted: G W syzkaller #0 PREEMPT(full) [ 299.067180][T13937] Tainted: [W]=WARN [ 299.070998][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.081403][T13937] ================================================================== [ 299.222636][T13978] loop5: detected capacity change from 0 to 256 [ 299.279880][T13978] vfat filesystem being mounted at /170/file1 supports timestamps until 2107-12-31 (0x10390cdaa)