last executing test programs: 3m25.12003549s ago: executing program 1 (id=3918): socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000040000001802000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3m25.021296605s ago: executing program 1 (id=3922): syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f010000060000000000000424130505240102080424130009078103200000000009058202200000000009"], 0x0) 3m23.930833541s ago: executing program 1 (id=3929): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 3m23.540204821s ago: executing program 1 (id=3934): syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f00000000c0)={[{@test_dummy_encryption_v1}]}, 0x1, 0x23c, &(0x7f0000001f80)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './mnt'}, 0x9) ftruncate(0xffffffffffffffff, 0x5) io_setup(0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3m22.486805195s ago: executing program 1 (id=3943): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000e80)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@fat=@usefree}, {@nodots}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) 3m21.566293492s ago: executing program 1 (id=3953): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x5, r0, &(0x7f0000000540), 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfe, 0x2}, &(0x7f0000000100)) getpid() openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0xff, @private1, @private2={0xfc, 0x2, '\x00', 0x3}, [@fragment={0x2f, 0x0, 0xfe, 0x0, 0x0, 0x19, 0x67}, @dstopts={0x2c}]}}}}}}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x10, 0x3, 0x5}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x1, 0x8751, 0x2a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x17827, 0x8, 0x1000009}}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000e80)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@fat=@usefree}, {@nodots}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 3m21.452135138s ago: executing program 32 (id=3953): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x5, r0, &(0x7f0000000540), 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfe, 0x2}, &(0x7f0000000100)) getpid() openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0xff, @private1, @private2={0xfc, 0x2, '\x00', 0x3}, [@fragment={0x2f, 0x0, 0xfe, 0x0, 0x0, 0x19, 0x67}, @dstopts={0x2c}]}}}}}}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x10, 0x3, 0x5}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x1, 0x8751, 0x2a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x17827, 0x8, 0x1000009}}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000000e80)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@fat=@usefree}, {@nodots}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 3m3.459290242s ago: executing program 4 (id=4102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3e, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xa4, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r8, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3m0.848723086s ago: executing program 4 (id=4110): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000500)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$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") creat(0x0, 0x4) creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) 3m0.732559422s ago: executing program 4 (id=4112): inotify_init() epoll_create(0x800) r0 = epoll_create(0x7) writev(r0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 3m0.610506518s ago: executing program 4 (id=4113): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 3m0.442857217s ago: executing program 4 (id=4115): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) syz_open_pts(0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 2m58.182713163s ago: executing program 2 (id=4120): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) 2m58.064547829s ago: executing program 2 (id=4121): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m57.821153911s ago: executing program 2 (id=4122): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2m57.755503274s ago: executing program 4 (id=4123): inotify_init() epoll_create(0x800) r0 = epoll_create(0x7) writev(r0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2m57.728395136s ago: executing program 33 (id=4123): inotify_init() epoll_create(0x800) r0 = epoll_create(0x7) writev(r0, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2m57.721382707s ago: executing program 2 (id=4125): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 2m57.504505168s ago: executing program 2 (id=4126): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x4010, 0xffffffffffffffff, 0x9f254000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000340)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000011c0)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000320000000000000000000071122600000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x1, 0x0, 0x0, 0x6}, {0x2, 0x66, 0x8, 0x4}, {0x500, 0xe, 0x0, 0x529}]}, 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m56.87079529s ago: executing program 2 (id=4134): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2m56.854140721s ago: executing program 34 (id=4134): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2m45.555890341s ago: executing program 5 (id=4209): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa6}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b17", 0xd0}], 0x5}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000003800)=[{&(0x7f0000000080)="9dafffb55e515ba3", 0x8}, {&(0x7f00000000c0)="5768f60a50352a6a0f2fd0804132b9698520106d94239facd30abd340f59c301413f4a55926c99ff589411826778e3543bdbbff026d310b79f84488ea06b7d87e2c6e84b73d483d6ad40e2417a4cc1e3ba18f112b79f834ea67acb03f17020c51d480c6db5e23893335dd2c607efa472553759304aa076645f9488df8768328259d3b7351c9b037cefdceecb6355a02e7d8bcf8ef993af45286c0d2bfd86e40ed55b8ead1e6cbc436814b6fd7fbdbf75", 0xb0}, {&(0x7f0000000180)="be4952f54a31999fc5d8520b59cb816ca59d635a25451a55ee0a76f627d87d5caf2a1902101343a9bcf7bb63bd567b0fea1337fb8711798e42dadb359249e1732f386e8e12acab275b887e720d09eb9a", 0x50}, {&(0x7f0000000200)="1e97602750d7d5473462", 0xa}, {&(0x7f00000009c0)="fc343e2ef52be437f7efaed5435280728c504c90df5293f3e1c7cbedb584bbb9a3757414127f18db2e05dcb8e3b2e86f4069e2620cec89f9ed1639f04af2524c574337e868e96b80909cb255dfa6d318e751d80e0fa224bc12083c00abd847dbd083dca37a2250fe3979a569b0576872ae1ec098b59583c1764312b17d41985bb22aa0a3a1b8c30a11c72453d18a6dfa75bb5e2bceb9b9f29e7293c476d04fc47374b8262edefb71d277838279cea048d2620bad4e4269b4eb19c95ef2e8216d8ea1c557c8214a716464ebf76a058285afa1965eecb4875b5369ed3580a181d7cedc2c10ab5b1ffab6d322554ac815d00e141d34d1b0f3", 0xf7}], 0x5) 2m45.459193176s ago: executing program 5 (id=4212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 2m43.23993823s ago: executing program 5 (id=4228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b8361bbeb5c"], 0xffdd) 2m43.129093256s ago: executing program 5 (id=4230): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) 2m42.985821483s ago: executing program 5 (id=4231): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2m42.155122256s ago: executing program 5 (id=4237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3e, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) creat(&(0x7f0000000280)='./file0\x00', 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m42.091907419s ago: executing program 35 (id=4237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3e, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) creat(&(0x7f0000000280)='./file0\x00', 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m37.645155847s ago: executing program 0 (id=4270): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 2m37.440532727s ago: executing program 0 (id=4273): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aaedc9af4fe583f8826ac911c", 0xb5}, {&(0x7f00000003c0)="7f1b102e8d4f44d3", 0x8}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 2m34.833689302s ago: executing program 0 (id=4286): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="1a", 0x1e91b, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m34.766762135s ago: executing program 0 (id=4289): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000001c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@auto_da_alloc}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{0x0}], 0x1, 0x0) 2m34.119500368s ago: executing program 0 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b10b9ad00"}) 2m32.71957448s ago: executing program 0 (id=4299): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m32.075237073s ago: executing program 36 (id=4299): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.273368635s ago: executing program 6 (id=5208): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8.207885459s ago: executing program 6 (id=5210): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x8d, 0x8, 0x5d, 0x9, "a7692c4632f57a417413d4e03075bed98ae63a", 0x2, 0xffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x80000010, 0x572, 0x7ffe, 0xb, "ff000d00009a468e0cd912098d00"}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$eJzs3V1oZFcdAPD/ncl+NI1NExvoViHRXUw/2CTtQLbRB9cHfbDSlwpSqA9hdzZZM9nEJIVNfEnffLIIiopYuvggKLgBH9SHYhV8EFxBFDFIC4oPfrQqpg/WVSN35k53NrmTjiabaff+fjA75557Zv/nzOz/MDnnbm4AhTWS/pFE9EXEtYjobxze3GCk8fTtysbs1crGbBLb20/8Nam3u1LZmG02bb7uzohYj4h7I+JHFyLOHdkdd3l1bW66VqsuZcfjK/OL48ura6cvzk/PVGeqlyqVR6cmJ6fOTE78D6NJ9jz7icVXBn89+/jM88P/evLM/Nf/ksTZ+rhjxzgOUl6PepKIs7ciWBeU0/FERG+H7Yeqz75wi7tEh74wuDmefnb3RMSpev73R7n+aUZ88Lmn/t4fH7je7rXXNp/742H2FQA4ONupY3ufBm5PpUh/9k9KYxHRKJdKY2ONn+Hvid5SbWF55aELC09fOt9YI7g7jpQuXKxVJ7K1grvjSJIeP1wv3zh+ZMdxJSIGIuKz5Tvqx2PnFmrnD3WmA5r6Il7+zqfPHb1zR/7/odzIf+D2leb/L3/8vR+k5dfK3e4NcJjS/P/ma/OPhfyHwpH/UFzyH4pjZ4rLfygu+Q/FJf+huOQ/FJf8h+KS/1Bc8h+KqzX/pT8U08Dwi5tJRKy//476I3U0O5fza3uA28j2duI/+UNB+e4PxdXT7Q4AXbP3b8wFiuDN5oHj7U4sHnxfgMNR6nYHgK4ZPWH/D4rK+j8Ul/V/KC7f8QHr/1A81v+huPra3P/rHS337pqIiLsi4qflI8ea9/oC3r76Il7+6rXvPhVR+lOSff8f7T/VN/3KSz9sbXc0+Ue58ZxVTK+sLD2cHv+tUR8RK19+4kuX0/pHujESoFPNPL2c5TFQXMura3PTtVp1qfuFkYh4C3RDQaE4heY8cKWyMdt8HNbc8+yDEa9+qHERQhr3avZonO3J1iaP1/coe7eSm65VSA5g7/JzpyPWn4mIe/PGn2T3O2/sfPRulXfFf2f2nD5OZOsnaZuhDuOX79pf/Pta4g+3xH9Xh/E3P95hw1tk4Fvdjf/8b7L3f6KnJ+/93++1MYNvcv6xb+wzQES8ex+v/f3v9h9/P04Ndzf+FxciXkznn4m8/CulafnGzufO+aev5Trp/9dnRm/Mf1d3zX+lN+a/cpv5b6TDOD95svrJvPryzyJefSbivtz4zXjH67F6t0q74p9smX/u3yP+nz/2i7m8+rMvRWxfiRiN/PitscZX5hfHl1fXTl+cn56pzlQvVSqPTk1OTp2ZnBivr1GPN1eqd3v8+tCH8+pPfq0x/t428Zvjb/f+b+8x5lZrX/lU33ty6n9+ohH//pP5n/9gFr/x/vfsiv/e7Dn9d/Lv7FretM3rEXEsq38gIr7/wsCDef366PVG/PNtxl+6Kf7u8T/U4fg//9v/PJ1Xf/kjHf4FAMCBar800O2eAQAAB+0wdhq7PUYgX+/W0WjdBk7WW/YV1m/sK6T1r2f7C+X1iH9mewxp/QPZLllazt1oAN5yhtbe96tu9wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6JZX1+ama7Xq0nK3ewIctv8GAAD//8Fe/Tg=") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 5.884396378s ago: executing program 8 (id=5216): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @remote}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000021000000290000000b00000031d70000000000001d519028d52e43abecbcdbff6ca284029bae65db1efcb89600b370454ccbd43de152254f0f4cf9fa4adc1002c090dd13bf5c1923612380a2fb547e831e3588a64157f27078179de05a955c1ede8f11a516e7cf0697f38749a2721342c7449980ff8034fed083eff0055e310541fc181723ff60b0591d02d018affd378746a50a740e156e435f5973769801a2b23cab6e0e9577467a0cc8d6d3122b18158a40c6809c7e238e34c7833e4535297a1ebe0bd0048b0f"], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x1492}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="110000000000000000190000", @ANYRES32, @ANYBLOB], 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={0xffffffffffffffff, r3, 0x4, r4}, 0x10) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000100100000a000000100000000000000000000000000000002b80aebd6202be9f117f3ce7cb384c3d82a68fd9715a5eb5b48826a9647c254b7f2f5b5c3d44bde6d6e11bcfb1c04c70ec0baf95eade40911d228092ca11a9beda6477a87abb45c72865abc3d7c1656d4e6bd69a2e92e1e0f4195a1ad52b31f3f30a84a10fde"], 0x20}, 0x0) 5.875661199s ago: executing program 6 (id=5218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3e, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xa4, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) creat(&(0x7f0000000280)='./file0\x00', 0x108) r8 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r8, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4.739062997s ago: executing program 8 (id=5225): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x9, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000f6ff0000000000000003000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r4, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010", 0x50}, {&(0x7f0000000300)="92a469ecbd72d035d2496f7f62affa5257ad1df11400cf1ac3ec0a395c41ca878963fbd3f76a39358c638c1312845fb4833d33ec52a037f350816346275d53346d867efb192c6506b478818da13598095cbe29d1c146e63d13386acece1e9e1621c9886592719d2c6a3265b7c4ff7419ff1dfba56b8dcc08a610f30a0bd950632e55b1ca422800dc02cdd8de18bbb07b13d475f7c5fed66ce4321231d2ecc7d6caf737dde9bd666b0aaedc9af4fe583f", 0xb0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008054) 4.67446488s ago: executing program 8 (id=5226): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) 4.667030921s ago: executing program 7 (id=5228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b10b9ad00"}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "b9ba"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r7, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 4.519403808s ago: executing program 8 (id=5229): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x65dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x884) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x5c47300c868e3a5, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="11ebda", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 4.123885158s ago: executing program 6 (id=5230): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339737f", 0x46}, {0x0}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a13300000000000000", 0xc}, {&(0x7f0000002340)="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", 0xe8c}], 0x5}, 0x40040) 3.409924915s ago: executing program 6 (id=5232): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000000)={0x2, 0x8d, 0x8, 0x5d, 0x9, "a7692c4632f57a417413d4e03075bed98ae63a", 0x2, 0xffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x80000010, 0x572, 0x7ffe, 0xb, "ff000d00009a468e0cd912098d00"}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 3.30332214s ago: executing program 3 (id=5234): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee6886558", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.085900622s ago: executing program 3 (id=5235): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @remote}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000021000000290000000b00000031d70000000000001d519028d52e43abecbcdbff6ca284029bae65db1efcb89600b370454ccbd43de152254f0f4cf9fa4adc1002c090dd13bf5c1923612380a2fb547e831e3588a64157f27078179de05a955c1ede8f11a516e7cf0697f38749a2721342c7449980ff8034fed083eff0055e310541fc181723ff60b0591d02d018affd378746a50a740e156e435f5973769801a2b23cab6e0e9577467a0cc8d6d3122b18158a40c6809c7e238e34c7833e4535297a1ebe0bd0048b0f"], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x1492}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000030000000700"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="110000000000000000190000", @ANYRES32, @ANYBLOB], 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={0xffffffffffffffff, r3, 0x4, r4}, 