last executing test programs: 8m31.758659025s ago: executing program 1 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_open_dev$usbfs(0x0, 0x1ff, 0x42a741) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x6d, 0x5, 0x4009, 0x2, "9c2b45e4f5d79691f27b531f369941f2a0f2705a4bf9f627ddcd18809190aa8c"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 8m31.346146479s ago: executing program 1 (id=42): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007200)=@newtfilter={0x31f4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x3}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x31a8, 0x2, [@TCA_CGROUP_ACT={0x320, 0x1, [@m_skbmod={0x138, 0x2, 0x0, 0x0, {{0xb}, {0xf0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x1ff, 0x4, 0x2, 0x3}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e1745251f1fe"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0x7, 0x7, 0x1, 0x1}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xff, 0x10000000, 0x40, 0x6}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd, 0x4, 0x0, 0x0, 0x3}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x8, 0x7, 0x7}, 0xa}}]}, {0x1e, 0x6, "ec074764629260360d3918833e1b09373cdd58c2afc6386dfa57"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x1e4, 0x13, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xa0, 0x6, {0x3, 'mangle\x00', 0x6, 0x3, "a7f5466fc21b617efb2f78fe1d745979e42ddefba9fc9add6601f6ba48faff0776603b2a12960f13d7e87e920246d32872eb07c0d1c039d53edcdfcced2ae43bc5122ab402d9f4ad0be4491e9b4428f34c9d8b039df9600b5f6945bc8c3164b6facad60987ea1e16e9a05847ab93fe07ae27db9a7a16"}}]}, {0xef, 0x6, "5115852be4e0f83abd432a2c4f4ded072e8dbf89723e68fee3ddbf3d357b484f1cfef00112fb2a8050048a41f3ce2b39c04d9fb669b4bb54a948097e16eb970951ce823a1db40b5f83d436d05bbbfbcea880772a74152d16dfd92860b7518b66651a6000eb3e4ffca2e75549ce97d5072f6ab4903192702d3c96fdb06be890a0a8f5d0c88dde47fed18c3ab28d825f20e6080a2b046adc2cb940d1504e3ebc925837f13a874af4db158165c793421f4776695bffd3a4d100bed9f00fdf4277bdc2ef2373c1ed246028ce1f115ef662e337c330e5350b29542ae6ac40c8f5967ddd2c80e0e795e019929fec"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}, @TCA_CGROUP_POLICE={0x468, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c, 0x80000000, 0x6, 0x44, 0xfff, 0xa, 0x3ff, 0x80000000, 0x6, 0x3, 0xb94, 0x7fff, 0x8, 0x100, 0x5, 0x1, 0x80000000, 0x4, 0x6, 0xfffffffd, 0x52, 0x4517, 0x9, 0x0, 0x4, 0x6662, 0x7, 0x1, 0x4746, 0x18, 0x20000000, 0xb0f, 0x0, 0x4, 0x0, 0x0, 0xff, 0xe, 0xffffffff, 0x3, 0x4, 0x2, 0x1, 0x0, 0x1, 0x5, 0x8, 0xb44, 0x8000, 0x8, 0x7, 0x5, 0x3, 0x9, 0x1, 0x8, 0x401, 0xb, 0x3, 0x8, 0xf094, 0xff, 0x3d, 0x5, 0x7, 0x9, 0x7, 0x1e, 0x7ff, 0x7fff, 0x0, 0x6, 0x8, 0x1, 0x4c, 0x2, 0x3eaa22d7, 0x0, 0x6, 0xfffffffc, 0x0, 0x3, 0x8, 0x7, 0x7ff, 0xb46f, 0x400000, 0x100, 0x8, 0x3, 0x6, 0x480, 0x8, 0x5c, 0x4, 0x10000, 0x8, 0x5, 0x5, 0x4, 0xd3f, 0x9, 0x522d, 0xd2, 0xfffffff9, 0x6862, 0x7fff, 0x7aeb, 0xd48, 0x0, 0xfffffffd, 0x8, 0x0, 0x18f4, 0x4, 0x200, 0x9, 0x0, 0x2, 0x6b56af75, 0x1, 0x9, 0x4, 0xc8, 0x1, 0x80000001, 0x8, 0x962, 0x9, 0xff, 0xffffff11, 0x4, 0xfffeffff, 0x0, 0x4, 0x6, 0x7fffffff, 0x0, 0xbf, 0x2, 0x1, 0x3, 0x6, 0xa0, 0x80000001, 0x8, 0x4, 0x4, 0x6, 0x40, 0x3, 0x0, 0x9, 0xfffffff5, 0x10, 0x4, 0xb, 0xa, 0xfffffffd, 0xdb, 0x8, 0x7, 0x5, 0x2, 0x10000, 0x6, 0x8, 0x697, 0x7, 0x6, 0x7e66, 0xf4, 0xb, 0x2, 0x7fffffff, 0x9, 0xa0, 0x10001, 0x3, 0x2, 0x4, 0x5, 0x3ff, 0x78d7, 0x8, 0xff, 0x56, 0x5, 0x7, 0x200, 0x3, 0x3, 0x96d, 0x3, 0xcf1, 0x6, 0x80000001, 0x2, 0x8, 0x59, 0x21b8, 0x2, 0x7, 0x8, 0x7ff, 0x7, 0xffffffff, 0xfffffff1, 0x4, 0x4, 0xfffffff1, 0x8, 0xff, 0x92, 0x6, 0x0, 0x4f, 0x68c4, 0x4, 0xee, 0x0, 0x0, 0x6, 0x0, 0x10, 0x800, 0x8000, 0x3, 0x1, 0xc, 0x1, 0x81, 0x8, 0xb, 0x28, 0x2, 0x40, 0x80000000, 0x9, 0x0, 0xffff99ca, 0xfffffffe, 0x3, 0xa4a2, 0x2, 0x1, 0xfffffff8, 0x1, 0x0, 0x2000, 0x81, 0x4, 0x8, 0x0, 0x4, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x7f, 0xfffffffc, 0x3, {0xd3, 0x2, 0x6b54, 0x7, 0x4, 0x48}, {0x97, 0x2, 0x6, 0x4, 0x2, 0x9}, 0x2c8, 0x3, 0xcd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_CGROUP_ACT={0x24ec, 0x1, [@m_mirred={0x11c, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xf0, 0x6, "fe34e2fcd81a2a7a2a16446f4938f662964ae8f9c9667511cd66ee925b5a026d4bd67d2fb2892dcb1b7f59445f122cd2904f6f81e8c06ec183d47135fa48dd26f71c7552a6d218e1f7443fae9f2d2905722063eeea0360866b4978af4062144efa35f0c347d46b4e8a887213301d961acc593f4c815f0d0546488d6825bfe24ff0631551f8806b8830781728681741e4ab0bde6af1cd82fb205834e469656b98665553d5df671d54b385d780c6f632c4660ae658e12721312eea7421e137a4a3dcf53b191641d4cf39f502a6558438c6abcf140e140fca2d0b0d927852a178786bd1d1ca821409c73e7058f0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x7c, 0x9, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x4, 0x2, 0x401}, @rand_addr=0x64010100, @remote, 0xff}}]}, {0x29, 0x6, "0c10dabfa605f7f0a7b318d68dbe1ccb85150830f736eb5a0113e9955dfc0cee40176a690b"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_vlan={0x10c, 0x17, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x54d, 0x3, 0x8, 0x88}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x900000, 0x5, 0x0, 0xfff, 0xf35}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf68}]}, {0x95, 0x6, "adbeccf1b85f14c17a233d25d6dfc2de3c41b8d40db49e67390bc3aa0021f2032f0c8775a78b547d66ea9f36271f2ff03eee533dfd01cf572591dd527bf7c25291eec74ce967c50f8539b95b97c4ae6a43a98f6ea10da1d9ab8b8342f7718ba48be6fd38258b061176aa4d9b180c192e8a42cac8141d47e2c5dccbd5371ebaf0f73f47954c89b23d1d21612af1f5a08ec6"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x104, 0x19, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x3ff}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xb0c, 0x0, 0x1, 0x56b}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0x3c, 0x6, 0x9, 0x8}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x3, 0x3, 0x4}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x7, 0xfffffff8, 0x2}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0xffffffffffffffff, 0x4, 0x9}, 0x2e}}]}, {0x2e, 0x6, "aa85be2b5d39cb94fc251d4ba4321a8d4c5d8cab67177a8b348b824eed32fc79d5d99c2b3a8a58626600"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_pedit={0x1e5c, 0x1e, 0x0, 0x0, {{0xa}, {0x1d80, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x7, 0x2, 0x0, 0x8, 0x6}, 0x3, 0x81, [{0xc6e, 0x2, 0x9, 0x0, 0xf, 0x4}, {0x2, 0x6, 0x10001, 0x7fff, 0x7, 0x2}, {0xfffffa41, 0x35, 0x70, 0x4, 0xfc, 0x2}]}, [{0x7, 0x400, 0x3, 0x1, 0xfff, 0x2}, {0x4, 0x101, 0x10001, 0x400, 0xfffffffc, 0x1}, {0x81, 0x8e9, 0x9, 0x8, 0x6, 0x7}, {0x4, 0x9, 0xe93, 0x1, 0x2e5b, 0x4}, {0x8, 0x2, 0x4, 0x200, 0x6828, 0x1000}, {0x7fffffff, 0x9, 0x789, 0x4000000, 0x3, 0xfaa8}, {0x6, 0x5, 0x715, 0xd, 0x2, 0xd5d}, {0x9, 0xffffffff, 0x3, 0x8001, 0x4, 0x1}, {0x2, 0x58, 0x7, 0x100, 0x7fffffff, 0x5}, {0x7ff, 0x6, 0xc, 0x3, 0x8, 0x6}, {0x4258c9ea, 0xfff, 0x8, 0x7, 0x6, 0x5}, {0x3, 0x7, 0x5, 0xffffff81, 0x6000, 0x7ff}, {0x280000, 0x8001, 0x401, 0xe20, 0x1875, 0x7}, {0x5, 0x7, 0x4, 0x4, 0x7, 0x6}, {0x4, 0x3, 0x3, 0x2, 0x4, 0x9}, {0xc, 0x7, 0x7, 0x7fffffff, 0x9, 0x10}, {0x8, 0x8, 0x5, 0x7, 0x9, 0x4d}, {0x401, 0x75e, 0x4, 0x80000000, 0xcc8}, {0x1, 0xae4c, 0x6, 0x9, 0xfff, 0x5}, {0x6, 0xffffffff, 0x7, 0x81, 0x9, 0xffffffff}, {0xe, 0x1, 0x7ff, 0x4, 0x1000, 0xffffff81}, {0xee6b, 0x10, 0x5, 0xca3a, 0x5, 0x7b2}, {0x200, 0x4, 0x7, 0x6, 0x6, 0x5}, {0x4, 0xfffffffb, 0x10000, 0x6, 0x80, 0x2}, {0x3, 0x2, 0xfffffffd, 0x0, 0xff1, 0x7}, {0x5, 0x1000, 0xa3, 0x180, 0x2, 0x81}, {0x1, 0x9, 0x0, 0x8001, 0x2, 0x2}, {0x7ff, 0x4, 0x504, 0xe6, 0x6, 0x9}, {0x7f, 0x1, 0x3, 0xe, 0x0, 0xf40e17d2}, {0xe, 0x5, 0x1, 0x0, 0x8, 0xffffffff}, {0x1, 0x2, 0x4, 0xccb, 0x5, 0xfb}, {0x7, 0x2, 0x1, 0x0, 0x40000000, 0xf}, {0xff, 0x7fffffff, 0x4, 0x0, 0xb, 0x5}, {0x8000, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x8000, 0x2, 0x5435, 0x7}, {0x5, 0x5, 0xff, 0xffffffff, 0x8, 0xfffffff8}, {0x8, 0x4, 0xb, 0xc, 0x9, 0x2}, {0x6, 0x3, 0xf2e, 0x80000001, 0x2, 0xffff}, {0x6, 0xe4, 0x800, 0x3e, 0x6, 0x1}, {0x9, 0x4, 0xd5, 0x2, 0x3, 0x40}, {0x1, 0xcb2, 0x5, 0x4, 0x50, 0x80000000}, {0x2, 0x2e1, 0x6, 0x6, 0x0, 0x3}, {0x48000000, 0x3, 0xffff, 0x7, 0x9}, {0x0, 0x7ff, 0x0, 0x0, 0x8}, {0x4, 0x4, 0x0, 0x10, 0x8000, 0xde9}, {0x8001, 0x4, 0x1, 0x0, 0x7, 0x8}, {0x1000, 0x1, 0x8, 0x1, 0x1, 0x5}, {0x1ade, 0x9, 0xfa, 0x101, 0x4, 0xfff}, {0x8, 0x3, 0x2d, 0x5, 0x4, 0x5}, {0xc0, 0x0, 0x5, 0x27ed, 0xe, 0xd746}, {0x6, 0x7ff, 0x9, 0x5, 0x10001, 0x5}, {0x0, 0x5, 0x3343, 0xffffffff, 0x5, 0x6}, {0x0, 0x42, 0x4, 0xfffffff8, 0x7f, 0x8}, {0x9, 0x400, 0x8, 0xff, 0x3, 0x1}, {0x4, 0x7, 0x0, 0x6, 0x81, 0x23b6}, {0x40, 0x40, 0xffffff1a, 0x10, 0xff, 0x80a7}, {0x9, 0x401, 0x0, 0x6, 0x2, 0x4}, {0x5, 0x6, 0xffff, 0xf1, 0x0, 0x5}, {0x2, 0xffff, 0x0, 0x9, 0x9}, {0x5, 0xfa, 0x2, 0x5, 0xf, 0xffff7fff}, {0x100, 0x1, 0x6, 0x5, 0x1, 0x9fd}, {0xfffeffff, 0x7, 0x84f, 0x74, 0x83f7, 0xa40}, {0x0, 0x7f, 0x6, 0x1, 0x8001, 0x6}, {0x3, 0x7, 0x4e0, 0x1e, 0x400, 0x9}, {0x6, 0xf, 0x7, 0x6, 0x6, 0x3}, {0x6, 0x3, 0x0, 0x3, 0x5, 0x1}, {0xc, 0x70000, 0x80000000, 0x1, 0x0, 0x3}, {0x80000001, 0xcd, 0x34, 0x3, 0x80000001, 0x1ff}, {0xffff, 0xffffffff, 0x5, 0x14, 0x1, 0x5}, {0x200, 0x2c0fdf5a, 0x8, 0x80, 0xd, 0x2}, {0x683d2e1b, 0x0, 0x400, 0x6000, 0x79f, 0x91}, {0xa, 0x1, 0x5, 0xfffffff9, 0xfff, 0xf}, {0x3, 0x8, 0xfffffff7, 0x7, 0x5, 0x98eb}, {0x9, 0x10001, 0x787a3488, 0xff, 0x6, 0xa81d}, {0xff, 0xd832, 0x4, 0x5, 0x3, 0x27395864}, {0x789, 0x3, 0x9, 0x0, 0x4}, {0xff, 0x8, 0x7f, 0xffff, 0xfffffff8, 0x7}, {0x80, 0x80000000, 0xb, 0x3238878a, 0x4, 0xffffffff}, {0xfffffa98, 0x1, 0x10000, 0x9, 0x7, 0x400}, {0xa, 0xed, 0x9, 0x1, 0x4, 0x2}, {0xb, 0x3, 0xffffffff, 0x4, 0xf38, 0x3}, {0x3, 0x5474, 0x2, 0xfffffffe, 0x5, 0x1}, {0x377, 0x3, 0x4, 0x40, 0x4, 0xfffffffb}, {0x8, 0x3ff, 0x3, 0x9, 0x8, 0x7f2}, {0x9, 0x8, 0x7, 0xd, 0x3, 0x9}, {0xe, 0xffffffff, 0x6, 0x80000000, 0x9, 0x8}, {0x2, 0xcf5, 0x6, 0x5, 0xc, 0xfffff782}, {0x7de, 0x80, 0x8, 0x200, 0x0, 0x5}, {0x6, 0x2400, 0x10e3, 0xfffffff9, 0x7f, 0x5}, {0x3, 0x7, 0x5ff, 0xe, 0xd, 0x1ff}, {0x7, 0x2, 0xffff0001, 0x639babae, 0x5, 0x7}, {0x1, 0x6, 0x4, 0xff, 0x26c0000, 0x3c}, {0x9, 0x7, 0x3, 0x5, 0x400, 0x3ff}, {0x5, 0x8, 0xbdb, 0x9, 0x8, 0x5}, {0x5, 0x8001, 0x4, 0x7, 0x7, 0x7}, {0xffff7c1c, 0xff, 0x7f, 0x4, 0x4, 0x401}, {0xf0, 0x1f4, 0xffffff40, 0xf91, 0x5, 0x401}, {0x8, 0x6, 0x101, 0x3, 0x2, 0x7}, {0x3, 0x7f, 0x0, 0x7fff, 0x1da2, 0x8}, {0x6, 0x3, 0xf491, 0xdcf7, 0xb, 0xfffffffa}, {0x8000, 0x4, 0x8001, 0x492923b0, 0x3, 0x8}, {0x200, 0x5, 0xf, 0x2, 0x75f, 0x5}, {0x9, 0x5, 0xc1, 0x6, 0x966, 0x4}, {0xef2, 0x8e, 0x80000000, 0x10, 0x8, 0x81}, {0x6, 0x5, 0x8, 0x10000, 0xb781, 0xffff}, {0x0, 0x1, 0x9, 0x3, 0x0, 0xffffffa3}, {0x80, 0x9, 0xe88, 0x9, 0x5, 0x81}, {0x8, 0x6, 0x5, 0x7, 0x5, 0xd}, {0x5, 0x7, 0x2, 0x8, 0x7, 0x1}, {0x158d9acd, 0xfffffc01, 0x7, 0x9, 0x5, 0x8}, {0x8001, 0x4, 0x7ff, 0x3, 0x9, 0x45}, {0x901d9bd9, 0x8, 0xfffffffb, 0x9bf9, 0x1, 0x10}, {0x1, 0x0, 0xf, 0x0, 0x8, 0x3}, {0x8ca, 0x2, 0x6, 0x6, 0x0, 0x4}, {0xc, 0x80000000, 0x1, 0x101, 0x7, 0x7f}, {0x6, 0x7, 0x3, 0x10, 0x9, 0x80000000}, {0xfffffff8, 0x4, 0x4, 0x6, 0x9, 0x401}, {0xd0a0, 0x2, 0x10, 0x94, 0xd, 0x10000}, {0x1, 0xb9b4, 0x1, 0x6, 0x2}, {0x3, 0x2, 0x80000001, 0x7, 0xfffffff7, 0x6}, {0x3ff, 0x7, 0x9, 0x0, 0x9, 0x40}, {0xffff8000, 0x8001, 0x8, 0x1, 0x6, 0x5d7d}, {0x4, 0x3, 0x0, 0xdd, 0x7, 0x1}, {0x0, 0x4, 0x7, 0x101, 0x1659109a, 0x3}, {0x4, 0xc1eb, 0x5, 0x8973, 0x1, 0x8}, {0x3, 0xf, 0x8, 0x3, 0x2, 0x9}, {0x3, 0x6, 0x0, 0x2, 0x10000000, 0x9}, {0x2, 0x1, 0x960, 0x7, 0x9, 0x4}], [{0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x6, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x26c4e70bac2a0d3d}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x7}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x59574942ed1d79d1}, {0x3, 0xb3588972bf36e93a}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x6}, {}, {0x4}, {}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1, 0x4, 0x0, 0x4, 0x7}, 0x1, 0x8, [{0xfffffff7, 0xed, 0x81, 0xfff, 0x7, 0x5}, {0xe, 0x7, 0x2, 0x2d, 0xff, 0x4}, {0x7b, 0x7, 0x0, 0xb0a9, 0x4, 0x9}, {0x3, 0x6, 0xa04d, 0xffff, 0x6, 0x8}, {0xffffffff, 0x4, 0x3, 0x8, 0xfff, 0x1}, {0xd, 0x10, 0x9, 0x5d, 0x5, 0x2}, {0x4, 0x4, 0x73, 0x7, 0x41b6, 0x5}]}, [{0x4, 0xfffffff7, 0x6, 0xfffffff8, 0x2, 0x7}, {0x8, 0x307, 0x100, 0x0, 0x2, 0xb2e}, {0x9, 0x7ff, 0x9, 0x100, 0x8, 0x9}, {0xf, 0x4, 0x5, 0x4, 0x2, 0x8}, {0x9, 0x9, 0x3, 0x9, 0x2, 0x2}, {0x7, 0x6, 0x7, 0x4, 0xffffff04, 0xfffffffb}, {0x4, 0xd, 0x2, 0x2, 0x6, 0x800}, {0xb40, 0x1, 0x5, 0x1, 0x4, 0x5cd}, {0x7, 0x15bb234, 0x6, 0x40, 0x5, 0xffffffff}, {0x56ba, 0x1ff, 0xe, 0x1, 0x2, 0x7}, {0x2, 0x8, 0x8, 0xfffff651, 0x4, 0xd}, {0xdb, 0x43b5, 0x3, 0x7, 0x40000, 0x5}, {0x4, 0x5, 0x4, 0x28, 0x6, 0x6}, {0x5, 0x9, 0x6, 0xf63f, 0x1}, {0x6, 0x400, 0xe, 0x12000, 0x800, 0x5da7}, {0x6, 0x298, 0xb0, 0x9, 0xffffffff, 0x7f}, {0x81, 0x7, 0x8001, 0x1, 0x82935280, 0x7}, {0x5, 0xe, 0x3, 0xfffffffe, 0x10001, 0x1}, {0x6, 0x0, 0x3, 0xf5, 0x3, 0x2}, {0x7fe, 0x5, 0x3, 0x81, 0x0, 0x4}, {0x4, 0xffffffff, 0xfffffff1, 0x0, 0xa3, 0x2}, {0x0, 0x4, 0x1, 0xb9e, 0x1, 0x1ff}, {0xa, 0x1, 0x7, 0x3, 0x8, 0x1}, {0x8, 0xe01b, 0x401, 0x80, 0x2, 0x9}, {0xfb30, 0xfffffe58, 0x0, 0x6, 0xd178, 0x1ff}, {0x5, 0xde7, 0x3ff, 0x3, 0x1000000, 0x96}, {0x3, 0x1000, 0xd4, 0x8, 0x7, 0x1ff}, {0x3, 0x8001, 0x80000000, 0x7, 0x4, 0xe}, {0xfffff001, 0x4, 0x1, 0x302, 0x2, 0x1}, {0x6, 0x3, 0x8, 0x2, 0x3, 0x7}, {0x7f34, 0x80, 0x9, 0x2, 0xfffffff7, 0x38ce}, {0x0, 0x3, 0x1, 0x80000000, 0x5, 0x1ff}, {0x1, 0xf, 0x4, 0x7, 0x8, 0x9229}, {0x8, 0x8, 0x7, 0x2, 0x3, 0x4}, {0x2, 0x7, 0x2, 0x7bd3, 0xa821, 0x10}, {0x1, 0x9, 0x5, 0x3, 0x2, 0xfc3}, {0xc19, 0x0, 0x9f, 0x80, 0x4, 0x1ff}, {0x1, 0xf2, 0x1, 0x0, 0x8, 0xa50}, {0xffff, 0xfffffff9, 0x10000, 0x0, 0x5, 0xf7c1}, {0xff, 0x3, 0x2, 0x1ffe00, 0x7fff, 0xfff}, {0x401, 0x8, 0xe2e, 0x6, 0x818, 0x2}, {0x1, 0x400, 0x800, 0x80, 0x3, 0x8}, {0x4, 0x3, 0x2, 0x6, 0x8, 0x4}, {0xa61e, 0x2, 0xe6c, 0x0, 0x2, 0x6}, {0x4, 0x3, 0x7, 0x6, 0x8, 0x1}, {0x9, 0xa64, 0x5, 0x5c94, 0x80000001, 0x5f9}, {0x80, 0x0, 0x7, 0x80000000, 0x4, 0x10}, {0x81, 0x1433, 0x5c3, 0x2a, 0xc, 0x5}, {0x9, 0x80, 0xfd7f, 0x0, 0x2, 0x101}, {0x9, 0x4, 0x5, 0x771, 0xaeb, 0x997}, {0xe78, 0x9, 0x7, 0x6, 0x3, 0x9}, {0x2, 0x81, 0x8001, 0x40, 0x2, 0x6af7}, {0x7fff, 0x8, 0x5, 0x5, 0x8, 0xa7b}, {0x9, 0xfffffffc, 0x1, 0xffffffff, 0x80000001, 0x1}, {0xfffffff8, 0xfffffffa, 0xa, 0x0, 0x8}, {0x0, 0x8, 0x63ac, 0x4, 0x5, 0x6f2b}, {0x46e, 0x8, 0x401, 0x9, 0x10000, 0x9}, {0x4d487cb0, 0x5, 0x40, 0x1, 0x7, 0xa}, {0x745, 0x401, 0xbf97, 0xfffffff7, 0x79cdbd92, 0x2}, {0x7ff, 0xfffffff7, 0x5, 0x1, 0x0, 0x83}, {0x3, 0x7f, 0x5, 0xffffff81, 0x9, 0x4}, {0x6, 0x2, 0x93, 0x1, 0xd, 0x80}, {0x4, 0x3, 0xd1, 0x800, 0x5, 0xb9b9}, {0x3, 0x3, 0x29, 0x1, 0x401, 0x7}, {0x8, 0x8, 0x3, 0x6, 0x7cc, 0x5}, {0x2ba8, 0x4, 0x401, 0x400, 0x2, 0x7}, {0xf86, 0xffff, 0x5, 