last executing test programs: 10m59.70103694s ago: executing program 32 (id=4405): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x1d, 0x2, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 7m20.712618912s ago: executing program 33 (id=5174): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="941d6ba96e3ba85e584c18501499e8a1d8422e74a2761d0864d9dc83b950860ea846d480f3bbf08fc0d1a4b647360552f0fe60c0b432839ea914d75d5578af4d51be98e60fb606da800ce6fab3bd65ef1b960a1a1b3b", 0x56}], 0x1}, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe800000896c000000000000000000bb00000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000800000000000000400000000000000fdffffffffffff7ffeffffffff7f400002000000000000080300000001000000010002010000000044"], 0xfc}}, 0x0) 7m14.777388541s ago: executing program 3 (id=5229): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x1, 0x28b}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r2, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x0, 0x7fffffff, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r8, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 7m13.596247719s ago: executing program 3 (id=5232): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, r5, 0x1, 0x123, 0x234}, 0x14}}, 0x40000) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r6 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@deltaction={0x3c, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 7m13.197300982s ago: executing program 3 (id=5233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c000780080012400000ffff050001000600000005000400000000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {0x25, 0x0, 0x300}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000003c0)={0x480, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1000}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "125c1b71082225048cb6227cfb5167f492c36b9f144b9fd888ea8d59bb1477bd0649f2516a5f6b0782c043bb743b5dc1d786"}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x10}, @ETHTOOL_A_LINKMODES_OURS={0xb4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "3183678b490d276c3eadef566670f26381b49d642a07c39304fbc3b2ffac6bb346f18ddbd6fad01b6acce9e8d4effc1664d127d7bf4e2e76422961f27cc51a0cd261cc95d136e14c94c9abb709f2f7cd320f592c0112f6bd14ee1a10449e13fdf8c1deb2f3c5cc363d6f6cb5aaeb2420e97dbaa18da8a1231fadb170806d10186acbc49a609b7cda863eadff87c6a43fe1d458213bea6f0b35bb2681a2f6035bbd8a0eecfa98cbbf5d9b09"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x328, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "d4ed986c6c9fc0a9ed25711dc4b065c68d11eac53d6716b1b6390fa098830c0cc55b4e1fcd72f6782e191c24cdf3ff2b4074456cc859fc1f2f53cde1b0f17a82e02c44f02bb6659d4a70eedca36ee191b355a0201ea40c2f5621f1691bd71c5bfd9a5f8f4b0d93aa71893b77660b27db8ee132285a3bbd67955471a3ecd28b59e3f9f02234e7d64ea567f727ebafc4de10044c6a569ed1d0b88a56fcb55c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!],\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'bond0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "a60b61897fcca5e21b8fc31f921889f0ff963d749f3a7ce883f5fa0871e0"}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "ad3a84ac60316f10fc948a03bd86b6d4e543c3b8debd29114b4d701869ed1f91b4b8ff17290eec51cac082bcee57a420f6e599f6d672d40d1073350e15d89f55270b28fd3be28b546d8f84aace2822e067b0caf46592109b594ce580ffd68b8999c7a4e866973fab83956f19e9cf4ad118bc86b4c01a80624526dfb08a3427c5177b65dfff84f432026a7b3080fae87c190277c3193741350d"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010425bd7000000000000000", @ANYRES32=0x0, @ANYBLOB="88840200080000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 7m12.972828429s ago: executing program 3 (id=5235): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$eJzs3d1rXGkZAPDnTGby0UYTdS9WYdfiFtpFmzRbdzeIbCuIdwvKKnhXYzoNoZNMSSbbJiyS4h8giOiCN3rljeAfIEgvvFeEBfdeXFGKdhXcC90j52OaJpkx0+5MJkx+P3hz3nPeM+d53jPJmfOVOQGcWuci4lpEjEXEixExU06vlCV2i5LN9/7Dt5azkkSavvH3JJJyWjZbUpbM2fJlk8Vgn/PlcHN759ZSo1HfKMfnW2u35ze3dy6tri2t1Ffq61euLLyy+Oriy4uX+9LPrF+vffUvP/7BL7722m++cOdP1/928XtZvtNle7sf/Vask1q2Lh6pRsTGIIINwVjZn1q0fwAAcJJl+/ifjIjP5fv/MzGW7811N/5YPRl4dgAAAEA/pFen4z9JRAoAAACMrEp+D2xSmSvvBZiOSmVurriH95k4U2k0N1ufv9ncWr9R3Cs7G7XKzdVG/XLEuZliPMnGFx6dUSjGX8rbspLsuwf4RzNTefvccrNxYxgnPAAAAOAUOnvg+P9fM8XxPwAAADBiZoedAAAAADBwjv8BAABg9D3F8f/4IPIAAAAABuLrr7+elbT9/Osbb25v3Wq+eelGffPW3NrW8txyc+P23EqzudJIJyLWjlpeo9m8/cVY37o736pvtuY3t3eurzW31lvXV/c9ArttbCCdAgAAAPb5xGfvv5tExO6XpvIS7Wv73Y7M/a8AjIxKj/Ol2Y/3BpsLcLycgIfTq/r/m93mCyOsVgySYecBDM9RG4DJbnP8fhDZAAAAg3Dh0/ffTZPD1/+re+cGgBHV6/V/YPR0uf6fzhx3IsCxO+L6PzDCau4AhFPv8NX9iX1jnb68I1dc/792dIQ0PXJZAADAQE3nJanMldcCp6PyQVqI2aglN1cb9csR8fGI+ONMbSIbX8hfmfinAQAAAAAAAAAAAAAAAAAAAAAAAADoUZomkT6F6lO9CgAAABiGiMpfk/L5Xxdmzk8fPD8wnnyQPwr4wzRN7/z0jZ/cXWq1Nhay6f/Ip49HROvtcvpLwziDAQAAALS1n/JfHKfXhpwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPq/YdvLbfLccZ98JWImO0UvxqT+XAyahFx5p9JVB97XRIRY32Iv3svIp7tFD/J0orZMouD8SsRMZVnMfD4z6Vp2jH+2Y8cHU63+9n259qhv7/xvTk6//1Xi3L1o8bvvv2rPNr+jR2MXy22fx/rMcZn3vnV/GOj39qrThTt1c7bn3b8pMv294VOwaqHJ33nmzs73XJLfx5xoePnT7Iv1nxr7fb85vbOpdW1pZX6Sn39ypWFVxZfXXx58fL8zdVGvfzZMcYPn/v1h93iP/htxJkyfvtNT8sPltli8OWy/0sH+38+q9S6LXnPf9+5+/BTRbV2YBHx4F7ExRc6v//P5sOO6/9n/05z+edA1n6h/ExIdot6RJxrz/z8L//wfNf+35ssa0/+/l88uuu5F7/x/T/3OCsAcAw2t3duLTUa9Y0+VbJ9hENN370T0Xg7TdPelpPtlfYeNInYPdiU7cD1t18bUxHRpalzrOh1yc90TfW9qQ4r82RUrj7JzOnEE/2yJbsDTD7L44Ssw5NaGc9/IX/37SFvmgAAgD7b2/sfdiYAAAAAAAAAAAAAAAAAAABwenX8GrDJPn6d2MThmLvD6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBH+FwAA//8xsdFY") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 7m12.62913675s ago: executing program 3 (id=5242): socket$unix(0x1, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x1800e, &(0x7f0000000ac0)={[{}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r0 = creat(0x0, 0x182) syz_open_dev$mouse(&(0x7f0000000100), 0xfde7, 0x520) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000084000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) 7m12.100460367s ago: executing program 3 (id=5245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x200000000000006, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000800)=0x4, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0xf2ff}, {0x8, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 7m12.071913828s ago: executing program 34 (id=5245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x200000000000006, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000800)=0x4, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0xf2ff}, {0x8, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 7m8.833249012s ago: executing program 4 (id=5279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x200000000000006, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r3, 0x5441, 0xe633) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) ftruncate(r6, 0x5) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000002, 0x0, 0x80000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x3a800000, 0x2000000, 0xffffffff, 0x0, 0x5, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0xf, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0xff, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x10, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}}, 0x404800c) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000800)=0x4, 0x4) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x30, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 7m8.009356288s ago: executing program 4 (id=5284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 7m7.994888258s ago: executing program 4 (id=5286): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x84, 0x0, 0x0, 0x4}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x4, [0x0, 0xfffd, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4e21, 0x4e22, 0x0, 0x0, 0xffff, 0x2], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4]}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffffff, 0x0, 0xffffff00, 0xff000000], [], 'geneve1\x00', 'ip6tnl0\x00', {}, {}, 0x73, 0x0, 0x0, 0x19}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) 7m7.706038568s ago: executing program 4 (id=5289): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xad4, 0x2000008}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20000c7, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0xfe, 0x576, &(0x7f0000001780)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000001ac0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6bf1d61efea623114a0de3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f4282e05e743a0763193b1951aef02f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket$inet6(0xa, 0x800, 0x50) sendto$inet6(r2, &(0x7f00000002c0)="0151b6cb00241a3302a79847447dd7a0bb153e3ac6e258167b00a7172c35e238ff5e81ba45a8a13e2b161d3a4ba49be8ed9201fb180cf3502485f8e94ba53ff56b2a5c2d079ce22b4118218a7ad0e49833e8dc84dba7c6d2093994f2114a09fce0a42f14ab4a727e9c18", 0x6a, 0x40040, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 7m7.154871805s ago: executing program 4 (id=5292): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) (async) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000400)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x8}, 0x0, 0x5, 0xfffb, 0x5, 0x21, 'syz0\x00', "2180b1a7f8c357c933cbe8a7bed05cbe5db7f98d7f81f2f5cd2736e4185f959b", "b70624b0aa1c8d62adfce3dc3ee5a65da99dc48670d795678cf89559be7f13a9", [{0x6, 0x4, {0x0, 0x40}}, {0x6, 0x6, {0x2, 0x6}}, {0x9, 0x4, {0x3, 0xfff}}, {0x7, 0x5, {0x1, 0x8}}, {0x3, 0x2, {0x3, 0xa}}, {0x196, 0x0, {0x1, 0x3a23a4bb}}, {0x0, 0xa58, {0x2}}, {0x8000, 0x400, {0x0, 0x9}}, {0x6de5, 0x6, {0x1, 0xff}}, {0x5, 0x4, {0x3, 0x40}}, {0x95, 0x4, {0x1, 0x9}}, {0xbab, 0x81, {0x0, 0x6}}, {0x1, 0x7, {0x0, 0x8}}, {0x8c1f, 0x6, {0x1, 0x5}}, {0x2, 0x8000, {0x3, 0x8001}}, {0x5, 0x1, {0x1, 0xffffff81}}, {0x8000, 0x3, {0x2, 0xff}}, {0x1, 0xffff, {0x0, 0x40000}}, {0x0, 0x7ff, {0x2, 0x3ff}}, {0x1, 0x3ff, {0x2, 0x9}}, {0x10, 0x9, {0x3, 0x10001}}, {0xdf, 0x2, {0x1, 0xffffffff}}, {0x27f5, 0x58db, {0x1, 0x6}}, {0x5, 0x4de, {0x3, 0x8000}}, {0x3a, 0x2, {0x2, 0x9}}, {0x4, 0x1, {0x1, 0x4}}, {0x401, 0x80}, {0x0, 0x400, {0x2, 0x5}}, {0x8, 0x5, {0x3, 0x8}}, {0x66, 0x5, {0x0, 0x9}}, {0x8, 0x7, {0x3, 0x1}}, {0xf50a, 0x3, {0x3, 0x7e}}, {0x3, 0x2, {0x2}}, {0x6, 0x3c, {0x1, 0x2}}, {0x81, 0xc854}, {0x9, 0x0, {0x2, 0x2}}, {0x9, 0x400, {0x1, 0x6}}, {0x7, 0x5, {0x3, 0x2}}, {0x9, 0x20, {0x2}}, {0x6, 0x8}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x40008) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ifreq(r7, 0x8970, &(0x7f0000000000)={'sit0\x00', @ifru_mtu=0x3ff}) (async) ioctl$sock_ifreq(r7, 0x8970, &(0x7f0000000000)={'sit0\x00', @ifru_mtu=0x3ff}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 7m5.362285543s ago: executing program 4 (id=5300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbf6, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x1, 0xfd, 0x9}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}}}}, @RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000000000007b881bbe8c0614a475c2ec4ea0c036e47538611b276dedd339c04b49407b861328c60af1b97da50187cce69a2cbab9127a00e8a9f659ab98d329881f710b5df9a78a0ff1f842cf9bcfb9df055c99ed83e28eb035ce131dd243d722a062889ad7c38aef59badc3eeee7bdceb2ff83ee83404b73698a70c89ef528516a41a6d9641f587511502349ddec183785774c65f3cffa4d03d711d777883f2b065b597a1688a298703a84dc4d84"]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) 7m5.319164494s ago: executing program 35 (id=5300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbf6, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x1, 0xfd, 0x9}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}}}}, @RTA_NH_ID={0x8, 0x1e, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000000000000000000000000000000000000000000007b881bbe8c0614a475c2ec4ea0c036e47538611b276dedd339c04b49407b861328c60af1b97da50187cce69a2cbab9127a00e8a9f659ab98d329881f710b5df9a78a0ff1f842cf9bcfb9df055c99ed83e28eb035ce131dd243d722a062889ad7c38aef59badc3eeee7bdceb2ff83ee83404b73698a70c89ef528516a41a6d9641f587511502349ddec183785774c65f3cffa4d03d711d777883f2b065b597a1688a298703a84dc4d84"]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) 6m54.613107567s ago: executing program 8 (id=5421): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r3, 0x9) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = accept$packet(r4, 0x0, &(0x7f0000000580)) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x2001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x854) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000200200000000000000000000800100005000400080002000a0101010c000c400000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 6m48.802472353s ago: executing program 8 (id=5444): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 6m48.752073205s ago: executing program 8 (id=5446): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4ea4, 0x9, @local, 0xfffffff4}, 0x1c) getsockname$l2tp(r2, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = syz_open_pts(r1, 0x100) ppoll(&(0x7f00000001c0)=[{r0}, {r8, 0x1288}, {0xffffffffffffffff, 0x2691}, {r0, 0x2108}, {r6, 0x40e8}, {r9, 0x2}], 0x6, &(0x7f0000000200), &(0x7f0000000280)={[0x7]}, 0x8) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x23) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) open(&(0x7f0000000300)='./file1\x00', 0x4a54b18845304601, 0x80) bpf$MAP_CREATE(0xb00000000000000, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x8, 0x1, 0x40224, r5, 0x3ff, '\x00', 0x0, r5, 0x5, 0x4, 0x3, 0x4}, 0x50) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) acct(&(0x7f0000000340)='./file1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x298440, 0x1bb) write$P9_RUNLINKAT(r10, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 6m47.284134252s ago: executing program 8 (id=5449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) epoll_create1(0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x20000840) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1b1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x2000200002, 0xffffffffffffffff) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@loopback, @remote, [0xff000000, 0xff, 0xff000000], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'netpci0\x00', 'vxcan1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x40}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11, 0x1, 0x78, 0xfc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x104, 0x19b) getdents64(r4, &(0x7f0000000040)=""/185, 0xb9) 6m44.996896285s ago: executing program 8 (id=5460): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000001200), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xe1000d00) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xc0000484) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = io_uring_setup(0x73d4, &(0x7f0000000180)={0x0, 0xe2ff, 0x4000, 0x2, 0x366}) io_uring_enter(r5, 0x448e, 0xca72, 0x4, &(0x7f0000000140)={[0x20]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x244200, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x29, 0x0, 0x40000) recvmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000680)={0x59, 0x81, 0x7, 0x9, 0xe4}) eventfd2(0x5, 0x80000) 6m43.213401542s ago: executing program 8 (id=5482): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) symlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, r5, 0x1, 0x8070bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x44810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x7, 0x4, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x21, 0x6, 0x7f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x69, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000640)={@loopback, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xc0, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x23}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc850}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@setneightbl={0x44, 0x43, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x6}, @NDTA_NAME={0x22, 0x1, '/selinux/commit_pending_bools\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40802) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6m43.179446523s ago: executing program 36 (id=5482): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) symlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, r5, 0x1, 0x8070bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x44810) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x7, 0x4, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x21, 0x6, 0x7f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x69, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000640)={@loopback, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xc0, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xfd}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x23}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc850}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@setneightbl={0x44, 0x43, 0x100, 0x70bd29, 