last executing test programs: 15m57.630366483s ago: executing program 4 (id=4717): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) setns(r0, 0x8000000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) set_mempolicy_home_node(&(0x7f00007e7000/0x3000)=nil, 0x3000, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0xfffffffffffffe76) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x200080c4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) 15m54.008205522s ago: executing program 4 (id=4723): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) setns(r0, 0x8000000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) set_mempolicy_home_node(&(0x7f00007e7000/0x3000)=nil, 0x3000, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0xfffffffffffffe76) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x200080c4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100626174616476004288cf69ef083248cd46cbf610383e4400"], 0x40}}, 0x0) 15m52.342016645s ago: executing program 4 (id=4725): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4122, 0x101a}], 0x1}, 0x42) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186", 0x31}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 15m51.946541094s ago: executing program 4 (id=4726): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x8, 0x3, 0x7, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700), 0x10, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff484f}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="120000000c0000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, 0x0, &(0x7f0000000400)=""/198}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) 15m51.907473667s ago: executing program 4 (id=4727): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) unlink(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 15m49.868922977s ago: executing program 4 (id=4732): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000200000400000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x81, 0x248, &(0x7f0000000500)="$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") 15m34.173650995s ago: executing program 32 (id=4732): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000200000400000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x81, 0x248, &(0x7f0000000500)="$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") 15m12.560896336s ago: executing program 3 (id=4810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6a3}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$AUDIT_SET(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfc, {0x2, 0x1, 0x1, r0, 0x3, 0x7fffffff, 0x8000, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) 15m10.426537132s ago: executing program 3 (id=4814): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xf}, 0x106581, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98180, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000008c0)=' '}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x5, 0xe2d, 0x101, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x1f2}, 0x8) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x8202) 15m9.086602808s ago: executing program 3 (id=4817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 15m5.225280829s ago: executing program 3 (id=4827): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x3}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 15m3.730929773s ago: executing program 3 (id=4829): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x6}, 0x410, 0x2000000, 0x0, 0x0, 0x1, 0x10}, 0x0, 0x1, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340)='FREEZING\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 15m3.258487707s ago: executing program 3 (id=4834): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000200000400000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x81, 0x248, &(0x7f0000000500)="$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") 14m47.821211822s ago: executing program 33 (id=4834): socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000200000400000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x110}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @multicast2, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x81, 0x248, &(0x7f0000000500)="$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") 9m24.537445439s ago: executing program 2 (id=7032): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}}, 0x0) 9m23.991048867s ago: executing program 2 (id=7034): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x1}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x29}, 0x28) 9m23.974095047s ago: executing program 2 (id=7035): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x7, 0x0, &(0x7f0000000900)="c1dfb080cd21d3", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m23.862629393s ago: executing program 2 (id=7038): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") prctl$PR_GET_SECCOMP(0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000000000b, 0x2}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xc8, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5d}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x73}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x28}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x10}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x48}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xd}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9f}, @NL80211_MESHCONF_TTL={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffcf}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r0, 0x3, 0xaaa, 0x8000c61) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) epoll_create(0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x24004080) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x3, 0x3, 0x1, 0xfff8, 0x80]}, &(0x7f00000000c0)=0xe) futex(0xfffffffffffffffc, 0xd, 0x1, 0x0, 0x0, 0x200015) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) tkill(r6, 0x2f) ptrace$peeksig(0x4209, r6, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) unlinkat(r3, &(0x7f00000001c0)='./file0\x00', 0x200) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast1, 0x2000, 0xba08, 0x0, 0x2}}) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x8}) 9m23.370795647s ago: executing program 2 (id=7042): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x18, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$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") 9m22.5107794s ago: executing program 2 (id=7048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 9m22.394535606s ago: executing program 34 (id=7048): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 6m24.017578504s ago: executing program 0 (id=7980): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x20, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 6m24.002983214s ago: executing program 0 (id=7981): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x8, 0x94, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000000000100000100000000000000", @ANYRES32, @ANYBLOB="2300f2ff00000000dd00000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) 6m22.554971126s ago: executing program 0 (id=7987): io_setup(0x8001, &(0x7f0000000340)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_io_uring_setup(0x3158, &(0x7f0000000480)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r1, 0x5e6a, 0x4968, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c, 0x0}}], 0x1, 0x4c040) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, &(0x7f0000000000)=""/43, 0x2b) 6m22.014642693s ago: executing program 0 (id=7991): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e25}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x40, 0x0, 0x9, 0xc40fd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000000)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x40000000]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 6m21.66992148s ago: executing program 0 (id=8000): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x29, 0x1f, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}, 0x8000, 0x6681}, 0x90) (fail_nth: 1) 6m19.784481924s ago: executing program 0 (id=8006): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86f063093fbb87dd45fe42904bcee1", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10, 0x1a2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000000)={0x800080, 0x3, 0xffffffff, 0x1000, 0x1000061f, 0x8}) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 6m19.753226765s ago: executing program 35 (id=8006): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86f063093fbb87dd45fe42904bcee1", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10, 0x1a2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000000)={0x800080, 0x3, 0xffffffff, 0x1000, 0x1000061f, 0x8}) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) 3m6.598069795s ago: executing program 1 (id=9307): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86f063093fbb87dd45fe42904bcee1", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x0, 0x4, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000000)={0x800080, 0x3, 0xffffffff, 0x1000, 0x1000061f, 0x8}) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) 3m5.565401426s ago: executing program 1 (id=9314): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500060000000800124000000000050005000a0000000500040000"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 3m5.48727378s ago: executing program 1 (id=9316): syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r0], 0x0) 3m5.420148694s ago: executing program 1 (id=9317): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x1, 0x27d, &(0x7f0000000180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) truncate(0x0, 0x10001) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") creat(&(0x7f0000000400)='./bus\x00', 0xb5) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000d40)=0xf) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r8, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x7fffffffffffffff}) 3m4.836084012s ago: executing program 1 (id=9321): syz_emit_ethernet(0x16, &(0x7f00000017c0)={@broadcast, @random="fcf3ff961f97", @void, {@llc={0x4, {@snap={0xaa, 0xaa, '\v', "021951", 0x6004}}}}}, &(0x7f0000001880)={0x0, 0x3, [0xaa5, 0x3ad, 0x73d, 0x415]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3m4.553673397s ago: executing program 1 (id=9326): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500060000000800124000000000050005000a0000000500040000"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 3m4.535423348s ago: executing program 36 (id=9326): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500060000000800124000000000050005000a0000000500040000"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) 11.55148907s ago: executing program 5 (id=10270): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 10.782535587s ago: executing program 5 (id=10272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) madvise(&(0x7f000014b000/0xc00000)=nil, 0xc00000, 0x15) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f000001fc00)='./bus\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) chdir(0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) 10.53149775s ago: executing program 5 (id=10276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c000000050a01030000000000000000020000080900010073797a30000000000900030073797a32"], 0x80}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000100)={[{@nobarrier}, {@grpquota}, {@bh}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 8.753710718s ago: executing program 5 (id=10282): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkGwXooWC3pfl2QbSjbdkt2UJhZsBXvjjRRBxIL4Abz3svgF/BQFLRQpQS9EWJnNbLpNdvO6dbfZ3w+mOWdnpmeenHkm5+zsMgEMrBPpP7mIFyPi6yTiSMu6fGQrT6xst/z45lS6JFGvf/xHEkn2WnP7JPt5KKu8EBG/fBlxOre+3eri0myxXC7NZ/Wx2ty1seri0pkrc8WZ0kzp6sTk5Lk3JifefuvNXUQ39FTt1Yt/fffR/ffPfXVy+dufHh69m8T5OJyta41jF261Vk4U/8lKw3F+zYbjXWisnyS9PgB2ZCjL8+FIrwFHYijLemDv+zwi6sCASuQ/DKjmOKA5t+/SPPi58ei9lQlQI/aR1vjzK++NxP7G3OjgcvLUzCid7452of20jZ9/v3c3XWLj9yEObFIH2JZbtyPibD6//vqfZNe/nTvbePN4Y2vbGLS/P9BL99Pxz2vtxn+51fFPtBn/HGqTuzuxef7nHnahmY7S8d87bce/q5eu0aGs9r/GmG84uXylXDobEf9vjAzrnW99fDHS+HFu+UG90yat4790SdtvjgWz43iY3/f0PtPFWjEiRnYTd9Oj2xEv5dvFn6z2f9Km/9Pfx8UttnG8dO/lTus2j//Zqv8Y8Urb/n/SrcnG9yfHGufDWPOsWO/PO8d/7dR+r+NP+//gxvGPJq33a6vbb+OH/X+XOq3b6fk/knzSKDeT4EaxVpsfjxhJPlz/+sSTfZv15vZp/KdObnz9a3f+p5OvT7cY/51jdzpu2g/9P92p/1dmmGv6f/uFBx989v3O40/7//VG6VT2Snb9ay87V7Z6gF34FQIAAAAAAEDfyEXE4UhyhdVyLlcorHy+41gczJUr1drpy5WFq9PR+K7saAznmne6j7R8HmI8+zxssz6xpj4ZEUcj4puhA416YapSnu518AAAAAAAAAAAAAAAAAAAANAnDnX4/n/qt6FeHx3wzDUebLCv10cB9MKmj/xf+5SmrT75B+h7m+Y/sGfJfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK61Jcf35xK69PXFxdmK9fPTJeqs4W5hanCVGX+WmGmUpkplwpTlbnN/r9ypXJtfCIWbozVStXaWHVx6dJcZeFq7dKVueJM6VJp+D+JCgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpX6Fh4N/riMOrJswtwxY52z++q9VxE9Ecv793C7ax7t7dXDy9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//hkUw0Q==") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 8.159557347s ago: executing program 5 (id=10284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24004800) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x101, 0x10000, 0x5, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x142b56000, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24004800) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x101, 0x10000, 0x5, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) pipe(&(0x7f0000000600)) (async) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) pipe(0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x142b56000, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) 7.926247929s ago: executing program 6 (id=10288): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000680)={[{@abort}, {@usrjquota}, {@auto_da_alloc}, {@data_ordered}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) 7.862186892s ago: executing program 5 (id=10289): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000680)={[{@abort}, {@usrjquota}, {@auto_da_alloc}, {@data_ordered}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) 4.101002457s ago: executing program 6 (id=10297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="a928e08b99d5cc5f9e8f1a8ddedd657b85dff5e6349a8736097f37a5ac809e5ed9015c5de940aaee196882b8cec1cefe3a2b1f623389ab0fdc9fa308fd507686d34f94b7b5c349bd4cc5d525d8ff246c75b0dd65381abde93447b7409c7fd8551b0100001c273463a91620e4da3b05dbf81e1069873a66"], 0x1c}}, 0x4000054) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) 3.307720087s ago: executing program 7 (id=10298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="a928e08b99d5cc5f9e8f1a8ddedd657b85dff5e6349a8736097f37a5ac809e5ed9015c5de940aaee196882b8cec1cefe3a2b1f623389ab0fdc9fa308fd507686d34f94b7b5c349bd4cc5d525d8ff246c75b0dd65381abde93447b7409c7fd8551b0100001c273463a91620e4da3b05dbf81e1069873a66"], 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x43) 3.180563193s ago: executing program 8 (id=10299): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) unshare(0x22020600) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, 0x0) 3.103039937s ago: executing program 9 (id=10300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f80)=@newtaction={0x78, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x64, 0x1, [@m_ct={0x30, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x6, 0x6, "fd38"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x30, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x58) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000280)={[{@gid}]}) (async) unshare(0x40000000) 3.102693257s ago: executing program 7 (id=10301): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x132) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 3.098219347s ago: executing program 6 (id=10302): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@min_batch_time}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@errors_remount}]}, 0x1, 0x60a, &(0x7f00000004c0)="$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") 2.974342564s ago: executing program 7 (id=10303): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000580)=ANY=[@ANYRES16], 0x41, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000005c0)={0x20071026, r1}, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) accept4$x25(r0, &(0x7f0000000380)={0x9, @remote}, &(0x7f00000003c0)=0x12, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a", @ANYRES32], 0x54}}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x800, 0x4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/171, 0xab}], 0x3, 0xfffffffe, 0x5) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000ac69638eb016a93b5f13536d3e2400ee0c6764b16edebaca046ab674debcf76edb324652a669e9dc41adc9ecf559e63a1b36"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) 2.963002174s ago: executing program 8 (id=10304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.875924048s ago: executing program 8 (id=10305): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x13, 0x4, 0x2, 0x2a, 0x4c, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x56, [@rand_addr=0x64010101, @loopback, @empty, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}]}}}}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) unshare(0x6a04003f) 2.4333002s ago: executing program 6 (id=10306): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x586, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x5000009) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 1.936263775s ago: executing program 7 (id=10307): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000580)=ANY=[@ANYRES16], 0x41, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(&(0x7f00000005c0)={0x20071026, r1}, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) accept4$x25(r0, &(0x7f0000000380)={0x9, @remote}, &(0x7f00000003c0)=0x12, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1c1202, 0x147) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x800, 0x4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/171, 0xab}], 0x3, 0xfffffffe, 0x5) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000ac69638eb016a93b5f13536d3e2400ee0c6764b16edebaca046ab674debcf76edb324652a669e9dc41adc9ecf559e63a1b36"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendfile(r4, r0, 0x0, 0x3ffff) 1.82558501s ago: executing program 9 (id=10308): socket(0x10, 0x803, 0x2) (fail_nth: 2) 1.591232852s ago: executing program 8 (id=10309): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0xe3}) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) (rerun: 64) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r1) (async) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000100)=0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002a000100000005002500000000000c002000060000000000000005002d00000000000c002e0001000000010000000c002e000100000001000000060009"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0x400a4) 1.556739993s ago: executing program 9 (id=10310): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) (fail_nth: 1) 1.482526317s ago: executing program 6 (id=10311): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) 1.062676907s ago: executing program 9 (id=10312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="a928e08b99d5cc5f9e8f1a8ddedd657b85dff5e6349a8736097f37a5ac809e5ed9015c5de940aaee196882b8cec1cefe3a2b1f623389ab0fdc9fa308fd507686d34f94b7b5c349bd4cc5d525d8ff246c75b0dd65381abde93447b7409c7fd8551b0100001c273463a91620e4da3b05dbf81e1069873a66"], 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x43) 925.462265ms ago: executing program 6 (id=10313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="a928e08b99d5cc5f9e8f1a8ddedd657b85dff5e6349a8736097f37a5ac809e5ed9015c5de940aaee196882b8cec1cefe3a2b1f623389ab0fdc9fa308fd507686d34f94b7b5c349bd4cc5d525d8ff246c75b0dd65381abde93447b7409c7fd8551b0100001c273463a91620e4da3b05dbf81e1069873a66"], 0x1c}}, 0x4000054) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) 714.312765ms ago: executing program 7 (id=10314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x80000000) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) inotify_add_watch(r1, &(0x7f0000000280)='./file1/file4\x00', 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_io_uring_setup(0x416f, &(0x7f0000000500)={0x0, 0xfffffffc, 0x400, 0x5, 0x2ed}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0) renameat2(r8, &(0x7f00000000c0)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 358.714402ms ago: executing program 8 (id=10315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 312.699315ms ago: executing program 8 (id=10316): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@min_batch_time}, {@lazytime}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@errors_remount}]}, 0x1, 0x60a, &(0x7f00000004c0)="$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") 110.899825ms ago: executing program 9 (id=10317): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700b2", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 65.620967ms ago: executing program 7 (id=10318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-=/\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x68}}, 0x4008094) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000440)="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", 0x1000, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r3, r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r1, 0x1, 0x4, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) 0s ago: executing program 9 (id=10319): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_init() r0 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x4}) r4 = socket$inet(0xa, 0x801, 0x84) inotify_add_watch(r0, &(0x7f0000000280)='./file1/file4\x00', 0x0) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0) renameat2(r6, &(0x7f00000000c0)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) kernel console output (not intermixed with test programs): . [ 1508.723644][ T6560] loop5: detected capacity change from 0 to 8192 [ 1508.761671][ T28] audit: type=1326 audit(1774075804.729:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1508.789501][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9883'. [ 1508.802002][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9883'. [ 1508.809142][T24460] loop5: p1 p2 p3 p4 [ 1508.819799][T24460] loop5: p1 size 196608 extends beyond EOD, truncated [ 1508.837064][ T28] audit: type=1326 audit(1774075804.729:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1508.870337][T24460] loop5: p2 size 150994944 extends beyond EOD, truncated [ 1508.879992][ T28] audit: type=1326 audit(1774075804.729:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1508.889982][T24460] loop5: p3 size 66846464 extends beyond EOD, truncated [ 1508.915899][T24460] loop5: p4 size 479744 extends beyond EOD, truncated [ 1508.925122][ T28] audit: type=1326 audit(1774075804.729:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f445ecfce code=0x7ffc0000 [ 1508.952913][ T6565] loop9: detected capacity change from 0 to 512 [ 1508.960351][ T28] audit: type=1326 audit(1774075804.729:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f4462da97 code=0x7ffc0000 [ 1508.986452][ T6560] loop5: p1 p2 p3 p4 [ 1508.994171][ T6560] loop5: p1 size 196608 extends beyond EOD, truncated [ 1509.001205][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1509.016939][ T6560] loop5: p2 size 150994944 extends beyond EOD, truncated [ 1509.027344][ T6560] loop5: p3 size 66846464 extends beyond EOD, truncated [ 1509.035183][ T6560] loop5: p4 size 479744 extends beyond EOD, truncated [ 1509.042212][ T28] audit: type=1326 audit(1774075804.729:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1509.067582][ T28] audit: type=1326 audit(1774075804.729:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f4462da97 code=0x7ffc0000 [ 1509.104843][ T28] audit: type=1326 audit(1774075804.729:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f445ecfce code=0x7ffc0000 [ 1509.128287][ T28] audit: type=1326 audit(1774075804.729:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1509.165021][ T28] audit: type=1326 audit(1774075804.729:11589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6561 comm="syz.6.9883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1509.213419][ T6575] loop6: detected capacity change from 0 to 512 [ 1509.220682][ T6565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.225359][ T489] udevd[489]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1509.234347][T24460] udevd[24460]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1509.247158][T27361] udevd[27361]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1509.254046][T32515] udevd[32515]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1509.274278][ T6565] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.291855][ T6575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.342849][ T6581] loop5: detected capacity change from 0 to 128 [ 1509.395178][ T6581] FAT-fs (loop5): bogus logical sector size 759 [ 1509.418083][ T6575] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.519126][ T6581] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1509.658644][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.693016][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.715333][ T6583] udevd[6583]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1509.716419][ T489] udevd[489]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1509.732088][ T6593] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 1509.735565][T32515] udevd[32515]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1509.747403][T27361] udevd[27361]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1510.060667][ T6620] program syz.6.9894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1510.803435][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9900'. [ 1510.869389][ T6644] loop8: detected capacity change from 0 to 512 [ 1510.876119][ T6644] EXT4-fs: Ignoring removed bh option [ 1510.924210][ T6644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.937003][ T6644] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.060995][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9900'. [ 1511.093700][ T6639] loop7: detected capacity change from 0 to 8192 [ 1511.189096][ T6651] FAULT_INJECTION: forcing a failure. [ 1511.189096][ T6651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.239065][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.9.9902 Tainted: G W syzkaller #0 PREEMPT(full) [ 1511.239197][ T6651] Tainted: [W]=WARN [ 1511.239205][ T6651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1511.239217][ T6651] Call Trace: [ 1511.239224][ T6651] [ 1511.239231][ T6651] __dump_stack+0x1d/0x30 [ 1511.239258][ T6651] dump_stack_lvl+0x95/0xd0 [ 1511.239280][ T6651] dump_stack+0x15/0x1b [ 1511.239360][ T6651] should_fail_ex+0x263/0x280 [ 1511.239387][ T6651] should_fail+0xb/0x20 [ 1511.239451][ T6651] should_fail_usercopy+0x1a/0x20 [ 1511.239478][ T6651] _copy_from_user+0x1c/0xb0 [ 1511.239563][ T6651] snd_seq_ioctl+0x125/0x2f0 [ 1511.239589][ T6651] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1511.239608][ T6651] __se_sys_ioctl+0xce/0x140 [ 1511.239628][ T6651] __x64_sys_ioctl+0x43/0x50 [ 1511.239681][ T6651] x64_sys_call+0x1563/0x3020 [ 1511.239775][ T6651] do_syscall_64+0x12c/0x370 [ 1511.239800][ T6651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.239821][ T6651] RIP: 0033:0x7f37f50ac799 [ 1511.239838][ T6651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.239907][ T6651] RSP: 002b:00007f37f3aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.240009][ T6651] RAX: ffffffffffffffda RBX: 00007f37f5325fa0 RCX: 00007f37f50ac799 [ 1511.240023][ T6651] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003 [ 1511.240037][ T6651] RBP: 00007f37f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.240050][ T6651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.240063][ T6651] R13: 00007f37f5326038 R14: 00007f37f5325fa0 R15: 00007fff5a1988f8 [ 1511.240082][ T6651] [ 1511.264061][ T6639] loop7: p1 p2 p3 p4 [ 1511.444113][ T6639] loop7: p1 size 196608 extends beyond EOD, truncated [ 1511.452485][ T6639] loop7: p2 size 150994944 extends beyond EOD, truncated [ 1511.461326][ T6658] loop9: detected capacity change from 0 to 512 [ 1511.481178][ T6658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1511.496426][ T6639] loop7: p3 size 66846464 extends beyond EOD, truncated [ 1511.517746][ T6658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.538915][ T6639] loop7: p4 size 479744 extends beyond EOD, truncated [ 1511.549593][ T6658] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.609418][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.630924][T27361] udevd[27361]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1511.645371][ T6583] udevd[6583]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1511.768203][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1511.777638][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1511.797692][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1511.807372][ T6694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6694 comm=syz.8.9907 [ 1511.819863][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1511.829178][ T6694] netlink: 'syz.8.9907': attribute type 21 has an invalid length. [ 1511.837280][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1511.871939][ T6670] program syz.6.9904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1511.928437][ T6694] IPv6: NLM_F_CREATE should be specified when creating new route [ 1511.954259][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1512.021605][ T6704] loop7: detected capacity change from 0 to 512 [ 1512.028809][ T6704] EXT4-fs: Ignoring removed bh option [ 1512.054670][ T6694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1512.061937][ T6694] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.069126][ T6694] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.076356][ T6694] IPv6: NLM_F_CREATE should be set when creating new route [ 1512.095680][ T6706] program syz.5.9910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1512.149175][ T6704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.161896][ T6704] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.196272][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1512.209450][ T6684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9907'. [ 1512.866292][ T6684] netlink: 'syz.8.9907': attribute type 21 has an invalid length. [ 1512.940645][ T6684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1512.954566][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.081931][T28793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.380156][ T6729] loop7: detected capacity change from 0 to 8192 [ 1513.430269][ T6583] loop7: p1 p2 p3 p4 [ 1513.434435][ T6583] loop7: p1 size 196608 extends beyond EOD, truncated [ 1513.576019][ T6732] program syz.9.9916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1513.591487][ T6583] loop7: p2 size 150994944 extends beyond EOD, truncated [ 1513.604978][ T6583] loop7: p3 size 66846464 extends beyond EOD, truncated [ 1513.659096][ T6733] loop8: detected capacity change from 0 to 1024 [ 1513.674729][ T6583] loop7: p4 size 479744 extends beyond EOD, truncated [ 1513.851836][ T6729] loop7: p1 p2 p3 p4 [ 1513.856107][ T6729] loop7: p1 size 196608 extends beyond EOD, truncated [ 1513.862600][ T6733] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1513.863929][ T6729] loop7: p2 size 150994944 extends beyond EOD, truncated [ 1513.883163][ T6729] loop7: p3 size 66846464 extends beyond EOD, truncated [ 1513.894490][ T6729] loop7: p4 size 479744 extends beyond EOD, truncated [ 1513.952336][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.403955][ T6746] loop9: detected capacity change from 0 to 512 [ 1514.435146][ T6746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1514.503344][ T6746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.582788][ T6755] loop8: detected capacity change from 0 to 128 [ 1514.590195][ T6746] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.609074][ T6755] vfat: Unknown parameter 'ÿÿ' [ 1514.788613][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.581130][ T6769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6769 comm=syz.8.9927 [ 1515.630303][ T6769] netlink: 'syz.8.9927': attribute type 21 has an invalid length. [ 1515.673742][ T6769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1515.704125][ T6776] netlink: 'syz.8.9927': attribute type 21 has an invalid length. [ 1515.730706][ T6776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1515.824511][ T6783] loop6: detected capacity change from 0 to 1024 [ 1515.840280][ T6778] loop9: detected capacity change from 0 to 256 [ 1515.883539][ T6778] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1515.915755][ T6778] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1515.944763][ T6783] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 1515.960872][ T6788] ieee802154 phy0 wpan0: encryption failed: -22 [ 1516.072075][ T6792] loop7: detected capacity change from 0 to 512 [ 1516.112384][ T6792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1516.212673][ T6795] loop6: detected capacity change from 0 to 512 [ 1516.355141][ T6795] EXT4-fs (loop6): 1 orphan inode deleted [ 1516.368068][ T6795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.383547][ T6795] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.428571][ T6792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.494210][T26823] __quota_error: 386 callbacks suppressed [ 1516.494226][T26823] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1516.531578][ T6792] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.552859][T26823] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 1516.754683][ T6806] loop9: detected capacity change from 0 to 1024 [ 1516.800136][ T6806] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 1516.915471][T28793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.977306][ T6812] __nla_validate_parse: 143 callbacks suppressed [ 1516.977350][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9940'. [ 1517.242636][ T6817] loop5: detected capacity change from 0 to 512 [ 1517.249250][ T6817] EXT4-fs: Ignoring removed bh option [ 1517.264013][ T6817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.276593][ T6817] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.595505][ T6840] loop7: detected capacity change from 0 to 128 [ 1517.596970][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.602036][ T6840] vfat: Unknown parameter 'ÿÿ' [ 1517.889155][ T6846] loop9: detected capacity change from 0 to 512 [ 1518.000241][ T6846] EXT4-fs (loop9): 1 orphan inode deleted [ 1518.011698][ T6846] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.026272][ T6846] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.062871][ T6846] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1518.086512][T26823] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1518.365852][T26823] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 1518.432362][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.459629][ T6857] ieee802154 phy0 wpan0: encryption failed: -22 [ 1518.471030][ T6859] loop6: detected capacity change from 0 to 512 [ 1518.510614][ T6859] EXT4-fs: old and new quota format mixing [ 1518.631212][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1518.861384][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1518.875331][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1518.884408][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.320290][ T6870] program syz.7.9947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.337009][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.370463][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.427087][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.528952][ T6876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6876 comm=syz.5.9944 [ 1519.564954][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.595061][ T6883] loop9: detected capacity change from 0 to 512 [ 1519.602180][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.621474][ T6876] netlink: 'syz.5.9944': attribute type 21 has an invalid length. [ 1519.627697][ T6873] loop6: detected capacity change from 0 to 512 [ 1519.629565][ T6876] IPv6: NLM_F_CREATE should be specified when creating new route [ 1519.629602][ T6876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1519.629611][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 1519.629627][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 1519.629658][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 1519.630556][ T6876] netlink: 'syz.5.9944': attribute type 21 has an invalid length. [ 1519.683248][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9944'. [ 1519.733578][ T6876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1519.741640][ T6883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1519.800849][ T6883] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.823611][ T6883] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.914673][ T6902] loop5: detected capacity change from 0 to 1024 [ 1519.999556][ T6899] syzkaller1: entered promiscuous mode [ 1520.006223][ T6899] syzkaller1: entered allmulticast mode [ 1520.057483][ T6902] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1520.091275][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.409188][ T6930] EXT4-fs (loop5): 1 orphan inode deleted [ 1520.421478][ T6930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.435893][T26823] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1520.447988][ T6930] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.512758][ T6930] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1521.204528][ T6937] set_capacity_and_notify: 1 callbacks suppressed [ 1521.204545][ T6937] loop6: detected capacity change from 0 to 4096 [ 1521.240035][ T28] audit: type=1326 audit(1774075817.199:11976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1522.230530][ T28] audit: type=1326 audit(1774075817.199:11977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1522.254235][ T28] audit: type=1326 audit(1774075817.199:11978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1522.368422][ T6926] loop9: detected capacity change from 0 to 512 [ 1522.375265][T26823] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:10: Failed to release dquot type 1 [ 1522.874251][ T28] audit: type=1326 audit(1774075817.199:11979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1522.876806][ T6937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.897980][ T28] audit: type=1326 audit(1774075817.199:11980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1522.967198][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.979109][ T28] audit: type=1326 audit(1774075817.199:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4be9a8cfce code=0x7ffc0000 [ 1523.002847][ T28] audit: type=1326 audit(1774075817.199:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4be9acda97 code=0x7ffc0000 [ 1523.026365][ T28] audit: type=1326 audit(1774075817.199:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1523.050339][ T28] audit: type=1326 audit(1774075817.199:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4be9acda97 code=0x7ffc0000 [ 1523.078340][ T28] audit: type=1326 audit(1774075817.239:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4be9a8cfce code=0x7ffc0000 [ 1523.150996][ T6948] syzkaller1: entered promiscuous mode [ 1523.156589][ T6948] syzkaller1: entered allmulticast mode [ 1523.178842][ T28] audit: type=1326 audit(1774075817.239:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.7.9956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be9acc799 code=0x7ffc0000 [ 1523.242266][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.273956][ T6956] ieee802154 phy0 wpan0: encryption failed: -22 [ 1523.336649][ T6959] __nla_validate_parse: 76 callbacks suppressed [ 1523.336664][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9960'. [ 1523.343505][ T6961] loop8: detected capacity change from 0 to 1024 [ 1523.352350][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9960'. [ 1523.367248][ T6957] loop5: detected capacity change from 0 to 512 [ 1523.373811][ T6957] EXT4-fs: Ignoring removed bh option [ 1523.396787][ T6957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.409315][ T6957] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.424768][ T6961] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 1523.644859][ T6975] loop6: detected capacity change from 0 to 512 [ 1523.651551][ T6975] EXT4-fs: Ignoring removed bh option [ 1523.831244][ T6976] loop8: detected capacity change from 0 to 512 [ 1524.084033][ T6978] program syz.7.9962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1525.218052][ T6976] EXT4-fs (loop8): 1 orphan inode deleted [ 1525.243813][ T6976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.273331][ T6976] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.353948][ T6983] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1525.420341][ T6975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.434675][ T6975] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.573646][ T4530] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 1526.433639][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.618846][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.766730][ T7002] loop5: detected capacity change from 0 to 512 [ 1526.810061][ T7002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1526.842939][ T7001] loop7: detected capacity change from 0 to 1024 [ 1526.855575][ T7001] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1526.859810][ T7009] loop9: detected capacity change from 0 to 1024 [ 1526.878505][ T7001] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1526.886695][ T7001] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1526.894883][ T7001] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.9966: Invalid inode table block 0 in block_group 0 [ 1526.907513][ T7001] loop7: lost filesystem error report for type 5 error -117 [ 1526.909959][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1526.923663][ C0] EXT4-fs (loop7): initial error at time 1774075822: __ext4_get_inode_loc:4782 [ 1526.932654][ C0] EXT4-fs (loop7): last error at time 1774075822: __ext4_get_inode_loc:4782 [ 1526.947013][ T7001] EXT4-fs (loop7): Remounting filesystem read-only [ 1526.953688][ T7001] EXT4-fs (loop7): 1 truncate cleaned up [ 1526.963544][ T7001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1526.980441][ T7002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.003806][ T7009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1527.023936][ T7002] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.042215][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.077655][T28793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.108682][ T7015] loop8: detected capacity change from 0 to 512 [ 1527.149191][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.246850][ T28] kauditd_printk_skb: 315 callbacks suppressed [ 1527.246863][ T28] audit: type=1326 audit(1774075823.199:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1527.279342][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9970'. [ 1527.288864][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9970'. [ 1527.305196][ T7016] syzkaller1: entered promiscuous mode [ 1527.310768][ T7016] syzkaller1: entered allmulticast mode [ 1527.366588][ T7041] loop7: detected capacity change from 0 to 4096 [ 1527.445017][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.522290][ T7041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.909241][ T7048] macvtap1: entered promiscuous mode [ 1527.928301][ T7048] syz_tun: entered promiscuous mode [ 1528.001448][ T7048] syz_tun: left promiscuous mode [ 1528.241595][ T28] audit: type=1326 audit(1774075823.249:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.247647][ T7052] loop8: detected capacity change from 0 to 512 [ 1528.271610][ T7052] EXT4-fs: Ignoring removed bh option [ 1528.288673][ T28] audit: type=1326 audit(1774075823.249:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.331032][ T7054] ieee802154 phy0 wpan0: encryption failed: -22 [ 1528.403047][ T7052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.415621][ T7052] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.456373][ T7056] loop5: detected capacity change from 0 to 8192 [ 1528.474841][ T28] audit: type=1326 audit(1774075823.249:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.511788][ T28] audit: type=1326 audit(1774075823.249:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37f50ac502 code=0x7ffc0000 [ 1528.563122][ T28] audit: type=1326 audit(1774075823.249:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37f50ac502 