0x7, 0x8000}, {0x7, 0x8, 0xd5aa, 0x6, 0x5, 0x6}, {0x1ff, 0x8, 0x101, 0x10001, 0x6085, 0x2e85}, {0x3, 0x5, 0x4, 0x101, 0xa4ef00, 0x9}, {0x7, 0xba2, 0x6, 0xfffffff7, 0x0, 0xd3}, {0x2, 0x6, 0x0, 0x1, 0x8}, {0x8, 0x0, 0x40, 0x22aa, 0xff, 0xffffd57c}, {0x3, 0xfffff800, 0xfffffffa, 0x8, 0x2, 0x2}, {0x7f, 0x8, 0xfffffffd, 0xf, 0x6, 0x2}, {0x8, 0x9, 0x4080, 0x4, 0x40000, 0x10000}, {0x6, 0x8000, 0x5, 0x5, 0x5, 0x2}, {0x5, 0x3, 0xa, 0x3, 0xf, 0x506ffb7f}, {0x9, 0x8, 0x401, 0x4, 0x7f, 0x5}, {0x0, 0xb, 0xfffffff8, 0x4, 0x4, 0x7}, {0xffffff80, 0x0, 0x7, 0x3, 0xfffffffe, 0x780000}, {0x2, 0x0, 0x1000, 0x17, 0x98, 0xfffffffb}, {0x9, 0x100, 0x0, 0x7fff, 0x8, 0x1ff}, {0xff, 0x2, 0x2f, 0x6, 0x64, 0x81}, {0x6, 0x9, 0x3ff, 0x1, 0xf, 0x805}, {0x100, 0x9, 0xfffffff9, 0x9, 0xfffffffb}, {0x9, 0x2, 0x400, 0xa, 0x101, 0x2}, {0xc000, 0x8, 0x3, 0xfffffffa, 0x5, 0xa4}, {0x0, 0x5, 0x1, 0x1018, 0x755f, 0xd}, {0x6, 0x5, 0x400, 0x9, 0x4, 0x8}, {0xa43, 0x8, 0x34a, 0x0, 0x1, 0x4fde}, {0x4, 0x5cf3, 0xfffffffd, 0x8, 0x80000001, 0x5}, {0x7fffffff, 0x8da3, 0x4, 0x9, 0x4, 0x400}, {0x8, 0x7f, 0x1, 0x74000000, 0x8, 0x42}, {0x2, 0x3, 0x1, 0x3ff, 0x1, 0x80000001}, {0x8, 0x380000, 0x1ff, 0x9, 0xde8, 0xfffffff9}, {0xffff0820, 0x9, 0x8, 0x5, 0x9, 0x10001}, {0x401, 0x6cf7, 0x85, 0xffffe372, 0x9, 0x1}, {0xfd7, 0xe, 0x6d7, 0x80000001, 0x5, 0x1}, {0x80, 0x7, 0x9, 0x3, 0x3, 0x1}, {0x8, 0x0, 0x1, 0x100, 0x9, 0x9}, {0x0, 0x2bf, 0x1, 0x8, 0x2, 0xff}, {0x8, 0x9, 0x4, 0x80, 0x646c, 0xb}, {0x1, 0x80000000, 0xe7b, 0x800, 0x3, 0x3ff}, {0x1672, 0x5, 0x8, 0x2, 0x9, 0x2}, {0xffffffff, 0x8, 0x0, 0x2, 0x3, 0x2011}, {0x6, 0x6, 0x8, 0x4, 0x9ed, 0xffffff94}, {0x5, 0xd, 0x4, 0x8, 0x3, 0x4}, {0x33, 0x9, 0x6, 0x2, 0x1000, 0xe8}, {0x1, 0x7, 0x8, 0x100, 0x9, 0x5}, {0x1000, 0x9, 0xffffffff, 0x5, 0x3, 0xe}, {0x9, 0x9, 0x6, 0xfffffeff, 0x2, 0x4}, {0xad94, 0x5, 0x31b, 0x0, 0x7, 0xd}, {0x8, 0x6, 0x7, 0x6, 0x6, 0x401}, {0x9, 0x5, 0xb5e2, 0x7fff, 0xffff, 0xfffffffc}, {0x8, 0x84b, 0xfffffffc, 0xf3, 0x4, 0x1}, {0x80000000, 0x7, 0x1ee0, 0x4, 0x9, 0x2e}, {0x289e68d5, 0x6, 0x8, 0x7, 0x705, 0x1ff}, {0x9, 0x5, 0x3, 0x7f, 0x200, 0x9}, {0xf, 0x7, 0x3ff, 0x5, 0x5, 0x10000}, {0x5, 0x968, 0x2, 0xfff, 0x6, 0x80}, {0x8, 0x5, 0x1, 0xc1ca, 0x4, 0x3}, {0x2, 0x81, 0x3d3, 0x1000, 0x8, 0x9}, {0xd, 0xfff, 0x4, 0x2, 0x5, 0xc7b4}, {0x6, 0x4, 0x5, 0x753, 0x9, 0x1}, {0x6, 0x1c93, 0x39, 0xfffffffc, 0x3ff, 0x4}, {0x7, 0xd8, 0x6c5, 0x8, 0xd, 0x3}, {0x5, 0xd18, 0x10000, 0x3ff, 0x91, 0x5}], [{0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {}, {0x1}, {0x3}, {0x5}, {0x3}, {0x5}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x4}, {0x5}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x6, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {}, {}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0xacc8d0e1dbc58d9d}]}}]}, {0xb4, 0x6, "8b33b1465899619f119707accff50d943f5e57903ad285e31af99efe5f42233e20b82203cbc7c7feb766d4b3a8ef3e0ad6cda12c19e523a982f288decce42793cb1ffa9f4117cdc1be4e0e0e6aabf19fe839c9f33ae8dc0387f15681f8e40cef0186fba82af090f8ebaee91e6378e8418063852747db966707400ddda4db6c906004399d200cdcd6128439ea441a25294064f4f6552fd3d31312ae66c87f5ba653a05ad8ecb71063d7802f90066126eb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x26, 0x6, "8f997784b0ff6b3ee6a9f1e2de60acf77db475bc01146284cb0c0837023eb153785e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xb8, 0x5, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x180, 0x4, 0x0, 0x7, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10001}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xea}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe1}]}, {0x31, 0x6, "d60d9ef981b8b5e38be789573dcc89697c952c4cbadf0987230bf5f2f636e7f73e3a7beb087ef412a4c4dc264a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xdc, 0x16, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xdf, 0xfffffff9, 0x1, 0xe1, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x6, 0x3, 0x2, 0x726}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x5, 0x10, 0x4}, 0x289}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1c6d, 0x1, 0x0, 0xc06, 0x4}}}]}, {0x3c, 0x6, "bf5f527d3319b5a620a5523e087668ffd184b1c7f95eaf5087e90e2affeb24b11407bfb9af07cc2e5d0846237148adcf3ad0a8bbb6b5caea"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xec, 0x19, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0x4, 0x1, 0x80000000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffd1, 0x3ff, 0x10000000, 0x400, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xffff8001, 0x0, 0x985, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfff}]}, {0x56, 0x6, "aba875c14c32054b2cee3d7eeba68799b6d7ac47e0218c5d8bc07956c29ce662f934a7161a366acacac346b31eba51c244abd69bf46c78f25c491211675d5cb5f13129f37c135fca159008f9b33d0d42f0fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_ACT={0x168, 0x1, [@m_ctinfo={0x164, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x8001}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40db}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0xffff2388, 0x8, 0x746d, 0xe126c16}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1d0e}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x85b, 0x5, 0x28, 0x573a}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf}]}, {0xd5, 0x6, "96169ce920acca53eb24059f356cfce578af35560b829205e35aac3d1ce33872ce6552f6523e30f4f7aa9580128fd7a2e42d2c164ea40349b661137e525cbfaac5848502a856929adf6e51c5c85c7e6c3a1b55afc4794c45912a1c8054249dbccd3cff90fb9b5c7710c61e65958f244a81eb937ecc7fd054bbab4a265d665ff36453d3ff92ed224444ae663e49cc8f54d9893bc0fb4b29077d533dec13b180e0db384a89a8845dd5e5416f1949ea259a0c01232aa12f8784c28a0145620cbc387d337f2644f4608fade6a2512393e424e3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x3c8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x87c}}, @TCA_EMATCH_TREE_LIST={0x2a4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x1000, 0x2, 0x7}, {0x7, 0xa, 0x0, "62bc52a3f8c3f7c8879f"}}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4, 0x2}, {0x0, 0x5, 0x2}}}]}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xfffb, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_DATA={0x28, 0x5, "7b1a87c04d3efefff348e20fd94e6ee857694d609740a79cd714f9b2dbf0e9d2707ead8f"}]}}, @TCF_EM_IPT={0x60, 0x3, 0x0, 0x0, {{0xff, 0x9, 0x470}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "68e409cd1311c0fb9e7e19ad99b1b895969ea9bb55d46212a33b7be31bb4186069a54c127278a69cdca37334e085c232fb45829d6c8c"}]}}, @TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x200, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_META={0x90, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x3df3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0xf}, {0x7, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1}, {0x5, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="974b2cc63a61", @TCF_META_TYPE_VAR="f825", @TCF_META_TYPE_VAR="2da694", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="61d52e", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x31, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2b7970b45ff152", @TCF_META_TYPE_VAR="fdda4504e8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1fddbde2392624f887", @TCF_META_TYPE_VAR="dd64e298173db49b", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="0fe8ffeb6431b367", @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x8000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x10c, 0x2, 0x0, 0x0, {{0x7ff, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x41}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xd0, 0x5, "f4423f8fd5db9b77c92a8df46742fb0645e794eacbc2d8097843b18533557bd65c5e229d1eb0c1df1eba2685bfb35d39ac4771e4237ea66c7fa7f9711544606cec088daba34de517ab8be9e260fc869a79da07f4078e292d3938aeedc4177566b2b0a762a2f67a8226e581f3537c3699f6b891b6cf41152a4ef13a5e040c6cb6087b1599402dedfe0b52ccda6a3263cf84b1edba1140cebfdf00cddd51b69420b76926f2c5f203b404c49a59b479d5c1cde58c417d38a5d553da7d3819be040dd0176c2534902f8b07547116"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}]}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_META={0xcc, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0xb7}, {0x1, 0xdb, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="fa0368f756c90e04eab3", @TCF_META_TYPE_VAR="b5afb4b7e6"]}, @TCA_EM_META_LVALUE={0x34, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="b99c7d63d75123434e37", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="8fad96", @TCF_META_TYPE_VAR="b768d8b436", @TCF_META_TYPE_VAR="72b4f67620638c0ef668", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x40}, {0xd1b6, 0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x30, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d566", @TCF_META_TYPE_VAR="17a76f37cce5", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="0c9e", @TCF_META_TYPE_VAR="b6d759d07504b27c3677", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="aa5b909372d86944"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="0348ecf4c6c7", @TCF_META_TYPE_VAR="fb4be0", @TCF_META_TYPE_VAR="623e1a99", @TCF_META_TYPE_VAR="9ea6"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x800}, {0x4, 0x5, 0x2, 0x8}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffb}, {0xffffffffffffffff, 0x4, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x5b}, {0xd304, 0x7, 0x9, 0x7}}}]}]}]}}]}, 0x31f4}}, 0x0) 8m31.032956149s ago: executing program 1 (id=45): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 8m30.970313861s ago: executing program 1 (id=47): r0 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000700)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@nomblk_io_submit}, {@nogrpid}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r3, 0x0, 0x0) r4 = accept4$phonet_pipe(r3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10, 0x800) io_submit(r2, 0x5, &(0x7f00000023c0)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000000980)="a5876caf9b2cbf39b426c46957c1d4212b6e63b67e2529bc47a654824232fdda3d1be64b3cf93569b68bdbf41d90697f7942f8ee9b09b1349a019ec6650f12e689ace76d88dee3624371eadcd0ccf887d7e80a625926ca3e1ad242fa8df71e097972461db41902594755f0cba83b7bdb40e0ad7233c6b5d8fcab12835d126646c977b10b0833507d02838a26289e98a7642f10a2904861526cc2e9d85de1e572f032d4fb51540647db30ecf5d15f760b9e7a3ab1868a2058b0f7fbf36a6d92dbfbdf6a18ee2bbdac857f2c52", 0xcc, 0x5, 0x0, 0x2}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000ac0)="01f711e1e91d5a0b85fcf2aa323dc3c53c4cac1fedd769e699f9e464eec7ddbbcfba799f514be6fd44a03554d025d50aaa53a3ad59613f80c2e2cbc571d08058a642c1fb64551ebd647539cfbdd3f55e7a448cc81dd86c873ec2803326bccfdf9222435df9c533bad73ce858afacc9ef6bd1648e3f4cb68ecc6313c8dd5e9e82c1e028ed89fc7fa3175de9be34b265ef5b1f71d5b330a74874c3e2c167fa033a68", 0xa1, 0x5, 0x0, 0x1, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x67, r4, &(0x7f0000000c40)="48cf1d069386451227cc3a7c0e8fd55a9627c8178184ac0f793edd9b65a3ea8faf5cc132d933a0de65c417cd71d71cc44a866166ba1e3f95ed936787fe28f0c8349c92892836e297af5b0d256c1b9c75becfc79220ebd5ee0a3332b23396c526e65fe085c30475f901801700d5b21e194fcbbcb82dbd64d9f9617143021a7707c94a407156147a392a9f4c9f6a7269a79163d38e59c39338af6aba19444a893c852405f204031225c7c61766ee54571f28ea3e41e379b0da542c739f360fcd94f501fba100ce7b78fe44e32758d08108ab07c58e8eade7ae96", 0xd9, 0x6, 0x0, 0x2, r3}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x5, 0xbc, r3, &(0x7f0000000d80)="f56fef22c53d817059f968567b939e8d564b53a82cbb25ddb98cfb4b1f9ed836ad02eab2f0de6692816970b297b6f8f1d78b8cad28aa9317e9043f517ff7613c1cfb7d5d5a248bd170e872d19fed53ad75ba1cbedbdc4ffdf1e3775a686ba9ddb3ec381ea6a91cdb332ae347f8f91a237ba101e27cd5e55f175b8c9cfcc75d51561290f805dadc52b062480a3ce67e66cfa606102bd0b4cc85109c91409fc73a", 0xa0, 0xef, 0x0, 0x1, r3}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x6, 0xffc0, r1, &(0x7f0000001380)="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", 0x1000, 0x1, 0x0, 0x3, r3}]) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/vlan/vlan1\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4, @ANYRES64], 0x3, 0x240, &(0x7f0000000500)="$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") r6 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) chdir(&(0x7f0000000400)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000080)={r10, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r8, 0x0, 0x0, 0x48005) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000300)={r11}, &(0x7f0000000340)=0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r12, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000740)="0700000000000000a19e08f086dd0511c26b4768440000000000020141fd00190000000000000001fda1dbe21e0acd263744fc816218", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 8m30.494560887s ago: executing program 1 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) syz_open_dev$usbfs(0x0, 0x1ff, 0x42a741) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x6d, 0x5, 0x4009, 0x2, "9c2b45e4f5d79691f27b531f369941f2a0f2705a4bf9f627ddcd18809190aa8c"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 8m30.194383397s ago: executing program 1 (id=55): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r10, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r11 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x486, &(0x7f0000000780)="$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") openat(r11, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x15f) 8m30.147498219s ago: executing program 32 (id=55): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r10, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r11 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x486, &(0x7f0000000780)="$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") openat(r11, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x15f) 59.885680917s ago: executing program 0 (id=3612): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f0000001040)='syzkaller\x00', 0x68140, 0x0, 0x2, &(0x7f0000001100), &(0x7f0000001140)=0x2}) r3 = socket(0x2, 0x80805, 0x0) getpid() getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x1, 0x0, 0x4007) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r1], 0x1, 0x3d7, &(0x7f0000001700)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="d9588002", 0x4}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 59.734506922s ago: executing program 0 (id=3614): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x53, 0x14, 0xb8da, 0x9, 0x400, 0x2, 0x3, 'syz0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x1, 0x43a1bd76, 0x5, 0x8, 0xa48, 0x2, 0x0, 0x0, 0x0, 0x6e13}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) (fail_nth: 2) 59.48577921s ago: executing program 0 (id=3618): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fchown(0xffffffffffffffff, 0xee00, 