0x25dfdbfe, {0xa}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x6}, @NDTA_NAME={0x22, 0x1, '/selinux/commit_pending_bools\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40802) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4m12.809243951s ago: executing program 9 (id=6588): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0xcc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}, 0x4) r1 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x2000000, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m12.782422292s ago: executing program 9 (id=6590): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) io_setup(0x6, &(0x7f00000000c0)=0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x1}]) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000d1413043dbd7100fddbdf2508003e0002000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000001c0)) 4m12.2174088s ago: executing program 9 (id=6592): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d002d887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x7fffffffffffffff, 0x1, 0xffffeffffffffe01, 0xfff}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @remote, 0xfff}], 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x7, 0x0, 0x3, "e8850900000039e8abff005597c8ef939554d75d5b6bd60000dff2badc958845d800006acf1b1ff55a201300000000000000000000000000000900", 0x1b}, 0x60) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioperm(0x7, 0x81, 0x2) r3 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x40000, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 4m10.478749555s ago: executing program 9 (id=6599): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2b, 0x1, 0x0, 0x2, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d8, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000480, &(0x7f0000001740), 0x1, 0x587, &(0x7f0000002180)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = epoll_create(0xea3) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x1f, 0x4}, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000180)={0xb0000000}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x2, 0xb, 0x0, 0x3, 0x17, 0x0, 0x4070bd2f, 0x25dfdbfc, [@sadb_x_sec_ctx={0x15, 0x18, 0x6, 0x2e, 0x9e, "568880280982996d80a3ee3015d337afe92f48c04e05eabb91482fa13ab05c9f6eca842a69006cada02404f072e9b277f45333fc8dcf6d62d54183fdce29f6dc4f3b764d0340742f12ed170b3701ddfc37b64144ab31bb57ea3a161479ad4a5167f7ffc44f03cfc0cddc4befb83bfb0f1c586049bf918914a5ccbfbb34f6546b6c97a6d81df66e13a0b7871ca8eda9e9e325076714e33c451feb3270991f"}]}, 0xb8}, 0x1, 0x7}, 0x18014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140048001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 4m9.901418243s ago: executing program 9 (id=6606): set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x13d) set_mempolicy(0x8000, &(0x7f0000000480)=0xf57, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000001180)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00009d5000/0x1000)=nil, 0x1, &(0x7f0000000640)=[{0x800000000, 0x0, 0xfffffffffeffffff}], 0x1, 0x3ee, 0x61, 0x0, 0x0, 0x6e}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000004c0)={'wg2\x00', 0x200}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000340)='\xbf\ne\xa5\x10&\f\xb3\xd5\x06\xe7\xb2C\x98\xb9\xcc\x1c\xa0\x9b\xe6\x95\xd7p\xca\xbc\xb6c!w\x977\x85}\xa5K\x05Pz\xd0c\xee') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000"], 0x0, 0x42}, 0x28) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000500)=""/255) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18070d000000320a5e3d42eb494d757000000100000000fe9d7257fdfc8000008510c6cacf53d41130e220e13a00000300000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000009500007b0000000085100000f9ffffff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 4m9.881554284s ago: executing program 37 (id=6606): set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x13d) set_mempolicy(0x8000, &(0x7f0000000480)=0xf57, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000001180)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00009d5000/0x1000)=nil, 0x1, &(0x7f0000000640)=[{0x800000000, 0x0, 0xfffffffffeffffff}], 0x1, 0x3ee, 0x61, 0x0, 0x0, 0x6e}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000004c0)={'wg2\x00', 0x200}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x20004800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000340)='\xbf\ne\xa5\x10&\f\xb3\xd5\x06\xe7\xb2C\x98\xb9\xcc\x1c\xa0\x9b\xe6\x95\xd7p\xca\xbc\xb6c!w\x977\x85}\xa5K\x05Pz\xd0c\xee') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000"], 0x0, 0x42}, 0x28) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000500)=""/255) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18070d000000320a5e3d42eb494d757000000100000000fe9d7257fdfc8000008510c6cacf53d41130e220e13a00000300000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000009500007b0000000085100000f9ffffff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 2m18.3264877s ago: executing program 5 (id=7369): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d002d887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x7fffffffffffffff, 0x1, 0xffffeffffffffe01, 0xfff}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @remote, 0xfff}], 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x7, 0x0, 0x3, "e8850900000039e8abff005597c8ef939554d75d5b6bd60000dff2badc958845d800006acf1b1ff55a201300000000000000000000000000000900", 0x1b}, 0x60) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioperm(0x7, 0x81, 0x2) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") 2m14.501190462s ago: executing program 5 (id=7384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r1, 0x0, 0x0, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_ublk_setup_io_uring(0x251b, &(0x7f0000000100)={0x0, 0xc0dd, 0x80, 0x1, 0x2d3, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000200)) close_range(r8, 0xffffffffffffffff, 0x0) getdents(r7, 0x0, 0x0) 2m9.332473767s ago: executing program 5 (id=7395): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x1000, 0x80000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='),#\xb8:}\x00', 0x7) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@grpquota}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000680)="ed", 0x1}], 0xd}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='resgid', 0x6) 2m8.826997303s ago: executing program 5 (id=7404): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8a309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x110a7d, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) socketpair(0x18, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x401}, 0x50) getsockopt$MRT(r4, 0x0, 0xce, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r6, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="21ae0e3493bd617fe20e44f8a8fd78282c646566636f6e746578743d22227d22226fe68b62f696183f3362e6f16ce6ca479c9d3b6fd4ccf11dfa90cd786f8bd9ff19a464696755fc"]) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r5], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000003c0), 0x4) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) 2m8.421525326s ago: executing program 5 (id=7411): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2m8.419732776s ago: executing program 38 (id=7411): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 10.382159229s ago: executing program 1 (id=7819): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0xc, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000100)={'bridge0\x00', 0x1}) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20}, 0x94) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x9, r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r1, 0x0, 0x0) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpriority(0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x74, 0x10, 0x5, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48978, 0x61005}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff42997dc64bbeb7f59030352ab684de"}, @IFLA_PORT_INSTANCE_UUID={0xffffffffffffffab, 0x4, "69408c725fa8fc15ed83aa516ab57449"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4c75c9ff51b2378156d5589b65f113db"}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40801}, 0x404c0c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd05, 0x0, 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x6, 0x0, 0xc}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000240)={[{@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe}}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") 8.604321915s ago: executing program 6 (id=7823): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 8.599704046s ago: executing program 0 (id=7824): socket$inet_sctp(0x2, 0x5, 0x84) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x80) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) statfs(0x0, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x1c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/171, 0xab, 0x0, &(0x7f00000003c0)=""/248, 0xf8}, &(0x7f0000000500)=0x40) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20040011) r1 = socket(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) close(0xffffffffffffffff) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r3, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r4, @ANYBLOB="18000880"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 8.46540174s ago: executing program 0 (id=7825): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r1, 0x0, 0x0, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_ublk_setup_io_uring(0x251b, &(0x7f0000000100)={0x0, 0xc0dd, 0x80, 0x1, 0x2d3, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)) syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getdents(r5, 0x0, 0x0) 7.066983184s ago: executing program 2 (id=7828): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socket$can_bcm(0x1d, 0x2, 0x2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)='\xe1\xdb3I\a\xb9\xc5[v\xa8\x04\xae\xfa\x97\x1d%t;Y\xc8[\x89\xa3\x84\xbdf\x99b\x88\x89\vb\xb9\xef\xb4\xd4\x84\x1e\xed\xb5f\x7f\x97j\xdd\xac\xfb\xbb|`\a\xb5\xa7\xdb\x91\xea\xdc\xfd.\xa9g\xb7\x95\x9f\xf2', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) 7.060490245s ago: executing program 1 (id=7829): eventfd2(0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x6, {[@exp_fastopen={0xfe, 0x4}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) io_setup(0x81, &(0x7f0000000400)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000480)=0x8) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbf6, {0xa, 0x80, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) pause() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x36, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$inet(0x2, 0x7, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="08001efbb0541f9a70", 0x9}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,fl{sh,dots,dots,gid=', @ANYRESHEX=r2, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") eventfd2(0xd, 0x800) 6.989699557s ago: executing program 6 (id=7830): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d002d887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x7fffffffffffffff, 0x1, 0xffffeffffffffe01, 0xfff}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @remote, 0xfff}], 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x7, 0x0, 0x3, "e8850900000039e8abff005597c8ef939554d75d5b6bd60000dff2badc958845d800006acf1b1ff55a201300000000000000000000000000000900", 0x1b}, 0x60) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioperm(0x7, 0x81, 0x2) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r3, 0x9) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = accept$packet(r4, 0x0, &(0x7f0000000580)) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x2001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x854) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000200200000000000000000000800100005000400080002000a0101010c000c400000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 6.829676332s ago: executing program 6 (id=7832): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r3 = dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0x7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f62000/0x1000)=nil, 0x7000) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 6.442904695s ago: executing program 0 (id=7833): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05072ebd7000ffdbdf25010000001000028007"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9c00, r5, 0x0, 0x0, 0x0, 0x10, 0x3e6}, 0x94) 6.025453988s ago: executing program 0 (id=7834): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), 0xffffffffffffffff) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4.278399493s ago: executing program 2 (id=7837): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e", @ANYRES16=r0], 0x0, 0x60}, 0x28) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1}, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.150814838s ago: executing program 1 (id=7838): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, 0x0, 0x0, 0x40000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdfad2c000000", @ANYRES32], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.122978619s ago: executing program 6 (id=7839): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r3 = dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f62000/0x1000)=nil, 0x7000) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 4.07697165s ago: executing program 1 (id=7840): r0 = getuid() syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001200)={[{@dmode={'dmode', 0x3d, 0x3ff}}, {@dmode={'dmode', 0x3d, 0x406}}, {@check_strict}, {@unhide}, {@nocompress}, {}, {@showassoc}, {@uid={'uid', 0x3d, r0}}]}, 0x1, 0x6a1, &(0x7f00000029c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x511000) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0x4d49, {{0x15, 0x4, 0x0, 0x1c, 0x54, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@cipso={0x86, 0x14, 0x2, [{0x0, 0xe, "7a6abca384d0c8bd94c4da08"}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x2, [{@remote, 0x6}, {@empty, 0x8}, {@broadcast, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xd7, 0x0, 0xf, [0x22]}]}}}}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x46, r6}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r3, @ANYBLOB="00082cbd7000fddb86c576c77f659988a32f01df250500000005000200070000001c0001800800030001000000080003000100000008000050457d9400018014000200786607000000000000000000000000001400020076657468315f746f5f0000000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f6873720000000014000200626f6e645f736c6176655f30000000001400020070696d367265673000000000000000001400020076657468315f766972745f77696669001400020076657468305f746f5f7465616d000000140002007663616e3000000000000000000000000800030001000000340001801400020070696d72656700000000000000000000080003000300000014000200697036746e6c30000000000000000000050007000200000008000500fbffffff"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 3.74575234s ago: executing program 0 (id=7841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") socket(0x2, 0x80805, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000001b80)={0x0, 0x1, 0x9, 0x5, 0x1d0, &(0x7f0000001780)="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"}) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000001740)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) read$msr(r6, &(0x7f00000002c0)=""/4096, 0x1000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc890}, 0x81) 3.424001551s ago: executing program 6 (id=7843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) 3.077579931s ago: executing program 7 (id=7845): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3.077150732s ago: executing program 7 (id=7846): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x202a080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110000, 0x0, 0x0, 0x5, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="181100577612d3006e58d04a8e393f55fc18819fd1a6f6d4e13ce95992dd7e2ab524b116699089d359101784a02b35ec4f68dfd90ae06f44511d1c7ddc", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcea}, 0x94) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000580)={&(0x7f00000003c0)=[{0x4, 0xe82, 0x2, 0xe}, {0x2, 0xfffffffffffffff4, 0xffffffffffffff7c, 0x6}, {0x0, 0x8000000000000001, 0x4, 0x50}, {0x3, 0x8, 0x1, 0x6}, {0x3ff, 0x3, 0xe, 0x2}, {0x0, 0x4, 0x9, 0x1}, {0x0, 0x6, 0x4, 0x2e}], 0x7, 0x20, 0x7, 0x5}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) 2.175318971s ago: executing program 2 (id=7847): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x4000def}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000006280)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x20b, 0x9, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}], 0x38, 0x1}], 0x1, 0x4004800) 1.893497879s ago: executing program 1 (id=7848): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r3, 