0x10) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000100100000a000000100000000000000000000000000000002b80aebd6202be9f117f3ce7cb384c3d82a68fd9715a5eb5b48826a9647c254b7f2f5b5c3d44bde6d6e11bcfb1c04c70ec0baf95eade40911d228092ca11a9beda6477a87abb45c72865abc3d7c1656d4e6bd69a2e92e1e0f4195a1ad52b31f3f30a84a10fde"], 0x20}, 0x0) 2.177038498s ago: executing program 8 (id=5239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0xf, 0x9, 0x17, 0x81, 0x0, 0x8000, 0x21, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf91, 0x4, @perf_bp, 0x108082, 0x2, 0x6, 0x3, 0xa4, 0x4, 0x9, 0x0, 0x16fd}, 0xffffffffffffffff, 0x9, r2, 0x3) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0xeb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f00000040c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) 2.14935825s ago: executing program 3 (id=5240): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.052360234s ago: executing program 3 (id=5241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0xf, 0x9, 0x17, 0x81, 0x0, 0x8000, 0x21, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf91, 0x4, @perf_bp, 0x108082, 0x2, 0x6, 0x3, 0xa4, 0x4, 0x9, 0x0, 0x16fd}, 0xffffffffffffffff, 0x9, r2, 0x3) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0xeb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) 1.870066284s ago: executing program 9 (id=5243): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.702618743s ago: executing program 9 (id=5244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000600)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806360609", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.677536054s ago: executing program 9 (id=5245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 1.078997185s ago: executing program 6 (id=5246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x68e7, 0x89, 0x80000000, 0x0, 0x14, "1b10b9ad00"}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "b9ba"}, @global=@item_012={0x0, 0x1, 0xb}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 822.491618ms ago: executing program 7 (id=5247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 751.406111ms ago: executing program 7 (id=5248): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfdfffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="5c00000013006bcc9e3be3", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x25, &(0x7f0000000000), 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x46, 0x3, 0x7, 0xf1, 0x0, 0x9, 0x100, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_bp={0x0}, 0x8011, 0x2, 0x10001, 0x1, 0x800, 0x0, 0x8, 0x0, 0xc, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b"], 0xffdd) 633.387717ms ago: executing program 9 (id=5249): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x30, 0x0, 0x20000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x80, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x19, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 373.955991ms ago: executing program 3 (id=5250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 275.169616ms ago: executing program 8 (id=5251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x80, 0xf, 0x9, 0x17, 0x81, 0x0, 0x8000, 0x21, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf91, 0x4, @perf_bp, 0x108082, 0x2, 0x6, 0x3, 0xa4, 0x4, 0x9, 0x0, 0x16fd}, 0xffffffffffffffff, 0x9, r2, 0x3) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0xeb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f00000040c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) 150.287072ms ago: executing program 7 (id=5252): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 115.621594ms ago: executing program 3 (id=5253): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) r6 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 114.659914ms ago: executing program 7 (id=5254): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 93.458205ms ago: executing program 9 (id=5255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3e, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xa4, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)) creat(&(0x7f0000000280)='./file0\x00', 0x108) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 26.902898ms ago: executing program 7 (id=5256): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xa, 0x7fffffff}, 0x10c101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x120000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000090010000000000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 9 (id=5257): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xb1, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7ffd"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x19, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r4) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) kernel console output (not intermixed with test programs): r_block_get:597: inode #15: comm syz.8.4422: corrupted xattr block 33: invalid checksum [ 515.402994][T17199] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 515.412093][T17199] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4422: corrupted xattr block 33: invalid checksum [ 515.429218][T17199] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 515.438123][T17199] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4422: corrupted xattr block 33: invalid checksum [ 515.451920][T17199] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 515.461292][T17199] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 515.471683][T17199] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 515.481122][T17199] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4422: Failed to acquire dquot type 0 [ 515.702430][ T7572] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 515.712731][ T7572] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 515.733276][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.742930][T17202] loop9: detected capacity change from 0 to 1024 [ 515.750313][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.760849][T17202] EXT4-fs: Ignoring removed bh option [ 515.766787][T17158] hsr_slave_0: left promiscuous mode [ 515.777306][T17158] hsr_slave_1: left promiscuous mode [ 515.786402][T17202] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 515.794776][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.804523][T17158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.826851][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.837560][T17202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.850884][T17158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.863893][T17158] veth1_macvtap: left promiscuous mode [ 515.983042][T17158] veth0_macvtap: left promiscuous mode [ 515.994903][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.027927][T17216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4426'. [ 516.261750][T17158] veth1_vlan: left promiscuous mode [ 516.272894][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.386265][T17158] team0 (unregistering): Port device team_slave_1 removed [ 516.401449][T17158] team0 (unregistering): Port device team_slave_0 removed [ 516.494933][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4421'. [ 516.535581][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.544379][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.028594][T17245] Invalid logical block size (530) [ 517.079771][ T3045] 8021q: adding VLAN 0 to HW filter on device eth13 [ 517.248431][T17272] loop9: detected capacity change from 0 to 1024 [ 517.276627][T17272] EXT4-fs: test_dummy_encryption option not supported [ 517.694439][T17300] loop9: detected capacity change from 0 to 512 [ 517.777248][T17300] EXT4-fs (loop9): 1 orphan inode deleted [ 517.799051][T17300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.825660][T17300] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.243115][ T3045] 8021q: adding VLAN 0 to HW filter on device eth14 [ 518.376350][T17315] loop6: detected capacity change from 0 to 1024 [ 518.402728][T17315] EXT4-fs: Ignoring removed bh option [ 518.424298][T17315] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 518.537414][ T7572] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 518.552451][ T7572] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 518.854360][T17321] loop7: detected capacity change from 0 to 512 [ 518.866206][ T3423] IPVS: starting estimator thread 0... [ 518.887415][T17321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.899971][T17321] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.911046][T17321] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4439: corrupted xattr block 33: invalid checksum [ 518.925164][T17321] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 518.934237][T17321] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4439: corrupted xattr block 33: invalid checksum [ 518.948415][T17321] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 518.957442][T17321] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4439: corrupted xattr block 33: invalid checksum [ 518.971073][T17321] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 518.980476][T17321] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 518.990874][T17321] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 519.000323][T17321] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4439: Failed to acquire dquot type 0 [ 519.020945][T17315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.071677][T17305] IPVS: using max 2928 ests per chain, 146400 per kthread [ 519.144309][ T3045] 8021q: adding VLAN 0 to HW filter on device eth15 [ 519.154900][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.165500][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.212716][ T28] audit: type=1326 audit(1777000459.535:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17339 comm="syz.8.4442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7bcafcdd9 code=0x0 [ 519.390290][T17352] loop9: detected capacity change from 0 to 512 [ 520.289608][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.346474][T17359] Invalid logical block size (530) [ 521.170983][T17352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.183635][T17352] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.201769][T17351] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4441: corrupted xattr block 33: invalid checksum [ 521.215451][T17351] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 521.224445][T17351] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4441: corrupted xattr block 33: invalid checksum [ 521.237951][T17351] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 521.246907][T17351] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4441: corrupted xattr block 33: invalid checksum [ 521.260471][T17351] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 521.280711][T17351] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 521.291142][T17351] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 521.300559][T17351] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4441: Failed to acquire dquot type 0 [ 521.714912][T17370] xt_TPROXY: Can be used only with -p tcp or -p udp [ 521.724686][T17370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.733517][T17370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.757328][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.163893][ T3045] 8021q: adding VLAN 0 to HW filter on device eth16 [ 522.224809][T17384] Invalid logical block size (530) [ 522.236753][T17387] loop7: detected capacity change from 0 to 1024 [ 522.245809][T17387] EXT4-fs: Ignoring removed bh option [ 522.274128][T17387] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 522.288490][T17388] SELinux: failed to load policy [ 522.303600][T17388] loop9: detected capacity change from 0 to 512 [ 522.310619][T17387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.311603][T17388] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.332167][T17393] loop3: detected capacity change from 0 to 1024 [ 522.341380][T17393] EXT4-fs: test_dummy_encryption option not supported [ 522.419252][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.462654][T17388] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.499037][T17388] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.298176][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.668090][T17428] Invalid logical block size (530) [ 524.262004][T17432] xt_TPROXY: Can be used only with -p tcp or -p udp [ 524.272014][T17432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.280705][T17432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.529642][T17441] loop3: detected capacity change from 0 to 512 [ 524.634540][T17441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.647366][T17441] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.661041][T17441] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4458: corrupted xattr block 33: invalid checksum [ 524.674974][T17441] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 524.684490][T17441] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4458: corrupted xattr block 33: invalid checksum [ 524.698187][T17441] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 524.707267][T17441] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4458: corrupted xattr block 33: invalid checksum [ 524.721955][T17441] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 524.732073][T17441] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 524.742508][T17441] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 524.752070][T17441] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4458: Failed to acquire dquot type 0 [ 524.810588][T17444] loop6: detected capacity change from 0 to 512 [ 524.855049][T17444] ext4: Unknown parameter 'func' [ 525.487504][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.504077][T17468] SELinux: failed to load policy [ 525.519265][T17468] loop6: detected capacity change from 0 to 512 [ 525.528964][T17468] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.562015][T17468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.574938][T17468] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.667125][T17481] loop3: detected capacity change from 0 to 512 [ 525.675867][T17481] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 525.690367][T17481] EXT4-fs (loop3): invalid journal inode [ 525.706458][T17481] EXT4-fs (loop3): can't get journal size [ 525.723568][T17481] EXT4-fs (loop3): orphan cleanup on readonly fs [ 525.733430][T17481] EXT4-fs (loop3): 1 truncate cleaned up [ 525.739586][T17481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 525.855592][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.865733][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.923492][T17486] Invalid logical block size (530) [ 526.072224][T17498] loop9: detected capacity change from 0 to 512 [ 526.079876][T17498] ext4: Unknown parameter 'func' [ 526.162159][T17500] loop6: detected capacity change from 0 to 512 [ 526.180370][T17500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.193105][T17500] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.205909][T17500] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4473: corrupted xattr block 33: invalid checksum [ 526.219777][T17500] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 526.229225][T17500] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4473: corrupted xattr block 33: invalid checksum [ 526.242872][T17500] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 526.251954][T17500] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4473: corrupted xattr block 33: invalid checksum [ 526.268847][T17500] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 526.278584][T17500] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 526.289078][T17500] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 526.298850][T17500] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4473: Failed to acquire dquot type 0 [ 526.959718][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.047894][T17510] loop3: detected capacity change from 0 to 2048 [ 527.123613][T17510] loop3: p2 p3 p7 [ 527.143008][T17513] ext4: Unknown parameter 'func' [ 527.314099][T17510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.473860][T17510] bond_slave_0: entered promiscuous mode [ 527.479591][T17510] bond_slave_1: entered promiscuous mode [ 527.550488][T17510] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 527.606001][T17510] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 528.116972][T17524] SELinux: failed to load policy [ 528.166781][T17524] set_capacity_and_notify: 1 callbacks suppressed [ 528.170196][T17524] loop6: detected capacity change from 0 to 512 [ 528.216901][T17524] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.867440][T17540] loop9: detected capacity change from 0 to 512 [ 528.936796][T17524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.952763][T17540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.965449][T17540] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.978064][T17540] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4484: corrupted xattr block 33: invalid checksum [ 529.085609][T17540] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 529.094840][T17540] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4484: corrupted xattr block 33: invalid checksum [ 529.108643][T17540] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 529.117703][T17540] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4484: corrupted xattr block 33: invalid checksum [ 529.131845][T17540] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 529.141963][T17540] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 529.152481][T17540] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 529.162039][T17540] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4484: Failed to acquire dquot type 0 [ 529.250000][T17524] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.267785][T17547] loop3: detected capacity change from 0 to 512 [ 529.286247][T17547] ext4: Unknown parameter 'func' [ 529.422756][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.439632][T17550] Invalid logical block size (530) [ 529.527880][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.982977][T17558] loop9: detected capacity change from 0 to 512 [ 530.019334][T17558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.032179][T17558] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.046232][T17558] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4488: corrupted xattr block 33: invalid checksum [ 530.060043][T17558] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 530.069405][T17558] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4488: corrupted xattr block 33: invalid checksum [ 530.083107][T17558] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 530.092146][T17558] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4488: corrupted xattr block 33: invalid checksum [ 530.106347][T17558] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 530.117451][T17558] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 530.127896][T17558] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 530.137342][T17558] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4488: Failed to acquire dquot type 0 [ 530.709691][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 531.017175][T17570] loop6: detected capacity change from 0 to 512 [ 531.029714][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.055994][T17570] EXT4-fs: Ignoring removed bh option [ 531.103406][T17570] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 531.138576][T17570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 531.204392][T17570] System zones: 1-12 [ 531.226026][T17570] EXT4-fs (loop6): 1 truncate cleaned up [ 531.243614][T17570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.934604][T17591] loop3: detected capacity change from 0 to 512 [ 532.047040][T17591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.059636][T17591] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.075221][T17591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4498: corrupted xattr block 33: invalid checksum [ 532.155616][T17591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 532.165073][T17591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4498: corrupted xattr block 33: invalid checksum [ 532.179258][T17591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 532.188445][T17591] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4498: corrupted xattr block 33: invalid checksum [ 532.202650][T17591] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 532.213033][T17591] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 532.223460][T17591] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 532.232902][T17591] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4498: Failed to acquire dquot type 0 [ 532.656815][T17594] loop7: detected capacity change from 0 to 512 [ 532.675765][T17594] ext4: Unknown parameter 'func' [ 532.721096][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.782779][T17596] loop3: detected capacity change from 0 to 512 [ 532.806476][T17596] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 532.833226][T17596] EXT4-fs (loop3): invalid journal inode [ 532.848430][T17596] EXT4-fs (loop3): can't get journal size [ 532.867608][T17596] EXT4-fs (loop3): orphan cleanup on readonly fs [ 532.886137][T17596] EXT4-fs (loop3): 1 truncate cleaned up [ 532.907891][T17596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 532.951966][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.012455][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.041988][T17600] loop6: detected capacity change from 0 to 2048 [ 533.082297][T17604] loop8: detected capacity change from 0 to 2048 [ 533.112131][T17600] loop6: p2 p3 p7 [ 533.148612][T17604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.229619][T17610] serio: Serial port ttyS3 [ 533.302589][T17610] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 533.327460][T17610] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.4502: lblock 2 mapped to illegal pblock 2 (length 1) [ 533.341605][T17610] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 533.344696][T17610] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 533.353770][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 533.353789][ C0] EXT4-fs (loop3): initial error at time 1777000472: ext4_map_blocks:791: inode 3: block 2 [ 533.353824][ C0] EXT4-fs (loop3): last error at time 1777000472: ext4_map_blocks:791: inode 3: block 2 [ 533.388161][T17610] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.4502: lblock 0 mapped to illegal pblock 48 (length 1) [ 533.402370][T17610] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 533.402759][T17610] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 533.420597][T17610] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4502: Failed to acquire dquot type 0 [ 533.431869][T17610] loop3: lost filesystem error report for type 5 error -117 [ 533.433149][T17610] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 533.450113][T17610] loop3: lost filesystem error report for type 5 error -117 [ 533.459328][T17610] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.4502: mark_inode_dirty error [ 533.477993][T17610] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 533.478425][T17610] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 533.497820][T17610] EXT4-fs (loop3): 1 orphan inode deleted [ 533.504730][T17610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.535215][ T3451] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 533.594101][T17604] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 533.672721][T17600] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.752286][ T3451] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 533.825283][T17604] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 533.862067][ T3451] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 533.881246][T17614] bond_slave_0: entered promiscuous mode [ 533.886961][T17614] bond_slave_1: entered promiscuous mode [ 533.912486][T17604] EXT4-fs (loop8): This should not happen!! Data will be lost [ 533.912486][T17604] [ 534.128379][T17604] EXT4-fs (loop8): Total free blocks count 0 [ 534.142438][T17614] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.161463][T17604] EXT4-fs (loop8): Free/Dirty block details [ 534.181252][T17604] EXT4-fs (loop8): free_blocks=66060288 [ 534.187803][T17614] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 534.206112][T17604] EXT4-fs (loop8): dirty_blocks=32 [ 534.231723][T17604] EXT4-fs (loop8): Block reservation details [ 534.266584][T17604] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 534.362386][T17621] set_capacity_and_notify: 1 callbacks suppressed [ 534.362402][T17621] loop7: detected capacity change from 0 to 2048 [ 534.378879][T17604] syz.8.4503 (17604) used greatest stack depth: 8912 bytes left [ 534.405828][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4506'. [ 534.419812][ T49] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 534.459874][T16420] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 534.563861][T17636] loop9: detected capacity change from 0 to 512 [ 534.578064][T17636] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 534.597053][T17637] netlink: 'syz.7.4505': attribute type 10 has an invalid length. [ 534.606305][T17637] bond2: option mode: unable to set because the bond device is up [ 534.633318][T17637] bond_slave_0: entered promiscuous mode [ 534.639051][T17637] bond_slave_1: entered promiscuous mode [ 534.669843][T17637] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 534.677837][T17636] EXT4-fs (loop9): invalid journal inode [ 534.698791][T17636] EXT4-fs (loop9): can't get journal size [ 534.723851][T17637] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 534.746398][T17636] EXT4-fs (loop9): orphan cleanup on readonly fs [ 534.769541][T17636] EXT4-fs (loop9): 1 truncate cleaned up [ 534.796596][T17636] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 534.814114][T17621] loop7: p2 p3 p7 [ 534.871528][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.147615][ T3006] loop7: p2 p3 p7 [ 535.152189][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.209427][T13001] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 535.247724][T13001] loop3: lost filesystem error report for type 5 error -117 [ 535.247866][T13001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 535.252841][T15321] udevd[15321]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 535.270295][T13001] loop3: lost filesystem error report for type 5 error -117 [ 535.276092][T10485] udevd[10485]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 535.342416][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 535.360631][T17671] loop7: detected capacity change from 0 to 512 [ 535.485120][T13001] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 535.511912][T17671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.524531][T17671] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.538734][T17671] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4511: corrupted xattr block 33: invalid checksum [ 535.552636][T17671] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 535.562387][T17671] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4511: corrupted xattr block 33: invalid checksum [ 535.576080][T17671] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 535.585053][T17671] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4511: corrupted xattr block 33: invalid checksum [ 535.603997][T17671] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 535.613654][T17671] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 535.624034][T17671] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 535.633464][T17671] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4511: Failed to acquire dquot type 0 [ 535.726653][T13001] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 536.031064][T10485] udevd[10485]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 536.035307][T15321] udevd[15321]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 536.061498][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 536.143005][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.229146][T17697] loop7: detected capacity change from 0 to 512 [ 536.237882][T17699] loop3: detected capacity change from 0 to 512 [ 536.238648][T17697] ext4: Unknown parameter 'ad' [ 536.274025][T17699] EXT4-fs: Ignoring removed bh option [ 536.311101][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4515'. [ 536.391422][T17699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 536.594439][T17699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 536.605612][T17699] System zones: 1-12 [ 536.607020][T17699] EXT4-fs (loop3): 1 truncate cleaned up [ 536.619457][T17699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.009953][T17718] loop7: detected capacity change from 0 to 1024 [ 537.116944][T17718] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 537.128377][T17718] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.4517: lblock 2 mapped to illegal pblock 2 (length 1) [ 537.128423][T17718] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 537.128710][T17718] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 537.128830][T17718] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.4517: lblock 0 mapped to illegal pblock 48 (length 1) [ 537.128870][T17718] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 537.129040][T17718] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 537.129099][T17718] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4517: Failed to acquire dquot type 0 [ 537.129133][T17718] loop7: lost filesystem error report for type 5 error -117 [ 537.129406][T17718] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 537.129452][T17718] loop7: lost filesystem error report for type 5 error -117 [ 537.129668][T17718] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.4517: mark_inode_dirty error [ 537.129703][T17718] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 537.129853][T17718] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 537.129958][T17718] EXT4-fs (loop7): 1 orphan inode deleted [ 537.131040][T17718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.160259][ T3451] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 537.183418][ T3451] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 537.183461][ T3451] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 538.887178][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.928572][T15979] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 538.947647][T15979] loop7: lost filesystem error report for type 5 error -117 [ 538.947754][T15979] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 538.984543][T15979] loop7: lost filesystem error report for type 5 error -117 [ 538.984665][T15979] EXT4-fs error (device loop7): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 539.021025][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.024086][T15979] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 