0xee01) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000c00)=[{}, {}], 0x10, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x13, 0x5, &(0x7f0000000e40)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000e80)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000f40)=[0x1, 0x1], 0x0, 0x10, 0x82}, 0x94) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001040), 0xc2002, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x77, &(0x7f0000000000)=r9, 0x62) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001080)={0xffffffffffffffff, 0x69, 0x8}, 0xc) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0x0, 0x80000000, 0x10}, 0xc) r12 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r12, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x20, 0x27, &(0x7f0000000840)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70208000000182300000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186b0000000000000000000001010000cd823000fcffffff0159090005000000950000000000000018190000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000980)='GPL\x00', 0x3, 0xf9, &(0x7f00000009c0)=""/249, 0x40f00, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x8, 0x1000}, 0x10, r5, r6, 0x1, &(0x7f0000001100)=[r7, r9, r10, r11, r12], &(0x7f0000001140)=[{0x4, 0x1, 0xe, 0x3}], 0x10, 0x9}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) fstatfs(r4, &(0x7f0000001600)=""/4096) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c000280080001407f00"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x9, @empty, 0xe226, 0x1}, 0x20) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044) 59.427492712s ago: executing program 0 (id=3620): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000340)={[{@grpjquota}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@lazytime}, {@nomblk_io_submit}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x6}}]}, 0x1, 0x573, &(0x7f0000000ac0)="$eJzs3U1rXFUfAPD/nSR979MUSnkUkWAXVmonbeJLBRd1KVos6L6G5DaETDolM6lNLNgu7MaNFEHEgrhW9y6LX8BPUdBCkRIUcRO5kztJOplJ0mSSTJzfj97mnDl3cs5/7j2Hc+ZkmAC61kD2XyHiuYj4Mok4tqKsN/LCgcXz5p/cGs2OJBYWPvwjiSR/rH5+kv88nGf+HxG/fB5xprC63srs3ORIqZRO5/nB6tT1wcrs3NmJqZHxdDy9NjQ8fOH14aG33nyjbbG+cvmvbz548O6FL07Nf/3To+P3krgYR/KylXFswe2VmYEYyF+TvrjYcOL5NlTWSZLdbgCb0pP3877IxoBj0ZP3euC/77OIWAC6VKL/Q5eqzwPqa/s2rYP3jMfvLC6AVsffu/jeSByorY0OzSdPrYyy9W5/G+rP6vj59/v3siPa9z4EwLpu34mIc729DeNfT9TfG96Cc62L+uqJxjqMf7BzHmTzn1ebzX8KS/OfaDL/OdyG8SE21P8LjxpO2deGapdk87+3m85/lzat+nvy3NHav0iuTpTSbGz7X0Scjr79WX6t/ZwL8w8XWpWtnP9lR1Z/fS6Yt+NR7/6nnzM2Uh3ZSswrPb4T8XzT+W+ydP2TJtc/ez0ub7COk+n9F1uVrR//9lr4PuLlptd/eUcrWXt/crB2PwzW74rV/rx78tdW9e92/Nn1P7QY/9/5krAx/v5k5X5t5dnr+O7AP2mrss3e//uSj2rp+mBwc6RanT4fsS95f/XjQ8vPrefr52fxnz619vjX7P4/GBEfbzD+uyd+fGHz8WeSbdtezeIfW/v+b7j+z554+N6n324+/uz6v1ZLnc4f2cj4t9EGbuW1AwAAAAAAgE5TiIgjkRSKS+lCoVhc/PuOE3GoUCpXqmeulmeujUXts7L90Veo73QfW8wnVydKte3W/uV8OtSQH46I4xHxVc/BWr44Wi6N7XbwAAAAAAAAAAAAAAAAAAAA0CEOt/j8f+a3nt1uHbDtfOU3dK91+387vukJ6Ejr9P+XPtmphgA7zvwfupf+D91L/4fupf9D99L/oXvp/9C99H8AAAAAAAAAAAAAAAAAAAAAAAAAAABoq8uXLmXHwvyTW6NZfuzG7Mxk+cbZsbQyWZyaGS2OlqevF8fL5fFSWhwtT633+0rl8vXzQzFzc7CaVqqDldm5K1PlmWvVKxNTPxyNSPt2JCoAAAAAAAAAAAAAAAAAAADYWyqzc5MjpVI6LVFL7I+OaMYeSvR2RjO6MxGxbVXs9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMv+DQAA//9CbziK") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) clock_nanosleep(0x7, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0xfffffffc, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r1, 0x3) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) socket$kcm(0x29, 0x2, 0x0) unshare(0x22020400) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000000)={0x1, 0xa5, 0x9, {0x0, 0x6a2e}, 0x8, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) getitimer(0x1, &(0x7f0000001980)) 59.332571235s ago: executing program 0 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7, 0x4d, 0x2}, 0x7) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000000)="064bd118c73472d271adcf9595bbb4ac34bf4dfea387e7047b558135d81715c68d306a0fd14fac94086eafdba35ac640b728b9006d20bb9d7be43664d61e88e3d1aea99ee80d2864ea28ec92a7134829507d36717bd4269d83e89c3f3381220a2f45c7f72f74919a5ae81d39b234f41821bffbe628961a321f60b9bfd908ef38401a1bb9014082877e413c05b7d93f064be7659ad3d999fa46bff3c6613a273f52394bcebb68f13b0ecf70bc", 0xac}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r6 = gettid() sendmsg$nl_route_sched_retired(r2, &(0x7f0000000c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f00000007c0)=@newtclass={0x47c, 0x28, 0x502, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8331c785386a9cbf}, {0xf, 0x1}, {0xfff1, 0x5}}, [@c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xc, 0x5, 0xc, 0xf7, 0x401, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xdbe7, 0x3, 0xef94, 0xffffffff, 0x80000001, 0x2, 0x9, 0xf3d5, 0x8f6d, 0x3ff, 0x8002, 0x7fffffff, 0xff, 0x81, 0x1000, 0xb5, 0x483f, 0x9, 0xfffff902, 0xdc, 0xf3, 0x0, 0x6e469a27, 0x1, 0x7, 0x0, 0x4, 0x6, 0x8000, 0x9, 0xb590, 0x80100000, 0x2, 0x5, 0x7, 0x38000000, 0xfffffeff, 0xfffffff7, 0x6, 0x6, 0x400, 0x800, 0x10001, 0x3, 0x9, 0x7, 0x4, 0x8, 0x0, 0x0, 0xb, 0xac, 0x401, 0x1e920000, 0x3, 0x5, 0x10, 0x2, 0x8, 0x7fffffff, 0x3, 0x40, 0xef, 0x5, 0x7, 0x4, 0x7, 0x1, 0x5, 0x7, 0x0, 0x9, 0x8, 0x698, 0xafd, 0x3, 0x1000, 0x5, 0x200, 0x81, 0x7fffffff, 0x1000, 0x5b1e, 0xb5, 0x30d7, 0x2, 0x7, 0x80, 0xfffffffb, 0x42, 0x638, 0x4, 0x200, 0x4, 0x1, 0x7ff, 0x80000000, 0x80, 0x5, 0xfff, 0x8, 0x1000, 0x8a, 0x3c3f7354, 0x7, 0x6, 0x3, 0x7, 0x0, 0x7, 0xfbd, 0xfe42, 0x80000000, 0x1, 0x400, 0x8, 0xc0, 0x8, 0x6, 0x200, 0x3, 0x401, 0x7, 0x1, 0x1d8, 0x6, 0x3, 0xb4, 0x104, 0xc59, 0x0, 0x6, 0x8, 0x200, 0x2, 0x4, 0x4, 0x50, 0x7f, 0x6, 0x1, 0x2, 0x72, 0xd32, 0x99, 0x8f7, 0x3, 0x4, 0x100, 0x9, 0x1b926462, 0x81, 0x3, 0x60, 0x1, 0x6, 0x4, 0x1, 0x8, 0x7, 0x0, 0x1, 0x0, 0x80000001, 0x5, 0x29f0, 0x1, 0x6, 0xfffffffb, 0x1, 0xc3, 0x8, 0x4, 0xd, 0x400, 0x10005, 0x80, 0x81, 0xbb7, 0x7fffffff, 0x3e, 0x4, 0x8, 0xbeb, 0x2, 0x4, 0x5, 0xde6, 0x7fffffff, 0xfffffff6, 0x1, 0x3, 0xc9, 0x909c, 0x2, 0x621ba44f, 0x0, 0x7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x9, 0x10001, 0x2, 0x0, 0x8, 0x101, 0xe, 0x871, 0x4, 0x3, 0xb13, 0x8, 0x7, 0x2, 0x2, 0x7, 0xa5d, 0x7, 0x0, 0x10001, 0x6, 0x6, 0xcd5, 0xfffffff7, 0x8, 0xb994, 0xa, 0xcdc, 0xa, 0x7f, 0x10, 0x81, 0x3, 0x4, 0x5, 0x1, 0x9, 0x2, 0x5f, 0x7, 0x8, 0x9, 0x7, 0x7, 0x166a, 0x3ff, 0xfffffffa, 0x8, 0x9, 0x52b, 0x8, 0x2, 0x401]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x1, 0xa, 0x1, 0x8, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x8, 0x80, 0x6, 0xc, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x19, 0x2, 0xe, 0xfb, 0xac, 0x400, 0x94, 0x3ff8}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) tkill(r6, 0x4000024) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) write(r7, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000003f00"], 0x3c}}, 0x0) 58.28705156s ago: executing program 0 (id=3629): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x101100, 0x0, 0x100004, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x20b2880, &(0x7f0000002380)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES64, @ANYRES64=0x0], 0xff, 0x204, &(0x7f0000000300)="$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") utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10001, 0x7}) 43.2860393s ago: executing program 33 (id=3629): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x101100, 0x0, 0x100004, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x20b2880, &(0x7f0000002380)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRES64, @ANYRES64=0x0], 0xff, 0x204, &(0x7f0000000300)="$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") utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10001, 0x7}) 2.530547036s ago: executing program 6 (id=4057): unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.490972547s ago: executing program 6 (id=4059): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000001f11f007f000000c772000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300ed990000000000000000fc010000000000000000000000000500000014bb000000000000000000000052000004001000001e0200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 1.646106836s ago: executing program 6 (id=4067): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) 1.626789246s ago: executing program 6 (id=4069): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r11, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x15f) 1.522923499s ago: executing program 3 (id=4070): unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.51794237s ago: executing program 3 (id=4071): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000340)={[{@grpjquota}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@lazytime}, {@nomblk_io_submit}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x6}}]}, 0x1, 0x573, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) clock_nanosleep(0x7, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x8d) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0xfffffffc, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, r0, 0x3) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) socket$kcm(0x29, 0x2, 0x0) unshare(0x22020400) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x1, 0xa5, 0x9, {0x0, 0x6a2e}, 0x8, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) getitimer(0x1, &(0x7f0000001980)) 1.436788333s ago: executing program 2 (id=4073): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x103420, 0x3fff7f, 0x3, 0x4, 0x0, 0x200000, 0x4274, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000300)) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000100)=0xde89) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x47) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0xc00) r7 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa316edd60000000001c06fffe8000000000000000000000000000aa0000000000000028fc004001b3894d4fd5edb2aeb302b368bc704dd3c10adb9d60cfef9a302ef91187e7a24996e4279e98f8c9e56602218c17401a66e86e535a66ca30", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002010090780006fe04f989fe04f989"], 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="c01800002000010a00000000000000"], 0x18c0}, 0x1, 0x0, 0x0, 0x400c891}, 0x8000) 1.420933463s ago: executing program 5 (id=4074): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef00", 0x9, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x600}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.287772807s ago: executing program 5 (id=4075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r1 = socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x8424c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0x3}, &(0x7f00000002c0)=0x8) r3 = socket$inet6(0xa, 0x802, 0x0) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'geneve1\x00', {0x1}, 0xa}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket(0x27, 0x80000, 0x7e1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r10, &(0x7f0000002f40)=""/4098, 0x1002) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bind$unix(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e03, 0x8000, @loopback, 0x3}, 0x1c) 1.22089402s ago: executing program 6 (id=4077): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000001f11f007f000000c772000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300ed990000000000000000fc010000000000000000000000000500000014bb000000000000000000000052000004001000001e0200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 1.21173448s ago: executing program 3 (id=4078): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.180502531s ago: executing program 5 (id=4079): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)="f2316480fe4bc5323949b305c3f0ca35a940199af2212c7c99f7846286c4fd1b724f77d01db20434050e2600e58e47c55ac0590edc0499fd43c5fd2b7cff6b90f5b49b0dbcd30b3c72895e29ec6b7c991364e40c6831f63d21d8d8976c072b", 0x5f}], 0x1}, 0x40810) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x10000}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008090) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x52c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r11, &(0x7f0000008380), 0x400000000000174, 0x4008890) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000580)={0x0, 0x2}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000600)=@assoc_value={r12, 0x800000}, 0x8) recvmsg(r10, &(0x7f0000002d40)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2, &(0x7f0000002c80)=""/166, 0xa6}, 0x10102) 1.126396853s ago: executing program 2 (id=4081): unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.093093933s ago: executing program 2 (id=4082): socket$packet(0x11, 0x3, 0x300) unshare(0x2c020400) r0 = socket$inet6(0xa, 0x3, 0x40) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380), &(0x7f00000023c0), 0x10, 0x4e3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x477057e76ad645d4) socket(0x2b, 0x8080b, 0x404) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000004c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) close(0x3) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) close(0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) 1.035907296s ago: executing program 3 (id=4084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x5, 0x97d}, 0xa007, 0x32, 0x1c, 0x9, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = gettid() rt_tgsigqueueinfo(r3, r3, 0x1b, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0404802c000100000308000340000000760800024000000012090001006e797a3000000000090002f272797a3200000000140000001100010000000000010000000000000a266835f68dc47b697b4464c066663dd6efd8"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000009500"/21], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000240)={0x1, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 706.809877ms ago: executing program 3 (id=4087): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r11, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x15f) 483.380364ms ago: executing program 4 (id=4092): unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) syz_open_procfs(0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 462.028235ms ago: executing program 4 (id=4093): mlock2(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0xa800, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0xa}, 0x0, 0x800000000003, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000002c0)={0x80, 0xb, 0xc2fd, 0x7, 0x36, 0x3, 0x0}) ioctl$TCSETSF(r1, 0x5404, 0x0) 405.063867ms ago: executing program 3 (id=4094): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=@getlink={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5001}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="85c509086698f7a2e1e85014d0bd78ee6f192da873ef8c70ddfe6a790543a9451a07", 