code=0x7ffc0000 [ 1528.613909][ T28] audit: type=1326 audit(1774075823.249:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.665201][ T28] audit: type=1326 audit(1774075823.249:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.715747][ T28] audit: type=1326 audit(1774075823.249:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.764484][ T28] audit: type=1326 audit(1774075823.249:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.9.9970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1528.886059][ T7056] loop5: p1 p2 p3 p4 [ 1528.899927][ T7056] loop5: p1 size 196608 extends beyond EOD, truncated [ 1528.907899][T28793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.931794][ T7056] loop5: p2 size 150994944 extends beyond EOD, truncated [ 1528.951111][ T7056] loop5: p3 size 66846464 extends beyond EOD, truncated [ 1528.966312][ T7056] loop5: p4 size 479744 extends beyond EOD, truncated [ 1529.087634][ T7075] loop7: detected capacity change from 0 to 128 [ 1529.094857][ T7075] EXT4-fs: test_dummy_encryption option not supported [ 1529.199355][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.063442][T24460] udevd[24460]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1531.074896][ T489] udevd[489]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1531.085908][T27361] udevd[27361]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1531.097274][ T6583] udevd[6583]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1531.230596][ T7096] loop7: detected capacity change from 0 to 128 [ 1531.259681][ T7096] vfat: Unknown parameter 'ÿÿ' [ 1532.114316][ T7110] loop9: detected capacity change from 0 to 1024 [ 1532.370531][T32515] udevd[32515]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1532.385420][ T7110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.400049][T27361] udevd[27361]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1532.412570][ T6583] udevd[6583]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1532.425252][ T6582] udevd[6582]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1532.478004][ T7125] loop5: detected capacity change from 0 to 4096 [ 1532.735575][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.847285][ T7136] program syz.6.9989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1533.354293][ T489] udevd[489]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1533.371768][T24460] udevd[24460]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1534.379504][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.392830][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.829199][ T7150] loop7: detected capacity change from 0 to 512 [ 1534.859544][ T7145] loop9: detected capacity change from 0 to 512 [ 1534.866357][ T7145] EXT4-fs: Ignoring removed bh option [ 1534.904707][ T7145] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.917214][ T7145] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.962237][ T7150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1534.984306][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 1534.984346][ T28] audit: type=1326 audit(1774075830.929:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.083244][ T4528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.127036][ T7150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.161728][ T28] audit: type=1326 audit(1774075830.939:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.185946][ T7150] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.191296][ T28] audit: type=1326 audit(1774075830.939:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.219724][ T28] audit: type=1326 audit(1774075830.939:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.243345][ T28] audit: type=1326 audit(1774075830.939:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.267831][ T28] audit: type=1326 audit(1774075830.979:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.362454][ T4528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.369590][ T28] audit: type=1326 audit(1774075830.979:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.397149][ T28] audit: type=1326 audit(1774075830.989:12462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.422931][ T28] audit: type=1326 audit(1774075830.989:12463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.464521][T28793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.474898][ T4528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.494559][ T7146] loop5: detected capacity change from 0 to 1024 [ 1535.501430][ T28] audit: type=1326 audit(1774075830.989:12464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.5.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc3fb3ec799 code=0x7ffc0000 [ 1535.530476][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.543279][ T7146] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1535.561736][ T7146] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1535.569882][ T7146] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1535.584751][ T7146] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.9991: Invalid inode table block 0 in block_group 0 [ 1535.642443][ T4528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.653400][ T7146] loop5: lost filesystem error report for type 5 error -117 [ 1535.653553][ T7146] EXT4-fs (loop5): Remounting filesystem read-only [ 1535.660879][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1535.660912][ C0] EXT4-fs (loop5): initial error at time 1774075831: __ext4_get_inode_loc:4782 [ 1535.660935][ C0] EXT4-fs (loop5): last error at time 1774075831: __ext4_get_inode_loc:4782 [ 1535.696293][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9999'. [ 1535.724660][ T7146] EXT4-fs (loop5): 1 truncate cleaned up [ 1535.758723][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10001'. [ 1535.761018][ T7146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1535.774431][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10001'. [ 1535.869314][ T4528] bridge_slave_1: left allmulticast mode [ 1535.899823][ T4528] bridge_slave_1: left promiscuous mode [ 1535.925869][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.948910][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.959541][ T4528] bridge_slave_0: left allmulticast mode [ 1535.965379][ T4528] bridge_slave_0: left promiscuous mode [ 1535.971227][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.045895][ T7185] loop8: detected capacity change from 0 to 4096 [ 1536.126182][ T7185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.581733][ T7194] loop9: detected capacity change from 0 to 128 [ 1536.690678][ T7194] vfat: Unknown parameter 'ÿÿ' [ 1537.573578][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.605282][ T4528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.652696][ T4528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.712691][ T4528] bond0 (unregistering): Released all slaves [ 1537.981122][ T4528] hsr_slave_0: left promiscuous mode [ 1538.009837][ T7210] loop8: detected capacity change from 0 to 512 [ 1538.021513][ T4528] hsr_slave_1: left promiscuous mode [ 1538.027771][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10008'. [ 1538.054091][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.059996][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10008'. [ 1538.071404][ T7210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1538.077685][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.089566][ T7218] loop9: detected capacity change from 0 to 1024 [ 1538.117503][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.129585][ T7218] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 1538.149902][ T7210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.156503][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.174600][ T7210] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.284957][ T4528] veth1_macvtap: left promiscuous mode [ 1538.318455][ T4528] veth0_macvtap: left promiscuous mode [ 1538.336093][ T4528] veth1_vlan: left promiscuous mode [ 1538.440906][ T7231] loop9: detected capacity change from 0 to 512 [ 1538.589309][ T7231] EXT4-fs (loop9): 1 orphan inode deleted [ 1538.602588][ T7231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.616894][T26817] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 1538.640792][ T7231] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.675942][ T7231] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1538.940058][ T7241] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10011'. [ 1539.183658][ T4528] veth0_vlan: left promiscuous mode [ 1539.692474][ T7248] loop6: detected capacity change from 0 to 512 [ 1539.699039][ T7248] EXT4-fs: Ignoring removed bh option [ 1539.845822][ T7248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.846071][ T7248] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.865934][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.133643][ T4528] team0 (unregistering): Port device team_slave_1 removed [ 1540.143799][ T4528] team0 (unregistering): Port device team_slave_0 removed [ 1540.214757][ T7246] macvtap1: entered promiscuous mode [ 1540.225966][ T7246] syz_tun: entered promiscuous mode [ 1540.235965][ T7246] syz_tun: left promiscuous mode [ 1540.241164][ T7260] loop5: detected capacity change from 0 to 1024 [ 1540.247479][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.284212][ T7260] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1540.299600][ T7257] loop9: detected capacity change from 0 to 512 [ 1540.306477][ T7257] EXT4-fs: Ignoring removed bh option [ 1540.335781][ T7257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.348328][ T7257] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.409547][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.418526][ T7269] loop8: detected capacity change from 0 to 128 [ 1540.450449][ T7269] vfat: Unknown parameter 'ÿÿ' [ 1540.694528][ T7279] loop5: detected capacity change from 0 to 512 [ 1540.707367][ T7279] ext4: Unknown parameter 'noinit_i' [ 1540.717096][ T7275] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1540.740593][ T7284] FAULT_INJECTION: forcing a failure. [ 1540.740593][ T7284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.006145][ T4528] IPVS: stop unused estimator thread 0... [ 1541.055779][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: syz.6.10018 Tainted: G W syzkaller #0 PREEMPT(full) [ 1541.055864][ T7284] Tainted: [W]=WARN [ 1541.055872][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1541.055943][ T7284] Call Trace: [ 1541.055948][ T7284] [ 1541.055955][ T7284] __dump_stack+0x1d/0x30 [ 1541.056043][ T7284] dump_stack_lvl+0x95/0xd0 [ 1541.056064][ T7284] dump_stack+0x15/0x1b [ 1541.056137][ T7284] should_fail_ex+0x263/0x280 [ 1541.056160][ T7284] should_fail+0xb/0x20 [ 1541.056183][ T7284] should_fail_usercopy+0x1a/0x20 [ 1541.056211][ T7284] _copy_to_user+0x20/0xa0 [ 1541.056305][ T7284] simple_read_from_buffer+0xb5/0x130 [ 1541.056403][ T7284] proc_fail_nth_read+0x10e/0x150 [ 1541.056431][ T7284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1541.056453][ T7284] vfs_read+0x1ab/0x7f0 [ 1541.056542][ T7284] ? __rcu_read_unlock+0x4e/0x70 [ 1541.056562][ T7284] ? __fget_files+0x184/0x1c0 [ 1541.056586][ T7284] ? mutex_lock+0x57/0x90 [ 1541.056619][ T7284] ksys_read+0xdc/0x1a0 [ 1541.056651][ T7284] __x64_sys_read+0x40/0x50 [ 1541.056668][ T7284] x64_sys_call+0x2886/0x3020 [ 1541.056733][ T7284] do_syscall_64+0x12c/0x370 [ 1541.056755][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.056777][ T7284] RIP: 0033:0x7f5f445ecfce [ 1541.056794][ T7284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1541.056882][ T7284] RSP: 002b:00007f5f43086fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1541.056902][ T7284] RAX: ffffffffffffffda RBX: 00007f5f430876c0 RCX: 00007f5f445ecfce [ 1541.056917][ T7284] RDX: 000000000000000f RSI: 00007f5f430870a0 RDI: 0000000000000003 [ 1541.056931][ T7284] RBP: 00007f5f43087090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.056945][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.056959][ T7284] R13: 00007f5f448a6038 R14: 00007f5f448a5fa0 R15: 00007ffc445565a8 [ 1541.056986][ T7284] [ 1541.379763][ T7298] loop5: detected capacity change from 0 to 128 [ 1541.426377][ T7298] vfat: Unknown parameter 'ÿÿ' [ 1541.577282][ T7306] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10023'. [ 1542.156362][ T28] kauditd_printk_skb: 456 callbacks suppressed [ 1542.156376][ T28] audit: type=1326 audit(1774075838.119:12918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.192554][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10028'. [ 1542.220154][ T7321] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10028'. [ 1542.254056][ T28] audit: type=1326 audit(1774075838.159:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.301136][ T28] audit: type=1326 audit(1774075838.159:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.359989][ T28] audit: type=1326 audit(1774075838.159:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.419993][ T28] audit: type=1326 audit(1774075838.159:12922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f445ecfce code=0x7ffc0000 [ 1542.521026][ T28] audit: type=1326 audit(1774075838.159:12923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f4462da97 code=0x7ffc0000 [ 1542.554552][ T28] audit: type=1326 audit(1774075838.159:12924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.602190][ T28] audit: type=1326 audit(1774075838.159:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5f4462da97 code=0x7ffc0000 [ 1542.637637][ T28] audit: type=1326 audit(1774075838.159:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f445ecfce code=0x7ffc0000 [ 1542.638748][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.661783][ T28] audit: type=1326 audit(1774075838.159:12927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7320 comm="syz.6.10028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1542.695017][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.704358][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.713551][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.722975][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.732172][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.743229][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10032'. [ 1542.805799][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7343 comm=syz.5.10032 [ 1542.819746][ T7343] netlink: 'syz.5.10032': attribute type 21 has an invalid length. [ 1542.826004][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.828008][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.854492][ T7343] netlink: 'syz.5.10032': attribute type 21 has an invalid length. [ 1542.862544][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1542.904191][ T7358] loop9: detected capacity change from 0 to 1024 [ 1542.960293][ T7358] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 1543.262870][ T7382] loop9: detected capacity change from 0 to 512 [ 1543.427690][ T7382] EXT4-fs (loop9): 1 orphan inode deleted [ 1543.439487][ T7382] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1543.458509][ T7382] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.484994][ T4528] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1 [ 1543.552009][ T7386] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1544.684183][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.975180][ T7419] loop5: detected capacity change from 0 to 512 [ 1544.981776][ T7419] EXT4-fs: Ignoring removed bh option [ 1545.120982][ T7419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.133591][ T7419] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.405831][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.603416][ T7435] loop5: detected capacity change from 0 to 512 [ 1545.746380][ T7435] syzkaller1: entered promiscuous mode [ 1545.752816][ T7435] syzkaller1: entered allmulticast mode [ 1545.823125][ T7448] program syz.7.10045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1546.086055][ T7455] loop8: detected capacity change from 0 to 1024 [ 1546.121952][ T7455] EXT4-fs: inline encryption not supported [ 1546.140109][ T7455] ext4: Bad value for 'mb_optimize_scan' [ 1546.891184][ T7479] loop5: detected capacity change from 0 to 512 [ 1546.897806][ T7479] EXT4-fs: Ignoring removed bh option [ 1546.923742][ T7479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.936525][ T7479] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.131040][ T7497] loop8: detected capacity change from 0 to 128 [ 1547.143263][ T7497] vfat: Unknown parameter 'ÿÿ' [ 1547.266606][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.838739][ T7518] __nla_validate_parse: 85 callbacks suppressed [ 1547.838765][ T7518] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10071'. [ 1547.896766][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10070'. [ 1547.931036][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10070'. [ 1548.073195][ T7534] loop9: detected capacity change from 0 to 1024 [ 1548.121154][ T7534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1548.185366][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.291793][ T7544] program syz.8.10075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.737804][ T7554] program syz.6.10072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.748899][ T7551] loop5: detected capacity change from 0 to 1024 [ 1548.804483][ T7551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.431778][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.475463][ T7576] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 1549.555361][ T7579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10085'. [ 1549.585253][ T7583] loop5: detected capacity change from 0 to 128 [ 1549.585522][ T7583] vfat: Unknown parameter 'ÿÿ' [ 1549.735213][ T7586] loop9: detected capacity change from 0 to 1024 [ 1549.752007][ T7586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.762954][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.518426][ T7596] loop9: detected capacity change from 0 to 4096 [ 1550.572164][ T7596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.989393][ T7598] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.072930][ T7602] loop8: detected capacity change from 0 to 512 [ 1551.073408][ T7602] EXT4-fs: Ignoring removed bh option [ 1551.094613][ T7602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.094797][ T7602] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.060966][ T7611] program syz.5.10091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1552.304086][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.351879][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.599521][ T7631] loop5: detected capacity change from 0 to 8192 [ 1552.663925][ T7641] program syz.9.10092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1552.925265][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10097'. [ 1553.279783][ T7666] loop8: detected capacity change from 0 to 128 [ 1553.286458][ T7666] vfat: Unknown parameter 'ÿÿ' [ 1553.365481][ T7670] loop9: detected capacity change from 0 to 512 [ 1553.372313][ T7670] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1553.397046][ T7670] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 1554.507010][ T7678] program syz.7.10104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1554.747219][ T7684] loop9: detected capacity change from 0 to 4096 [ 1554.886485][ T7684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.414899][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.428319][ T7714] FAULT_INJECTION: forcing a failure. [ 1556.428319][ T7714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.467325][ T7714] CPU: 1 UID: 0 PID: 7714 Comm: syz.7.10113 Tainted: G W syzkaller #0 PREEMPT(full) [ 1556.467356][ T7714] Tainted: [W]=WARN [ 1556.467364][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.467381][ T7714] Call Trace: [ 1556.467389][ T7714] [ 1556.467395][ T7714] __dump_stack+0x1d/0x30 [ 1556.467417][ T7714] dump_stack_lvl+0x95/0xd0 [ 1556.467436][ T7714] dump_stack+0x15/0x1b [ 1556.467597][ T7714] should_fail_ex+0x263/0x280 [ 1556.467656][ T7714] should_fail+0xb/0x20 [ 1556.467679][ T7714] should_fail_usercopy+0x1a/0x20 [ 1556.467731][ T7714] _copy_from_iter+0xcf/0xea0 [ 1556.467754][ T7714] ? __alloc_skb+0x4f6/0x690 [ 1556.467780][ T7714] ? __alloc_skb+0x200/0x690 [ 1556.467889][ T7714] netlink_sendmsg+0x4ae/0x6f0 [ 1556.467943][ T7714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.468038][ T7714] ____sys_sendmsg+0x563/0x5b0 [ 1556.468065][ T7714] ___sys_sendmsg+0x195/0x1e0 [ 1556.468109][ T7714] __x64_sys_sendmsg+0xd4/0x160 [ 1556.468141][ T7714] x64_sys_call+0x194c/0x3020 [ 1556.468164][ T7714] do_syscall_64+0x12c/0x370 [ 1556.468269][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.468292][ T7714] RIP: 0033:0x7f4be9acc799 [ 1556.468305][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.468322][ T7714] RSP: 002b:00007f4be851f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1556.468344][ T7714] RAX: ffffffffffffffda RBX: 00007f4be9d45fa0 RCX: 00007f4be9acc799 [ 1556.468359][ T7714] RDX: 0000000004008000 RSI: 0000200000000940 RDI: 0000000000000003 [ 1556.468418][ T7714] RBP: 00007f4be851f090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.468429][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.468440][ T7714] R13: 00007f4be9d46038 R14: 00007f4be9d45fa0 R15: 00007ffd9d62f548 [ 1556.468536][ T7714] [ 1556.704072][ T7718] veth0_to_bridge: mtu less than device minimum [ 1556.908427][ T28] kauditd_printk_skb: 263 callbacks suppressed [ 1556.908467][ T28] audit: type=1400 audit(1774075852.689:13190): avc: denied { listen } for pid=7717 comm="syz.7.10114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1557.237148][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.282304][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.341245][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.363622][ T7746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7746 comm=syz.9.10112 [ 1557.488165][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.530614][ T7751] netlink: 'syz.9.10112': attribute type 21 has an invalid length. [ 1557.535260][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.548200][ T7751] IPv6: NLM_F_CREATE should be specified when creating new route [ 1557.549274][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.778645][ T7751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1557.785899][ T7751] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.793157][ T7751] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.800374][ T7751] IPv6: NLM_F_CREATE should be set when creating new route [ 1557.817782][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.853873][ T7746] netlink: 'syz.9.10112': attribute type 21 has an invalid length. [ 1557.864578][ T7746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1557.873857][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.932497][ T7762] program syz.6.10119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1557.966780][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.981548][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1557.990817][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.004984][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.014753][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.024840][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.034590][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.044661][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.059680][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.070852][ T7734] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10112'. [ 1558.236924][ T7770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25527 sclass=netlink_route_socket pid=7770 comm=syz.9.10124 [ 1558.535020][ T7797] loop9: detected capacity change from 0 to 512 [ 1558.542020][ T7797] EXT4-fs: Ignoring removed bh option [ 1558.806676][ T7797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1558.819228][ T7797] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1558.955657][ T7811] loop5: detected capacity change from 0 to 1024 [ 1559.050193][ T7811] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1559.070872][ T7820] ieee802154 phy0 wpan0: encryption failed: -22 [ 1559.107983][ T7784] dummy0 speed is unknown, defaulting to 1000 [ 1559.344485][ T7831] loop5: detected capacity change from 0 to 512 [ 1560.314081][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.385068][ T7831] EXT4-fs (loop5): 1 orphan inode deleted [ 1560.397080][ T7831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1560.412628][ T7831] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.441481][ T7831] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1560.458386][ T4535] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1560.597941][ T7784] chnl_net:caif_netlink_parms(): no params data found [ 1560.604913][ T4535] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 1 [ 1560.754069][T26819] bridge_slave_1: left allmulticast mode [ 1560.783753][T26819] bridge_slave_1: left promiscuous mode [ 1560.801477][T26819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.825131][T26819] bridge_slave_0: left allmulticast mode [ 1560.842112][T26819] bridge_slave_0: left promiscuous mode [ 1560.861728][T26819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.052181][ T7833] loop8: detected capacity change from 0 to 32768 [ 1561.386590][ T7860] loop6: detected capacity change from 0 to 4096 [ 1561.411575][ T7860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.467038][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.570242][T26819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.695026][T26819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.747595][T26819] bond0 (unregistering): Released all slaves [ 1561.830388][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.837685][ T7784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.845174][ T7784] bridge_slave_0: entered allmulticast mode [ 1561.853475][ T7784] bridge_slave_0: entered promiscuous mode [ 1561.868116][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.880763][ T7784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.888001][ T7784] bridge_slave_1: entered allmulticast mode [ 1561.895570][ T7784] bridge_slave_1: entered promiscuous mode [ 1561.930982][T26819] IPVS: stopping backup sync thread 2502 ... [ 1561.937240][ T7784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.959145][ T7784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.978010][T26819] hsr_slave_0: left promiscuous mode [ 1561.988822][T26819] hsr_slave_1: left promiscuous mode [ 1561.999599][T26819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.015338][T26819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.032117][T26819] batman_adv: batadv0: Removing interface: dummy0 [ 1562.155555][T26819] team0 (unregistering): Port device team_slave_1 removed [ 1562.168145][ T7887] loop5: detected capacity change from 0 to 1024 [ 1562.189915][T26819] team0 (unregistering): Port device team_slave_0 removed [ 1562.210214][ T7887] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1562.773889][ T7890] loop5: detected capacity change from 0 to 512 [ 1562.833526][ T7890] EXT4-fs (loop5): 1 orphan inode deleted [ 1562.845584][ T7890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.864021][ T7890] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1562.888524][ T4530] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1562.932691][ T7890] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1563.035405][ T4530] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 1563.192801][ T7784] team0: Port device team_slave_0 added [ 1563.221822][ T7784] team0: Port device team_slave_1 added [ 1563.248907][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.279227][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.322265][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.389600][ T7784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.400959][ T7784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.407889][ T7784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.433871][ T7784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.459710][ T7784] hsr_slave_0: entered promiscuous mode [ 1563.465815][ T7784] hsr_slave_1: entered promiscuous mode [ 1563.471653][ T7784] debugfs: 'hsr0' already exists in 'hsr' [ 1563.477367][ T7784] Cannot create hsr debugfs directory [ 1564.185967][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.307493][T26819] IPVS: stop unused estimator thread 0... [ 1564.326736][ T7915] __nla_validate_parse: 56 callbacks suppressed [ 1564.326753][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10149'. [ 1564.368611][ T7926] loop5: detected capacity change from 0 to 1024 [ 1564.412392][ T7928] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10151'. [ 1564.430439][ T7926] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1564.568896][ T7935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22011 sclass=netlink_route_socket pid=7935 comm=syz.6.10152 [ 1564.715932][ T7946] loop5: detected capacity change from 0 to 512 [ 1564.787999][ T7946] EXT4-fs (loop5): 1 orphan inode deleted [ 1564.799595][ T7946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1564.879522][ T7946] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1564.919167][ T7946] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1565.016436][ T7935] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10152'. [ 1565.041968][ T7935] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10152'. [ 1565.383912][ T7784] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1565.506465][ T7784] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1565.541216][ T7784] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1566.074608][ T7966] loop9: detected capacity change