539.113199][T17738] loop3: detected capacity change from 0 to 1024 [ 539.162487][T17738] EXT4-fs: Ignoring removed bh option [ 539.190593][T17738] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 539.398784][T17738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.468429][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.822983][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4529'. [ 540.220900][T17763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 541.046389][T17771] loop9: detected capacity change from 0 to 512 [ 541.061192][T17771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.073779][T17771] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.085355][T17771] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4533: corrupted xattr block 33: invalid checksum [ 541.099069][T17771] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 541.108145][T17771] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4533: corrupted xattr block 33: invalid checksum [ 541.122779][T17771] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 541.131778][T17771] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4533: corrupted xattr block 33: invalid checksum [ 541.147620][T17780] serio: Serial port ttyS3 [ 541.152509][T17771] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 541.162417][T17771] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 541.172874][T17771] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 541.182359][T17771] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4533: Failed to acquire dquot type 0 [ 541.236119][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.300551][T17780] loop3: detected capacity change from 0 to 1024 [ 541.311073][T17780] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 541.329570][T17780] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.4530: lblock 2 mapped to illegal pblock 2 (length 1) [ 541.344018][T17780] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 541.345063][T17780] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 541.354130][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 541.354154][ C0] EXT4-fs (loop3): initial error at time 1777000480: ext4_map_blocks:791: inode 3: block 2 [ 541.354193][ C0] EXT4-fs (loop3): last error at time 1777000480: ext4_map_blocks:791: inode 3: block 2 [ 541.388548][T17780] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.4530: lblock 0 mapped to illegal pblock 48 (length 1) [ 541.402852][T17780] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 541.403611][T17780] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 541.421508][T17780] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4530: Failed to acquire dquot type 0 [ 541.433094][T17780] loop3: lost filesystem error report for type 5 error -117 [ 541.454964][T17780] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 541.472016][T17780] loop3: lost filesystem error report for type 5 error -117 [ 541.478922][T17780] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.4530: mark_inode_dirty error [ 541.497815][T17780] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 541.498781][T17780] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 541.518268][T17780] EXT4-fs (loop3): 1 orphan inode deleted [ 541.525190][T17780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.575531][ T7572] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.635428][T17785] netlink: 'syz.6.4535': attribute type 10 has an invalid length. [ 541.901638][T17783] loop6: detected capacity change from 0 to 2048 [ 541.908769][ T7572] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 541.949322][T17790] bond1: option mode: unable to set because the bond device has slaves [ 541.967111][ T7572] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 0 [ 542.021582][T17785] syz_tun: entered promiscuous mode [ 542.061122][T17785] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 542.103113][T17783] loop6: p2 p3 p7 [ 542.127383][T17790] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 542.298432][T17799] syzkaller0: entered promiscuous mode [ 542.323279][T17799] syzkaller0: entered allmulticast mode [ 542.359965][T17807] loop6: detected capacity change from 0 to 512 [ 542.401030][T17807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.414231][T17807] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.426461][T17807] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4542: corrupted xattr block 33: invalid checksum [ 542.441766][T17807] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 542.450878][T17807] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4542: corrupted xattr block 33: invalid checksum [ 542.469870][T17807] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 542.478945][T17807] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4542: corrupted xattr block 33: invalid checksum [ 542.495149][T17807] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 542.508288][T17807] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 542.518708][T17807] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 542.528199][T17807] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4542: Failed to acquire dquot type 0 [ 542.692371][T17815] loop8: detected capacity change from 0 to 2048 [ 542.936533][T17819] netlink: 'syz.8.4547': attribute type 10 has an invalid length. [ 542.958937][T17819] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 543.002631][T17819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.043426][T17819] bond_slave_0: entered promiscuous mode [ 543.049144][T17819] bond_slave_1: entered promiscuous mode [ 543.054822][T17819] syz_tun: entered promiscuous mode [ 543.077960][T17819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.093382][T17819] bond3: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 543.109629][T17819] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 543.111288][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.117823][T17819] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 543.128289][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.152970][T13001] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 543.162219][T17815] loop8: p2 p3 p7 [ 543.171642][T13001] loop3: lost filesystem error report for type 5 error -117 [ 543.171740][T13001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 543.190130][T13001] loop3: lost filesystem error report for type 5 error -117 [ 543.190658][T13001] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 543.210405][T13001] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 543.336532][T17831] loop3: detected capacity change from 0 to 2048 [ 543.502281][T17831] loop3: p2 p3 p7 [ 543.601506][T17831] netlink: 'syz.3.4552': attribute type 10 has an invalid length. [ 543.749547][T17831] syz_tun: entered promiscuous mode [ 543.851403][T17831] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 543.989933][T17843] bond1: option mode: unable to set because the bond device has slaves [ 544.032230][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4555'. [ 544.158009][T17848] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 544.383227][T17852] loop8: detected capacity change from 0 to 512 [ 544.623895][T17852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.651509][T17852] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.666148][T17852] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4556: corrupted xattr block 33: invalid checksum [ 544.703249][T17852] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 544.719666][ T3006] loop3: p2 p3 p7 [ 544.775400][T17852] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4556: corrupted xattr block 33: invalid checksum [ 544.846521][ T3006] loop3: p2 p3 p7 [ 544.853332][T17852] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 544.867827][T17852] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4556: corrupted xattr block 33: invalid checksum [ 544.944480][T17852] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 544.963467][T17868] loop7: detected capacity change from 0 to 512 [ 545.012086][T17868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.032336][T17852] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 545.058323][T17868] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.071241][T17852] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 545.081638][T17868] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4560: corrupted xattr block 33: invalid checksum [ 545.143756][T17852] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4556: Failed to acquire dquot type 0 [ 545.174036][T17868] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 545.199339][T17868] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4560: corrupted xattr block 33: invalid checksum [ 545.213851][T17868] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 545.233271][T17868] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4560: corrupted xattr block 33: invalid checksum [ 545.267791][T17877] loop9: detected capacity change from 0 to 1024 [ 545.278080][T17868] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 545.287390][T17877] EXT4-fs: test_dummy_encryption option not supported [ 545.296711][T17868] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 545.318027][T17868] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4560: Failed to acquire dquot type 0 [ 545.659458][T17879] loop9: detected capacity change from 0 to 512 [ 545.784880][T17879] EXT4-fs (loop9): 1 orphan inode deleted [ 545.806535][T17879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.825412][T17879] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.010988][ T3451] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 546.499141][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.779646][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.072442][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.093362][T17893] loop7: detected capacity change from 0 to 512 [ 547.116568][T17893] ext4: Unknown parameter 'func' [ 547.272817][T17909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=17909 comm=syz.9.4576 [ 547.296000][T17913] Invalid logical block size (530) [ 547.833515][T17925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 549.377010][T17941] loop8: detected capacity change from 0 to 512 [ 549.436076][T17941] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.486106][T17940] SELinux: policydb magic number 0x4c2ca74b does not match expected magic number 0xf97cff8c [ 549.532684][T17940] SELinux: failed to load policy [ 549.592570][T17941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.643165][T17941] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.736304][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.555479][T17962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'. [ 550.911089][T17966] loop8: detected capacity change from 0 to 512 [ 550.973534][T17966] ext4: Unknown parameter 'func' [ 551.245509][T17973] loop9: detected capacity change from 0 to 512 [ 551.264114][T17973] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.292687][T17975] loop7: detected capacity change from 0 to 2048 [ 551.311520][T17973] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 551.346581][T17973] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 551.365354][T17975] loop7: p2 p3 p7 [ 551.366192][T17973] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 551.411869][T17973] System zones: 0-2, 18-18, 34-35 [ 551.434754][T17975] netlink: 'syz.7.4596': attribute type 10 has an invalid length. [ 551.439351][T17973] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.456071][T17975] bond2: option mode: unable to set because the bond device has slaves [ 551.468373][T17975] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 551.473196][T17983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.493806][T17973] syzkaller0: entered promiscuous mode [ 551.496532][T17983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.499395][T17973] syzkaller0: entered allmulticast mode [ 551.645947][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4600'. [ 551.753596][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.258884][T17997] loop9: detected capacity change from 0 to 2048 [ 552.317808][T17997] loop9: p2 p3 p7 [ 552.349771][T17997] netlink: 'syz.9.4604': attribute type 10 has an invalid length. [ 552.396232][T17997] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 552.435308][T17997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.480307][T18001] Invalid logical block size (530) [ 552.496445][T17997] bond_slave_0: entered promiscuous mode [ 552.502364][T17997] bond_slave_1: entered promiscuous mode [ 552.508378][T17997] syz_tun: entered promiscuous mode [ 552.518984][T17997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 552.526887][T17997] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 552.535620][T17997] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 552.687477][T18012] Invalid logical block size (530) [ 552.781883][T18016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 552.848751][T18018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.857414][T18018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.086027][T18022] loop8: detected capacity change from 0 to 512 [ 553.094682][T18022] ext4: Unknown parameter 'func' [ 553.347209][T18026] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 553.357070][T18026] SELinux: failed to load policy [ 553.366259][T18026] loop9: detected capacity change from 0 to 512 [ 553.372886][T18026] EXT4-fs: Ignoring removed mblk_io_submit option [ 553.410073][T18026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.425684][T18026] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.450781][T18033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.459842][T18033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.460852][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.842002][T18044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 553.853177][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.861646][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.414954][T18063] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 554.425023][T18063] SELinux: failed to load policy [ 554.434820][T18063] loop8: detected capacity change from 0 to 512 [ 554.470248][T18063] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.508782][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4627'. [ 554.844046][T18063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.865639][T18063] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 554.888354][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.071343][T18086] syzkaller0: entered promiscuous mode [ 556.076960][T18086] syzkaller0: entered allmulticast mode [ 557.259661][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4635'. [ 557.440117][T18105] loop7: detected capacity change from 0 to 512 [ 557.447772][T18105] ext4: Unknown parameter 'ad' [ 557.705942][T18116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 558.678866][T18142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.709107][T18142] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 558.779544][T18150] loop8: detected capacity change from 0 to 512 [ 558.790133][T18150] ext4: Unknown parameter 'func' [ 559.010938][T18159] loop7: detected capacity change from 0 to 2048 [ 559.128798][T18161] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.288347][T18164] netlink: 'syz.7.4662': attribute type 10 has an invalid length. [ 