0x22}, {&(0x7f0000000240)="e606e276371cb6a36a2945061c7fc6fbc5d418a339dad3a5711082029fa0b71e8a3700fa426115bff5750b59e42c63751d7949c370e6c0c564f9f592b1a9ae303c68bf5645d065aa197e6c1898f5de7727955714a5392e4138d63dbf12bf956555c15e8e9b3847243f9cee2ed1ccdf0b8947a20921e00c55699ea79a01bd719500eb8069d1f687fe4bc1858c6f5b52d022097547c340188c46e683a7d48664af76427d9831e46ec76b75d404713ec3620993f770825f7fb16c", 0xb9}, {&(0x7f0000000300)="e88e564270b40edc69d11ca0f49057059043c48b3b51af4b4e616baadc594de8af044f0245eaa062f67cf4f6c282db3416421665c5f23437efbd5d1b33109815b1b22953354a1c0e59de97bba31eed6ca4f83f73a143ab28d02c2427c5a12518f527da841afff16b32bb692c214747b7e1873a8c264f4f7948fb7166d12b0d26d90cea828b9ba0ca1427ac430cfd788a91dc2d4721e50d57eb4fe7adfd3e0cdb141cb59013c5f4ae68c7b2e1154fdf31fab2817cfee6421d4453059f36c346678c62b89ecbe24977fb4a11fd", 0xcc}, {&(0x7f0000000500)="904e7c44d8128208d3a94d0241b787d9d56a1f4cac2370d1b59fa2504733a990cd563c996314236032578e5b55e493670a0f90d28fd83dbd6f6a750cae2c4c299ba83d55cbba", 0x46}], 0x4, &(0x7f00000005c0)=[{0xc0, 0x115, 0x12000000, "a1a177711b8e7f3c112086012e1b20330cb987b891340a866c3a50e8daed1769768c108736a119ddbf4d628e7f97515d9c3109bb57476cd24e9b1af104b3429cc7ee6510c33d92e43965e49340b594b24d3f83ffd71d22e15544cc0dc0eaedd384c83038c95ccb2fdebf9b2754817fd90efc799f348e2df0ed52177f0b1095134d045c4473a2f351d64345285bda177a642b692d893c6c23f297527fd2b2d00cb3ffe0857f5913fb1541"}], 0xc0}, 0x4004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="2512000000000200"/20, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 354.814209ms ago: executing program 4 (id=4095): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 306.5982ms ago: executing program 6 (id=4096): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x100000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x820a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$rds(0x15, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x11, 0x0, 0x4) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000002, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 259.713852ms ago: executing program 2 (id=4097): r0 = syz_clone3(&(0x7f0000000280)={0x10000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x2a}, &(0x7f0000000100)=""/1, 0x1, &(0x7f0000000140)=""/233, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) write$selinux_user(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x25) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000800000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000004c0)='\'&[\x00', 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) syz_open_procfs(r0, &(0x7f0000000300)='uid_map\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="10000005000000000400000000000000"], 0x10}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) 230.566752ms ago: executing program 4 (id=4098): r0 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0x6}}, {@dmode={'dmode', 0x3d, 0x7}}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x4}}, {@check_strict}, {@map_off}, {@check_strict}, {@showassoc}]}, 0x1, 0xa5a, &(0x7f0000001d00)="$eJzs3U9sXNdeB/DvHduJ4/dI8ppQStU2k5Tk+fUZx3ZeE6IsHok9SfzwH2Q7UiMWL32Ng9IYCg1IbYSUVKpYUYEEYgG7ihUsqNQFdIO6gx2sukBCXbGvWIWVn+7MOB7bMx47dewk/Xys8dx77u+e87sz987xzFzfE54ty4fWzC0v129bmf+opazp2j/uQsY8xS5NfP3pZ5+Ut48eZF968mbxr0l/kmrSm+SlpG98Ym52ev/mFd1JbiT5MimSlMHFVnO4keIv8/3V+S9T/H3Zbkf7tloz3SzznbbX+x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNivGJkZHRYl8mZ669VW1IqhuMT8zNFlle3rhkZZ2GL+qjfhdfdG03Kcpb+vtXhvp+6ejq4heTVE/klcbcK/UBydOfe9978fCFI6vrd8rmW9m/pWpTaeR25+2lpcX3O8ct32/E7WCCT48rtZnJ+dnJ6YtXatXJ+dnq+bNnR05fvTxfvTw5VZu/Pr9Qm66Oz9UuLszOVQfHf1QdPX/+TLU2fH322syVieGp2krhud8cGxk5W/3Z8O/WLs7Nz86c/tnw/PjVyampyZkr9ZhycRlzrtwRf2dyobpQuzhdrd66vbR4Zl1OPesf7DJotNuWlEFjXWJ6MzI2Njo6Njb6UXP07LGVgrNvnn/z3MhI78g62RDxhHZani4HOj/NO/jqDd9OpdH/592pTGYm1/JWqm1/xjORucxmusPyppX+/+Tp2qbttvb/zV6+t2Xxy+WvE3mtOdvf7P9/JcmFI72VR+u3z2X3fu7mw9zLnbydpSxlMe/veUa7+3MltcxkMvOZzWSmc7FeUm2WVHM+Z3M2I/l5ruZY5lPN5UxmKrXM53rms5BafY8az1xquZiFzGYu1QxmPD9KNaM5n/M5k2pqGc71zOZaZnIlE7lYr+VWbtcf9zOb5PgoaHQrQWObBK3vzMt9fXv9f+15/UuQLdv5F3F4TMvN/n/fuvKejaGD47uVFAAAALCjfv0/cvDoC//+P0mRV+ufy1+enKr9NMm/HPn43b3ODgAAANgJ9dP1Xinv+sqpV/vr7/9H9jotAAAAYAcV9f+xK5IM5FhjauU/oXwIAAAAAM+J+vf/r6U4tlrg/T8AAAA8ZzpdY3/1GrtdI4qhlcv/Vm827m82IxpzRZHJqdrw+OzUhdGcql9lIMmrG2vrSYq++r8fvJHjjajjA437gdUayzb7y6jR4QujeSMnmhsy+Hp59/pgm8ixRuQPG5E/bI3syZrIM2UkADzvTmzSH2+1/38jQ42IoZfrXX7vy2364BE9KwA8LR6NsfP/zSHN2vT/zYjXOvX/P9nk/X8Z8UJuHWucUjCcd/JelnIzQ2mecXCsXa37mqPrNU5DGOryacBA85SF/zpXydCGzwP6H21ra+xixjK0+onAL5qfVaytt1jJ4UxjaZtBEQDgWXRi0354a/3/UJf3/wMdTilcLnZ1UwGAprsf3muMYH/3w3vL95sTj0pWJwZaSu53iOk0sdfbCACspZcGAAAAAAAAAAAAAAAAAAAAAAAAAACAnbfmcv0HmoXrL+D/n6eSpaXFZFuX/e86kYf30zmmv12GjzdRyY7l/JRP9CTZq9Z/mm2v1d9mZ9vGxD8daK7+v3v/yL/dvzP76uNOZMcrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DugSHralVeS/UlGkpze/ayenAd7ncBOqe57rNWKh3mYD3Jwx/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiOa17/v5LG/fcaRemtJCeT3Ejye3ud4056uNcJPBlF95A/aASuXv+/kvRluUhv42lP0Tc+MTc7XVZV7C+Xf/3pZ5+Ut+51bxxVoaygbGHN4BLNFlpK+tau9YP6Wl8156oTl+o75qWFy1MT01fmfns18MXi80bV1Za1V/L9s5P/9lctxc2BEorPyy1tr9HuwMTi3Tt/8t4fVScu19ud2Njur61dr9is3S24vbQ4Vra0UHtr4U//8PYHLYteyPHk9cFkcO0W/n5569DS8fWP57psvyn+vDiYv82NHGzuMMVyUT6Oh+rbf+DW7aXF4XfeW7r5KKf7a3I6nGNJbib9bXL65/Y5Heu8b9b3ukpf2epIPaj8dbTLNm6qpcbRDo/rD+q7zED7bejQZrXL8dXlcW9mdKZtRn/9x0dyatvP9KkuLbZVfFP8d3E1X+XjlvE/KuXzfzJtj842VdQjW/aU1mVrDq9KI7K+5WOtC36+vs6ORyVPwF/kF/mtR89/peX1v/lc7c7rUUuL7Y+LZPvHxT8c2tCjrKr3SEfX9UjNV59O6zTzPNqI6pDnr+bHjTq38Yry42499hM6/v+uGMz/5YHxfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdfkfS0K68kJ5McTnKonK8my+tjHjxGe5WB4nHS3DGPk/Ozp+i4ocXDPMwHObjbGQEAAAAAAADwZFya+PrTzz4pb/Xv43vyG5UkP2l809+b5HDxN33jE3Oz010q6kturHyl37+9HG6Uv76/Ov9lOfdSl5X29vQBAHim/TIAAP//JS1j1w==") r1 = signalfd4(r0, &(0x7f0000000100)={[0x8000000000000]}, 0x8, 0x800) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) (async) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x12) 166.948385ms ago: executing program 5 (id=4099): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x34000) 153.408805ms ago: executing program 4 (id=4100): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5da, 0x4, @perf_config_ext={0x8, 0x830d}, 0x112308, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(0x0) read$char_usb(r0, &(0x7f00000001c0)=""/4068, 0xfe4) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 147.758656ms ago: executing program 5 (id=4101): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c"], 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000180)=0x1) 94.985957ms ago: executing program 2 (id=4102): setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000001c0), 0x4) 94.411077ms ago: executing program 4 (id=4103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000180)={0x0, 0x3bfdfa44, 0xb23, 0xfffffffd, 0x3, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5d2f, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0xfffffffffffffffe, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x80000001}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x8) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x710, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x200000000, 0x100000, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x8c, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0xa7, 0x0, 0x0, 0x5}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000007, 0x3057d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x10, 0x8000006, 0x6, 0x3, 0x4, 0x9, 0x0, 0x54db3a8c, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r2, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x100000000}}]}, 0x1, 0xbd7, &(0x7f0000002380)="$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") socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0x6}, 0xc18, 0x8001, 0xffffffff, 0x0, 0x6b6, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 41.392859ms ago: executing program 2 (id=4104): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$eJzs3V1v3FgZB/D/mfdMIVSAqlWVbU5TkFIRZj2T7VSjgITxeBLDzHhkTyCRkFaFJquokwJtkejctLmBRVq+AHd7wwUfYiUuEBf7LeAKpBUICbECISOfY89Lxp4kTZp22f8v2h3HfnzO8bHXzzpjH4OIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIggrKZhVAXaTnd7R6azmp7biX/JYma5Li2P23ri9rw682G9gAj/QamEN/TsN748DrkW/msFS/q3JZTCjxKGV65d3fhSLhOvP6fBLwJpBQok1/X46fDBvcFg79EpCs8itfjXETLpy3LxxKbddXzX6ZibtnR8VzbqdeOtrZYvW07b9nf9vt2Rlmdn+q4nV63bstporEu7sntrEWiabTueeffrNcOoy+8U9Y4GUPGtLafddrqbKiZcHMbcle//QAfYZkfK/YPB3vpEw54l9XEYVE3YisxkcBhUO6lPakatVq3WatX6ncadu4aRm5lhhIQxgpmICz9o6VPmYk/gROeQsZr/Mf4kgDZK6GIbO5CJPxaa8OCik7I8Euf/DOy59U7m/yUgTI5L+fHi61D5/4b+7UZa/k9pi4RUKyQtESnzz/aTVy2SeIynGOIB7mGAAfbw6ALKlpDL5y6hYEQ9ObufktcopcTP/9mEjS4c+HDhoAMTm/g8ZDRHooE66jDwDrbQgg+JFhy0YcPHLnz0YYdHVCGs2YaJPlx4kFiFhduQqKKBBtYhYaOCXbjYRhebaMLEv4Ig2MeB6vf1qD3PE7YCcVA1ZSOKyMXH3R5qc7Y2Lf//8JleO8r/BvP/Z5U+Dor646N5MUSvgSC6/j+j5ZfTGiIiIiIiIiJ6GYT6jl2ob+XfBBCg5bRtYyqm+MpaR0REREREREQXQSAoYglC35WPNyFmr/+JiIiIiIiI6NNNqGfsBICyuqlfjB+XOs0fAbKX0EQiIiIiIiIiOif15P+NAhCou/yXIU66/s9dbgOJiIiIiIiI6NzemxhjP5eNxtgN4q/1MwCW/1wUH/6tCC8vjno7XxGHZrjEPIxiZu4A6Leui8VooF71UfiooJdY9pKIapPAP+O/PoQ+3k8e6/95oAkhvGMNKGQnC0hpgMC1qxv1XPQb3sdNvcrNaLjb+8MM1BI9onC55bTtiuW2N6owzcVM397p/+zhwc8Bb7Sd+weDvcqPfjy4r9pyFM46OgwLfTbVnExyZ4zb8kSNt6CeuUga3XgBrbjKX3U7ZaHqNeLtz8I8zExWNG8H1BcAvZW/wIreZyuBji0PRwP/CmBZDf5QrWyEO2xq6728GLeienzLk3ZEypaXVCtu6Zhbq7f0R9wnYTkZUfpaFqhVZvfBVCtqk604uS/E34/1//xWQJTCvlgPW/H7sKBjrfj+h3rl9d5OPDzGaVoxcxQQEb0q++MspAYxnxljP04P8Unt9HkHOSA6y+ns/l76m3yCKH/E2f3JbwKdobJALvpuIrmWOK8gPKOvClVOQX9JkbuecEY3Kp8EQWAuljB5Rv9vEMQbZMzPblN5/SgIguNn9N+N34EUNXumFf8OgmCjqjLJr49l1Q/CFT5Izap+u5ZFCUU8OfyJGgA/9O7eu3sPa7X1uvG2YdypIa/+VyH6yIK5h4iIZpz8jh0VkZkTId7GTV3Gzft//aqemsp4X4xuKVDeAga4jzUsh9e44TVnYqll7OOb/9C3Iazpq1Zgpaw/y0N57epGuPYo9kDk1Bte1lKv6lQu1bHq9obaKPaPX4hXmc7U49j1S9gTREREl2clfpXPsTwMTOV/TOf/0lT+X8Oqjli9nnjdXZ64pXAtvjoeXdIPrxwlxlZPbvy3LrgziIiIPiNs72NR7v9SeJ7Te6faaFTN/pYtPdf6rvSc5qYtnW7f9qwts7tpy57n9l3Lbcueh6KzYPvS3+71XK8vW64ne67v7Kg3v8vo1e/R9/7we23b9G1pud2+afVl0/Et2dv+dtvxt2xPrez3bMtpOZbZd9yu9N1tz7IrUvq2PRHoNO1u32k54WRX9jynY3q78ntue7tjy6btW57T67u6wLgup9tyvY4qtoLgzC86JCIi+n/0+Onwwb3BYO/R8YmF8NJczzlCSszsRCGhQI4RRERE9JoZp+szrFR6iQ0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqIZJz/Sd8aJfNLDgsBozk8Xozl4jvEjhjPlCJy3PZ94f8iHNbzI6pmzVho/EjHMAkgNXhjNibt/MuboLJXiKvDC/fOXzwFX1BzoObkLPABmnx+9qJLjEYsTY76xrxemra4WJi4qjvZF7uL/cwgnHv52dpEItyIIgmD+6sXpPiyc/ngOO+tRYc4uWDjh+LnMsxARvQr/CwAA///SlDIY") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r11, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x15f) 0s ago: executing program 5 (id=4105): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) kernel console output (not intermixed with test programs): the MTU to 1532 would solve the problem. [ 501.203337][T16504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.215334][T16504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.222653][T16504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.249198][T16504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.290070][T16504] hsr_slave_0: entered promiscuous mode [ 501.296632][T16504] hsr_slave_1: entered promiscuous mode [ 501.303557][T16504] debugfs: 'hsr0' already exists in 'hsr' [ 501.311218][T16504] Cannot create hsr debugfs directory [ 501.447598][T16504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 501.457913][T16504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.466548][T16504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 501.480014][T16504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.489030][T16504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 501.499723][T16504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.508779][T16504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 501.521754][T16504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.626318][T16504] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.633428][T16504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.640700][T16504] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.647783][T16504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.869708][T16552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16552 comm=syz.4.3721 [ 501.921359][T13275] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.929346][T13275] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.984107][T16556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16556 comm=syz.4.3721 [ 502.008112][T16504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.034798][T16504] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.060153][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.067227][T13302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.095226][T13275] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.102397][T13275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.257071][T16567] vhci_hcd vhci_hcd.0: invalid port number 65 [ 502.275087][T16567] vhci_hcd vhci_hcd.0: invalid port number 65 [ 502.363488][T16571] loop2: detected capacity change from 0 to 512 [ 502.370675][T16571] vfat: Unknown parameter '' [ 502.408505][T16571] macvlan0: entered promiscuous mode [ 502.413969][T16571] macvlan0: entered allmulticast mode [ 502.420629][T16571] bond9: entered promiscuous mode [ 502.426216][T16571] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 502.436133][T16571] bond9: left promiscuous mode [ 502.459217][T16573] loop4: detected capacity change from 0 to 512 [ 502.466212][T16573] vfat: Unknown parameter '' [ 502.524630][T16573] macvlan0: entered promiscuous mode [ 502.530030][T16573] macvlan0: entered allmulticast mode [ 502.536414][T16573] bond7: entered promiscuous mode [ 502.542029][T16573] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 502.550806][T16573] bond7: left promiscuous mode [ 502.585264][T16577] loop2: detected capacity change from 0 to 1024 [ 502.604080][T16577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.637635][T16577] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 502.674646][T16580] loop4: detected capacity change from 0 to 1024 [ 502.689676][T16580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.713560][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.722206][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.732355][T16584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.736415][T16504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.740995][T16584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.760356][T16580] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 502.883615][T16597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16597 comm=syz.2.3732 [ 502.898627][T16597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16597 comm=syz.2.3732 [ 503.008676][T16504] veth0_vlan: entered promiscuous mode [ 503.018840][T16504] veth1_vlan: entered promiscuous mode [ 503.043092][T16504] veth0_macvtap: entered promiscuous mode [ 503.052301][T16504] veth1_macvtap: entered promiscuous mode [ 503.084497][T16504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.109221][T16504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.202753][T16612] loop4: detected capacity change from 0 to 764 [ 503.228942][T16612] gre0 speed is unknown, defaulting to 1000 [ 503.292280][T16612] xfrm0 speed is unknown, defaulting to 1000 [ 503.504268][T13302] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.551071][T13302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.612202][T13302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.809250][T13302] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.894541][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3737'. [ 503.935587][T16619] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3737'. [ 503.956360][ T28] audit: type=1400 audit(2000000008.350:16959): avc: denied { mount } for pid=16504 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 505.033388][ T3396] usb usb8-port1: unable to enumerate USB device [ 505.093931][T16624] atomic_op ffff88811d865128 conn xmit_atomic 0000000000000000 [ 505.155923][T16630] loop4: detected capacity change from 0 to 1024 [ 505.162808][T16630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.174391][T16635] netlink: 'syz.5.3741': attribute type 1 has an invalid length. [ 505.189466][T16630] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 505.202796][T16636] gre0 speed is unknown, defaulting to 1000 [ 505.359767][T16646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16646 comm=syz.5.3743 [ 505.413394][T16655] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16655 comm=syz.5.3743 [ 505.530467][T16636] xfrm0 speed is unknown, defaulting to 1000 [ 505.621776][T16652] loop3: detected capacity change from 0 to 1024 [ 505.638132][T16652] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 505.651756][T16652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 505.666374][T16636] loop6: detected capacity change from 0 to 512 [ 505.701312][T16662] loop5: detected capacity change from 0 to 128 [ 505.724447][T16636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.740946][T16662] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.759653][T16652] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3746: lblock 2 mapped to illegal pblock 2 (length 1) [ 505.778319][T16662] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 505.788921][T16652] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 505.797482][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 505.813875][ C0] EXT4-fs (loop3): initial error at time 2000000010: ext4_map_blocks:791: inode 3: block 2 [ 505.824511][ C0] EXT4-fs (loop3): last error at time 2000000010: ext4_map_blocks:791: inode 3: block 2 [ 505.904352][T16652] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 505.913217][T16652] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.3746: lblock 0 mapped to illegal pblock 48 (length 1) [ 505.928344][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.928421][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.931180][T16668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.938611][ T28] audit: type=1400 audit(2000000010.360:16960): avc: denied { write } for pid=16661 comm="syz.5.3748" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.954504][T16668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.002394][T16652] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 506.003745][T16652] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 506.045578][T14186] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.050769][T16652] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3746: Failed to acquire dquot type 0 [ 506.099485][T16652] loop3: lost filesystem error report for type 5 error -117 [ 506.110926][T16652] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 506.121054][T16652] loop3: lost filesystem error report for type 5 error -117 [ 506.121911][T16652] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.3746: mark_inode_dirty error [ 506.148335][T16652] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 506.148548][T16652] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 506.167804][T16652] EXT4-fs (loop3): 1 orphan inode deleted [ 506.173998][T16652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.191729][ T12] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.211365][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 506.237323][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 506.248922][T16652] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm syz.3.3746: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.266706][T16652] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 506.317782][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.401757][T16682] loop6: detected capacity change from 0 to 1024 [ 506.422642][T16682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.429810][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.451569][T16682] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 506.454590][T13900] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 506.490053][T13900] loop3: lost filesystem error report for type 5 error -117 [ 506.490215][T13900] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 506.536131][T13900] loop3: lost filesystem error report for type 5 error -117 [ 506.536368][T13900] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 506.579451][T13900] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 506.606742][T16687] vfat: Unknown parameter '' [ 506.624088][T16687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3756'. [ 506.722751][T16703] netlink: 'syz.5.3762': attribute type 1 has an invalid length. [ 506.726166][T16701] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.788658][T16709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16709 comm=syz.6.3759 [ 506.801430][T16701] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.840137][T16697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16697 comm=syz.6.3759 [ 506.847564][T16706] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 506.863217][ T28] audit: type=1400 audit(2000000011.260:16961): avc: denied { write } for pid=16700 comm="syz.3.3761" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.903412][T16706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 506.929303][T16706] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.3763: lblock 2 mapped to illegal pblock 2 (length 1) [ 506.948726][T16706] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 506.950610][T16706] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 506.960189][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 506.960300][ C0] EXT4-fs (loop2): initial error at time 2000000011: ext4_map_blocks:791: inode 3: block 2 [ 506.960598][ C0] EXT4-fs (loop2): last error at time 2000000011: ext4_map_blocks:791: inode 3: block 2 [ 506.996134][T16706] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.3763: lblock 0 mapped to illegal pblock 48 (length 1) [ 507.010211][T16706] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 507.020439][T16706] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 507.041457][T16706] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3763: Failed to acquire dquot type 0 [ 507.054681][T16706] loop2: lost filesystem error report for type 5 error -117 [ 507.085985][T16706] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 507.109996][T16706] loop2: lost filesystem error report for type 5 error -117 [ 507.110915][T16706] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.3763: mark_inode_dirty error [ 507.136478][T16706] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 507.160656][T16706] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 507.180457][T16706] EXT4-fs (loop2): 1 orphan inode deleted [ 507.193189][T16706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.206138][T16718] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 507.223589][T16706] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm syz.2.3763: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.239921][T16706] Quota error (device loop2): find_next_id: Can't read quota tree block 1 [ 507.250050][ T12] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.264873][T16718] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 507.283185][T16718] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3765: lblock 2 mapped to illegal pblock 2 (length 1) [ 507.297955][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 507.306404][T16718] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 507.307460][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 507.329037][T16718] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3765: lblock 0 mapped to illegal pblock 48 (length 1) [ 507.343675][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 507.343896][ C1] EXT4-fs (loop6): initial error at time 2000000011: ext4_map_blocks:791: inode 3: block 2 [ 507.344276][ C1] EXT4-fs (loop6): last error at time 2000000011: ext4_map_blocks:791: inode 3: block 2 [ 507.376373][T13900] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.396613][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.406343][T14389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 507.419643][T14389] loop2: lost filesystem error report for type 5 error -117 [ 507.419734][T14389] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 507.429508][T16718] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 507.436945][T14389] loop2: lost filesystem error report for type 5 error -117 [ 507.437068][T14389] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 507.437092][T14389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 507.482391][T16718] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3765: Failed to acquire dquot type 0 [ 507.538052][T16718] loop6: lost filesystem error report for type 5 error -117 [ 507.587967][T16718] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 507.610707][T16718] loop6: lost filesystem error report for type 5 error -117 [ 507.611340][T16718] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3765: mark_inode_dirty error [ 507.691070][T16718] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 507.725927][T16718] EXT4-fs (loop6): 1 orphan inode deleted [ 507.738580][T13303] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.801510][T16718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.926285][T16729] set_capacity_and_notify: 4 callbacks suppressed [ 507.926351][T16729] loop5: detected capacity change from 0 to 1024 [ 507.939703][T13303] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:59: Failed to release dquot type 0 [ 507.955769][T16718] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3765: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.973727][T16729] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.013778][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.031247][T16729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 508.039886][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 508.068119][T16729] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.3769: lblock 2 mapped to illegal pblock 2 (length 1) [ 508.167364][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 508.173821][ C0] EXT4-fs (loop5): initial error at time 2000000012: ext4_map_blocks:791: inode 3: block 2 [ 508.183843][ C0] EXT4-fs (loop5): last error at time 2000000012: ext4_map_blocks:791: inode 3: block 2 [ 508.197125][T16729] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.3769: lblock 0 mapped to illegal pblock 48 (length 1) [ 508.236542][T16729] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3769: Failed to acquire dquot type 0 [ 508.250211][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 508.284574][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 508.303921][T16734] loop2: detected capacity change from 0 to 512 [ 508.310415][T16734] vfat: Unknown parameter '' [ 508.316572][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3771'. [ 508.333982][T16729] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 508.358304][T16729] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.3769: mark_inode_dirty error [ 508.401771][T16729] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 508.431974][T16729] EXT4-fs (loop5): 1 orphan inode deleted [ 508.447596][ T12] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 508.627844][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 508.641680][T16729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.660933][T16744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16744 comm=syz.2.3774 [ 508.677294][T16729] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm syz.5.3769: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.199007][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.248489][T14186] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 509.277441][T16753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16753 comm=syz.2.3777 [ 509.484430][T14186] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 509.517335][T14186] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 510.148097][T16766] loop5: detected capacity change from 0 to 128 [ 510.191999][T16766] ext4: Unknown parameter 'obj_type' [ 510.234242][T16766] loop5: detected capacity change from 0 to 512 [ 510.272608][T16766] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 510.299835][T16766] EXT4-fs (loop5): 1 truncate cleaned up [ 510.305912][T16766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.318059][T16768] loop4: detected capacity change from 0 to 512 [ 510.324499][T16768] vfat: Unknown parameter '' [ 510.341936][T16768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3782'. [ 510.551074][T16782] netlink: 'syz.4.3786': attribute type 4 has an invalid length. [ 510.563018][T16780] gre0 speed is unknown, defaulting to 1000 [ 510.744812][T16780] xfrm0 speed is unknown, defaulting to 1000 [ 510.799146][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.063527][T16780] loop6: detected capacity change from 0 to 512 [ 511.081488][T16796] loop5: detected capacity change from 0 to 512 [ 511.088856][T16796] vfat: Unknown parameter '' [ 511.121927][T16796] macvlan2: entered promiscuous mode [ 511.127394][T16796] macvlan2: entered allmulticast mode [ 511.133941][T16796] bond9: entered promiscuous mode [ 511.139607][T16796] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 