0x9) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = accept$packet(r4, 0x0, &(0x7f0000000580)) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/38, 0x26}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2}, 0x2001) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x854) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000200200000000000000000000800100005000400080002000a0101010c000c400000000000000007"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 749.453676ms ago: executing program 0 (id=7849): eventfd2(0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x6, {[@exp_fastopen={0xfe, 0x4}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) io_setup(0x81, &(0x7f0000000400)) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000480)=0x8) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x25dfdbf6, {0xa, 0x80, 0x10, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x10002}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) pause() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x36, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$inet(0x2, 0x7, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="08001efbb0541f9a70", 0x9}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,fl{sh,dots,dots,gid=', @ANYRESHEX=r2, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") eventfd2(0xd, 0x800) 709.000698ms ago: executing program 7 (id=7850): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0xb8101, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_debug_messages', 0x149a82, 0x68) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12) sendfile(r0, r1, 0x0, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffff808, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) statfs(0x0, 0x0) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x20040050) r3 = socket(0x10, 0x3, 0xfffffffd) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r4, &(0x7f000000c380)='./file0\x00', 0x20842, 0x11) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r5, @ANYBLOB="18000880"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210003000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) 708.105587ms ago: executing program 1 (id=7851): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d002d887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x7fffffffffffffff, 0x1, 0xffffeffffffffe01, 0xfff}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @remote, 0xfff}], 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x188202, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0x1, 0x7, 0x0, 0x3, "e8850900000039e8abff005597c8ef939554d75d5b6bd60000dff2badc958845d800006acf1b1ff55a201300000000000000000000000000000900", 0x1b}, 0x60) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioperm(0x7, 0x81, 0x2) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x20000088) 660.255559ms ago: executing program 7 (id=7853): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQomAMHg2Jd+PRxL/Ak16MejLxqndDQgwXkdOa2Z1hf3S3tMu2g+znkwx9b+YN7333zdt9M283gL41lv2TROyMiD8iYqSWbS4wVvtz4/qF2X+vX5hNolJ59++kWu6f6xdmi6LFeTvyzHgakX6exP429S6dO39qZmFh/myen1w+/eHk0rnzL5w8PXNi/sT8memjR48cnnr5pekXV558c/1x3p+1dd8niwf2vvnelbdnj115/5fvBor4W+LokbHVDj5dqfS4unLtakgngyU2hHXJxkDWXUPV8T8SA1HvvJF447NSGwdsqEquw+GLFeAelkTZLQDKUXzQZ/e/xbZ5s4/yXXu1dgOUxX0j32pHBiPNywy13N/20lhEHLt48+tsi415DgEA0OSHbP7zfLv5XxoPNZS7L18bGs3XUnZHxAMRsSciHoyoln04Ih5ZZ/2tiyQr5z/p1a4CW6Ns/vdKvrbVPP8rZn8xOpDndlXjH0qOn1yYP5S/JuMxtDXLT61Sx4+v//5lp2ON879sy+ov5oJ5O64Obm0+Z25meeZOYm507VLEvsF28Se3VgKSiNgbEfu6rOPks98e6HTs9vGvogfrTJVvIp6p9f/FaIm/kKy+Pjm5LRbmD00WV8VKv/52+Z1O9d9R/D2Q9f/2ttf/rfhHk8b12qX113H5zy863tNMdHX913dsyf9+PLO8fHYqYkvyVq3Rjfun6+cW+aJ8Fv/4wfbjf3fUX4n9EZFdxI9GxGMR8Xjed09ExJMRcbAlrsb7659fe+qDTvHfDf0/19L/o81FWvq/ntgSrXvaJwZO/fR98/9YT67t/e9INTWe71nL+99a2tXd1QwAAAD/P2lE7IwknbiVHk4nJmrf4d8T29OFxaXl544vfnRmrvYbgdEYSosnXSMNz0On8tv60Uu1/HSRz48fzp8bfzUwXM1PzC4uzJUdPPS5HSvGf1od/5m/BspuHbDh/F4L+lfD+E/KbAew+Xz+Q/8y/qF/tRn/w2W0A9h87T7/Py2hHcDmaxn/lv2gj7j/h/5l/EP/ahz/vgAAfWNpOG7/I/l2iW3RzVkS90wi0ruiGb1JJF2OgrUmdpYd4PoTZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9MZ/AQAA//8L+fEo") 366.310208ms ago: executing program 7 (id=7854): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r3 = dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r6}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r5, r6) fcntl$setown(r6, 0x8, r4) tkill(r4, 0x13) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f62000/0x1000)=nil, 0x7000) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x12) 75.394827ms ago: executing program 2 (id=7855): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socket$can_bcm(0x1d, 0x2, 0x2) semctl$GETALL(0x0, 0x0, 0xd, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x1000, 0x7, 0x7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)='\xe1\xdb3I\a\xb9\xc5[v\xa8\x04\xae\xfa\x97\x1d%t;Y\xc8[\x89\xa3\x84\xbdf\x99b\x88\x89\vb\xb9\xef\xb4\xd4\x84\x1e\xed\xb5f\x7f\x97j\xdd\xac\xfb\xbb|`\a\xb5\xa7\xdb\x91\xea\xdc\xfd.\xa9g\xb7\x95\x9f\xf2', 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000ffffffff32000000ffffffff000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000feffffffffffffff00000000000000000900000000000000fdffffffffffffff0408400000000000090000000000000092020000000000000000b01c050000000000000000000000000000000a0002002c00000000000000580002006362632863616d656c6c696129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000003ae0bd000b000000366a6a849a7390454c001400686d61632873686132353629"], 0x194}}, 0x44050) 26.658389ms ago: executing program 6 (id=7856): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4d5, &(0x7f00000000c0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 7 (id=7857): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e", @ANYRES16=r0], 0x0, 0x60}, 0x28) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1}, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): -0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.042083][T32100] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1383.042157][T32100] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1383.042213][T32100] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7579: Corrupt directory, running e2fsck is recommended [ 1383.042246][T32100] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.7579: path /181/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1383.045193][T32100] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.7579: path /181/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1384.069273][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.389415][T32122] loop1: detected capacity change from 0 to 512 [ 1384.899734][T32122] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1384.911230][T32122] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1384.921555][T32122] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7590: Corrupt directory, running e2fsck is recommended [ 1385.170115][T32122] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1385.180333][T32122] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7590: corrupted in-inode xattr: e_name out of bounds [ 1385.195228][T32122] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1385.211004][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1385.226562][ C1] EXT4-fs (loop1): initial error at time 2008390518: ext4_iget_extra_inode:5128: inode 15 [ 1385.236465][ C1] EXT4-fs (loop1): last error at time 2008390518: ext4_iget_extra_inode:5128: inode 15 [ 1385.320875][T32122] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7590: couldn't read orphan inode 15 (err -117) [ 1385.333462][T32122] loop1: lost filesystem error report for type 5 error -117 [ 1385.444444][T32132] loop2: detected capacity change from 0 to 128 [ 1385.510586][T32135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=32135 comm=syz.0.7593 [ 1385.577117][T32132] msdos: Unknown parameter 'fl{sh' [ 1385.605524][T32122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.953488][T32143] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1385.964982][T32143] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1385.975124][T32143] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7590: Corrupt directory, running e2fsck is recommended [ 1385.988056][T32143] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.7590: path /28/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1386.683836][T32148] loop6: detected capacity change from 0 to 1024 [ 1386.797573][T32148] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1386.817990][T32148] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.7596: lblock 2 mapped to illegal pblock 2 (length 1) [ 1386.832436][T32148] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1386.832574][T32148] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1386.841640][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1386.841656][ C1] EXT4-fs (loop6): initial error at time 2008390519: ext4_map_blocks:791: inode 3: block 2 [ 1386.841698][ C1] EXT4-fs (loop6): last error at time 2008390519: ext4_map_blocks:791: inode 3: block 2 [ 1386.891256][T32148] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.7596: lblock 0 mapped to illegal pblock 48 (length 1) [ 1386.907177][T32148] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1386.908207][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.062966][T32148] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1387.072543][T32148] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7596: Failed to acquire dquot type 0 [ 1387.084268][T32148] loop6: lost filesystem error report for type 5 error -117 [ 1387.084517][T32148] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1387.149959][T32148] loop6: lost filesystem error report for type 5 error -117 [ 1387.150653][T32148] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.7596: mark_inode_dirty error [ 1387.331711][T32148] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1387.331963][T32148] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1387.451062][T32148] EXT4-fs (loop6): 1 orphan inode deleted [ 1387.458393][T32148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.463206][T32148] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.7596: Invalid inode table block 1 in block_group 0 [ 1387.467181][T32148] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1387.972814][T32155] loop2: detected capacity change from 0 to 512 [ 1388.365853][T32157] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.7596: Invalid inode table block 1 in block_group 0 [ 1388.398256][T32157] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1388.668597][T32170] loop1: detected capacity change from 0 to 512 [ 1388.839215][T32173] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7604'. [ 1388.848867][T32173] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1389.511826][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.521307][ T12] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1389.800006][T32175] loop7: detected capacity change from 0 to 512 [ 1390.001248][ T12] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1390.001346][ T12] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1390.063550][T32170] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1390.075933][T32170] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1390.086453][T32170] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7601: Corrupt directory, running e2fsck is recommended [ 1390.541762][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1390.553423][ T12] loop6: lost filesystem error report for type 5 error -117 [ 1390.553707][T22802] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1390.969021][T22802] loop6: lost filesystem error report for type 5 error -117 [ 1391.054250][T22802] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1391.072498][T22802] loop6: lost filesystem error report for type 5 error -117 [ 1391.113117][T22802] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1391.149707][T32170] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1391.160523][T32175] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1391.173341][T32175] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1391.184356][T32175] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7602: Corrupt directory, running e2fsck is recommended [ 1391.311787][T32170] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7601: corrupted in-inode xattr: e_name out of bounds [ 1391.326361][T32170] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1391.331058][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1391.346563][ C1] EXT4-fs (loop1): initial error at time 2008390524: ext4_iget_extra_inode:5128: inode 15 [ 1391.356491][ C1] EXT4-fs (loop1): last error at time 2008390524: ext4_iget_extra_inode:5128: inode 15 [ 1391.500368][T32175] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1391.509936][T32175] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7602: corrupted in-inode xattr: e_name out of bounds [ 1391.524463][T32175] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1391.526992][T32170] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7601: couldn't read orphan inode 15 (err -117) [ 1391.536655][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1391.536727][ C0] EXT4-fs (loop7): initial error at time 2008390524: ext4_iget_extra_inode:5128: inode 15 [ 1391.537027][ C0] EXT4-fs (loop7): last error at time 2008390524: ext4_iget_extra_inode:5128: inode 15 [ 1391.579072][T32170] loop1: lost filesystem error report for type 5 error -117 [ 1391.587885][T32175] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7602: couldn't read orphan inode 15 (err -117) [ 1391.608308][T32175] loop7: lost filesystem error report for type 5 error -117 [ 1391.619467][T32170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.646307][T32175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.867639][T22802] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1391.879468][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.056933][T32174] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1392.068472][T32174] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1392.078673][T32174] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7602: Corrupt directory, running e2fsck is recommended [ 1392.091561][T32174] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.7602: path /449/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1392.120017][T32174] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.7602: path /449/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1392.246671][T32193] loop6: detected capacity change from 0 to 512 [ 1392.673960][T32193] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1392.686325][T32193] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1392.701944][T32193] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7603: Corrupt directory, running e2fsck is recommended [ 1392.741648][T32193] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1392.752604][T32193] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7603: corrupted in-inode xattr: e_name out of bounds [ 1392.766529][T32193] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1392.766939][T32193] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7603: couldn't read orphan inode 15 (err -117) [ 1392.788077][T32193] loop6: lost filesystem error report for type 5 error -117 [ 1392.789250][T32193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1392.883985][T32193] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1392.895508][T32193] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1392.905662][T32193] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7603: Corrupt directory, running e2fsck is recommended [ 1392.919241][T32193] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7603: path /483/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1392.940540][T32193] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.7603: path /483/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1392.942056][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.805854][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.961501][T32209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7611'. [ 1394.412437][T32225] loop2: detected capacity change from 0 to 128 [ 1395.391841][T32227] loop7: detected capacity change from 0 to 512 [ 1396.189002][T32230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.210401][T32230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.583988][T32227] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1396.596375][T32227] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1396.607628][T32227] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7614: Corrupt directory, running e2fsck is recommended [ 1397.243679][T32227] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1397.251888][T32227] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7614: corrupted in-inode