559.345610][T18164] bond2: option mode: unable to set because the bond device has slaves [ 559.401214][T18164] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 559.620241][T18159] loop7: p2 p3 p7 [ 559.852360][T18178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.861660][T18178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.946131][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4666'. [ 562.311621][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4673'. [ 562.405237][T18198] loop8: detected capacity change from 0 to 512 [ 562.426881][T18198] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.438209][T18198] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 562.439428][T18201] loop6: detected capacity change from 0 to 512 [ 562.463082][T18198] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 562.471616][T18201] ext4: Unknown parameter 'func' [ 562.479690][T18198] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 562.498087][T18198] System zones: 0-2, 18-18, 34-35 [ 562.632651][T18198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.032226][T18214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.107566][T18198] syzkaller0: entered promiscuous mode [ 563.113446][T18198] syzkaller0: entered allmulticast mode [ 563.444998][T18218] Invalid logical block size (530) [ 563.589248][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.627213][T18223] Invalid logical block size (530) [ 563.838517][T18228] batadv_slave_0: Caught tx_queue_len zero misconfig [ 564.561752][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4689'. [ 564.586558][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4687'. [ 564.963015][T18244] loop7: detected capacity change from 0 to 2048 [ 564.995709][T18250] netlink: 'syz.8.4694': attribute type 1 has an invalid length. [ 565.009799][T18250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 565.047921][T18244] loop7: p2 p3 p7 [ 565.079447][T18244] netlink: 'syz.7.4691': attribute type 10 has an invalid length. [ 565.106559][T18255] loop9: detected capacity change from 0 to 512 [ 565.121207][T18244] bond2: option mode: unable to set because the bond device has slaves [ 565.187075][T18255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.275410][T18255] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.345392][T18255] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4692: corrupted xattr block 33: invalid checksum [ 565.398292][T18255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 565.450686][T18255] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4692: corrupted xattr block 33: invalid checksum [ 565.495179][T18255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 565.504359][T18255] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4692: corrupted xattr block 33: invalid checksum [ 565.518159][T18255] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 565.527617][T18255] __quota_error: 2 callbacks suppressed [ 565.527629][T18255] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 565.558287][T18255] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 565.567818][T18255] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4692: Failed to acquire dquot type 0 [ 566.039519][T18276] netlink: 'syz.3.4701': attribute type 10 has an invalid length. [ 566.165227][T18277] bond1: option mode: unable to set because the bond device has slaves [ 566.261547][T18278] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 566.493810][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 567.861260][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.873154][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4706'. [ 567.885328][T18294] loop8: detected capacity change from 0 to 512 [ 567.900744][T18294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.913357][T18294] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.924982][T18294] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4708: corrupted xattr block 33: invalid checksum [ 567.942234][T18294] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 567.944142][T18298] loop9: detected capacity change from 0 to 512 [ 567.951277][T18294] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4708: corrupted xattr block 33: invalid checksum [ 567.971450][T18294] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 567.980385][T18294] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4708: corrupted xattr block 33: invalid checksum [ 567.998350][T18294] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 568.007711][T18298] ext4: Unknown parameter 'func' [ 568.009430][T18294] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 568.014452][T18294] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 568.034220][T18294] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4708: Failed to acquire dquot type 0 [ 568.073559][T18300] loop7: detected capacity change from 0 to 512 [ 568.109787][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.110221][T18300] ext4: Unknown parameter 'func' [ 568.188082][T18306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.215033][T18306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.694159][T18318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 568.704533][T18318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.713108][T18318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.034776][T18323] loop8: detected capacity change from 0 to 2048 [ 569.091804][T18323] loop8: p2 p3 p7 [ 569.126867][T18323] netlink: 'syz.8.4718': attribute type 10 has an invalid length. [ 569.164614][T18323] bond3: option mode: unable to set because the bond device has slaves [ 569.179574][T18323] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 569.220951][T18329] loop7: detected capacity change from 0 to 512 [ 569.258308][T18329] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.388612][T18329] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.467940][T18329] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4719: corrupted xattr block 33: invalid checksum [ 569.482009][T18336] loop8: detected capacity change from 0 to 512 [ 569.488715][T18336] ext4: Unknown parameter 'func' [ 569.535799][T18329] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 569.561250][T18329] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4719: corrupted xattr block 33: invalid checksum [ 569.589724][T18329] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 569.617147][T18329] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.4719: corrupted xattr block 33: invalid checksum [ 569.645911][T18329] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 569.675306][T18329] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 569.709055][T18329] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 569.748334][T18329] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4719: Failed to acquire dquot type 0 [ 569.992855][T18340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 570.953590][T18347] loop8: detected capacity change from 0 to 512 [ 570.960919][T18347] ext4: Unknown parameter 'func' [ 571.275805][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.923955][T18365] loop8: detected capacity change from 0 to 512 [ 571.930759][T18365] ext4: Unknown parameter 'func' [ 572.630757][T18371] Invalid logical block size (530) [ 572.637911][ T28] audit: type=1400 audit(1777000509.516:417): avc: denied { ioctl } for pid=18368 comm="syz.3.4733" path="socket:[59919]" dev="sockfs" ino=59919 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 572.989381][T18388] serio: Serial port ttyS3 [ 573.094268][T18383] loop3: detected capacity change from 0 to 1024 [ 573.106445][T18383] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 573.118219][T18383] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.4738: lblock 2 mapped to illegal pblock 2 (length 1) [ 573.179588][T18383] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 573.181116][T18383] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 573.190384][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 573.190405][ C1] EXT4-fs (loop3): initial error at time 1777000510: ext4_map_blocks:791: inode 3: block 2 [ 573.190445][ C1] EXT4-fs (loop3): last error at time 1777000510: ext4_map_blocks:791: inode 3: block 2 [ 573.247469][T18394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 573.259508][T18394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.268096][T18394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.320192][T18396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 573.608812][T18383] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.4738: lblock 0 mapped to illegal pblock 48 (length 1) [ 573.692609][T18383] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 573.692942][T18383] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 573.711224][T18383] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4738: Failed to acquire dquot type 0 [ 573.722561][T18383] loop3: lost filesystem error report for type 5 error -117 [ 573.724499][T18383] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 573.744327][T18383] loop3: lost filesystem error report for type 5 error -117 [ 573.746417][T18383] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.4738: mark_inode_dirty error [ 573.785394][T18383] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 573.786158][T18383] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 573.805671][T18383] EXT4-fs (loop3): 1 orphan inode deleted [ 573.812165][T18383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.837735][ T3451] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 573.862981][ T3451] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 573.901531][ T3451] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 574.048318][T18412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4743'. [ 574.460876][T18418] loop6: detected capacity change from 0 to 2048 [ 574.537834][T18418] loop6: p2 p3 p7 [ 574.571026][T18418] netlink: 'syz.6.4747': attribute type 10 has an invalid length. [ 574.617144][T18418] bond1: option mode: unable to set because the bond device has slaves [ 574.642385][T18418] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 574.796255][T18420] loop6: detected capacity change from 0 to 1024 [ 574.820296][T18420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 574.866428][T18420] System zones: 0-1, 3-36 [ 574.877917][T18420] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4748: bad orphan inode 134217728 [ 574.901384][T18420] loop6: lost filesystem error report for type 5 error -117 [ 574.902974][T18420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.470819][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.599201][T18446] xt_TPROXY: Can be used only with -p tcp or -p udp [ 576.611588][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.620233][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.665039][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.698398][T13001] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 576.824238][T13001] loop3: lost filesystem error report for type 5 error -117 [ 576.825458][T13001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 576.860544][T13001] loop3: lost filesystem error report for type 5 error -117 [ 577.004321][T13001] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 577.033839][T13001] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 577.901795][T18471] loop3: detected capacity change from 0 to 512 [ 577.936628][T18471] EXT4-fs: Ignoring removed bh option [ 577.952584][T18471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.980560][T18471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 578.001839][T18471] System zones: 1-12 [ 578.012882][T18471] EXT4-fs (loop3): 1 truncate cleaned up [ 578.019302][T18471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.139103][T18475] loop7: detected capacity change from 0 to 2048 [ 578.213752][T18475] loop7: p2 p3 p7 [ 578.227152][T18475] netlink: 'syz.7.4765': attribute type 10 has an invalid length. [ 578.261896][T18475] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 578.581161][T18485] syzkaller0: entered promiscuous mode [ 578.588486][T18485] syzkaller0: entered allmulticast mode [ 578.664435][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.741628][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4772'. [ 578.757173][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.887236][T18497] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4773'. [ 579.506103][T18503] loop3: detected capacity change from 0 to 512 [ 579.635408][T18503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.648055][T18503] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.659391][T18503] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4775: corrupted xattr block 33: invalid checksum [ 579.691489][T18503] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 579.700789][T18503] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4775: corrupted xattr block 33: invalid checksum [ 579.777189][T18503] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 579.786190][T18503] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4775: corrupted xattr block 33: invalid checksum [ 579.799899][T18503] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 579.809435][T18503] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 579.819935][T18503] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 579.829475][T18503] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4775: Failed to acquire dquot type 0 [ 579.874036][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.966084][T18514] loop3: detected capacity change from 0 to 2048 [ 580.053704][T18514] loop3: p2 p3 p7 [ 580.097852][T18514] bond1: option mode: unable to set because the bond device has slaves [ 580.135929][T18514] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 580.281557][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4785'. [ 580.311897][T18529] loop7: detected capacity change from 0 to 2048 [ 580.331302][T18527] team0: Port device team_slave_0 removed [ 580.355194][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.437594][T18529] loop7: p2 p3 p7 [ 580.490181][ T3006] loop7: p2 p3 p7 [ 580.492828][T18529] bond2: option mode: unable to set because the bond device has slaves [ 580.518917][T18529] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 580.530003][T18543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18543 comm=syz.8.4793 [ 580.631542][T18545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 580.643348][T18545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.652058][T18545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.777734][T18548] loop3: detected capacity change from 0 to 2048 [ 580.841492][T18552] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 580.851818][T18552] SELinux: failed to load policy [ 580.868243][T18552] loop9: detected capacity change from 0 to 512 [ 580.885214][T18552] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.919265][T18548] loop3: p2 p3 p7 [ 580.948049][T18552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.995334][T18557] netlink: 'syz.3.4794': attribute type 10 has an invalid length. [ 581.064435][T18552] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.089631][ T3006] loop3: p2 p3 p7 [ 581.119278][T18548] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 581.153973][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.287803][T18569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'. [ 