from 0 to 4096 [ 1566.150369][ T4530] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1566.185262][ T7966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1566.275175][ T4530] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 1566.604302][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1566.613942][ T7784] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1567.368105][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.417666][ T7784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.463269][ T7784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.496213][T26791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.503310][T26791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.534047][ T8006] loop9: detected capacity change from 0 to 1024 [ 1567.639623][T26791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.646801][T26791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.648281][ T8006] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 1567.667823][ T8018] loop5: detected capacity change from 0 to 128 [ 1567.697616][ T8018] vfat: Unknown parameter 'ÿÿ' [ 1567.722984][ T7784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1567.815382][ T7784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1567.955348][ T8025] loop9: detected capacity change from 0 to 512 [ 1568.452272][ T8025] EXT4-fs (loop9): 1 orphan inode deleted [ 1568.465872][ T8025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1568.753928][ T8025] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.824831][ T8032] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1569.090060][ T4530] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1569.099840][ T4530] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 1 [ 1569.825388][ T8039] program syz.6.10163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1570.115873][ T7784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.140089][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.442109][ T7784] veth0_vlan: entered promiscuous mode [ 1570.470883][ T7784] veth1_vlan: entered promiscuous mode [ 1570.528592][ T8085] loop9: detected capacity change from 0 to 4096 [ 1570.557653][ T7784] veth0_macvtap: entered promiscuous mode [ 1570.566371][ T7784] veth1_macvtap: entered promiscuous mode [ 1570.583098][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.601457][ T8085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.724427][ T7784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.840928][ T3494] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.917430][ T3494] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.155305][ T8088] loop6: detected capacity change from 0 to 1024 [ 1571.162579][ T28] audit: type=1326 audit(1774075867.089:13191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.191833][ T8088] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1571.203466][ T8088] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1571.211459][ T8088] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1571.219025][ T8088] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.10170: Invalid inode table block 0 in block_group 0 [ 1571.231750][ T8088] loop6: lost filesystem error report for type 5 error -117 [ 1571.231976][ T8088] EXT4-fs (loop6): Remounting filesystem read-only [ 1571.245835][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1571.245856][ C1] EXT4-fs (loop6): initial error at time 1774075867: __ext4_get_inode_loc:4782 [ 1571.245881][ C1] EXT4-fs (loop6): last error at time 1774075867: __ext4_get_inode_loc:4782 [ 1571.269971][ T8088] Quota error (device loop6): write_blk: dquota write failed [ 1571.277328][ T8088] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1571.287256][ T8088] EXT4-fs (loop6): 1 truncate cleaned up [ 1571.326479][ T28] audit: type=1326 audit(1774075867.089:13192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.400119][ T28] audit: type=1326 audit(1774075867.089:13193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.426302][ T8088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1571.521797][ T3494] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.544308][ T3494] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.559970][ T28] audit: type=1326 audit(1774075867.089:13194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.608909][ T28] audit: type=1326 audit(1774075867.089:13195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.672878][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.720261][ T28] audit: type=1326 audit(1774075867.089:13196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.752175][ T8092] loop7: detected capacity change from 0 to 512 [ 1571.781753][ T8092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1571.822169][ T8092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.841229][ T28] audit: type=1326 audit(1774075867.089:13197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8078 comm="syz.6.10170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1571.885375][ T8092] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.011765][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.029888][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.429254][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10175'. [ 1572.468468][ T8108] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10175'. [ 1572.677588][ T8114] loop5: detected capacity change from 0 to 1024 [ 1572.710808][ T8114] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1572.763144][ T8110] loop7: detected capacity change from 0 to 1024 [ 1572.831066][ T8110] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1572.844174][ T8110] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1572.853160][ T8110] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1572.860965][ T8110] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.10176: Invalid inode table block 0 in block_group 0 [ 1572.926324][ T8110] loop7: lost filesystem error report for type 5 error -117 [ 1572.930034][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1572.943770][ C1] EXT4-fs (loop7): initial error at time 1774075868: __ext4_get_inode_loc:4782 [ 1572.952737][ C1] EXT4-fs (loop7): last error at time 1774075868: __ext4_get_inode_loc:4782 [ 1573.005156][ T8119] loop5: detected capacity change from 0 to 512 [ 1573.154365][ T8110] EXT4-fs (loop7): Remounting filesystem read-only [ 1573.199594][ T8119] EXT4-fs (loop5): 1 orphan inode deleted [ 1573.211827][ T8119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1573.226492][ T8119] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1573.255118][ T8119] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1573.306012][ T8110] EXT4-fs (loop7): 1 truncate cleaned up [ 1573.313239][ T8123] loop9: detected capacity change from 0 to 1024 [ 1573.382850][ T8123] EXT4-fs: Ignoring removed orlov option [ 1573.580439][ T4535] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 1 [ 1573.870775][ T8110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1574.510984][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1574.511009][ T28] audit: type=1326 audit(1774075870.429:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f190b03cfce code=0x7ffc0000 [ 1574.581302][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.599643][ T8123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.607697][ T28] audit: type=1326 audit(1774075870.429:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f190b07abd7 code=0x7ffc0000 [ 1574.743612][ T28] audit: type=1326 audit(1774075870.429:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f190b03cfce code=0x7ffc0000 [ 1574.758718][ T8136] loop6: detected capacity change from 0 to 1024 [ 1574.767845][ T28] audit: type=1326 audit(1774075870.429:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1574.830475][ T28] audit: type=1326 audit(1774075870.429:13242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1574.857103][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.890392][ T28] audit: type=1326 audit(1774075870.529:13243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1574.906938][ T8136] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 1574.914311][ T28] audit: type=1326 audit(1774075870.529:13244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.7.10176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1575.094237][ T8142] loop5: detected capacity change from 0 to 4096 [ 1576.108655][ T8145] loop6: detected capacity change from 0 to 512 [ 1577.950013][ T8142] EXT4-fs: error -4 creating inode table initialization thread [ 1577.957806][ T8142] EXT4-fs (loop5): mount failed [ 1578.054395][ T8145] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 1578.201676][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.361397][ T8157] loop6: detected capacity change from 0 to 1024 [ 1578.368105][ T8157] EXT4-fs: Ignoring removed bh option [ 1578.373525][ T8157] EXT4-fs: Ignoring removed oldalloc option [ 1578.379606][ T8157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1578.475830][ T8156] program syz.7.10186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1578.501489][ T8157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 1578.509681][ T8157] System zones: 0-1, 3-36 [ 1578.540832][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.712979][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.774805][ T8173] FAULT_INJECTION: forcing a failure. [ 1579.774805][ T8173] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.774832][ T8173] CPU: 1 UID: 0 PID: 8173 Comm: syz.6.10191 Tainted: G W syzkaller #0 PREEMPT(full) [ 1579.774857][ T8173] Tainted: [W]=WARN [ 1579.774863][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1579.774921][ T8173] Call Trace: [ 1579.774928][ T8173] [ 1579.774943][ T8173] __dump_stack+0x1d/0x30 [ 1579.774968][ T8173] dump_stack_lvl+0x95/0xd0 [ 1579.775055][ T8173] dump_stack+0x15/0x1b [ 1579.775073][ T8173] should_fail_ex+0x263/0x280 [ 1579.775100][ T8173] should_failslab+0x8c/0xb0 [ 1579.775180][ T8173] kmem_cache_alloc_noprof+0x66/0x400 [ 1579.775201][ T8173] ? fcntl_getlk+0x3c/0x690 [ 1579.775263][ T8173] fcntl_getlk+0x3c/0x690 [ 1579.775281][ T8173] ? should_fail_ex+0xd9/0x280 [ 1579.775302][ T8173] do_fcntl+0x7ba/0xf80 [ 1579.775394][ T8173] __se_sys_fcntl+0xb1/0x120 [ 1579.775417][ T8173] __x64_sys_fcntl+0x43/0x50 [ 1579.775444][ T8173] x64_sys_call+0x2844/0x3020 [ 1579.775524][ T8173] do_syscall_64+0x12c/0x370 [ 1579.775543][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.775561][ T8173] RIP: 0033:0x7f5f4462c799 [ 1579.775635][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.775704][ T8173] RSP: 002b:00007f5f43087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1579.775724][ T8173] RAX: ffffffffffffffda RBX: 00007f5f448a5fa0 RCX: 00007f5f4462c799 [ 1579.775737][ T8173] RDX: 00002000000000c0 RSI: 0000000000000005 RDI: 0000000000000003 [ 1579.775748][ T8173] RBP: 00007f5f43087090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.775831][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.775842][ T8173] R13: 00007f5f448a6038 R14: 00007f5f448a5fa0 R15: 00007ffc445565a8 [ 1579.775862][ T8173] [ 1580.798589][ T8192] loop5: detected capacity change from 0 to 128 [ 1580.965938][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10199'. [ 1581.029551][ T8194] netlink: 92 bytes leftover after parsing attributes in process `syz.5.10199'. [ 1581.588698][ T8202] loop6: detected capacity change from 0 to 1024 [ 1581.589382][ T8202] EXT4-fs: Ignoring removed bh option [ 1581.589402][ T8202] EXT4-fs: Ignoring removed oldalloc option [ 1581.589447][ T8202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1582.472307][ T8202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 1582.472335][ T8202] System zones: 0-1, 3-36 [ 1582.473560][ T8202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.688287][ T8207] geneve2: entered promiscuous mode [ 1582.728180][ T8207] geneve2: entered allmulticast mode [ 1582.746463][ T8206] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10204'. [ 1582.833061][ T8214] loop5: detected capacity change from 0 to 1024 [ 1582.861394][ T8214] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1582.881163][ T8216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1582.894178][ T8212] loop7: detected capacity change from 0 to 512 [ 1582.954761][ T8219] loop9: detected capacity change from 0 to 1024 [ 1582.991088][ T8219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.057918][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.261066][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.289545][ T28] audit: type=1326 audit(1774075879.239:13245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1583.313923][ T28] audit: type=1326 audit(1774075879.249:13246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1583.317494][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10209'. [ 1583.436631][ T8230] loop8: detected capacity change from 0 to 512 [ 1583.443222][ T8230] EXT4-fs: Ignoring removed bh option [ 1583.473823][ T28] audit: type=1326 audit(1774075879.249:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1583.510925][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10209'. [ 1583.612274][ T8235] loop5: detected capacity change from 0 to 512 [ 1584.337730][ T28] audit: type=1326 audit(1774075879.249:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1584.364760][ T28] audit: type=1326 audit(1774075879.249:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37f506cfce code=0x7ffc0000 [ 1585.323987][ T28] audit: type=1326 audit(1774075879.249:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f37f50ada97 code=0x7ffc0000 [ 1585.348677][ T28] audit: type=1326 audit(1774075879.249:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1585.381097][ T28] audit: type=1326 audit(1774075879.249:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f37f50ada97 code=0x7ffc0000 [ 1585.405705][ T28] audit: type=1326 audit(1774075879.249:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37f506cfce code=0x7ffc0000 [ 1585.795790][ T8230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.800170][ T28] audit: type=1326 audit(1774075879.249:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8227 comm="syz.9.10209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x7ffc0000 [ 1585.809344][ T8230] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1585.870219][ T8235] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 1585.971593][ T8246] loop6: detected capacity change from 0 to 512 [ 1585.978352][ T8246] EXT4-fs: Ignoring removed bh option [ 1586.205866][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.237109][ T8246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.249681][ T8246] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.705386][ T8269] loop9: detected capacity change from 0 to 4096 [ 1586.716824][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.880662][ T8269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.553453][ T8268] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10215'. [ 1589.042685][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.101863][ T8284] loop6: detected capacity change from 0 to 1024 [ 1589.217432][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.237161][ T8284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1589.260333][ T8268] bridge1: entered promiscuous mode [ 1589.274387][ T8291] loop5: detected capacity change from 0 to 1024 [ 1589.355461][ T8291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1589.422563][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.428615][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.437598][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.460954][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.506519][ T8272] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1589.609504][ T8318] loop5: detected capacity change from 0 to 512 [ 1589.623355][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.629478][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.643116][ T8318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1589.650332][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.657578][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.689092][ T8272] lo speed is unknown, defaulting to 1000 [ 1589.727022][ T8323] loop6: detected capacity change from 0 to 512 [ 1589.734247][ T8323] EXT4-fs: Ignoring removed bh option [ 1589.874161][ T8327] program syz.9.10227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1590.104508][ T8323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.117096][ T8323] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.161170][ T8318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.205227][ T8318] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.217774][ T8272] lo speed is unknown, defaulting to 1000 [ 1590.258678][ T8272] lo speed is unknown, defaulting to 1000 [ 1590.301012][ T8272] lo speed is unknown, defaulting to 1000 [ 1590.303888][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10230'. [ 1590.381450][ T8272] lo speed is unknown, defaulting to 1000 [ 1590.387534][ T8272] lo speed is unknown, defaulting to 1000 [ 1590.425187][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.494515][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.643119][ T8351] loop6: detected capacity change from 0 to 1024 [ 1590.727623][ T8351] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1590.742600][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 1590.742612][ T28] audit: type=1326 audit(1774075886.599:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1590.772859][ T28] audit: type=1326 audit(1774075886.599:13393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1590.806372][ T28] audit: type=1326 audit(1774075886.599:13394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1590.831431][ T28] audit: type=1326 audit(1774075886.599:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1590.832153][ T8351] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1590.863478][ T8351] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1590.972083][ T8355] program syz.5.10235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1591.040029][ T28] audit: type=1326 audit(1774075886.599:13396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1591.040340][ T8351] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.10233: Invalid inode table block 0 in block_group 0 [ 1591.076406][ T8351] loop6: lost filesystem error report for type 5 error -117 [ 1591.079521][ T8351] EXT4-fs (loop6): Remounting filesystem read-only [ 1591.086848][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1591.086869][ C1] EXT4-fs (loop6): initial error at time 1774075887: __ext4_get_inode_loc:4782 [ 1591.086913][ C1] EXT4-fs (loop6): last error at time 1774075887: __ext4_get_inode_loc:4782 [ 1591.117487][ T8351] Quota error (device loop6): write_blk: dquota write failed [ 1591.125012][ T8351] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1591.135127][ T8351] EXT4-fs (loop6): 1 truncate cleaned up [ 1591.151416][ T28] audit: type=1326 audit(1774075886.599:13397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1591.241318][ T28] audit: type=1326 audit(1774075886.599:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1591.358246][ T8351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1591.427115][ T28] audit: type=1326 audit(1774075886.599:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.6.10233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4462c799 code=0x7ffc0000 [ 1592.423614][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.550643][ T8362] loop6: detected capacity change from 0 to 1024 [ 1592.612466][ T8362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.691978][ T8365] program syz.9.10231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1592.752211][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.781781][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10245'. [ 1593.120222][ T8388] program syz.5.10242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1593.137506][ T8389] loop6: detected capacity change from 0 to 512 [ 1593.144095][ T8389] EXT4-fs: Ignoring removed bh option [ 1593.762768][ T8391] loop8: detected capacity change from 0 to 512 [ 1593.769443][ T8391] EXT4-fs: Ignoring removed bh option [ 1594.650363][ T8389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.650363][ T8391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.650434][ T8389] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.662889][ T8391] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.863520][ T8396] loop7: detected capacity change from 0 to 1024 [ 1594.890106][ T8396] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1595.008000][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.050923][ T8396] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1595.150772][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.179312][ T8396] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1595.217405][ T8396] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.10247: Invalid inode table block 0 in block_group 0 [ 1595.287410][ T8396] loop7: lost filesystem error report for type 5 error -117 [ 1595.287731][ T8396] EXT4-fs (loop7): Remounting filesystem read-only [ 1595.295065][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1595.295079][ C0] EXT4-fs (loop7): initial error at time 1774075891: __ext4_get_inode_loc:4782 [ 1595.295125][ C0] EXT4-fs (loop7): last error at time 1774075891: __ext4_get_inode_loc:4782 [ 1595.502813][ T8396] EXT4-fs (loop7): 1 truncate cleaned up [ 1595.566622][ T8396] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1595.778381][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 1595.778400][ T28] audit: type=1326 audit(1774075891.629:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f190b03cfce code=0x7ffc0000 [ 1596.469463][ T28] audit: type=1326 audit(1774075891.629:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f190b07abd7 code=0x7ffc0000 [ 1596.671634][ T8432] loop5: detected capacity change from 0 to 1024 [ 1596.704095][ T28] audit: type=1326 audit(1774075891.629:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f190b03cfce code=0x7ffc0000 [ 1596.733555][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.749579][ T8439] FAULT_INJECTION: forcing a failure. [ 1596.749579][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1596.768081][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.9.10255 Tainted: G W syzkaller #0 PREEMPT(full) [ 1596.768115][ T8439] Tainted: [W]=WARN [ 1596.768121][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1596.768132][ T8439] Call Trace: [ 1596.768138][ T8439] [ 1596.768145][ T8439] __dump_stack+0x1d/0x30 [ 1596.768235][ T8439] dump_stack_lvl+0x95/0xd0 [ 1596.768258][ T8439] dump_stack+0x15/0x1b [ 1596.768278][ T8439] should_fail_ex+0x263/0x280 [ 1596.768377][ T8439] should_fail+0xb/0x20 [ 1596.768457][ T8439] should_fail_usercopy+0x1a/0x20 [ 1596.768623][ T8439] _copy_from_user+0x1c/0xb0 [ 1596.768694][ T8439] ___sys_recvmsg+0xaa/0x3b0 [ 1596.768807][ T8439] ? __rcu_read_unlock+0x4e/0x70 [ 1596.768831][ T8439] __x64_sys_recvmsg+0xd1/0x160 [ 1596.768862][ T8439] x64_sys_call+0x2b1a/0x3020 [ 1596.768947][ T8439] do_syscall_64+0x12c/0x370 [ 1596.768969][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.768991][ T8439] RIP: 0033:0x7f37f50ac799 [ 1596.769007][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.769021][ T8439] RSP: 002b:00007f37f3aff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1596.769043][ T8439] RAX: ffffffffffffffda RBX: 00007f37f5325fa0 RCX: 00007f37f50ac799 [ 1596.769133][ T8439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1596.769157][ T8439] RBP: 00007f37f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.769168][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.769237][ T8439] R13: 00007f37f5326038 R14: 00007f37f5325fa0 R15: 00007fff5a1988f8 [ 1596.769325][ T8439] [ 1596.958981][ T8445] program syz.8.10250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1597.102447][ T28] audit: type=1326 audit(1774075891.639:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1597.108329][ T8432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1597.126061][ T28] audit: type=1326 audit(1774075891.639:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1597.162618][ T28] audit: type=1326 audit(1774075891.639:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.7.10247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1597.233935][ T8455] loop7: detected capacity change from 0 to 1024 [ 1597.234313][ T8455] EXT4-fs: Ignoring removed bh option [ 1597.234339][ T8455] EXT4-fs: Ignoring removed oldalloc option [ 1597.234416][ T8455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1597.261055][ T8455] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 1597.269174][ T8455] System zones: 0-1, 3-36 [ 1597.269844][ T8455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1597.335902][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.451009][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.567307][ T8468] loop9: detected capacity change from 0 to 512 [ 1597.573914][ T8468] EXT4-fs: Ignoring removed bh option [ 1597.649327][ T8467] loop5: detected capacity change from 0 to 512 [ 1597.880842][ T8468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.640432][ T8468] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.075382][ T8483] loop8: detected capacity change from 0 to 1024 [ 1600.180363][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.237275][ T8483] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 1600.719308][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1600.785797][ T8499] loop5: detected capacity change from 0 to 1024 [ 1600.829215][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1600.845395][ T28] audit: type=1326 audit(1774075896.769:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1600.861652][ T8501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8501 comm=syz.6.10269 [ 1600.892720][ T8501] netlink: 'syz.6.10269': attribute type 21 has an invalid length. [ 1600.893566][ T8488] loop7: detected capacity change from 0 to 1024 [ 1600.900957][ T8501] IPv6: NLM_F_CREATE should be specified when creating new route [ 1600.908433][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1600.923908][ T28] audit: type=1326 audit(1774075896.769:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1600.924051][ T8501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1600.947847][ T8488] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1600.954914][ T8501] IPv6: NLM_F_CREATE should be set when creating new route [ 1600.954936][ T8501] IPv6: NLM_F_CREATE should be set when creating new route [ 1600.954954][ T8501] IPv6: NLM_F_CREATE should be set when creating new route [ 1600.982303][ T8499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.987318][ T28] audit: type=1326 audit(1774075896.789:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.016452][ T8488] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1601.023008][ T28] audit: type=1326 audit(1774075896.789:13447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.089959][ T28] audit: type=1326 audit(1774075896.789:13448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.170302][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.174716][ T8506] loop8: detected capacity change from 0 to 512 [ 1601.179587][ T8488] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1601.179861][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.179879][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.179974][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.179991][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.180006][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.180023][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10269'. [ 1601.186574][ T28] audit: type=1326 audit(1774075896.789:13449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.186630][ T28] audit: type=1326 audit(1774075896.789:13450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.186653][ T28] audit: type=1326 audit(1774075896.789:13451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.186734][ T28] audit: type=1326 audit(1774075896.789:13452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f190b07c799 code=0x7ffc0000 [ 1601.186758][ T28] audit: type=1326 audit(1774075896.789:13453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8487 comm="syz.7.10267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f190b07c502 code=0x7ffc0000 [ 1601.306696][ T8488] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz.7.10267: Invalid inode table block 0 in block_group 0 [ 1601.390144][ T8497] syz_tun: left promiscuous mode [ 1601.396793][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.397711][ T8488] loop7: lost filesystem error report for type 5 error -117 [ 1601.406310][ T8488] EXT4-fs (loop7): Remounting filesystem read-only [ 1601.413616][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1601.413631][ C0] EXT4-fs (loop7): initial error at time 1774075897: __ext4_get_inode_loc:4782 [ 1601.413651][ C0] EXT4-fs (loop7): last error at time 1774075897: __ext4_get_inode_loc:4782 [ 1601.461606][ T8509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8509 comm=syz.9.10271 [ 1601.487048][ T8488] EXT4-fs (loop7): 1 truncate cleaned up [ 1601.487479][ T8509] netlink: 'syz.9.10271': attribute type 21 has an invalid length. [ 1601.500411][ T8488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1601.512332][ T8509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1601.525118][ T8514] loop5: detected capacity change from 0 to 1024 [ 1601.531974][ T8514] EXT4-fs: Ignoring removed bh option [ 1601.537403][ T8514] EXT4-fs: Ignoring removed oldalloc option [ 1601.543400][ T8514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1601.556572][ T8514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 1601.564756][ T8514] System zones: 0-1, 3-36 [ 1601.570081][ T8514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.607168][ T8506] EXT4-fs (loop8): 1 orphan inode deleted [ 1601.626450][ T3494] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 1 [ 1601.649865][ T3494] loop8: lost filesystem error report for type 5 error -117 [ 1601.661609][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1601.661636][ C0] EXT4-fs (loop8): initial error at time 1774075897: ext4_release_dquot:7037 [ 1601.661655][ C0] EXT4-fs (loop8): last error at time 1774075897: ext4_release_dquot:7037 [ 1601.697911][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.714580][ T8506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1601.749787][ T8506] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.770363][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.941716][ T8528] program syz.9.10274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1602.198977][ T8530] loop5: detected capacity change from 0 to 512 [ 1602.206261][ T8530] EXT4-fs: Ignoring removed bh option [ 1602.785698][ T8534] loop6: detected capacity change from 0 to 512 [ 1602.792721][ T8534] EXT4-fs: Ignoring removed bh option [ 1603.111216][ T8530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.123751][ T8530] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.272437][ T8534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.285342][ T8534] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.445024][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.526229][ T8537] loop9: detected capacity change from 0 to 512 [ 1603.547437][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.710960][ T8558] loop5: detected capacity change from 0 to 1024 [ 1603.821112][ T8558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1604.050378][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.328727][ T8600] loop6: detected capacity change from 0 to 1024 [ 1604.341541][ T8594] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1604.364900][ T8594] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1604.373024][ T8594] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1604.385886][ T8594] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz.9.10286: Invalid inode table block 0 in block_group 0 [ 1604.398727][ T8594] loop9: lost filesystem error report for type 5 error -117 [ 1604.398986][ T8594] EXT4-fs (loop9): Remounting filesystem read-only [ 1604.402171][ T8605] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1604.406312][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1604.427942][ C1] EXT4-fs (loop9): initial error at time 1774075900: __ext4_get_inode_loc:4782 [ 1604.436952][ C1] EXT4-fs (loop9): last error at time 1774075900: __ext4_get_inode_loc:4782 [ 1604.445768][ T8594] EXT4-fs (loop9): 1 truncate cleaned up [ 1604.451619][ T8600] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 1604.452094][ T8594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1604.545023][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.976902][ T8617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.742456][ T8622] set_capacity_and_notify: 3 callbacks suppressed [ 1605.742473][ T8622] loop7: detected capacity change from 0 to 512 [ 1605.755458][ T8622] EXT4-fs: Ignoring removed bh option [ 1606.559392][ T8622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.572080][ T8622] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.572733][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.726865][ T8636] loop9: detected capacity change from 0 to 1024 [ 1606.780885][ T8637] loop6: detected capacity change from 0 to 512 [ 1606.886371][ T7784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.984891][ T8638] loop5: detected capacity change from 0 to 512 [ 1607.703370][ T8636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1607.726726][ T8637] EXT4-fs (loop6): 1 orphan inode deleted [ 1607.741362][ T8637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1607.755742][T26819] __quota_error: 47 callbacks suppressed [ 1607.755799][T26819] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1607.773982][ T8637] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.873154][T26819] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 1607.976807][ T4633] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.023968][ T8638] EXT4-fs (loop5): 1 orphan inode deleted [ 1608.040304][T26819] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1608.080017][T26819] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 1608.150877][T26819] loop5: lost filesystem error report for type 5 error -117 [ 1608.152892][ T28] audit: type=1326 audit(1774075904.119:13496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8657 comm="syz.9.10296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37f50ac799 code=0x0 [ 1608.187701][ T8638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.201640][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1608.216431][ T8638] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.335282][ T8665] __nla_validate_parse: 145 callbacks suppressed [ 1608.335301][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10296'. [ 1608.739083][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10295'. [ 1609.107325][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.180428][ T8686] netlink: 'syz.9.10300': attribute type 7 has an invalid length. [ 1609.188261][ T8686] netlink: 'syz.9.10300': attribute type 8 has an invalid length. [ 1609.214442][ T8689] loop7: detected capacity change from 0 to 128 [ 1609.247069][ T8689] vfat: Unknown parameter 'ÿÿ' [ 1609.259856][ T8684] loop6: detected capacity change from 0 to 1024 [ 1609.271202][ T8684] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1609.287004][ T8691] lo speed is unknown, defaulting to 1000 [ 1609.430202][ T8684] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1609.438254][ T8684] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1609.446859][ T8684] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.10302: Invalid inode table block 0 in block_group 0 [ 1609.459692][ T8684] loop6: lost filesystem error report for type 5 error -117 [ 1609.459865][ T8684] EXT4-fs (loop6): Remounting filesystem read-only [ 1609.467174][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1609.467190][ C1] EXT4-fs (loop6): initial error at time 1774075905: __ext4_get_inode_loc:4782 [ 1609.467209][ C1] EXT4-fs (loop6): last error at time 1774075905: __ext4_get_inode_loc:4782 [ 1609.497949][ T8684] Quota error (device loop6): write_blk: dquota write failed [ 1609.505340][ T8684] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1609.515266][ T8684] EXT4-fs (loop6): 1 truncate cleaned up [ 1609.610539][ T8684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1609.970240][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.321715][ T8708] loop7: detected capacity change from 0 to 128 [ 1610.344482][ T8710] loop6: detected capacity change from 0 to 1024 [ 1610.354860][ T8712] FAULT_INJECTION: forcing a failure. [ 1610.354860][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.357776][ T8708] vfat: Unknown parameter 'ÿÿ' [ 1610.367947][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.9.10308 Tainted: G W syzkaller #0 PREEMPT(full) [ 1610.367977][ T8712] Tainted: [W]=WARN [ 1610.367984][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1610.367996][ T8712] Call Trace: [ 1610.368003][ T8712] [ 1610.368089][ T8712] __dump_stack+0x1d/0x30 [ 1610.368184][ T8712] dump_stack_lvl+0x95/0xd0 [ 1610.368206][ T8712] dump_stack+0x15/0x1b [ 1610.368236][ T8712] should_fail_ex+0x263/0x280 [ 1610.368325][ T8712] should_failslab+0x8c/0xb0 [ 1610.368347][ T8712] kmem_cache_alloc_noprof+0x66/0x400 [ 1610.368368][ T8712] ? security_inode_alloc+0x37/0x100 [ 1610.368397][ T8712] security_inode_alloc+0x37/0x100 [ 1610.368446][ T8712] inode_init_always_gfp+0x4b7/0x500 [ 1610.368469][ T8712] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1610.368493][ T8712] alloc_inode+0x58/0x170 [ 1610.368574][ T8712] __sock_create+0x120/0x580 [ 1610.368596][ T8712] ? mutex_lock+0x57/0x90 [ 1610.368623][ T8712] ? mutex_unlock+0x4e/0x90 [ 1610.368649][ T8712] ? fput+0x8f/0xc0 [ 1610.368709][ T8712] __sys_socket+0xaf/0x180 [ 1610.368732][ T8712] __x64_sys_socket+0x3f/0x50 [ 1610.368755][ T8712] x64_sys_call+0x11fc/0x3020 [ 1610.368782][ T8712] do_syscall_64+0x12c/0x370 [ 1610.368926][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.369012][ T8712] RIP: 0033:0x7f37f50ac799 [ 1610.369092][ T8712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1610.369108][ T8712] RSP: 002b:00007f37f3aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1610.369167][ T8712] RAX: ffffffffffffffda RBX: 00007f37f5325fa0 RCX: 00007f37f50ac799 [ 1610.369181][ T8712] RDX: 0000000000000002 RSI: 0000000000000803 RDI: 0000000000000010 [ 1610.369194][ T8712] RBP: 00007f37f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.369207][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.369298][ T8712] R13: 00007f37f5326038 R14: 00007f37f5325fa0 R15: 00007fff5a1988f8 [ 1610.369317][ T8712] [ 1610.369330][ T8712] socket: no more sockets [ 1610.378753][ T8710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.652008][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10309'. [ 1610.712185][ T8719] FAULT_INJECTION: forcing a failure. [ 1610.712185][ T8719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.745026][T30986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.754398][ T8719] CPU: 0 UID: 0 PID: 8719 Comm: syz.9.10310 Tainted: G W syzkaller #0 PREEMPT(full) [ 1610.754427][ T8719] Tainted: [W]=WARN [ 1610.754433][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1610.754443][ T8719] Call Trace: [ 1610.754506][ T8719] [ 1610.754515][ T8719] __dump_stack+0x1d/0x30 [ 1610.754541][ T8719] dump_stack_lvl+0x95/0xd0 [ 1610.754564][ T8719] dump_stack+0x15/0x1b [ 1610.754587][ T8719] should_fail_ex+0x263/0x280 [ 1610.754691][ T8719] should_fail+0xb/0x20 [ 1610.754713][ T8719] should_fail_usercopy+0x1a/0x20 [ 1610.754809][ T8719] _copy_to_user+0x20/0xa0 [ 1610.754845][ T8719] simple_read_from_buffer+0xb5/0x130 [ 1610.754900][ T8719] proc_fail_nth_read+0x10e/0x150 [ 1610.754939][ T8719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1610.754991][ T8719] vfs_read+0x1ab/0x7f0 [ 1610.755024][ T8719] ? __rcu_read_unlock+0x4e/0x70 [ 1610.755043][ T8719] ? __fget_files+0x184/0x1c0 [ 1610.755086][ T8719] ? mutex_lock+0x57/0x90 [ 1610.755117][ T8719] ksys_read+0xdc/0x1a0 [ 1610.755143][ T8719] __x64_sys_read+0x40/0x50 [ 1610.755183][ T8719] x64_sys_call+0x2886/0x3020 [ 1610.755210][ T8719] do_syscall_64+0x12c/0x370 [ 1610.755233][ T8719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.755267][ T8719] RIP: 0033:0x7f37f506cfce [ 1610.755281][ T8719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1610.755299][ T8719] RSP: 002b:00007f37f3afefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1610.755374][ T8719] RAX: ffffffffffffffda RBX: 00007f37f3aff6c0 RCX: 00007f37f506cfce [ 1610.755393][ T8719] RDX: 000000000000000f RSI: 00007f37f3aff0a0 RDI: 0000000000000004 [ 1610.755482][ T8719] RBP: 00007f37f3aff090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.755552][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.755566][ T8719] R13: 00007f37f5326038 R14: 00007f37f5325fa0 R15: 00007fff5a1988f8 [ 1610.755628][ T8719] [ 1612.227831][ T8740] loop8: detected capacity change from 0 to 1024 [ 1612.234836][ T8740] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1612.245816][ T8740] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1612.245935][ T2987] ================================================================== [ 1612.253827][ T8740] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1612.261783][ T2987] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1612.261822][ T2987] [ 1612.261828][ T2987] write to 0xffffffff86ca04f0 of 88 bytes by task 8740 on cpu 0: [ 1612.268590][ T8740] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz.8.10316: Invalid inode table block 0 in block_group 0 [ 1612.275127][ T2987] prb_reserve+0x6e6/0xae0 [ 1612.275160][ T2987] vprintk_store+0x54a/0x910 [ 1612.275175][ T2987] vprintk_emit+0x1a4/0x600 [ 1612.275190][ T2987] vprintk_default+0x26/0x30 [ 1612.275206][ T2987] vprintk+0x1d/0x30 [ 1612.275225][ T2987] _printk+0x79/0xa0 [ 1612.277566][ T8740] loop8: lost filesystem error report for type 5 error -117 [ 1612.285229][ T2987] __ext4_msg+0x1aa/0x1c0 [ 1612.285249][ T2987] ext4_setup_super+0x6b/0x580 [ 1612.285267][ T2987] ext4_fill_super+0x2a16/0x37c0 [ 1612.285284][ T2987] get_tree_bdev_flags+0x291/0x300 [ 1612.285310][ T2987] get_tree_bdev+0x1f/0x30 [ 1612.285333][ T2987] ext4_get_tree+0x1c/0x30 [ 1612.285347][ T2987] vfs_get_tree+0x57/0x1d0 [ 1612.285363][ T2987] do_new_mount+0x288/0x8d0 [ 1612.298193][ T8740] EXT4-fs (loop8): Remounting filesystem read-only [ 1612.302382][ T2987] path_mount+0x4d0/0xbc0 [ 1612.302397][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1612.302402][ T2987] __se_sys_mount+0x28c/0x2e0 [ 1612.302416][ C0] EXT4-fs (loop8): initial error at time 1774075908: __ext4_get_inode_loc:4782 [ 1612.302423][ T2987] __x64_sys_mount+0x67/0x80 [ 1612.302446][ C0] [ 1612.302442][ T2987] x64_sys_call+0x2d61/0x3020 [ 1612.302453][ C0] EXT4-fs (loop8): last error at time 1774075908: __ext4_get_inode_loc:4782 [ 1612.302468][ T2987] do_syscall_64+0x12c/0x370 [ 1612.302488][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.302507][ T2987] [ 1612.302513][ T2987] read to 0xffffffff86ca04f0 of 8 bytes by task 2987 on cpu 1: [ 1612.302527][ T2987] _prb_read_valid+0x1c4/0x950 [ 1612.307100][ T8740] Quota error (device loop8): write_blk: dquota write failed [ 1612.311571][ T2987] prb_read_valid+0x3c/0x60 [ 1612.311596][ T2987] syslog_print+0x109/0x560 [ 1612.311611][ T2987] do_syslog+0x52b/0x7f0 [ 1612.311625][ T2987] __x64_sys_syslog+0x41/0x50 [ 1612.311640][ T2987] x64_sys_call+0x2b9e/0x3020 [ 1612.316281][ T8740] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1612.320070][ T2987] do_syscall_64+0x12c/0x370 [ 1612.320091][ T2987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.323992][ T8740] EXT4-fs (loop8): 1 truncate cleaned up [ 1612.331219][ T2987] [ 1612.331225][ T2987] value changed: 0x000000000000217a -> 0x000000000000417a [ 1612.331236][ T2987] [ 1612.331240][ T2987] Reported by Kernel Concurrency Sanitizer on: [ 1612.331252][ T2987] CPU: 1 UID: 0 PID: 2987 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 1612.331278][ T2987] Tainted: [W]=WARN [ 1612.331284][ T2987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1612.331297][ T2987] ================================================================== [ 1612.336257][ T8740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1612.677042][T32360] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1612.716760][T31692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.