xattr: e_name out of bounds [ 1397.265839][T32227] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1397.266065][T32227] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7614: couldn't read orphan inode 15 (err -117) [ 1397.287022][T32227] loop7: lost filesystem error report for type 5 error -117 [ 1397.287627][T32227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.136331][T32242] loop1: detected capacity change from 0 to 512 [ 1398.235911][T32240] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1398.317777][T32242] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1398.330029][T32242] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1398.340947][T32242] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7618: Corrupt directory, running e2fsck is recommended [ 1398.363782][T32242] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1398.372444][T32242] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7618: corrupted in-inode xattr: e_name out of bounds [ 1398.386347][T32242] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1398.394022][T32242] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7618: couldn't read orphan inode 15 (err -117) [ 1398.414980][T32242] loop1: lost filesystem error report for type 5 error -117 [ 1398.416438][T32242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1398.557747][T32242] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1398.569387][T32242] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1398.579573][T32242] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7618: Corrupt directory, running e2fsck is recommended [ 1398.595154][T32242] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.7618: path /34/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1398.634503][T32242] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.7618: path /34/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1398.690683][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.146945][ T28] audit: type=1326 audit(2008390532.181:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1399.149545][ T28] audit: type=1326 audit(2008390532.181:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1399.149782][ T28] audit: type=1326 audit(2008390532.181:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146158][ T28] audit: type=1326 audit(2008390533.181:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146350][ T28] audit: type=1326 audit(2008390533.181:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146502][ T28] audit: type=1326 audit(2008390533.181:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146648][ T28] audit: type=1326 audit(2008390533.181:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146879][ T28] audit: type=1326 audit(2008390533.181:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.146990][ T28] audit: type=1326 audit(2008390533.181:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.147370][ T28] audit: type=1326 audit(2008390533.181:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32254 comm="syz.7.7620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7c2b46ce59 code=0x7ffc0000 [ 1400.148777][T32259] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7620'. [ 1400.277978][T32263] loop6: detected capacity change from 0 to 512 [ 1400.514680][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.615105][T32263] EXT4-fs: error -4 creating inode table initialization thread [ 1402.619983][T32263] EXT4-fs (loop6): mount failed [ 1403.038815][T32279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1403.448194][T32289] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1403.776118][T32294] loop7: detected capacity change from 0 to 1024 [ 1403.946186][T32294] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1403.975186][T32294] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.7633: lblock 2 mapped to illegal pblock 2 (length 1) [ 1404.965682][T32294] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1404.965787][T32294] __quota_error: 24 callbacks suppressed [ 1404.965802][T32294] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1404.974956][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1404.974970][ C0] EXT4-fs (loop7): initial error at time 2008390538: ext4_map_blocks:791: inode 3: block 2 [ 1404.975010][ C0] EXT4-fs (loop7): last error at time 2008390538: ext4_map_blocks:791: inode 3: block 2 [ 1405.615478][T32305] loop1: detected capacity change from 0 to 512 [ 1406.011229][T32294] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.7633: lblock 0 mapped to illegal pblock 48 (length 1) [ 1406.026118][T32294] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1406.026240][T32294] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1406.186732][T32294] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7633: Failed to acquire dquot type 0 [ 1406.199921][T32294] loop7: lost filesystem error report for type 5 error -117 [ 1406.200116][T32294] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1407.041906][T32294] loop7: lost filesystem error report for type 5 error -117 [ 1407.042049][T32294] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.7633: mark_inode_dirty error [ 1407.060612][T32294] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1407.060928][T32294] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1407.080773][T32294] EXT4-fs (loop7): 1 orphan inode deleted [ 1407.087072][T32294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.093622][T32305] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1407.110496][T32305] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1407.120614][T32305] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7629: Corrupt directory, running e2fsck is recommended [ 1407.204516][T32316] loop2: detected capacity change from 0 to 512 [ 1407.223723][T32305] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1407.231986][T32305] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7629: corrupted in-inode xattr: e_name out of bounds [ 1407.245937][T32305] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1407.250252][T32305] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7629: couldn't read orphan inode 15 (err -117) [ 1407.271202][T32305] loop1: lost filesystem error report for type 5 error -117 [ 1407.272231][T32305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.450613][T32316] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1407.462903][T32316] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1407.473581][T32316] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7636: Corrupt directory, running e2fsck is recommended [ 1407.499833][T32316] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1407.509321][T32316] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.7636: corrupted in-inode xattr: e_name out of bounds [ 1407.524007][T32316] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1407.526257][T32316] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.7636: couldn't read orphan inode 15 (err -117) [ 1407.536241][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1407.536339][ C1] EXT4-fs (loop2): initial error at time 2008390540: ext4_iget_extra_inode:5128: inode 15 [ 1407.536669][ C1] EXT4-fs (loop2): last error at time 2008390540: ext4_iget_extra_inode:5128: inode 15 [ 1407.575437][T32316] loop2: lost filesystem error report for type 5 error -117 [ 1407.580375][T32316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.696882][T32316] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1407.709537][T32316] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1407.720189][T32316] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7636: Corrupt directory, running e2fsck is recommended [ 1407.734805][T32316] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.7636: path /188/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1407.766173][T32316] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.7636: path /188/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1407.928456][T32322] loop6: detected capacity change from 0 to 1024 [ 1407.940801][T32322] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1407.955013][T32322] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.7641: lblock 2 mapped to illegal pblock 2 (length 1) [ 1407.970051][T32322] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1407.970144][T32322] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1407.979196][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1407.979211][ C1] EXT4-fs (loop6): initial error at time 2008390541: ext4_map_blocks:791: inode 3: block 2 [ 1407.979251][ C1] EXT4-fs (loop6): last error at time 2008390541: ext4_map_blocks:791: inode 3: block 2 [ 1408.016301][T32322] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.7641: lblock 0 mapped to illegal pblock 48 (length 1) [ 1408.030686][T32322] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1408.030789][T32322] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1408.049268][T12226] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 1408.066194][T12226] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1408.074884][T12226] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:21: Failed to release dquot type 0 [ 1408.086713][T32322] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.7641: Failed to acquire dquot type 0 [ 1408.099014][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.109808][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.119396][T23185] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1408.135281][T32322] loop6: lost filesystem error report for type 5 error -117 [ 1408.135420][T32322] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1408.152503][T23185] loop7: lost filesystem error report for type 5 error -117 [ 1408.152830][T23185] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1408.212921][T32322] loop6: lost filesystem error report for type 5 error -117 [ 1408.213095][T32322] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.7641: mark_inode_dirty error [ 1408.231552][T32322] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1408.231754][T23185] loop7: lost filesystem error report for type 5 error -117 [ 1408.240911][T23185] EXT4-fs error (device loop7): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1408.259459][T23185] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1408.259583][T32322] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1408.278767][T32322] EXT4-fs (loop6): 1 orphan inode deleted [ 1408.284924][T32322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1408.305096][T12213] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 1408.319405][T12213] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1408.321278][T12213] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1408.323802][ T28] audit: type=1326 audit(2008390541.361:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32324 comm="syz.1.7639" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1408.330351][T12213] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 0 [ 1408.330371][T12213] loop6: lost filesystem error report for type 5 error -117 [ 1408.377355][ T28] audit: type=1326 audit(2008390541.371:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32324 comm="syz.1.7639" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1408.417902][T32325] loop1: detected capacity change from 0 to 512 [ 1408.446530][ T28] audit: type=1326 audit(2008390541.371:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32324 comm="syz.1.7639" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1408.472492][ T28] audit: type=1326 audit(2008390541.371:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32324 comm="syz.1.7639" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1408.522544][T32322] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.7641: Invalid inode table block 1 in block_group 0 [ 1408.563690][T32330] xt_hashlimit: max too large, truncated to 1048576 [ 1408.571310][T32322] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1408.590697][T32330] xt_hashlimit: overflow, rate too high: 0 [ 1408.692782][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.174691][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.347513][T32350] loop2: detected capacity change from 0 to 128 [ 1409.389102][T32349] loop1: detected capacity change from 0 to 512 [ 1409.402392][T32350] msdos: Unknown parameter 'fl{sh' [ 1409.465681][T32349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.502943][T32357] usb usb2: usbfs: process 32357 (syz.0.7649) did not claim interface 1 before use [ 1409.540214][T32349] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.583098][T30762] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1409.598329][T30762] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 1409.609980][T30762] loop6: lost filesystem error report for type 5 error -117 [ 1409.611688][T22802] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1409.639699][T22802] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1409.649395][T22802] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1409.692578][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.808310][T32368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7652'. [ 1409.816753][T32370] loop1: detected capacity change from 0 to 1024 [ 1409.832222][T32368] loop2: detected capacity change from 0 to 512 [ 1409.838808][T32366] loop7: detected capacity change from 0 to 128 [ 1409.852450][T32366] msdos: Unknown parameter 'fl{sh' [ 1409.941201][T32372] loop6: detected capacity change from 0 to 512 [ 1410.000957][T32372] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1410.012464][T32372] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1410.022554][T32372] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7647: Corrupt directory, running e2fsck is recommended [ 1410.037663][T32372] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1410.048849][T32372] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7647: corrupted in-inode xattr: e_name out of bounds [ 1410.063667][T32372] fserror_report: 2 callbacks suppressed [ 1410.063738][T32372] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1410.071006][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1410.086522][ C1] EXT4-fs (loop6): initial error at time 2008390543: ext4_iget_extra_inode:5128: inode 15 [ 1410.096434][ C1] EXT4-fs (loop6): last error at time 2008390543: ext4_iget_extra_inode:5128: inode 15 [ 1410.107008][T32372] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7647: couldn't read orphan inode 15 (err -117) [ 1410.128317][T32372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.308839][T32370] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1410.845924][T32370] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.7650: lblock 2 mapped to illegal pblock 2 (length 1) [ 1410.874353][T32370] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1410.874492][T32370] __quota_error: 84 callbacks suppressed [ 1410.874503][T32370] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1410.883566][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1410.883580][ C0] EXT4-fs (loop1): initial error at time 2008390543: ext4_map_blocks:791: inode 3: block 2 [ 1410.883607][ C0] EXT4-fs (loop1): last error at time 2008390543: ext4_map_blocks:791: inode 3: block 2 [ 1411.332633][T32370] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.7650: lblock 0 mapped to illegal pblock 48 (length 1) [ 1411.353094][T32370] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1411.400289][T32370] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1411.807411][T32370] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.7650: Failed to acquire dquot type 0 [ 1411.818713][T32370] fserror_report: 3 callbacks suppressed [ 1411.818724][T32370] loop1: lost filesystem error report for type 5 error -117 [ 1411.829580][T32370] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1411.869800][ T28] audit: type=1326 audit(2008390544.881:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.7652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1411.897728][T32370] loop1: lost filesystem error report for type 5 error -117 [ 1411.897948][T32370] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.7650: mark_inode_dirty error [ 1411.935907][T32370] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1411.942957][T32370] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1411.943283][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.954404][T32385] loop2: detected capacity change from 0 to 1024 [ 1411.965178][T32370] EXT4-fs (loop1): 1 orphan inode deleted [ 1411.975869][T32385] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1411.979545][T32370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1411.984103][T30762] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1412.028783][T30762] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1412.037582][T30762] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 