581.353343][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.364174][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.377129][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.389784][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.400150][T18577] loop8: detected capacity change from 0 to 512 [ 581.406878][T18577] ext4: Unknown parameter 'func' [ 581.412063][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.422220][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.435575][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.454527][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.467250][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 581.469172][T18583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18583 comm=syz.8.4806 [ 581.477601][T18575] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 582.378534][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4812'. [ 582.629179][T18606] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.636625][T18606] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.647533][T18606] bridge0: entered allmulticast mode [ 582.825135][T18615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18615 comm=syz.9.4819 [ 583.718440][T18634] loop3: detected capacity change from 0 to 512 [ 583.758427][T18634] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 583.794857][T18634] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 583.832166][T18634] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 583.866452][T18634] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 583.890680][T18634] System zones: 0-2, 18-18, 34-35 [ 583.907102][T18634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.981071][T18634] syzkaller0: entered promiscuous mode [ 583.992893][T18640] loop6: detected capacity change from 0 to 512 [ 584.003428][T18634] syzkaller0: entered allmulticast mode [ 584.024161][T18640] EXT4-fs: Ignoring removed bh option [ 584.058799][T18640] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 584.088961][T18640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 584.118018][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.128757][T18640] System zones: 1-12 [ 584.137794][T18640] EXT4-fs (loop6): 1 truncate cleaned up [ 584.152624][T18640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.277107][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.314957][T18645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18645 comm=syz.7.4830 [ 584.432173][T18650] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 584.490531][T18647] loop3: detected capacity change from 0 to 512 [ 584.518293][T18647] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.553162][T18650] SELinux: failed to load policy [ 584.586337][T18647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.599195][T18647] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.711438][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.868679][T18668] loop3: detected capacity change from 0 to 2048 [ 585.111184][T18670] bond1: option mode: unable to set because the bond device has slaves [ 585.138202][T18670] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 585.219274][T18668] loop3: p2 p3 p7 [ 586.638360][T18691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18691 comm=syz.6.4844 [ 586.888407][T18697] SELinux: failed to load policy [ 586.898326][T18697] loop6: detected capacity change from 0 to 512 [ 586.906379][T18697] EXT4-fs: Ignoring removed mblk_io_submit option [ 586.929970][T18697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.943060][T18697] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.968944][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.286979][T18709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.295807][T18709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.373094][ T30] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.474510][T18720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18720 comm=syz.3.4855 [ 587.541510][T18723] SELinux: failed to load policy [ 587.551036][T18723] loop7: detected capacity change from 0 to 512 [ 587.558076][T18723] EXT4-fs: Ignoring removed mblk_io_submit option [ 587.594833][T18723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.615779][T18723] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.674829][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.280625][T18741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.355296][T18741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.578870][T18744] loop8: detected capacity change from 0 to 2048 [ 588.627965][T18744] loop8: p2 p3 p7 [ 588.651358][T18744] bond3: option mode: unable to set because the bond device has slaves [ 588.683823][T18744] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 588.770185][T18750] Invalid logical block size (530) [ 588.831537][T18756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18756 comm=syz.6.4868 [ 588.854434][T18754] SELinux: failed to load policy [ 588.864265][T18754] loop8: detected capacity change from 0 to 512 [ 588.872537][T18754] EXT4-fs: Ignoring removed mblk_io_submit option [ 588.896342][T18754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.913590][T18754] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.936607][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.026528][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4869'. [ 589.081837][T18770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.091139][T18770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.229981][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.248096][T18772] loop9: detected capacity change from 0 to 512 [ 589.259883][T18772] ext4: Unknown parameter 'func' [ 589.360405][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.442049][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.627304][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.040742][ T49] bridge_slave_1: left allmulticast mode [ 590.055493][ T49] bridge_slave_1: left promiscuous mode [ 590.069031][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.084108][ T49] bridge_slave_0: left allmulticast mode [ 590.092800][ T49] bridge_slave_0: left promiscuous mode [ 590.098770][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.265852][ T49] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 590.330613][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.342597][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.366000][ T49] bond0 (unregistering): Released all slaves [ 590.376482][ T49] bond1 (unregistering): Released all slaves [ 590.464043][ T49] hsr_slave_0: left promiscuous mode [ 590.472266][ T49] hsr_slave_1: left promiscuous mode [ 590.479613][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.487540][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.495476][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.504924][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.519825][ T49] veth1_macvtap: left promiscuous mode [ 590.525464][ T49] veth0_macvtap: left promiscuous mode [ 590.534457][ T49] veth1_vlan: left promiscuous mode [ 590.540260][ T49] veth0_vlan: left promiscuous mode [ 590.772863][ T49] team0 (unregistering): Port device team_slave_1 removed [ 590.794104][ T49] team0 (unregistering): Port device team_slave_0 removed [ 590.807168][T18809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18809 comm=syz.8.4880 [ 590.836328][ T3045] 8021q: adding VLAN 0 to HW filter on device eth17 [ 590.992911][T18829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4882'. [ 591.129894][T18833] Invalid logical block size (530) [ 591.240902][ T49] IPVS: stop unused estimator thread 0... [ 591.328820][T18838] Invalid logical block size (530) [ 591.605594][ T3045] 8021q: adding VLAN 0 to HW filter on device eth18 [ 591.749256][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4887'. [ 591.801374][T18863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.810719][T18863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.811456][ T3045] 8021q: adding VLAN 0 to HW filter on device eth19 [ 591.997119][ T3045] 8021q: adding VLAN 0 to HW filter on device eth20 [ 592.020429][T18884] loop3: detected capacity change from 0 to 512 [ 592.032079][T18884] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.050802][T18884] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 592.060979][T18884] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 592.071285][T18884] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 592.079786][T18884] System zones: 0-2, 18-18, 34-35 [ 592.087212][T18884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.167247][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.619682][T18896] loop9: detected capacity change from 0 to 2048 [ 592.669700][T18898] loop6: detected capacity change from 0 to 512 [ 592.683244][T18898] EXT4-fs: Ignoring removed bh option [ 592.692273][T18898] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 592.716830][T18898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 592.727955][T18898] System zones: 1-12 [ 592.732597][T18898] EXT4-fs (loop6): 1 truncate cleaned up [ 592.738797][T18898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.876342][T18904] netlink: 'syz.9.4894': attribute type 10 has an invalid length. [ 593.265152][T18905] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.306995][T18896] loop9: p2 p3 p7 [ 593.401108][T18918] Invalid logical block size (530) [ 593.543988][T18925] loop8: detected capacity change from 0 to 512 [ 594.266708][T18925] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.459733][T18925] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.484064][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.507313][T18923] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4903: corrupted xattr block 33: invalid checksum [ 594.515643][T10485] udevd[10485]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 594.523655][T18923] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 594.531321][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 594.539540][T18923] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4903: corrupted xattr block 33: invalid checksum [ 594.562900][T18923] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 594.571877][T18923] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4903: corrupted xattr block 33: invalid checksum [ 594.588038][ T7171] udevd[7171]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 594.599839][T18923] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 594.614309][T18923] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 594.624776][T18923] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 594.634283][T18923] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4903: Failed to acquire dquot type 0 [ 594.648793][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4905'. [ 594.792486][T18940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=18940 comm=syz.6.4904 [ 594.831857][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.919642][T18942] SELinux: failed to load policy [ 594.930154][T18942] loop8: detected capacity change from 0 to 512 [ 594.940154][T18942] EXT4-fs: Ignoring removed mblk_io_submit option [ 594.958410][T18942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.971307][T18942] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.000470][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.057578][T18958] loop8: detected capacity change from 0 to 512 [ 595.070198][T18958] ext4: Unknown parameter 'func' [ 595.076442][T18961] net_ratelimit: 47985 callbacks suppressed [ 595.076484][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.190144][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.200499][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.210557][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.220758][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.230721][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.241072][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.251692][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.278854][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 595.298048][T18961] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 596.074199][T18973] Invalid logical block size (530) [ 596.319492][T18981] loop9: detected capacity change from 0 to 512 [ 596.342859][T18981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.355643][T18981] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.369678][T18981] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4919: corrupted xattr block 33: invalid checksum [ 596.383431][T18981] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 596.398183][T18981] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4919: corrupted xattr block 33: invalid checksum [ 596.412466][T18981] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 596.421397][T18981] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.4919: corrupted xattr block 33: invalid checksum [ 596.436600][T18981] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop9 ino=15 [ 596.446599][T18981] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 596.457013][T18981] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 596.466533][T18981] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.4919: Failed to acquire dquot type 0 [ 596.982883][T18988] Invalid logical block size (530) [ 597.121645][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.270585][T18998] netlink: 'syz.6.4926': attribute type 1 has an invalid length. [ 597.351642][T18998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.758133][T19012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19012 comm=syz.3.4929 [ 597.875967][T19017] Invalid logical block size (530) [ 597.918139][T19020] netlink: 'syz.8.4932': attribute type 1 has an invalid length. [ 597.932427][T19020] 8021q: adding VLAN 0 to HW filter on device bond5 [ 598.226986][T19037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.899935][T19039] loop8: detected capacity change from 0 to 512 [ 599.020394][T19039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.033176][T19039] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.047435][T19039] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4934: corrupted xattr block 33: invalid checksum [ 599.061856][T19039] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 599.074622][T19039] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4934: corrupted xattr block 33: invalid checksum [ 599.090033][T19039] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 599.099128][T19039] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4934: corrupted xattr block 33: invalid checksum [ 599.113505][T19039] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 599.124390][T19039] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 599.134796][T19039] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 599.144279][T19039] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4934: Failed to acquire dquot type 0 [ 599.423839][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.502842][ T28] audit: type=1400 audit(1777000534.661:418): avc: denied { ioctl } for pid=19057 comm="syz.6.4943" path="socket:[61254]" dev="sockfs" ino=61254 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 599.598965][T19065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19065 comm=syz.3.4945 [ 599.831478][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4946'. [ 600.188690][T19084] xt_TPROXY: Can be used only with -p tcp or -p udp [ 600.839971][T19092] loop8: detected capacity change from 0 to 512 [ 