1412.212965][T32370] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.7650: Invalid inode table block 1 in block_group 0 [ 1412.226474][T32385] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.7657: lblock 2 mapped to illegal pblock 2 (length 1) [ 1412.280651][T32385] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1412.280774][T32385] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1412.289866][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1412.289897][ C0] EXT4-fs (loop2): initial error at time 2008390545: ext4_map_blocks:791: inode 3: block 2 [ 1412.289924][ C0] EXT4-fs (loop2): last error at time 2008390545: ext4_map_blocks:791: inode 3: block 2 [ 1412.477608][T32370] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1412.552156][T32385] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.7657: lblock 0 mapped to illegal pblock 48 (length 1) [ 1412.566603][T32385] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1412.671177][T32385] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1412.716304][T32400] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.7650: Invalid inode table block 1 in block_group 0 [ 1412.731643][T32400] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1412.744485][ T28] audit: type=1326 audit(2008390545.781:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32396 comm="syz.6.7659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca993ce59 code=0x7ffc0000 [ 1412.769933][ T28] audit: type=1326 audit(2008390545.781:9194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32396 comm="syz.6.7659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca993ce59 code=0x7ffc0000 [ 1412.795477][ T28] audit: type=1326 audit(2008390545.781:9195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32396 comm="syz.6.7659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca993ce59 code=0x7ffc0000 [ 1413.425236][ T28] audit: type=1326 audit(2008390545.781:9196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32396 comm="syz.6.7659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f9ca993ce59 code=0x7ffc0000 [ 1413.634065][T32385] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.7657: Failed to acquire dquot type 0 [ 1413.714369][T32403] loop6: detected capacity change from 0 to 512 [ 1413.716135][T32385] loop2: lost filesystem error report for type 5 error -117 [ 1413.721115][T32385] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1413.738907][T32385] loop2: lost filesystem error report for type 5 error -117 [ 1413.739829][T32385] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.7657: mark_inode_dirty error [ 1413.766404][T32385] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1413.768105][T32385] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1413.787571][T32385] EXT4-fs (loop2): 1 orphan inode deleted [ 1413.787740][ T30] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1413.807918][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1413.808027][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 1413.829353][T32385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1413.841821][ T30] loop2: lost filesystem error report for type 5 error -117 [ 1413.852729][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.862054][T32385] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.7657: Invalid inode table block 1 in block_group 0 [ 1413.872093][T30762] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1413.896061][T30762] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1413.896103][T32385] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1413.897875][T30762] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 1413.926272][T30762] loop1: lost filesystem error report for type 5 error -117 [ 1414.025754][T31107] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1414.045971][T31107] loop1: lost filesystem error report for type 5 error -117 [ 1414.046197][T31107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1414.068209][T31107] loop1: lost filesystem error report for type 5 error -117 [ 1414.068346][T31107] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1414.840251][T32417] loop7: detected capacity change from 0 to 512 [ 1415.044986][T32417] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1415.057092][T32417] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1415.067819][T32417] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7664: Corrupt directory, running e2fsck is recommended [ 1415.085036][T32417] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1415.093329][T32417] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7664: corrupted in-inode xattr: e_name out of bounds [ 1415.107208][T32417] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1415.112198][T32417] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7664: couldn't read orphan inode 15 (err -117) [ 1415.123760][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.133096][T32417] loop7: lost filesystem error report for type 5 error -117 [ 1415.133666][T32417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.311885][ T12] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1416.137706][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1416.145337][ T12] __quota_error: 46 callbacks suppressed [ 1416.145413][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1416.174499][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1416.298451][ T12] loop2: lost filesystem error report for type 5 error -117 [ 1416.376349][T28226] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1416.396830][T28226] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1416.397109][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.406727][T28226] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1416.426642][T28226] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1417.791052][ T28] audit: type=1326 audit(2008390550.821:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1418.575716][ T28] audit: type=1326 audit(2008390551.611:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1418.602302][T32451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7667'. [ 1418.615388][T32451] loop2: detected capacity change from 0 to 512 [ 1418.638031][ T28] audit: type=1326 audit(2008390551.611:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1418.663860][ T28] audit: type=1326 audit(2008390551.611:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1418.739501][T32453] loop7: detected capacity change from 0 to 512 [ 1418.875190][T32453] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1418.887420][T32453] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1418.898159][T32453] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7672: Corrupt directory, running e2fsck is recommended [ 1418.925772][T32453] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1418.938956][T32453] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7672: corrupted in-inode xattr: e_name out of bounds [ 1418.953729][T32453] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1418.958536][T32453] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7672: couldn't read orphan inode 15 (err -117) [ 1418.968125][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1418.968212][ C1] EXT4-fs (loop7): initial error at time 2008390551: ext4_iget_extra_inode:5128: inode 15 [ 1418.968241][ C1] EXT4-fs (loop7): last error at time 2008390551: ext4_iget_extra_inode:5128: inode 15 [ 1419.006014][T32453] fserror_report: 2 callbacks suppressed [ 1419.006047][T32453] loop7: lost filesystem error report for type 5 error -117 [ 1419.013718][T32453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.109821][T32453] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1419.121337][T32453] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1419.131484][T32453] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7672: Corrupt directory, running e2fsck is recommended [ 1419.144594][T32453] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.7672: path /464/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1419.170112][T32453] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.7672: path /464/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1419.205350][T32458] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1419.498679][ T28] audit: type=1326 audit(2008390551.641:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1419.601723][ T28] audit: type=1326 audit(2008390551.641:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1419.890096][ T28] audit: type=1326 audit(2008390551.641:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1419.925726][T32475] loop2: detected capacity change from 0 to 1024 [ 1419.980337][T32475] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1420.117839][ T28] audit: type=1326 audit(2008390551.641:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1420.157317][ T28] audit: type=1326 audit(2008390551.641:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32444 comm="syz.2.7667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc948efce59 code=0x7ffc0000 [ 1420.193025][T32475] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.7677: lblock 2 mapped to illegal pblock 2 (length 1) [ 1420.222338][T32475] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1420.222487][T32475] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.7677: lblock 0 mapped to illegal pblock 48 (length 1) [ 1420.231616][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1420.231638][ C1] EXT4-fs (loop2): initial error at time 2008390553: ext4_map_blocks:791: inode 3: block 2 [ 1420.231687][ C1] EXT4-fs (loop2): last error at time 2008390553: ext4_map_blocks:791: inode 3: block 2 [ 1420.280720][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.284016][T32475] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1420.324736][T32475] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.7677: Failed to acquire dquot type 0 [ 1420.377663][T32475] loop2: lost filesystem error report for type 5 error -117 [ 1420.377849][T32475] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1420.414738][T32475] loop2: lost filesystem error report for type 5 error -117 [ 1420.414841][T32475] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.7677: mark_inode_dirty error [ 1420.446794][T32482] syzkaller0: entered promiscuous mode [ 1420.454545][T32475] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.454692][T32475] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1420.482117][T32482] syzkaller0: entered allmulticast mode [ 1420.487809][T32475] EXT4-fs (loop2): 1 orphan inode deleted [ 1420.508174][T12195] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1420.531488][T32475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1420.537632][T12195] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1420.543989][T12195] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 0 [ 1420.572646][T32497] loop7: detected capacity change from 0 to 512 [ 1420.581955][T32475] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.7677: Invalid inode table block 1 in block_group 0 [ 1420.596962][T32475] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1420.659499][T32500] deleting an unspecified loop device is not supported. [ 1420.698449][T32497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.108409][T32508] loop6: detected capacity change from 0 to 512 [ 1421.210440][T32508] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1421.221940][T32508] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1421.232083][T32508] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7686: Corrupt directory, running e2fsck is recommended [ 1421.247286][T32508] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1421.255644][T32508] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7686: corrupted in-inode xattr: e_name out of bounds [ 1421.269552][T32508] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1421.269940][T32508] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7686: couldn't read orphan inode 15 (err -117) [ 1421.290899][T32508] loop6: lost filesystem error report for type 5 error -117 [ 1421.292555][T32508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.449938][T32508] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1421.461518][T32508] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1421.471661][T32508] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7686: Corrupt directory, running e2fsck is recommended [ 1421.484682][T32508] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7686: path /498/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1421.509722][T32508] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.7686: path /498/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1421.538878][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.666879][T32497] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1421.698663][ T30] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1421.730526][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1421.730635][ T30] __quota_error: 41 callbacks suppressed [ 1421.730645][ T30] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1421.792476][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 0 [ 1421.829206][ T30] loop2: lost filesystem error report for type 5 error -117 [ 1421.829952][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.846478][T28226] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1421.993209][T28226] loop2: lost filesystem error report for type 5 error -117 [ 1421.993365][T28226] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1422.461453][T28226] loop2: lost filesystem error report for type 5 error -117 [ 1422.470076][T28226] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1422.571975][T28226] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1422.637835][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.164215][T32530] loop6: detected capacity change from 0 to 512 [ 1424.267994][T32530] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1424.280309][T32530] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1424.292460][T32530] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7691: Corrupt directory, running e2fsck is recommended [ 1424.323562][T32530] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1424.333179][T32530] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7691: corrupted in-inode xattr: e_name out of bounds [ 1424.347496][T32530] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1424.349715][T32530] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7691: couldn't read orphan inode 15 (err -117) [ 1424.359380][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1424.359443][ C1] EXT4-fs (loop6): initial error at time 2008390557: ext4_iget_extra_inode:5128: inode 15 [ 1424.359600][ C1] EXT4-fs (loop6): last error at time 2008390557: ext4_iget_extra_inode:5128: inode 15 [ 1424.399807][T32530] loop6: lost filesystem error report for type 5 error -117 [ 1424.409674][T32530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.482543][T32536] netlink: 'syz.0.7692': attribute type 13 has an invalid length. [ 1424.532314][T32530] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1424.543907][T32530] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1424.554064][T32530] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7691: Corrupt directory, running e2fsck is recommended [ 1424.566959][T32530] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7691: path /500/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1424.673445][T32530] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.7691: path /500/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1424.951093][T32543] loop7: detected capacity change from 0 to 512 [ 1424.957931][T32543] ext4: Unknown parameter 'Bš¦¢¸ [ 1426.567656][T32577] __dump_stack+0x1d/0x30 [ 1426.567747][T32577] dump_stack_lvl+0x95/0xd0 [ 1426.567764][T32577] dump_stack+0x15/0x1b [ 1426.567783][T32577] should_fail_ex+0x263/0x280 [ 1426.567802][T32577] should_fail+0xb/0x20 [ 1426.567822][T32577] should_fail_usercopy+0x1a/0x20 [ 1426.567882][T32577] _copy_from_user+0x1c/0xb0 [ 1426.567902][T32577] ___sys_sendmsg+0xc1/0x1e0 [ 1426.567942][T32577] __x64_sys_sendmsg+0xd4/0x160 [ 1426.567968][T32577] x64_sys_call+0x194c/0x3020 [ 1426.568004][T32577] do_syscall_64+0x12c/0x3b0 [ 1426.568156][T32577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.568175][T32577] RIP: 0033:0x7fad057cce59 [ 1426.568190][T32577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.568251][T32577] RSP: 002b:00007fad04227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.568272][T32577] RAX: ffffffffffffffda RBX: 00007fad05a45fa0 RCX: 00007fad057cce59 [ 1426.568288][T32577] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1426.568303][T32577] RBP: 