600.849193][T19092] ext4: Unknown parameter 'func' [ 601.012605][T19096] loop6: detected capacity change from 0 to 512 [ 601.042902][T19096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.060676][T19096] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.075066][T19096] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4954: corrupted xattr block 33: invalid checksum [ 601.088894][T19096] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 601.098196][T19096] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4954: corrupted xattr block 33: invalid checksum [ 601.111959][T19096] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 601.121025][T19096] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4954: corrupted xattr block 33: invalid checksum [ 601.134898][T19096] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 601.235642][T19096] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 601.259259][T19096] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 601.278800][T19096] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4954: Failed to acquire dquot type 0 [ 601.354209][T19032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.434072][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4957'. [ 601.598188][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4956'. [ 601.700310][T19114] loop3: detected capacity change from 0 to 512 [ 601.727906][T19114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.760109][T19114] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.854818][T19114] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4958: corrupted xattr block 33: invalid checksum [ 602.096931][T19114] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 602.153051][T19114] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4958: corrupted xattr block 33: invalid checksum [ 602.232964][T19114] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 602.268196][T19114] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.4958: corrupted xattr block 33: invalid checksum [ 602.298487][T19114] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 602.416500][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.439572][T19114] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 602.549083][T19114] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 602.561738][T19114] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4958: Failed to acquire dquot type 0 [ 602.610217][T19134] xt_TPROXY: Can be used only with -p tcp or -p udp [ 603.316426][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.700313][T19149] syzkaller0: entered promiscuous mode [ 603.715076][T19149] syzkaller0: entered allmulticast mode [ 604.031775][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.380692][T19166] xt_TPROXY: Can be used only with -p tcp or -p udp [ 604.448962][T19169] syzkaller0: entered promiscuous mode [ 604.454597][T19169] syzkaller0: entered allmulticast mode [ 604.799501][T19201] Invalid logical block size (530) [ 605.635777][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.646955][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.713655][T19254] loop3: detected capacity change from 0 to 2048 [ 605.754189][T19254] loop3: p2 p3 p7 [ 605.770233][T19254] netlink: 'syz.3.4987': attribute type 10 has an invalid length. [ 605.817336][T19254] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 605.901876][T19262] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.909367][T19262] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.917212][T19262] bridge0: entered allmulticast mode [ 607.145801][T19286] team0: Port device team_slave_0 removed [ 607.148569][T19288] netlink: 'syz.3.4998': attribute type 4 has an invalid length. [ 607.177871][T19288] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4998'. [ 607.210049][T19288] .`: renamed from bond0 (while UP) [ 607.219979][T19288] bond_slave_0: left promiscuous mode [ 607.241284][T19288] bond_slave_1: left promiscuous mode [ 607.633798][T19300] loop3: detected capacity change from 0 to 2048 [ 607.731654][T19300] loop3: p2 p3 p7 [ 607.757574][T19300] netlink: 'syz.3.5003': attribute type 10 has an invalid length. [ 607.803902][T19300] bond1: option mode: unable to set because the bond device has slaves [ 607.816776][T19306] loop8: detected capacity change from 0 to 512 [ 607.890462][T19306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.985712][T19317] loop6: detected capacity change from 0 to 512 [ 608.007312][T19306] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.028874][T19317] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.060760][T19317] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 608.099758][T19317] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 608.114299][T19306] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5004: corrupted xattr block 33: invalid checksum [ 608.135751][T19319] serio: Serial port ttyS3 [ 608.140980][T19306] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 608.150126][T19306] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5004: corrupted xattr block 33: invalid checksum [ 608.164687][T19306] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 608.173739][T19306] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.5004: corrupted xattr block 33: invalid checksum [ 608.176843][T19317] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 608.187450][T19306] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop8 ino=15 [ 608.209600][T19306] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 608.220782][T19306] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 608.230888][T19306] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5004: Failed to acquire dquot type 0 [ 608.245726][T19317] System zones: 0-2, 18-18, 34-35 [ 608.272802][T19317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.291478][T19319] loop3: detected capacity change from 0 to 1024 [ 608.323138][T19319] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 608.367989][T19319] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5007: lblock 2 mapped to illegal pblock 2 (length 1) [ 608.411415][T19319] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 608.411629][T19319] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 608.420834][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 608.420856][ C0] EXT4-fs (loop3): initial error at time 1777000542: ext4_map_blocks:791: inode 3: block 2 [ 608.420909][ C0] EXT4-fs (loop3): last error at time 1777000542: ext4_map_blocks:791: inode 3: block 2 [ 608.500177][T19317] syzkaller0: entered promiscuous mode [ 608.505961][T19317] syzkaller0: entered allmulticast mode [ 608.588674][T19319] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5007: lblock 0 mapped to illegal pblock 48 (length 1) [ 608.632052][T19319] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 608.632600][T19319] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 608.680463][T19319] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.5007: Failed to acquire dquot type 0 [ 608.721498][T19319] loop3: lost filesystem error report for type 5 error -117 [ 608.722348][T19319] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 608.782565][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.784186][T19319] loop3: lost filesystem error report for type 5 error -117 [ 608.815484][T19319] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5007: mark_inode_dirty error [ 608.900213][T16420] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.906041][T19319] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 608.910600][T19319] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 608.943710][T19319] EXT4-fs (loop3): 1 orphan inode deleted [ 608.946213][ T12] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 608.967224][T19319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.980475][ T12] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 608.981988][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 609.012924][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 609.942970][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5020'. [ 610.288301][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5021'. [ 611.025601][T19379] loop7: detected capacity change from 0 to 512 [ 611.064921][T19374] netlink: 'syz.6.5026': attribute type 4 has an invalid length. [ 611.095147][T19374] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5026'. [ 611.109400][T19379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.122083][T19379] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.141625][T19379] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5024: corrupted xattr block 33: invalid checksum [ 611.155187][T19379] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 611.167895][T19379] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5024: corrupted xattr block 33: invalid checksum [ 611.181759][T19379] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 611.190719][T19379] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.5024: corrupted xattr block 33: invalid checksum [ 611.205259][T19379] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop7 ino=15 [ 611.218114][T19379] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 611.228547][T19379] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 611.237948][T19379] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5024: Failed to acquire dquot type 0 [ 611.337485][T19374] .`: renamed from bond0 (while UP) [ 611.365771][T19374] bond_slave_0: left promiscuous mode [ 611.377758][T19374] bond_slave_1: left promiscuous mode [ 612.004091][T15979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.783020][T19415] team0: Port device team_slave_0 removed [ 613.122591][T19429] loop9: detected capacity change from 0 to 512 [ 613.140223][T19429] ext4: Unknown parameter 'func' [ 613.825927][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.847806][T13001] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 613.873156][T13001] loop3: lost filesystem error report for type 5 error -117 [ 613.873400][T13001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 613.900401][T13001] loop3: lost filesystem error report for type 5 error -117 [ 613.900513][T13001] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 613.939525][T13001] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 614.412362][T19463] loop7: detected capacity change from 0 to 2048 [ 614.507224][T19463] loop7: p2 p3 p7 [ 614.555357][T19463] netlink: 'syz.7.5058': attribute type 10 has an invalid length. [ 614.675175][T19471] loop9: detected capacity change from 0 to 512 [ 614.695416][T19471] ext4: Unknown parameter 'func' [ 615.596271][T19469] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 615.599601][T19472] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 616.027776][T19507] loop7: detected capacity change from 0 to 512 [ 616.058499][T19507] ext4: Unknown parameter 'func' [ 616.066182][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.073781][T19505] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.154678][T19505] bridge0: entered allmulticast mode [ 616.177144][T19511] Invalid logical block size (530) [ 618.232731][T19543] serio: Serial port ttyS3 [ 618.326129][T19543] loop3: detected capacity change from 0 to 1024 [ 618.354257][T19543] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 618.403283][T19543] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.5084: lblock 2 mapped to illegal pblock 2 (length 1) [ 618.439660][T19543] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.439784][T19543] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 618.448860][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 618.448881][ C0] EXT4-fs (loop3): initial error at time 1777000552: ext4_map_blocks:791: inode 3: block 2 [ 618.448933][ C0] EXT4-fs (loop3): last error at time 1777000552: ext4_map_blocks:791: inode 3: block 2 [ 618.590177][T19543] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.5084: lblock 0 mapped to illegal pblock 48 (length 1) [ 618.638471][T19543] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.638596][T19543] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 618.708525][T19543] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.5084: Failed to acquire dquot type 0 [ 618.732069][T19543] loop3: lost filesystem error report for type 5 error -117 [ 618.732315][T19543] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 618.781493][T19543] loop3: lost filesystem error report for type 5 error -117 [ 618.781681][T19543] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.5084: mark_inode_dirty error [ 618.821923][T19543] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 618.822178][T19543] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 618.857948][T19543] EXT4-fs (loop3): 1 orphan inode deleted [ 618.871204][T19543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.884062][ T49] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 618.898442][ T49] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 618.901277][ T49] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 618.953288][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 619.155927][T19561] loop8: detected capacity change from 0 to 512 [ 619.174018][T19561] ext4: Unknown parameter 'func' [ 620.108762][T19566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19566 comm=syz.8.5090 [ 620.979147][T19586] serio: Serial port ttyS3 [ 621.075239][T19583] loop9: detected capacity change from 0 to 1024 [ 621.084511][T19583] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 621.096016][T19583] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.5095: lblock 2 mapped to illegal pblock 2 (length 1) [ 621.110198][T19583] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 621.110507][T19583] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 621.119608][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 621.119634][ C0] EXT4-fs (loop9): initial error at time 1777000554: ext4_map_blocks:791: inode 3: block 2 [ 621.119700][ C0] EXT4-fs (loop9): last error at time 1777000554: ext4_map_blocks:791: inode 3: block 2 [ 621.154113][T19583] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.5095: lblock 0 mapped to illegal pblock 48 (length 1) [ 621.168342][T19583] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 621.170740][T19583] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 621.188631][T19583] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5095: Failed to acquire dquot type 0 [ 621.200058][T19583] loop9: lost filesystem error report for type 5 error -117 [ 621.200241][T19583] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 621.217107][T19583] loop9: lost filesystem error report for type 5 error -117 [ 621.217874][T19583] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.5095: mark_inode_dirty error [ 621.236454][T19583] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 621.236683][T19583] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 621.256094][T19583] EXT4-fs (loop9): 1 orphan inode deleted [ 621.262378][T19583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.281106][ T55] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 621.295519][T19590] loop6: detected capacity change from 0 to 2048 [ 621.309661][ T55] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 621.326414][ T55] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 621.357486][T19590] loop6: p2 p3 p7 [ 621.458595][T19595] bond1: option mode: unable to set because the bond device has slaves [ 622.219861][T13001] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.230219][T16716] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.235527][T13001] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 622.250125][T16716] EXT4-fs error (device loop9): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 622.252286][T13001] loop3: lost filesystem error report for type 5 error -117 [ 622.264915][T16716] loop9: lost filesystem error report for type 5 error -117 [ 622.269583][T13001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 622.272342][T16716] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 622.280549][T13001] loop3: lost filesystem error report for type 5 error -117 [ 622.298710][T16716] loop9: lost filesystem error report for type 5 error -117 [ 622.306291][T13001] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 622.325133][T16716] EXT4-fs error (device loop9): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 622.340635][T16716] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 622.349889][T13001] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 622.371678][T19603] loop6: detected capacity change from 0 to 2048 [ 622.430954][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5104'. [ 622.499590][T19607] team0: Port device team_slave_0 removed [ 622.706602][T19615] xt_TPROXY: Can be used only with -p tcp or -p udp [ 622.722887][T19603] loop6: p2 p3 p7 [ 623.114860][T19603] netlink: 'syz.6.5102': attribute type 10 has an invalid length. [ 623.129082][T19622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 623.138615][T19622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.147204][T19622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.572768][T19635] xt_TPROXY: Can be used only with -p tcp or -p udp [ 623.657913][T19647] serio: Serial port ttyS3 [ 623.729400][T19647] loop6: detected capacity change from 0 to 1024 [ 623.736684][T19647] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 623.751003][T19647] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.5114: lblock 2 mapped to illegal pblock 2 (length 1) [ 623.765046][T19647] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 623.765293][T19647] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 623.774380][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 623.774402][ C0] EXT4-fs (loop6): initial error at time 1777000557: ext4_map_blocks:791: inode 3: block 2 [ 623.774456][ C0] EXT4-fs (loop6): last error at time 1777000557: ext4_map_blocks:791: inode 3: block 2 [ 623.808917][T19647] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.5114: lblock 0 mapped to illegal pblock 48 (length 1) [ 623.823154][T19647] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 623.823339][T19647] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 623.841336][T19647] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5114: Failed to acquire dquot type 0 [ 623.852615][T19647] loop6: lost filesystem error report for type 5 error -117 [ 623.854462][T19647] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 623.871332][T19647] loop6: lost filesystem error report for type 5 error -117 [ 623.874818][T19647] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.5114: mark_inode_dirty error [ 623.893540][T19647] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 623.893686][T19647] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 623.913094][T19647] EXT4-fs (loop6): 1 orphan inode deleted [ 623.919358][T19647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.937919][T16594] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 623.953769][T16594] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 623.962738][T16594] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 0 [ 624.397006][T19657] loop9: detected capacity change from 0 to 2048 [ 624.454995][T19657] loop9: p2 p3 p7 [ 624.465366][T19657] bond1: option mode: unable to set because the bond device has slaves [ 624.485885][T19657] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 624.502770][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.514597][T15942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 624.527931][T15942] loop6: lost filesystem error report for type 5 error -117 [ 624.528071][T15942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 624.545585][T15942] loop6: lost filesystem error report for type 5 error -117 [ 624.545721][T15942] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 624.565045][T15942] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 624.772884][T19669] loop9: detected capacity change from 0 to 2048 [ 624.889664][T19669] loop9: p2 p3 p7 [ 625.002665][T19669] netlink: 'syz.9.5121': attribute type 10 has an invalid length. [ 625.189603][T19669] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 625.835601][T19679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19679 comm=syz.6.5124 [ 625.973832][T19683] Invalid logical block size (530) [ 627.198237][T19701] Invalid logical block size (530) [ 628.364421][T19721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19721 comm=syz.3.5139 [ 628.390371][T19723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.412170][T19723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.559371][T19716] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.334799][T19734] loop8: detected capacity change from 0 to 2048 [ 629.580232][T19737] bond3: option mode: unable to set because the bond device has slaves [ 629.592575][T19737] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 630.284392][T19751] loop7: detected capacity change from 0 to 512 [ 630.291354][T19751] ext4: Unknown parameter 'func' [ 630.383983][T19759] serio: Serial port ttyS3 [ 630.405920][T19749] Invalid logical block size (530) [ 630.796506][T19754] loop6: detected capacity change from 0 to 1024 [ 630.809427][T19754] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 630.825117][T19754] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.5148: lblock 2 mapped to illegal pblock 2 (length 1) [ 630.839280][T19754] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 630.839409][T19754] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 630.848487][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 630.848514][ C1] EXT4-fs (loop6): initial error at time 1777000563: ext4_map_blocks:791: inode 3: block 2 [ 630.848551][ C1] EXT4-fs (loop6): last error at time 1777000563: ext4_map_blocks:791: inode 3: block 2 [ 631.067325][T19754] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.5148: lblock 0 mapped to illegal pblock 48 (length 1) [ 631.081600][T19754] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 631.090025][T19754] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 631.108126][T19754] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5148: Failed to acquire dquot type 0 [ 631.119482][T19754] loop6: lost filesystem error report for type 5 error -117 [ 631.136011][T19754] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 631.152991][T19754] loop6: lost filesystem error report for type 5 error -117 [ 631.454723][T19771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19771 comm=syz.7.5153 [ 631.487429][T19754] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.5148: mark_inode_dirty error [ 631.498706][T19754] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 631.498902][T19754] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 631.518347][T19754] EXT4-fs (loop6): 1 orphan inode deleted [ 631.524723][T19754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.545826][ T55] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 631.577484][ T55] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 631.596209][ T55] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 0 [ 631.643549][T19775] loop9: detected capacity change from 0 to 2048 [ 631.748057][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.768578][T15942] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 631.815868][T15942] loop6: lost filesystem error report for type 5 error -117 [ 631.816013][T15942] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 631.858174][T19787] loop7: detected capacity change from 0 to 2048 [ 631.869741][T15942] loop6: lost filesystem error report for type 5 error -117 [ 631.869913][T15942] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 631.899897][T15942] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 631.902312][T19791] netlink: 'syz.9.5155': attribute type 10 has an invalid length. [ 631.953135][T19787] loop7: p2 p3 p7 [ 631.962637][T19791] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 631.999318][T19787] bond2: option mode: unable to set because the bond device has slaves [ 632.035357][T19777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 632.052460][T19775] loop9: p2 p3 p7 [ 632.069377][T19787] bond2: (slave macvlan5): Error -98 calling set_mac_address [ 632.081558][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.093385][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.185394][T19803] Invalid logical block size (530) [ 633.298683][T19830] loop3: detected capacity change from 0 to 2048 [ 633.310094][T19828] syzkaller0: entered promiscuous mode [ 633.317466][T19828] syzkaller0: entered allmulticast mode [ 633.365299][T19830] loop3: p2 p3 p7 [ 633.495452][T19837] bond1: option mode: unable to set because the bond device has slaves [ 634.295681][T19861] Invalid logical block size (530) [ 638.387707][T19882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.186668][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5205'. [ 639.201840][T19922] loop3: detected capacity change from 0 to 2048 [ 639.225685][T19927] bond1: option mode: unable to set because the bond device has slaves [ 639.797264][ T28] audit: type=1400 audit(1777000572.374:419): avc: denied { ioctl } for pid=19936 comm="syz.7.5211" path="socket:[66059]" dev="sockfs" ino=66059 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 639.887283][T19942] loop6: detected capacity change from 0 to 512 [ 640.000970][T19942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.014038][T19942] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.028751][T19942] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5210: corrupted xattr block 33: invalid checksum [ 640.047675][T19942] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 640.057903][T19942] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5210: corrupted xattr block 33: invalid checksum [ 640.072091][T19942] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 640.081259][T19942] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5210: corrupted xattr block 33: invalid checksum [ 640.095687][T19942] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 640.105752][T19942] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 640.116181][T19942] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 640.125654][T19942] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5210: Failed to acquire dquot type 0 [ 642.311328][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.942841][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5218'. [ 643.073936][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5221'. [ 644.605004][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5233'. [ 644.696585][T20012] loop6: detected capacity change from 0 to 512 [ 644.703394][T20009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 644.786229][T20012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.801181][T20009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.885540][T20009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.923390][T20012] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.019796][T20012] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5232: corrupted xattr block 33: invalid checksum [ 645.150294][T20012] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 645.224620][T20012] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5232: corrupted xattr block 33: invalid checksum [ 645.345213][T20012] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 645.414260][T20012] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5232: corrupted xattr block 33: invalid checksum [ 645.561392][T20012] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 645.623817][T20012] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 645.688388][T20012] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 645.759011][T20012] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5232: Failed to acquire dquot type 0 [ 646.873530][T15942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.232774][T20054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 647.881831][T20072] Invalid logical block size (530) [ 647.888088][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5255'. [ 648.000469][T20079] ================================================================== [ 648.008605][T20079] BUG: KCSAN: data-race in __hrtimer_rearm_deferred / print_cpu [ 648.016283][T20079] [ 648.018629][T20079] write to 0xffff888237d1b8e8 of 8 bytes by task 20065 on cpu 1: [ 648.026361][T20079] __hrtimer_rearm_deferred+0x537/0x670 [ 648.031939][T20079] irqentry_exit+0x527/0x5b0 [ 648.036544][T20079] sysvec_apic_timer_interrupt+0x44/0x80 [ 648.042211][T20079] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.048217][T20079] __tsan_read8+0xdf/0x190 [ 648.052662][T20079] drain_obj_stock+0x3bf/0x620 [ 648.057474][T20079] __refill_obj_stock+0x37/0x2e0 [ 648.062463][T20079] __memcg_slab_post_alloc_hook+0x5b8/0x7d0 [ 648.068402][T20079] kmem_cache_alloc_lru_noprof+0x1eb/0x400 [ 648.074243][T20079] sock_alloc_inode+0x36/0xf0 [ 648.078958][T20079] alloc_inode+0x40/0x170 [ 648.083314][T20079] __sock_create+0x120/0x580 [ 648.087934][T20079] sock_create_kern+0x38/0x50 [ 648.092636][T20079] inet_ctl_sock_create+0x58/0x130 [ 648.097786][T20079] igmp6_net_init+0xfc/0x260 [ 648.102502][T20079] ops_init+0x22a/0x2e0 [ 648.106682][T20079] setup_net+0x9f/0x230 [ 648.110856][T20079] copy_net_ns+0x310/0x450 [ 648.115302][T20079] create_new_namespaces+0x20e/0x440 [ 648.120623][T20079] copy_namespaces+0x1ad/0x210 [ 648.125423][T20079] copy_process+0x10ae/0x23a0 [ 648.130127][T20079] kernel_clone+0x1a5/0x5e0 [ 648.134660][T20079] __x64_sys_clone+0x143/0x180 [ 648.139448][T20079] x64_sys_call+0x1222/0x3020 [ 648.144160][T20079] do_syscall_64+0x12c/0x3b0 [ 648.148954][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.154869][T20079] [ 648.157209][T20079] read to 0xffff888237d1b8e8 of 8 bytes by task 20079 on cpu 0: [ 648.164854][T20079] print_cpu+0x2fb/0x670 [ 648.169127][T20079] timer_list_show+0x107/0x170 [ 648.173929][T20079] seq_read_iter+0x636/0x940 [ 648.178731][T20079] proc_reg_read_iter+0x110/0x180 [ 648.183777][T20079] copy_splice_read+0x471/0x6c0 [ 648.188650][T20079] splice_direct_to_actor+0x26e/0x670 [ 648.194051][T20079] do_splice_direct+0x119/0x1a0 [ 648.198977][T20079] do_sendfile+0x382/0x650 [ 648.203428][T20079] __x64_sys_sendfile64+0x105/0x150 [ 648.208657][T20079] x64_sys_call+0x2dc4/0x3020 [ 648.213365][T20079] do_syscall_64+0x12c/0x3b0 [ 648.217980][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.224076][T20079] [ 648.226417][T20079] value changed: 0x7fffffffffffffff -> 0x00000090c8a54cc0 [ 648.233540][T20079] [ 648.235881][T20079] Reported by Kernel Concurrency Sanitizer on: [ 648.242054][T20079] CPU: 0 UID: 0 PID: 20079 Comm: syz.3.5253 Tainted: G W syzkaller #0 PREEMPT(full) [ 648.253022][T20079] Tainted: [W]=WARN [ 648.256839][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.266910][T20079] ==================================================================