00007fad04227090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.568317][T32577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.568329][T32577] R13: 00007fad05a46038 R14: 00007fad05a45fa0 R15: 00007ffc7ad29d58 [ 1426.568354][T32577] [ 1426.729683][T32578] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.7698: Invalid inode table block 1 in block_group 0 [ 1426.750966][T32578] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1426.848539][T32580] loop2: detected capacity change from 0 to 512 [ 1426.859879][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.900495][T32580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1426.913337][T32580] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.964534][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.975603][ T12] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1426.989811][ T12] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1426.989914][ T12] __quota_error: 2 callbacks suppressed [ 1426.989925][ T12] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1427.013098][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1427.024591][ T12] loop6: lost filesystem error report for type 5 error -117 [ 1427.025007][T22802] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1427.026190][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.045318][T22802] loop6: lost filesystem error report for type 5 error -117 [ 1427.057854][T22802] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1427.074949][T32585] loop1: detected capacity change from 0 to 512 [ 1427.084037][T32585] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1427.089521][T22802] loop6: lost filesystem error report for type 5 error -117 [ 1427.095464][T32585] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7704: invalid indirect mapped block 4294967295 (level 0) [ 1427.095513][T32585] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1427.095663][T32585] EXT4-fs (loop1): Remounting filesystem read-only [ 1427.116830][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1427.116850][ C1] EXT4-fs (loop1): initial error at time 2008390560: ext4_free_branches:1023: inode 16 [ 1427.116874][ C1] EXT4-fs (loop1): last error at time 2008390560: ext4_free_branches:1023: inode 16 [ 1427.127887][T22802] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 1427.132772][T32585] EXT4-fs (loop1): 1 orphan inode deleted [ 1427.163167][T22802] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1427.171414][T32585] EXT4-fs (loop1): 1 truncate cleaned up [ 1427.190696][ T28] audit: type=1326 audit(2008390560.221:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.218007][T32585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.218538][ T28] audit: type=1326 audit(2008390560.221:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.218876][ T28] audit: type=1326 audit(2008390560.251:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.219070][ T28] audit: type=1326 audit(2008390560.251:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.219184][ T28] audit: type=1326 audit(2008390560.251:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.219674][ T28] audit: type=1326 audit(2008390560.251:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.219830][ T28] audit: type=1326 audit(2008390560.251:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.219954][ T28] audit: type=1326 audit(2008390560.251:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.220090][ T28] audit: type=1326 audit(2008390560.251:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32588 comm="syz.0.7709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad057cce59 code=0x7ffc0000 [ 1427.220777][T32591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1427.256139][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.304403][T32599] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1427.484112][T32599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7710'. [ 1427.521983][T32601] bridge0: port 4(batadv1) entered blocking state [ 1427.522067][T32601] bridge0: port 4(batadv1) entered disabled state [ 1427.522281][T32601] batadv1: entered allmulticast mode [ 1427.523733][T32601] batadv1: entered promiscuous mode [ 1427.643132][T32608] loop6: detected capacity change from 0 to 512 [ 1427.760817][T32608] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1427.773944][T32608] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1427.784771][T32608] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7706: Corrupt directory, running e2fsck is recommended [ 1427.829935][T32608] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1427.840770][T32608] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7706: corrupted in-inode xattr: e_name out of bounds [ 1427.855684][T32608] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1427.857783][T32608] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7706: couldn't read orphan inode 15 (err -117) [ 1427.867348][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1427.867587][ C0] EXT4-fs (loop6): initial error at time 2008390560: ext4_iget_extra_inode:5128: inode 15 [ 1427.867759][ C0] EXT4-fs (loop6): last error at time 2008390560: ext4_iget_extra_inode:5128: inode 15 [ 1427.908774][T32608] loop6: lost filesystem error report for type 5 error -117 [ 1427.916245][T32608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.091815][T32608] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1428.103334][T32608] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1428.113420][T32608] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7706: Corrupt directory, running e2fsck is recommended [ 1428.126925][T32608] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7706: path /503/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1428.152379][T32608] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 8: comm syz.6.7706: path /503/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1428.180934][ T12] batman_adv: batadv1: IGMP Querier appeared [ 1428.186959][ T12] batman_adv: batadv1: MLD Querier appeared [ 1428.364266][T32612] loop2: detected capacity change from 0 to 512 [ 1428.383553][T32615] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7714'. [ 1428.401194][T32612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1428.433915][T32618] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1428.443575][T32619] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7714'. [ 1428.456475][T32612] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 1428.479360][T32618] netlink: 276 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1428.492260][T32612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 1428.602132][T32612] System zones: 1-12 [ 1428.606282][T32612] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1428.615054][T32612] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7713: Block bitmap for bg 0 marked uninitialized [ 1428.643406][T32612] loop2: lost filesystem error report for type 5 error -117 [ 1428.651002][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1428.664735][ C0] EXT4-fs (loop2): initial error at time 2008390561: ext4_read_block_bitmap_nowait:517 [ 1428.674398][ C0] EXT4-fs (loop2): last error at time 2008390561: ext4_read_block_bitmap_nowait:517 [ 1428.705662][T32612] EXT4-fs (loop2): Remounting filesystem read-only [ 1428.712302][T32612] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1428.739910][T32612] EXT4-fs (loop2): 1 truncate cleaned up [ 1428.752051][T32612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1428.914586][T32624] loop1: detected capacity change from 0 to 1024 [ 1428.942882][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.012847][T32624] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1429.037572][T32624] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.7717: lblock 2 mapped to illegal pblock 2 (length 1) [ 1429.064107][T32624] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1429.064282][T32624] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.7717: lblock 0 mapped to illegal pblock 48 (length 1) [ 1429.073370][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1429.073390][ C0] EXT4-fs (loop1): initial error at time 2008390562: ext4_map_blocks:791: inode 3: block 2 [ 1429.073424][ C0] EXT4-fs (loop1): last error at time 2008390562: ext4_map_blocks:791: inode 3: block 2 [ 1429.122701][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.129227][T32624] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1429.133458][T32624] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.7717: Failed to acquire dquot type 0 [ 1429.159145][T32624] loop1: lost filesystem error report for type 5 error -117 [ 1429.160572][T32624] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1429.183834][T32624] loop1: lost filesystem error report for type 5 error -117 [ 1429.185240][T32624] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.7717: mark_inode_dirty error [ 1429.204697][T32624] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1429.241643][T32624] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1429.276191][T32624] EXT4-fs (loop1): 1 orphan inode deleted [ 1429.290002][T32624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1429.302255][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1429.356945][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1429.434934][T32624] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.7717: Invalid inode table block 1 in block_group 0 [ 1429.467478][T32644] loop2: detected capacity change from 0 to 512 [ 1429.545242][T32624] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1430.703477][T32644] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1430.715798][T32644] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1430.726198][T32644] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7722: Corrupt directory, running e2fsck is recommended [ 1431.131480][T32655] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz.1.7717: Invalid inode table block 1 in block_group 0 [ 1431.257220][T32655] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1431.274958][T32644] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1431.283192][T32644] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.7722: corrupted in-inode xattr: e_name out of bounds [ 1431.297074][T32644] fserror_report: 1 callbacks suppressed [ 1431.297088][T32644] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1431.374678][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1431.390218][ C0] EXT4-fs (loop2): initial error at time 2008390564: ext4_iget_extra_inode:5128: inode 15 [ 1431.400122][ C0] EXT4-fs (loop2): last error at time 2008390564: ext4_iget_extra_inode:5128: inode 15 [ 1431.414870][T32644] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.7722: couldn't read orphan inode 15 (err -117) [ 1431.427478][T32644] fserror_report: 1 callbacks suppressed [ 1431.427555][T32644] loop2: lost filesystem error report for type 5 error -117 [ 1431.453520][T32644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.546839][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.706077][T32642] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1431.717721][T32642] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 1431.727815][T32642] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7722: Corrupt directory, running e2fsck is recommended [ 1431.740804][T32642] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.7722: path /201/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1431.771436][T32642] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.7722: path /201/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1431.795418][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1431.844276][ T12] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1431.844519][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1431.898003][ T12] loop1: lost filesystem error report for type 5 error -117 [ 1431.955830][T31107] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1431.956717][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.974720][T31107] loop1: lost filesystem error report for type 5 error -117 [ 1431.991155][T31107] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1432.031689][T31107] loop1: lost filesystem error report for type 5 error -117 [ 1432.031782][T31107] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1432.036648][T32665] __nla_validate_parse: 2 callbacks suppressed [ 1432.036741][T32665] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1432.089872][T32675] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1432.101820][T32674] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7728'. [ 1432.115866][T32674] netlink: 292 bytes leftover after parsing attributes in process `syz.1.7728'. [ 1432.124072][T32677] netlink: 'syz.7.7735': attribute type 13 has an invalid length. [ 1432.219724][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 1432.219739][ T28] audit: type=1326 audit(2008390565.251:9439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32651 comm="syz.6.7726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca993ce59 code=0x7fc00000 [ 1432.373775][T32686] tipc: Can't bind to reserved service type 0 [ 1432.586676][T32697] loop7: detected capacity change from 0 to 512 [ 1432.602991][T32699] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1432.630772][T32697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1432.648105][T32699] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1432.712735][T32697] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1432.769881][T32713] netlink: 404 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1432.835398][T32720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1432.844998][T32720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1432.845278][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.892738][T32724] loop7: detected capacity change from 0 to 512 [ 1432.904631][T32724] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7762: invalid block [ 1432.990269][T32724] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1432.990655][T32724] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7762: invalid indirect mapped block 4294967295 (level 1) [ 1433.013968][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1433.013990][ C0] EXT4-fs (loop7): initial error at time 2008390566: ext4_get_branch:178: inode 11: block 4294967295 [ 1433.014030][ C0] EXT4-fs (loop7): last error at time 2008390566: ext4_get_branch:178: inode 11: block 4294967295 [ 1433.094128][T32727] loop1: detected capacity change from 0 to 512 [ 1433.188205][T32722] loop6: detected capacity change from 0 to 1024 [ 1433.216311][T32727] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1433.228625][T32727] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1433.239225][T32727] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7743: Corrupt directory, running e2fsck is recommended [ 1433.255834][T32727] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1433.264082][T32727] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7743: corrupted in-inode xattr: e_name out of bounds [ 1433.277973][T32727] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1433.279849][T32727] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7743: couldn't read orphan inode 15 (err -117) [ 1433.300838][T32727] loop1: lost filesystem error report for type 5 error -117 [ 1433.302789][T32727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.456926][T32722] EXT4-fs: Mount option(s) incompatible with ext3 [ 1433.975478][T32724] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1433.978452][T32724] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7762: invalid indirect mapped block 4294967295 (level 1) [ 1434.482437][T32724] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1434.601787][T32724] EXT4-fs (loop7): 2 truncates cleaned up [ 1434.867751][T32724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.913198][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.927051][T32724] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.7.7762: path /478/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 1435.005237][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.037779][T32739] netlink: 276 bytes leftover after parsing attributes in process `syz.1.7756'. [ 1435.418785][T32759] loop1: detected capacity change from 0 to 512 [ 1435.552791][T32759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.565497][T32759] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.149009][ T300] loop6: detected capacity change from 0 to 512 [ 1436.203503][ T300] ext4: Unknown parameter 'Bš¦¢¸ [ 1436.750505][ T308] __dump_stack+0x1d/0x30 [ 1436.750530][ T308] dump_stack_lvl+0x95/0xd0 [ 1436.750601][ T308] dump_stack+0x15/0x1b [ 1436.750617][ T308] should_fail_ex+0x263/0x280 [ 1436.750635][ T308] should_failslab+0x8c/0xb0 [ 1436.750660][ T308] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1436.750747][ T308] ? __alloc_skb+0x2d6/0x690 [ 1436.750766][ T308] __alloc_skb+0x2d6/0x690 [ 1436.750782][ T308] ? __alloc_skb+0x200/0x690 [ 1436.750800][ T308] netlink_alloc_large_skb+0xbf/0xf0 [ 1436.750847][ T308] netlink_sendmsg+0x40c/0x6f0 [ 1436.750878][ T308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.750909][ T308] ____sys_sendmsg+0x563/0x5b0 [ 1436.750994][ T308] ___sys_sendmsg+0x195/0x1e0 [ 1436.751026][ T308] __x64_sys_sendmsg+0xd4/0x160 [ 1436.751052][ T308] x64_sys_call+0x194c/0x3020 [ 1436.751075][ T308] do_syscall_64+0x12c/0x3b0 [ 1436.751185][ T308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.751207][ T308] RIP: 0033:0x7fea84efce59 [ 1436.751223][ T308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.751238][ T308] RSP: 002b:00007fea83957028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.751260][ T308] RAX: ffffffffffffffda RBX: 00007fea85175fa0 RCX: 00007fea84efce59 [ 1436.751306][ T308] RDX: 0000000000004010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1436.751320][ T308] RBP: 00007fea83957090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.751334][ T308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.751348][ T308] R13: 00007fea85176038 R14: 00007fea85175fa0 R15: 00007fffd7446298 [ 1436.751368][ T308] [ 1436.943728][ T313] loop6: detected capacity change from 0 to 1024 [ 1437.000674][ T313] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1437.019261][ T313] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 1437.124317][ T327] loop6: detected capacity change from 0 to 256 [ 1437.143025][ T327] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1437.190850][ T332] loop1: detected capacity change from 0 to 512 [ 1437.234328][ T327] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1437.268191][ T332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.296794][ T332] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.312393][ T335] loop7: detected capacity change from 0 to 1024 [ 1437.319644][ T335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1437.490577][ T335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.502961][ T335] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.683660][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1437.770481][ T344] loop6: detected capacity change from 0 to 512 [ 1437.825130][ T346] loop7: detected capacity change from 0 to 512 [ 1437.879557][ T344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.906463][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.964143][ T346] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1438.012567][ T344] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.031042][ T346] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1438.046240][ T346] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1438.112386][ T346] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1438.282531][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.300841][ T346] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 1438.625506][ T346] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #16: comm syz.7.7780: inode has both inline data and extents flags [ 1438.870358][ T360] loop1: detected capacity change from 0 to 512 [ 1438.948216][ T346] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1438.951060][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1438.966638][ C0] EXT4-fs (loop7): initial error at time 2008390571: ext4_orphan_get:1397: inode 16 [ 1438.976051][ C0] EXT4-fs (loop7): last error at time 2008390571: ext4_orphan_get:1397: inode 16 [ 1438.999374][ T346] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7780: couldn't read orphan inode 16 (err -117) [ 1439.038540][ T360] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1439.051067][ T360] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1439.061593][ T360] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7783: Corrupt directory, running e2fsck is recommended [ 1439.089690][ T360] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1439.099760][ T360] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7783: corrupted in-inode xattr: e_name out of bounds [ 1439.114757][ T360] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1439.121066][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1439.136604][ C0] EXT4-fs (loop1): initial error at time 2008390572: ext4_iget_extra_inode:5128: inode 15 [ 1439.146545][ C0] EXT4-fs (loop1): last error at time 2008390572: ext4_iget_extra_inode:5128: inode 15 [ 1439.160160][ T360] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7783: couldn't read orphan inode 15 (err -117) [ 1439.172167][ T360] loop1: lost filesystem error report for type 5 error -117 [ 1439.208807][ T346] loop7: lost filesystem error report for type 5 error -117 [ 1439.217447][ T360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.361314][ T360] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1439.373076][ T360] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1439.384608][ T360] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7783: Corrupt directory, running e2fsck is recommended [ 1439.398460][ T360] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.7783: path /63/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1439.433156][ T346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1439.449131][ T360] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.7783: path /63/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1439.569236][ T346] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.7780: iget: bad i_size value: 360287970189639690 [ 1439.744323][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.292930][ T376] loop6: detected capacity change from 0 to 512 [ 1440.375367][ T376] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1440.387318][ T376] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1440.397413][ T376] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7787: Corrupt directory, running e2fsck is recommended [ 1440.418292][ T376] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1440.426565][ T376] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7787: corrupted in-inode xattr: e_name out of bounds [ 1440.440515][ T376] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1440.441141][ T376] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7787: couldn't read orphan inode 15 (err -117) [ 1440.462139][ T376] loop6: lost filesystem error report for type 5 error -117 [ 1440.463601][ T376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.551529][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.646730][ T385] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1440.658483][ T385] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1440.668590][ T385] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7787: Corrupt directory, running e2fsck is recommended [ 1440.681683][ T385] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7787: path /522/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1440.709867][ T387] FAULT_INJECTION: forcing a failure. [ 1440.709867][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.722633][ T387] CPU: 1 UID: 0 PID: 387 Comm: syz.0.7792 Not tainted syzkaller #0 PREEMPT(lazy) [ 1440.722668][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1440.722681][ T387] Call Trace: [ 1440.722760][ T387] [ 1440.722769][ T387] __dump_stack+0x1d/0x30 [ 1440.722798][ T387] dump_stack_lvl+0x95/0xd0 [ 1440.722817][ T387] dump_stack+0x15/0x1b [ 1440.722866][ T387] should_fail_ex+0x263/0x280 [ 1440.722886][ T387] should_failslab+0x8c/0xb0 [ 1440.722915][ T387] __kmalloc_cache_node_noprof+0x6b/0x470 [ 1440.722961][ T387] ? page_pool_create_percpu+0x4d/0x690 [ 1440.723060][ T387] page_pool_create_percpu+0x4d/0x690 [ 1440.723080][ T387] page_pool_create+0x1a/0x30 [ 1440.723180][ T387] nsim_open+0x1ee/0x4c0 [ 1440.723248][ T387] __dev_open+0x321/0x560 [ 1440.723277][ T387] __dev_change_flags+0x1c8/0x490 [ 1440.723297][ T387] ? __kmalloc_noprof+0x1e3/0x4d0 [ 1440.723373][ T387] netif_change_flags+0x5a/0xd0 [ 1440.723391][ T387] do_setlink+0x905/0x2950 [ 1440.723411][ T387] ? selinux_capable+0x31/0x40 [ 1440.723442][ T387] ? security_capable+0x7b/0x90 [ 1440.723476][ T387] ? ns_capable+0x7c/0xb0 [ 1440.723540][ T387] ? full_name_hash+0x92/0xe0 [ 1440.723633][ T387] rtnl_newlink+0x108a/0x1400 [ 1440.723661][ T387] ? __rcu_read_unlock+0x33/0x70 [ 1440.723690][ T387] ? __schedule+0x951/0xd40 [ 1440.723712][ T387] ? __rcu_read_unlock+0x4e/0x70 [ 1440.723738][ T387] ? preempt_schedule_irq+0x2d/0x50 [ 1440.723758][ T387] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 1440.723816][ T387] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 1440.723842][ T387] ? _raw_spin_lock+0x52/0xa0 [ 1440.723859][ T387] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1440.723883][ T387] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1440.723980][ T387] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 1440.724081][ T387] ? __pfx_rtnl_newlink+0x10/0x10 [ 1440.724165][ T387] ? rcu_read_unlock_special+0x9f/0x200 [ 1440.724182][ T387] ? __pfx_rtnl_newlink+0x10/0x10 [ 1440.724266][ T387] ? __pfx_rtnl_newlink+0x10/0x10 [ 1440.724296][ T387] rtnetlink_rcv_msg+0x64b/0x720 [ 1440.724321][ T387] ? preempt_schedule_irq+0x2d/0x50 [ 1440.724346][ T387] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 1440.724367][ T387] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 1440.724394][ T387] netlink_rcv_skb+0x123/0x220 [ 1440.724429][ T387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1440.724461][ T387] rtnetlink_rcv+0x1c/0x30 [ 1440.724492][ T387] netlink_unicast+0x5a8/0x680 [ 1440.724518][ T387] netlink_sendmsg+0x5c8/0x6f0 [ 1440.724550][ T387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.724583][ T387] ____sys_sendmsg+0x563/0x5b0 [ 1440.724692][ T387] ___sys_sendmsg+0x195/0x1e0 [ 1440.724732][ T387] __x64_sys_sendmsg+0xd4/0x160 [ 1440.724762][ T387] x64_sys_call+0x194c/0x3020 [ 1440.724812][ T387] do_syscall_64+0x12c/0x3b0 [ 1440.724844][ T387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.724911][ T387] RIP: 0033:0x7fad057cce59 [ 1440.724924][ T387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.724939][ T387] RSP: 002b:00007fad04227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.724956][ T387] RAX: ffffffffffffffda RBX: 00007fad05a45fa0 RCX: 00007fad057cce59 [ 1440.724968][ T387] RDX: 0000000004000844 RSI: 0000200000000280 RDI: 0000000000000003 [ 1440.724993][ T387] RBP: 00007fad04227090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.725007][ T387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.725021][ T387] R13: 00007fad05a46038 R14: 00007fad05a45fa0 R15: 00007ffc7ad29d58 [ 1440.725042][ T387] [ 1440.725130][ T387] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1441.629981][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.645454][ T401] __nla_validate_parse: 1 callbacks suppressed [ 1441.645470][ T401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7797'. [ 1442.051460][ T421] loop1: detected capacity change from 0 to 512 [ 1444.837541][ T421] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1444.850845][ T421] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1445.171216][ T421] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.7809: Corrupt directory, running e2fsck is recommended [ 1445.633502][ T421] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1445.651282][ T421] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.7809: corrupted in-inode xattr: e_name out of bounds [ 1445.667512][ T421] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1445.671334][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1445.689812][ C1] EXT4-fs (loop1): initial error at time 2008390578: ext4_iget_extra_inode:5128: inode 15 [ 1445.702761][ C1] EXT4-fs (loop1): last error at time 2008390578: ext4_iget_extra_inode:5128: inode 15 [ 1445.815944][ T437] loop6: detected capacity change from 0 to 512 [ 1446.235350][ T421] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7809: couldn't read orphan inode 15 (err -117) [ 1446.247194][ T421] loop1: lost filesystem error report for type 5 error -117 [ 1446.325019][ T437] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1446.345676][ T437] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1446.356505][ T437] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7805: Corrupt directory, running e2fsck is recommended [ 1446.467867][ T437] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1446.470097][ T421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.476148][ T437] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.7805: corrupted in-inode xattr: e_name out of bounds [ 1446.502339][ T437] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1446.502585][ T437] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.7805: couldn't read orphan inode 15 (err -117) [ 1446.523500][ T437] loop6: lost filesystem error report for type 5 error -117 [ 1446.524139][ T437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.558566][T31107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.201106][ T451] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1448.212711][ T451] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 1448.222936][ T451] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.7805: Corrupt directory, running e2fsck is recommended [ 1448.242790][ T431] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1448.286799][ T451] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.7805: path /525/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1448.523746][ T454] FAULT_INJECTION: forcing a failure. [ 1448.523746][ T454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.539841][ T454] CPU: 1 UID: 0 PID: 454 Comm: syz.0.7811 Not tainted syzkaller #0 PREEMPT(lazy) [ 1448.539869][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1448.539882][ T454] Call Trace: [ 1448.539965][ T454] [ 1448.539973][ T454] __dump_stack+0x1d/0x30 [ 1448.539994][ T454] dump_stack_lvl+0x95/0xd0 [ 1448.540071][ T454] dump_stack+0x15/0x1b [ 1448.540089][ T454] should_fail_ex+0x263/0x280 [ 1448.540106][ T454] should_fail+0xb/0x20 [ 1448.540120][ T454] should_fail_usercopy+0x1a/0x20 [ 1448.540138][ T454] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 1448.540237][ T454] ? simple_write_begin+0xf5/0x370 [ 1448.540263][ T454] ? cap_inode_need_killpriv+0x3a/0x50 [ 1448.540285][ T454] generic_perform_write+0x2c1/0x490 [ 1448.540351][ T454] __generic_file_write_iter+0x9e/0x120 [ 1448.540396][ T454] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1448.540418][ T454] generic_file_write_iter+0x8d/0x310 [ 1448.540440][ T454] ? _parse_integer_limit+0x170/0x190 [ 1448.540538][ T454] ? _parse_integer+0x27/0x40 [ 1448.540643][ T454] ? kstrtoull+0x111/0x140 [ 1448.540686][ T454] ? kstrtouint+0x76/0xc0 [ 1448.540772][ T454] ? kstrtouint_from_user+0xa8/0xf0 [ 1448.540826][ T454] ? avc_policy_seqno+0x15/0x30 [ 1448.540853][ T454] ? selinux_file_permission+0x1e1/0x320 [ 1448.540878][ T454] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1448.540971][ T454] vfs_write+0x5a6/0x9f0 [ 1448.541003][ T454] ksys_write+0xdc/0x1a0 [ 1448.541031][ T454] __x64_sys_write+0x40/0x50 [ 1448.541059][ T454] x64_sys_call+0x27e1/0x3020 [ 1448.541121][ T454] do_syscall_64+0x12c/0x3b0 [ 1448.541153][ T454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.541219][ T454] RIP: 0033:0x7fad057cce59 [ 1448.541233][ T454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.541265][ T454] RSP: 002b:00007fad04227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1448.541287][ T454] RAX: ffffffffffffffda RBX: 00007fad05a45fa0 RCX: 00007fad057cce59 [ 1448.541302][ T454] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000006 [ 1448.541317][ T454] RBP: 00007fad04227090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.541332][ T454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.541346][ T454] R13: 00007fad05a46038 R14: 00007fad05a45fa0 R15: 00007ffc7ad29d58 [ 1448.541365][ T454] [ 1448.852969][ T461] loop1: detected capacity change from 0 to 128 [ 1448.864098][ T460] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7813'. [ 1448.874604][ T461] msdos: Unknown parameter 'fl{sh' [ 1448.901124][ T460] loop7: detected capacity change from 0 to 512 [ 1449.138961][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.186415][ T468] loop6: detected capacity change from 0 to 512 [ 1449.196314][ T468] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1449.229068][ T468] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.7814: invalid indirect mapped block 4294967295 (level 0) [ 1449.243206][ T468] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1449.243358][ T468] EXT4-fs (loop6): Remounting filesystem read-only [ 1449.252547][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1449.252567][ C1] EXT4-fs (loop6): initial error at time 2008390582: ext4_free_branches:1023: inode 16 [ 1449.252597][ C1] EXT4-fs (loop6): last error at time 2008390582: ext4_free_branches:1023: inode 16 [ 1449.366541][ T468] EXT4-fs (loop6): 1 orphan inode deleted [ 1449.385161][ T468] EXT4-fs (loop6): 1 truncate cleaned up [ 1449.391696][ T468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.257304][ T485] loop7: detected capacity change from 0 to 512 [ 1450.483468][ T485] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1450.483562][ T485] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1450.483752][ T485] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7817: Corrupt directory, running e2fsck is recommended [ 1450.485940][ T485] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1450.485973][ T485] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.7817: corrupted in-inode xattr: e_name out of bounds [ 1450.486081][ T485] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1450.486585][ T485] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7817: couldn't read orphan inode 15 (err -117) [ 1450.486629][ T485] loop7: lost filesystem error report for type 5 error -117 [ 1450.488051][ T485] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.536975][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.665602][ T497] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1450.677146][ T497] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 1450.687304][ T497] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7817: Corrupt directory, running e2fsck is recommended [ 1450.700346][ T497] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.7817: path /491/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 1450.740846][ T497] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 8: comm syz.7.7817: path /491/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 1451.185775][ T28] audit: type=1326 audit(2008390584.221:9440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1451.214163][ T505] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7823'. [ 1451.238217][ T481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1451.568226][ T514] netlink: 292 bytes leftover after parsing attributes in process `syz.6.7823'. [ 1451.586751][ T28] audit: type=1326 audit(2008390584.261:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.223170][ T491] loop1: detected capacity change from 0 to 512 [ 1452.246743][ T28] audit: type=1326 audit(2008390584.261:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.456349][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.498899][ T28] audit: type=1326 audit(2008390584.261:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.663525][ T28] audit: type=1326 audit(2008390584.261:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.773026][ T526] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7826'. [ 1452.788945][ T28] audit: type=1326 audit(2008390584.261:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.788994][ T28] audit: type=1326 audit(2008390584.261:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.789094][ T28] audit: type=1326 audit(2008390584.261:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.789119][ T28] audit: type=1326 audit(2008390584.261:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.789144][ T28] audit: type=1326 audit(2008390584.261:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=480 comm="syz.1.7819" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84efce59 code=0x7ffc0000 [ 1452.916731][ T533] loop1: detected capacity change from 0 to 128 [ 1452.917036][ T533] msdos: Unknown parameter 'fl{sh' [ 1452.929048][ T526] loop7: detected capacity change from 0 to 512 [ 1455.127543][ T552] netlink: 284 bytes leftover after parsing attributes in process `syz.7.7836'. [ 1455.487603][ T553] netlink: 284 bytes leftover after parsing attributes in process `syz.7.7836'. [ 1455.844805][ T562] loop1: detected capacity change from 0 to 764 [ 1456.348744][ T562] syz.1.7840 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1456.363093][ T562] CPU: 1 UID: 0 PID: 562 Comm: syz.1.7840 Not tainted syzkaller #0 PREEMPT(lazy) [ 1456.363153][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1456.363166][ T562] Call Trace: [ 1456.363174][ T562] [ 1456.363183][ T562] __dump_stack+0x1d/0x30 [ 1456.363207][ T562] dump_stack_lvl+0x95/0xd0 [ 1456.363226][ T562] dump_stack+0x15/0x1b [ 1456.363314][ T562] dump_header+0x80/0x240 [ 1456.363334][ T562] oom_kill_process+0x295/0x350 [ 1456.363370][ T562] out_of_memory+0x97d/0xb80 [ 1456.363481][ T562] try_charge_memcg+0x62f/0xa10 [ 1456.363521][ T562] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1456.363597][ T562] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1456.363666][ T562] alloc_pages_mpol+0xb3/0x260 [ 1456.363689][ T562] alloc_pages_noprof+0x8f/0x140 [ 1456.363776][ T562] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1456.363805][ T562] __kvmalloc_node_noprof+0x3d4/0x640 [ 1456.363824][ T562] ? futex_hash_allocate+0x190/0x9a0 [ 1456.363894][ T562] ? futex_hash_allocate+0x190/0x9a0 [ 1456.363930][ T562] futex_hash_allocate+0x190/0x9a0 [ 1456.364003][ T562] ? __schedule+0x951/0xd40 [ 1456.364091][ T562] ? cap_task_prctl+0x13f/0x6b0 [ 1456.364118][ T562] futex_hash_prctl+0xd8/0xf0 [ 1456.364211][ T562] __se_sys_prctl+0x4f4/0x1400 [ 1456.364241][ T562] __x64_sys_prctl+0x67/0x80 [ 1456.364286][ T562] x64_sys_call+0x2533/0x3020 [ 1456.364309][ T562] do_syscall_64+0x12c/0x3b0 [ 1456.364369][ T562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.364393][ T562] RIP: 0033:0x7fea84efce59 [ 1456.364412][ T562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.364432][ T562] RSP: 002b:00007fea83957028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1456.364453][ T562] RAX: ffffffffffffffda RBX: 00007fea85175fa0 RCX: 00007fea84efce59 [ 1456.364468][ T562] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1456.364558][ T562] RBP: 00007fea84f92d6f R08: 0000000000000000 R09: 0000000000000000 [ 1456.364571][ T562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.364586][ T562] R13: 00007fea85176038 R14: 00007fea85175fa0 R15: 00007fffd7446298 [ 1456.364610][ T562] [ 1456.364748][ T562] memory: usage 307200kB, limit 307200kB, failcnt 4045 [ 1456.607274][ T575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7844'. [ 1456.782024][ T562] memory+swap: usage 307780kB, limit 9007199254740988kB, failcnt 0 [ 1456.790082][ T562] kmem: usage 307112kB, limit 9007199254740988kB, failcnt 0 [ 1456.797707][ T562] Memory cgroup stats for /syz1: [ 1456.798163][ T562] cache 0 [ 1456.806329][ T562] rss 0 [ 1457.287888][ T562] shmem 0 [ 1457.301285][ T562] mapped_file 0 [ 1457.312504][ T562] dirty 0 [ 1457.318633][ T562] writeback 0 [ 1457.325901][ T562] workingset_refault_anon 930 [ 1457.556928][ T562] workingset_refault_file 12740 [ 1457.605843][ T562] swap 593920 [ 1457.609291][ T562] swapcached 15695872 [ 1457.614043][ T562] pgpgin 1416240 [ 1457.617759][ T562] pgpgout 1416240 [ 1457.623225][ T562] pgfault 1202968 [ 1457.626969][ T562] pgmajfault 783 [ 1457.630652][ T562] inactive_anon 0 [ 1457.636111][ T562] active_anon 0 [ 1457.639824][ T562] inactive_file 0 [ 1457.643651][ T562] active_file 0 [ 1457.647217][ T562] unevictable 0 [ 1457.650887][ T562] hierarchical_memory_limit 314572800 [ 1457.725888][ T562] hierarchical_memsw_limit 9223372036854771712 [ 1457.732526][ T562] total_cache 0 [ 1457.736015][ T562] total_rss 0 [ 1457.739325][ T562] total_shmem 0 [ 1457.743342][ T562] total_mapped_file 0 [ 1457.747353][ T562] total_dirty 0 [ 1457.750847][ T562] total_writeback 0 [ 1457.754989][ T562] total_workingset_refault_anon 939 [ 1457.760294][ T562] total_workingset_refault_file 12740 [ 1457.766073][ T562] total_swap 593920 [ 1457.769910][ T562] total_swapcached 19910656 [ 1457.774730][ T562] total_pgpgin 1417272 [ 1457.778958][ T562] total_pgpgout 1417272 [ 1457.783263][ T562] total_pgfault 1204062 [ 1457.787516][ T562] total_pgmajfault 841 [ 1457.792045][ T562] total_inactive_anon 0 [ 1457.797069][ T562] total_active_anon 0 [ 1457.801213][ T562] total_inactive_file 0 [ 1457.805522][ T562] total_active_file 0 [ 1457.809578][ T562] total_unevictable 0 [ 1457.816648][ T562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7840,pid=561,uid=0 [ 1457.833764][ T562] Memory cgroup out of memory: Killed process 561 (syz.1.7840) total-vm:94036kB, anon-rss:1236kB, file-rss:22500kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1459.055250][ T606] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7850'. [ 1459.064467][ T606] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1459.103675][ T610] loop2: detected capacity change from 0 to 1024 [ 1459.115199][ T610] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1459.127803][ T613] loop7: detected capacity change from 0 to 512 [ 1459.137948][ T610] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.7852: lblock 2 mapped to illegal pblock 2 (length 1) [ 1459.154659][ T610] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1459.155073][ T613] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1459.164131][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1459.164150][ C1] EXT4-fs (loop2): initial error at time 2008390592: ext4_map_blocks:791: inode 3: block 2 [ 1459.164207][ C1] EXT4-fs (loop2): last error at time 2008390592: ext4_map_blocks:791: inode 3: block 2 [ 1459.190515][ T610] __quota_error: 29 callbacks suppressed [ 1459.190530][ T610] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1459.211853][ T613] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.7853: invalid indirect mapped block 4294967295 (level 0) [ 1459.228043][ T613] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1459.228742][ T613] EXT4-fs (loop7): Remounting filesystem read-only [ 1459.230139][ T610] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.7852: lblock 0 mapped to illegal pblock 48 (length 1) [ 1459.237877][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1459.237895][ C1] EXT4-fs (loop7): initial error at time 2008390592: ext4_free_branches:1023: inode 16 [ 1459.237922][ C1] EXT4-fs (loop7): last error at time 2008390592: ext4_free_branches:1023 [ 1459.255418][ T610] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1459.258503][ C1] : inode 16 [ 1459.278046][ T610] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1459.283206][ C1] [ 1459.283527][ T613] EXT4-fs (loop7): 1 orphan inode deleted [ 1459.294391][ T610] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.7852: Failed to acquire dquot type 0 [ 1459.295605][ T613] EXT4-fs (loop7): 1 truncate cleaned up [ 1459.312065][ T610] loop2: lost filesystem error report for type 5 error -117 [ 1459.312855][ T613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.330004][ T610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1459.358560][ T610] loop2: lost filesystem error report for type 5 error -117 [ 1459.358743][ T610] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.7852: mark_inode_dirty error [ 1459.388448][ T610] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.389313][T23185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.391782][ T610] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1459.418914][ T610] EXT4-fs (loop2): 1 orphan inode deleted [ 1459.429759][ T610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.448663][T12213] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 1459.466592][T12213] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1459.479560][T12213] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 0 [ 1459.496527][ T610] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.7852: Invalid inode table block 1 in block_group 0 [ 1459.509711][ T610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1459.610362][ T610] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.7852: Invalid inode table block 1 in block_group 0 [ 1459.623232][ T610] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1459.685121][T28226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.695516][ T12] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1459.709964][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1459.710113][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1459.735354][ T625] loop6: detected capacity change from 0 to 512 [ 1459.741875][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 1459.754115][ T12] loop2: lost filesystem error report for type 5 error -117 [ 1459.755632][T28226] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1459.777214][ T625] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.7856: invalid block [ 1459.782114][T28226] loop2: lost filesystem error report for type 5 error -117 [ 1459.791527][ T625] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.799962][T28226] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1459.809188][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1459.809208][ C0] EXT4-fs (loop6): initial error at time 2008390592: ext4_get_branch:178: inode 11: block 4294967295 [ 1459.809268][ C0] EXT4-fs (loop6): last error at time 2008390592: ext4_get_branch:178: inode 11: block 4294967295 [ 1459.851191][ T625] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7856: invalid indirect mapped block 4294967295 (level 1) [ 1459.865214][ T625] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.865462][ T625] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7856: invalid indirect mapped block 4294967295 (level 1) [ 1459.891106][ T625] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.894393][T28226] loop2: lost filesystem error report for type 5 error -117 [ 1459.894530][ T625] ================================================================== [ 1459.904124][T28226] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1459.910831][ T625] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 1459.934427][ T625] [ 1459.936734][ T625] write to 0xffffffff86c6ae28 of 8 bytes by task 28226 on cpu 0: [ 1459.944439][ T625] data_alloc+0x31c/0x390 [ 1459.948774][ T625] prb_reserve+0x8d6/0xad0 [ 1459.953186][ T625] vprintk_store+0x54a/0x910 [ 1459.957764][ T625] vprintk_emit+0x1a4/0x600 [ 1459.962252][ T625] vprintk_default+0x26/0x30 [ 1459.966826][ T625] vprintk+0x1d/0x30 [ 1459.970709][ T625] _printk+0x79/0xa0 [ 1459.974587][ T625] fserror_report+0x427/0x500 [ 1459.979249][ T625] __ext4_std_error+0x15f/0x350 [ 1459.984328][ T625] ext4_reserve_inode_write+0x202/0x250 [ 1459.989881][ T625] __ext4_mark_inode_dirty+0x8c/0x3d0 [ 1459.995248][ T625] ext4_quota_off+0x248/0x290 [ 1460.000005][ T625] ext4_put_super+0xc5/0x7b0 [ 1460.004587][ T625] generic_shutdown_super+0xee/0x220 [ 1460.009867][ T625] kill_block_super+0x2a/0x70 [ 1460.014541][ T625] ext4_kill_sb+0x42/0x80 [ 1460.018853][ T625] deactivate_locked_super+0x75/0x1c0 [ 1460.024218][ T625] deactivate_super+0x97/0xa0 [ 1460.028887][ T625] cleanup_mnt+0x2bb/0x330 [ 1460.033293][ T625] __cleanup_mnt+0x19/0x20 [ 1460.037696][ T625] task_work_run+0x130/0x1a0 [ 1460.042270][ T625] exit_to_user_mode_loop+0x211/0x820 [ 1460.047627][ T625] do_syscall_64+0x232/0x3b0 [ 1460.052383][ T625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.058260][ T625] [ 1460.060570][ T625] read to 0xffffffff86c6ae28 of 8 bytes by task 625 on cpu 1: [ 1460.068007][ T625] prb_reserve+0x216/0xad0 [ 1460.072421][ T625] vprintk_store+0x54a/0x910 [ 1460.076992][ T625] vprintk_emit+0x1a4/0x600 [ 1460.081481][ T625] vprintk_default+0x26/0x30 [ 1460.086061][ T625] vprintk+0x1d/0x30 [ 1460.089953][ T625] _printk+0x79/0xa0 [ 1460.093831][ T625] __ext4_msg+0x1aa/0x1c0 [ 1460.098148][ T625] ext4_orphan_cleanup+0x926/0x9f0 [ 1460.103245][ T625] ext4_fill_super+0x3408/0x37c0 [ 1460.108169][ T625] get_tree_bdev_flags+0x291/0x300 [ 1460.113272][ T625] get_tree_bdev+0x1f/0x30 [ 1460.117682][ T625] ext4_get_tree+0x1c/0x30 [ 1460.122086][ T625] vfs_get_tree+0x57/0x1d0 [ 1460.126494][ T625] do_new_mount+0x288/0x8d0 [ 1460.130991][ T625] path_mount+0x4d0/0xbc0 [ 1460.135327][ T625] __se_sys_mount+0x28c/0x2e0 [ 1460.140015][ T625] __x64_sys_mount+0x67/0x80 [ 1460.144598][ T625] x64_sys_call+0x2d61/0x3020 [ 1460.149268][ T625] do_syscall_64+0x12c/0x3b0 [ 1460.153877][ T625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.159759][ T625] [ 1460.162068][ T625] value changed: 0x0000000000081c68 -> 0x0000000000136c28 [ 1460.169157][ T625] [ 1460.171463][ T625] Reported by Kernel Concurrency Sanitizer on: [ 1460.177598][ T625] CPU: 1 UID: 0 PID: 625 Comm: syz.6.7856 Not tainted syzkaller #0 PREEMPT(lazy) [ 1460.186780][ T625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1460.196818][ T625] ================================================================== [ 1459.894381][ T625] EXT4-fs (loop6): 2 truncates cleaned up [ 1460.214152][ T625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.246930][T22802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.