511.153390][T16796] bond9: left promiscuous mode [ 511.180350][T16780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.238526][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.239387][T16801] loop5: detected capacity change from 0 to 128 [ 511.254129][T16801] ext4: Unknown parameter 'obj_type' [ 511.307538][T16801] loop5: detected capacity change from 0 to 512 [ 511.333544][T16801] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 511.343114][T16801] EXT4-fs (loop5): 1 truncate cleaned up [ 511.349583][T16801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.364553][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 511.364571][ T28] audit: type=1400 audit(2000000015.790:16965): avc: denied { write } for pid=16800 comm="syz.5.3791" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.422642][T16808] loop2: detected capacity change from 0 to 512 [ 511.429176][ T28] audit: type=1400 audit(2000000015.840:16966): avc: denied { write } for pid=16800 comm="syz.5.3791" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.451546][T16808] vfat: Unknown parameter '' [ 511.458356][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3794'. [ 511.558202][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3793'. [ 511.577469][T16815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.599873][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.614420][T16820] FAULT_INJECTION: forcing a failure. [ 511.614420][T16820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.634904][T16815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.641320][T16822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16822 comm=syz.5.3798 [ 511.643396][T16820] CPU: 0 UID: 0 PID: 16820 Comm: syz.4.3799 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 511.643428][T16820] Tainted: [W]=WARN [ 511.643435][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.643447][T16820] Call Trace: [ 511.643476][T16820] [ 511.643483][T16820] __dump_stack+0x1d/0x30 [ 511.643508][T16820] dump_stack_lvl+0x95/0xd0 [ 511.643528][T16820] dump_stack+0x15/0x1b [ 511.643582][T16820] should_fail_ex+0x263/0x280 [ 511.643603][T16820] should_fail+0xb/0x20 [ 511.643620][T16820] should_fail_usercopy+0x1a/0x20 [ 511.643641][T16820] _copy_to_user+0x20/0xa0 [ 511.643681][T16820] simple_read_from_buffer+0xb5/0x130 [ 511.643744][T16820] proc_fail_nth_read+0x10e/0x150 [ 511.643817][T16820] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.643842][T16820] vfs_read+0x1ab/0x7f0 [ 511.643867][T16820] ? __rcu_read_unlock+0x4e/0x70 [ 511.643887][T16820] ? __fget_files+0x184/0x1c0 [ 511.643960][T16820] ? mutex_lock+0x57/0x90 [ 511.643984][T16820] ksys_read+0xdc/0x1a0 [ 511.644009][T16820] __x64_sys_read+0x40/0x50 [ 511.644087][T16820] x64_sys_call+0x2886/0x3020 [ 511.644131][T16820] do_syscall_64+0x12c/0x3b0 [ 511.644178][T16820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.644199][T16820] RIP: 0033:0x7f75a40ad68e [ 511.644214][T16820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 511.644231][T16820] RSP: 002b:00007f75a2b46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.644284][T16820] RAX: ffffffffffffffda RBX: 00007f75a2b476c0 RCX: 00007f75a40ad68e [ 511.644299][T16820] RDX: 000000000000000f RSI: 00007f75a2b470a0 RDI: 0000000000000004 [ 511.644376][T16820] RBP: 00007f75a2b47090 R08: 0000000000000000 R09: 0000000000000000 [ 511.644389][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.644401][T16820] R13: 00007f75a4366038 R14: 00007f75a4365fa0 R15: 00007fffd1740738 [ 511.644419][T16820] [ 511.850399][T16822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16822 comm=syz.5.3798 [ 511.975629][T16829] macvlan0: entered promiscuous mode [ 511.980994][T16829] macvlan0: entered allmulticast mode [ 512.088663][T16829] bond10: entered promiscuous mode [ 512.099239][T16829] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 512.110214][T16829] bond10: left promiscuous mode [ 512.135149][T16824] gre0 speed is unknown, defaulting to 1000 [ 512.293271][T16839] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 512.415151][T16824] xfrm0 speed is unknown, defaulting to 1000 [ 512.421548][T16835] gre0 speed is unknown, defaulting to 1000 [ 512.439004][T16839] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3803: bg 0: block 104: invalid block bitmap [ 512.478854][T16839] fserror_report: 8 callbacks suppressed [ 512.478867][T16839] loop2: lost filesystem error report for type 5 error -117 [ 512.502779][T16839] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 512.510408][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 512.510425][ C1] EXT4-fs (loop2): initial error at time 2000000016: ext4_validate_block_bitmap:432 [ 512.510473][ C1] EXT4-fs (loop2): last error at time 2000000016: ext4_validate_block_bitmap:432 [ 512.659077][T16839] loop2: lost filesystem error report for type 5 error -117 [ 512.659199][T16839] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3803: invalid indirect mapped block 1 (level 1) [ 512.695930][T16827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.717380][T16839] fserror_report: 8 callbacks suppressed [ 512.717394][T16839] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 512.728366][T16835] xfrm0 speed is unknown, defaulting to 1000 [ 512.748163][T16839] EXT4-fs (loop2): 1 truncate cleaned up [ 512.766048][T16839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.901433][T16843] tipc: Enabling of bearer rejected, already enabled [ 513.028682][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.045001][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.098499][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 513.147827][T16848] netlink: 'syz.2.3806': attribute type 21 has an invalid length. [ 513.186405][T16850] set_capacity_and_notify: 2 callbacks suppressed [ 513.186524][T16850] loop4: detected capacity change from 0 to 128 [ 513.204017][T16848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3806'. [ 513.284738][T16850] ext4: Unknown parameter 'obj_type' [ 513.340925][T16852] loop2: detected capacity change from 0 to 512 [ 513.348049][T16852] vfat: Unknown parameter '' [ 513.373209][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3807'. [ 513.484380][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.499613][T16862] netlink: 'syz.2.3812': attribute type 1 has an invalid length. [ 513.509647][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.526838][T16862] bond11: entered promiscuous mode [ 513.528883][T16860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.532126][T16862] bond11: entered allmulticast mode [ 513.546229][T16862] 8021q: adding VLAN 0 to HW filter on device bond11 [ 513.554692][T16860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.570399][T16862] loop2: detected capacity change from 0 to 512 [ 513.633509][T16862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.653555][T16865] macvlan2: entered promiscuous mode [ 513.659294][T16862] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.670341][T16865] macvlan2: entered allmulticast mode [ 513.677673][T16865] bond10: entered promiscuous mode [ 513.685680][ T28] audit: type=1400 audit(2000000018.100:16967): avc: denied { write } for pid=16861 comm="syz.2.3812" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.710158][T16865] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 513.722810][T16865] bond10: left promiscuous mode [ 513.745896][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.817110][T16872] loop4: detected capacity change from 0 to 512 [ 513.847831][T16872] EXT4-fs (loop4): 1 truncate cleaned up [ 513.854107][T16872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.858039][T16878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16878 comm=syz.6.3817 [ 513.869493][ T28] audit: type=1400 audit(2000000018.280:16968): avc: denied { write } for pid=16871 comm="syz.4.3815" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.887204][T16872] EXT4-fs (loop4): shut down requested (2) [ 513.912374][T16872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3815'. [ 513.936389][T16881] loop5: detected capacity change from 0 to 512 [ 513.943486][T16881] vfat: Unknown parameter '' [ 513.954916][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3818'. [ 513.987480][T16883] loop6: detected capacity change from 0 to 1024 [ 513.996269][T16883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.017480][T16883] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 514.077575][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.115622][ T28] audit: type=1400 audit(2000000018.530:16969): avc: denied { setopt } for pid=16888 comm="syz.4.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 514.171836][T16894] loop6: detected capacity change from 0 to 1024 [ 514.188547][T16899] loop4: detected capacity change from 0 to 128 [ 514.204521][T16899] ext4: Unknown parameter 'obj_type' [ 514.216054][T16894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.231271][T16899] loop4: detected capacity change from 0 to 512 [ 514.247693][T16894] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 514.270388][T16899] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 514.294460][T16899] EXT4-fs (loop4): 1 truncate cleaned up [ 514.309363][T13591] hid_parser_main: 7 callbacks suppressed [ 514.309377][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.316170][T16899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.472124][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.479815][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.487528][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.494990][ T28] audit: type=1400 audit(2000000018.910:16970): avc: denied { write } for pid=16898 comm="syz.4.3825" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.516995][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.524457][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.531865][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.539303][ T28] audit: type=1400 audit(2000000018.960:16971): avc: denied { write } for pid=16898 comm="syz.4.3825" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.569826][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.590208][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.609282][T13591] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 514.621289][T13591] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz0] on syz0 [ 514.716455][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3827'. [ 514.733198][T16915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3828'. [ 514.807488][T16917] macvlan0: entered promiscuous mode [ 514.815491][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.824653][T16917] macvlan0: entered allmulticast mode [ 514.831989][T16917] bond12: entered promiscuous mode [ 514.848012][T16917] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 514.860647][T16917] bond12: left promiscuous mode [ 514.880289][T16920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16920 comm=syz.4.3830 [ 514.949175][T16922] loop6: detected capacity change from 0 to 512 [ 514.956297][T16922] vfat: Unknown parameter '' [ 515.008339][T16926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.026564][T16930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.049588][T16926] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 515.054657][T16930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.090946][T16930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.107954][T16930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.185904][T16944] ext4: Unknown parameter 'obj_type' [ 515.198893][T16944] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 515.229243][T16944] EXT4-fs (loop6): 1 truncate cleaned up [ 515.239718][T16944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.270129][ T28] audit: type=1400 audit(2000000019.690:16972): avc: denied { write } for pid=16943 comm="syz.6.3840" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.304230][ T28] audit: type=1400 audit(2000000019.690:16973): avc: denied { write } for pid=16943 comm="syz.6.3840" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.335206][T16948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.371974][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.381895][T16948] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 515.459062][T16951] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 515.483185][T16951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 515.502204][T16951] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3842: lblock 2 mapped to illegal pblock 2 (length 1) [ 515.516631][T16951] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 515.517426][T16951] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 515.535338][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 515.535538][ C1] EXT4-fs (loop6): initial error at time 2000000019: ext4_map_blocks:791: inode 3: block 2 [ 515.535908][ C1] EXT4-fs (loop6): last error at time 2000000019: ext4_map_blocks:791: inode 3: block 2 [ 515.567837][T16951] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3842: lblock 0 mapped to illegal pblock 48 (length 1) [ 515.575818][T16956] macvlan2: entered promiscuous mode [ 515.582677][T16951] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 515.588283][T16956] macvlan2: entered allmulticast mode [ 515.604257][T16956] bond8: entered promiscuous mode [ 515.609894][T16951] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3842: Failed to acquire dquot type 0 [ 515.621702][T16951] loop6: lost filesystem error report for type 5 error -117 [ 515.635078][T16956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 515.643990][T16951] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 515.654575][T16951] loop6: lost filesystem error report for type 5 error -117 [ 515.655410][T16951] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3842: mark_inode_dirty error [ 515.674953][T16956] bond8: left promiscuous mode [ 515.680077][T16951] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 515.683182][T16951] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 515.703797][T16951] EXT4-fs (loop6): 1 orphan inode deleted [ 515.713241][T16951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.726281][T13302] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 515.769584][T13302] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:58: Failed to release dquot type 0 [ 515.781264][T16951] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3842: lblock 1 mapped to illegal pblock 1 (length 1) [ 515.800832][T16958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16958 comm=syz.2.3844 [ 515.886956][T13303] Bluetooth: hci0: Frame reassembly failed (-84) [ 515.909201][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.926923][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 515.941508][T16504] loop6: lost filesystem error report for type 5 error -117 [ 515.944255][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 515.961662][T16504] loop6: lost filesystem error report for type 5 error -117 [ 515.961944][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 515.981837][T16504] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 515.995450][T16965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.019051][T16965] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 516.082835][T16967] atomic_op ffff88813332d928 conn xmit_atomic 0000000000000000 [ 516.552493][T16985] __nla_validate_parse: 1 callbacks suppressed [ 516.552511][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 516.570420][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3852'. [ 516.583345][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 516.595134][T16988] ext4: Unknown parameter 'obj_type' [ 516.699954][T16991] ext4: Unknown parameter 'obj_type' [ 516.745313][T16991] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 516.755698][T16991] EXT4-fs (loop3): 1 truncate cleaned up [ 516.762941][T16991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.778041][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 516.778054][ T28] audit: type=1400 audit(2000000021.200:16974): avc: denied { write } for pid=16990 comm="syz.3.3854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.810298][ T28] audit: type=1400 audit(2000000021.210:16975): avc: denied { write } for pid=16990 comm="syz.3.3854" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.833766][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.854074][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.862632][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.873171][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.881790][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.108065][T16998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16998 comm=syz.4.3857 [ 517.224643][T17000] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.245960][T17000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 517.279407][T17000] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3858: lblock 2 mapped to illegal pblock 2 (length 1) [ 517.294231][T17000] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 517.300702][T17000] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 517.310320][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 517.310359][ C1] EXT4-fs (loop6): initial error at time 2000000021: ext4_map_blocks:791: inode 3: block 2 [ 517.310901][ C1] EXT4-fs (loop6): last error at time 2000000021: ext4_map_blocks:791: inode 3: block 2 [ 517.354166][T17000] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3858: lblock 0 mapped to illegal pblock 48 (length 1) [ 517.370124][T17000] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 517.371079][T17000] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 517.392366][T17000] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3858: Failed to acquire dquot type 0 [ 517.404852][T17000] loop6: lost filesystem error report for type 5 error -117 [ 517.417752][T17000] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 517.427130][T17000] loop6: lost filesystem error report for type 5 error -117 [ 517.427229][T17000] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3858: mark_inode_dirty error [ 517.445777][T17000] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 517.446341][T17000] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 517.466202][T17000] EXT4-fs (loop6): 1 orphan inode deleted [ 517.474407][T13275] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 517.490000][T13275] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 517.490095][T13275] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 517.492669][T17000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.499180][T13275] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:31: Failed to release dquot type 0 [ 517.499201][T13275] loop6: lost filesystem error report for type 5 error -117 [ 517.511793][T17011] program syz.3.3862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.534253][T17000] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3858: lblock 1 mapped to illegal pblock 1 (length 1) [ 517.553998][T17011] EXT4-fs: Ignoring removed oldalloc option [ 517.571098][T17011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 517.624651][T17011] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3862: invalid indirect mapped block 83886080 (level 1) [ 517.638564][T17011] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 517.638921][T17011] EXT4-fs (loop3): Remounting filesystem read-only [ 517.654667][T17011] EXT4-fs (loop3): 1 orphan inode deleted [ 517.660404][T17011] EXT4-fs (loop3): 1 truncate cleaned up [ 517.666934][T17011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.681671][T17011] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.723480][T17000] Quota error (device loop6): find_next_id: Can't read quota tree block 1 [ 517.810645][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.820116][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 517.832880][T16504] loop6: lost filesystem error report for type 5 error -117 [ 517.833006][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 517.849728][T16504] loop6: lost filesystem error report for type 5 error -117 [ 517.849862][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 517.868946][T16504] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 517.947500][T12635] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 517.967106][T17016] bridge0: port 3(macsec1) entered blocking state [ 517.974221][T17016] bridge0: port 3(macsec1) entered disabled state [ 517.981264][T17016] macsec1: entered allmulticast mode [ 517.986794][T17016] bridge0: entered allmulticast mode [ 517.993561][T17016] macsec1: left allmulticast mode [ 517.999950][T17016] bridge0: left allmulticast mode [ 518.623329][T17018] bridge0: port 3(macsec1) entered blocking state [ 518.640536][T17026] netlink: 'syz.3.3866': attribute type 4 has an invalid length. [ 518.663614][T17018] bridge0: port 3(macsec1) entered disabled state [ 518.686771][T17018] macsec1: entered allmulticast mode [ 518.705901][T17018] bridge0: entered allmulticast mode [ 518.715824][T17018] bridge0: entered promiscuous mode [ 518.725084][T17034] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 518.731595][T17034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.748882][T17018] macsec1: left allmulticast mode [ 518.760666][T17018] bridge0: left allmulticast mode [ 518.772312][T17034] vhci_hcd vhci_hcd.0: Device attached [ 518.778471][T13591] bridge0: left promiscuous mode [ 518.791591][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3867'. [ 518.802155][T17041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17041 comm=syz.2.3870 [ 519.021169][T17049] set_capacity_and_notify: 11 callbacks suppressed [ 519.021264][T17049] loop6: detected capacity change from 0 to 1024 [ 519.088408][T17055] loop2: detected capacity change from 0 to 1024 [ 519.104038][T17049] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 519.134814][T17055] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 519.135208][T17059] loop5: detected capacity change from 0 to 1024 [ 519.158013][T17049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 519.182190][T17049] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3873: lblock 2 mapped to illegal pblock 2 (length 1) [ 519.182974][T17055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 519.200671][ T3375] usb 7-1: new low-speed USB device number 10 using vhci_hcd [ 519.212908][T17059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 519.224183][T17049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.224777][T17049] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 519.241930][T17049] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3873: lblock 0 mapped to illegal pblock 48 (length 1) [ 519.253903][T17055] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.3876: lblock 2 mapped to illegal pblock 2 (length 1) [ 519.256037][T17049] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.270410][T17049] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 519.270526][T17059] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 519.279421][T17049] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3873: Failed to acquire dquot type 0 [ 519.279445][T17049] loop6: lost filesystem error report for type 5 error -117 [ 519.302073][T17055] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.307781][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 519.308133][ C0] EXT4-fs (loop6): initial error at time 2000000023: ext4_map_blocks:791: inode 3: block 2 [ 519.309303][ C0] EXT4-fs (loop6): last error at time 2000000023: ext4_map_blocks:791: inode 3: block 48 [ 519.361357][T17034] loop3: detected capacity change from 0 to 764 [ 519.371714][T17034] iso9660: Unknown parameter 'ÿÿÿÿÿÿ18446744073709551615 ' [ 519.411228][T17049] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 519.421868][T17049] loop6: lost filesystem error report for type 5 error -117 [ 519.457272][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 519.471029][ C0] EXT4-fs (loop2): initial error at time 2000000023: ext4_map_blocks:791: inode 3: block 2 [ 519.481068][ C0] EXT4-fs (loop2): last error at time 2000000023: ext4_map_blocks:791: inode 3: block 2 [ 519.491792][T17049] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3873: mark_inode_dirty error [ 519.492003][T17055] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 519.512631][T17049] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.516381][T17049] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 519.531326][T17055] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.3876: lblock 0 mapped to illegal pblock 48 (length 1) [ 519.554254][T17049] EXT4-fs (loop6): 1 orphan inode deleted [ 519.582382][T17049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.607513][T17055] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.608279][T17055] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 519.632879][T17034] gre0 speed is unknown, defaulting to 1000 [ 519.638932][T17035] vhci_hcd: connection reset by peer [ 519.644780][T17055] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.3876: Failed to acquire dquot type 0 [ 519.656806][T13302] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.673294][T13302] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:58: Failed to release dquot type 0 [ 519.673388][T11565] vhci_hcd vhci_hcd.3: stop threads [ 519.690087][T17055] loop2: lost filesystem error report for type 5 error -117 [ 519.700607][T17055] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 519.717609][T17034] xfrm0 speed is unknown, defaulting to 1000 [ 519.728004][T11565] vhci_hcd vhci_hcd.3: release socket [ 519.734542][T17049] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3873: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.745363][T11565] vhci_hcd vhci_hcd.3: disconnect device [ 519.761956][T17071] netlink: 'syz.5.3880': attribute type 4 has an invalid length. [ 519.770094][T17055] loop2: lost filesystem error report for type 5 error -117 [ 519.771393][T17055] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.3876: mark_inode_dirty error [ 519.818218][T17055] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 519.819249][T17055] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 519.847105][T17055] EXT4-fs (loop2): 1 orphan inode deleted [ 519.853393][T17055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.867525][T17073] xt_hashlimit: size too large, truncated to 1048576 [ 519.874239][ T12] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.899284][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 0 [ 519.900424][T17055] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm syz.2.3876: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.930845][T17077] loop4: detected capacity change from 0 to 764 [ 519.932978][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.949438][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 519.972357][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3882'. [ 519.986333][T16504] loop6: lost filesystem error report for type 5 error -117 [ 519.988416][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 519.995708][T16504] loop6: lost filesystem error report for type 5 error -117 [ 520.015620][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 520.034074][T16504] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 520.035853][T17075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.045962][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.061556][T14389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 520.074309][T14389] loop2: lost filesystem error report for type 5 error -117 [ 520.080286][T14389] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 520.089196][T17077] rock: directory entry would overflow storage [ 520.097662][T14389] loop2: lost filesystem error report for type 5 error -117 [ 520.103360][T14389] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 520.154083][T14389] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 520.157741][T17077] rock: sig=0x4654, size=5, remaining=4 [ 520.343771][T17089] loop5: detected capacity change from 0 to 128 [ 520.356371][T17089] ext4: Unknown parameter 'obj_type' [ 520.408936][T17089] loop5: detected capacity change from 0 to 512 [ 520.425100][T17089] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 520.456332][T17089] EXT4-fs (loop5): 1 truncate cleaned up [ 520.481562][T17089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.638908][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.725748][T17101] loop5: detected capacity change from 0 to 1024 [ 520.744190][T17101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 520.769156][T17101] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 520.903855][T17108] netlink: 'syz.6.3892': attribute type 4 has an invalid length. [ 520.990431][T17114] loop6: detected capacity change from 0 to 1024 [ 521.008644][T11565] bond0 (unregistering): Released all slaves [ 521.034820][T11565] bond1 (unregistering): Released all slaves [ 521.048513][T17114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.066216][T11565] bond2 (unregistering): Released all slaves [ 521.093836][T17114] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 521.107545][T11565] bond3 (unregistering): Released all slaves [ 521.138883][T17110] loop5: detected capacity change from 0 to 1024 [ 521.146370][T11565] bond4 (unregistering): Released all slaves [ 521.154769][T11565] bond5 (unregistering): Released all slaves [ 521.163151][T11565] bond6 (unregistering): Released all slaves [ 521.246892][T17110] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 521.294013][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 521.302584][T17110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 521.342188][T11565] tipc: Disabling bearer [ 521.364366][T11565] tipc: Disabling bearer [ 521.380005][T17110] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.3893: lblock 2 mapped to illegal pblock 2 (length 1) [ 521.402278][T11565] tipc: Left network mode [ 521.455135][T17137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17137 comm=syz.6.3896 [ 521.471104][T17110] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 521.472010][T17110] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.3893: lblock 0 mapped to illegal pblock 48 (length 1) [ 521.481771][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 521.481991][ C1] EXT4-fs (loop5): initial error at time 2000000025: ext4_map_blocks:791: inode 3: block 2 [ 521.482512][ C1] EXT4-fs (loop5): last error at time 2000000025: ext4_map_blocks:791: inode 3: block 2 [ 521.567937][T17110] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3893: Failed to acquire dquot type 0 [ 521.582224][T17139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17139 comm=syz.6.3896 [ 521.618812][T11565] hsr_slave_0: left promiscuous mode [ 521.629032][T11565] hsr_slave_1: left promiscuous mode [ 521.682069][T17110] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 521.714700][T17110] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.3893: mark_inode_dirty error [ 521.746663][T17110] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 521.793421][T17110] EXT4-fs (loop5): 1 orphan inode deleted [ 521.808633][T13281] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 521.836473][T13281] __quota_error: 10 callbacks suppressed [ 521.836547][T13281] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 521.879938][T13281] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:37: Failed to release dquot type 0 [ 521.910516][T17110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.944384][T17110] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm syz.5.3893: lblock 1 mapped to illegal pblock 1 (length 1) [ 521.989840][T17110] Quota error (device loop5): find_next_id: Can't read quota tree block 1 [ 522.039656][ T28] audit: type=1400 audit(2000000026.460:16980): avc: denied { write } for pid=17140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.101015][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.140536][T14186] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 522.156651][ T28] audit: type=1400 audit(2000000026.570:16981): avc: denied { write } for pid=17159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.215222][T14186] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 522.263080][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.289471][T14186] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 522.386227][ T28] audit: type=1400 audit(2000000026.800:16982): avc: denied { write } for pid=17162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.449568][ T28] audit: type=1400 audit(2000000026.870:16983): avc: denied { write } for pid=17175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.505327][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 522.651344][ T28] audit: type=1400 audit(2000000027.070:16984): avc: denied { write } for pid=17178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.695401][T17190] macvlan0: entered promiscuous mode [ 522.749845][T17190] macvlan0: entered allmulticast mode [ 522.756770][ T28] audit: type=1400 audit(2000000027.130:16985): avc: denied { write } for pid=17194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.796280][T17190] bond8: entered promiscuous mode [ 522.823637][T17190] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 522.861119][T17190] bond8: left promiscuous mode [ 522.924335][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 522.976140][T17201] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 522.991703][T17201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 523.034569][T17201] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3903: lblock 2 mapped to illegal pblock 2 (length 1) [ 523.072111][T17201] fserror_report: 4 callbacks suppressed [ 523.072147][T17201] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 523.073972][T17209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 523.099353][T17201] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 523.107972][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 523.108030][ C0] EXT4-fs (loop6): initial error at time 2000000027: ext4_map_blocks:791: inode 3: block 2 [ 523.108432][ C0] EXT4-fs (loop6): last error at time 2000000027: ext4_map_blocks:791: inode 3: block 2 [ 523.180235][T17209] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 523.219882][T17201] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3903: lblock 0 mapped to illegal pblock 48 (length 1) [ 523.236217][T17201] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 523.237370][T17201] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 523.245616][T17216] macvlan0: entered promiscuous mode [ 523.246442][T17201] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3903: Failed to acquire dquot type 0 [ 523.246487][T17201] fserror_report: 5 callbacks suppressed [ 523.246496][T17201] loop6: lost filesystem error report for type 5 error -117 [ 523.284848][T17201] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 523.294213][T17201] loop6: lost filesystem error report for type 5 error -117 [ 523.323048][T17201] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3903: mark_inode_dirty error [ 523.350704][T17216] macvlan0: entered allmulticast mode [ 523.351249][T17216] bond9: entered promiscuous mode [ 523.351598][T17216] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 523.371618][T17201] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 523.372098][T17201] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 523.391376][T17201] EXT4-fs (loop6): 1 orphan inode deleted [ 523.397491][T17201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.409507][T17216] bond9: left promiscuous mode [ 523.435251][T17201] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3903: lblock 1 mapped to illegal pblock 1 (length 1) [ 523.455609][T13275] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 523.480192][T13275] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:31: Failed to release dquot type 0 [ 523.492102][T17218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.505190][T17218] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.516825][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.526177][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 523.562432][T16504] loop6: lost filesystem error report for type 5 error -117 [ 523.562548][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 523.592686][T16504] loop6: lost filesystem error report for type 5 error -117 [ 523.602135][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.672654][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 523.687191][T17223] macvlan2: entered promiscuous mode [ 523.783447][T17223] macvlan2: entered allmulticast mode [ 523.790765][T16504] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 523.791649][T17223] bond9: entered promiscuous mode [ 523.806712][T17223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.815762][T17223] bond9: left promiscuous mode [ 523.860266][T17228] gre0 speed is unknown, defaulting to 1000 [ 523.895845][T17228] xfrm0 speed is unknown, defaulting to 1000 [ 524.032464][T17247] set_capacity_and_notify: 3 callbacks suppressed [ 524.032475][T17247] loop3: detected capacity change from 0 to 1024 [ 524.046014][T17247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.057044][T17228] loop4: detected capacity change from 0 to 512 [ 524.063597][T17247] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 524.090490][T17228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.185902][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.213687][T17257] loop4: detected capacity change from 0 to 512 [ 524.232089][T17257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.244897][T17257] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.270382][ T3375] usb 7-1: enqueue for inactive port 0 [ 524.275917][ T3375] usb 7-1: enqueue for inactive port 0 [ 524.277042][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.338419][T17262] atomic_op ffff888143966128 conn xmit_atomic 0000000000000000 [ 524.347305][ T3375] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 524.351616][T17261] loop4: detected capacity change from 0 to 164 [ 524.384991][T17261] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 524.478975][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3920'. [ 524.533998][T17270] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3922'. [ 524.568142][T17272] loop4: detected capacity change from 0 to 128 [ 524.594180][T17272] ext4: Unknown parameter 'obj_type' [ 524.640041][T17272] loop4: detected capacity change from 0 to 512 [ 524.667381][T17272] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 524.677717][T17272] EXT4-fs (loop4): 1 truncate cleaned up [ 524.683765][T17272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.720513][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.824392][T17277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17277 comm=syz.5.3925 [ 524.851712][T17277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17277 comm=syz.5.3925 [ 524.866682][T17283] loop6: detected capacity change from 0 to 128 [ 524.873940][T17283] ext4: Unknown parameter 'obj_type' [ 524.937715][T17288] loop2: detected capacity change from 0 to 1024 [ 524.967060][T17288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.998212][T17288] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 525.053733][T17292] loop5: detected capacity change from 0 to 512 [ 525.089336][T17294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.116579][T17294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.140598][T17294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.163676][T17294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.199248][T17296] netlink: 'syz.3.3932': attribute type 4 has an invalid length. [ 525.209748][T17292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.249774][T17300] loop3: detected capacity change from 0 to 128 [ 525.252198][T17292] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.256434][T17300] ext4: Unknown parameter 'obj_type' [ 525.300306][T17300] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 525.371750][T17300] EXT4-fs (loop3): 1 truncate cleaned up [ 525.383786][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.386343][T17300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.530727][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.163892][T17311] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 526.180442][T17311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 526.193822][T17311] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.3935: lblock 2 mapped to illegal pblock 2 (length 1) [ 526.207721][T17311] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.207827][T17311] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.3935: lblock 0 mapped to illegal pblock 48 (length 1) [ 526.230962][T17311] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.231116][T17311] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3935: Failed to acquire dquot type 0 [ 526.251336][T17311] loop3: lost filesystem error report for type 5 error -117 [ 526.258739][T17311] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 526.268721][ C0] EXT4-fs (loop3): error count since last fsck: 3 [ 526.268901][ C0] EXT4-fs (loop3): initial error at time 2000000030: ext4_map_blocks:791: inode 3: block 2 [ 526.269260][ C0] EXT4-fs (loop3): last error at time 2000000030: ext4_acquire_dquot:7034 [ 526.276789][T17314] ext4: Unknown parameter 'obj_type' [ 526.318766][T17311] loop3: lost filesystem error report for type 5 error -117 [ 526.320137][T17311] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.3935: mark_inode_dirty error [ 526.343248][T17314] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 526.357516][T17311] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 526.358761][T17311] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 526.365432][T17314] EXT4-fs (loop6): 1 truncate cleaned up [ 526.372663][T17311] EXT4-fs (loop3): 1 orphan inode deleted [ 526.388724][T17314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.395518][T13302] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1) [ 526.450772][T17311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.464568][T13302] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.466908][T13302] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:58: Failed to release dquot type 0 [ 526.487575][T13302] loop3: lost filesystem error report for type 5 error -117 [ 526.541524][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.597709][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.616083][T13900] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 526.639724][T13900] loop3: lost filesystem error report for type 5 error -117 [ 526.641148][T13900] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 526.679667][T13900] loop3: lost filesystem error report for type 5 error -117 [ 526.681172][T13900] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 526.702860][T17329] netlink: 'syz.6.3944': attribute type 4 has an invalid length. [ 526.708463][T13900] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.801557][T17337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17337 comm=syz.6.3946 [ 526.838500][T17337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17337 comm=syz.6.3946 [ 526.977079][T17343] FAULT_INJECTION: forcing a failure. [ 526.977079][T17343] name failslab, interval 1, probability 0, space 0, times 0 [ 526.997894][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.3.3948 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 526.997924][T17343] Tainted: [W]=WARN [ 526.997930][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.997940][T17343] Call Trace: [ 526.997946][T17343] [ 526.997955][T17343] __dump_stack+0x1d/0x30 [ 526.997984][T17343] dump_stack_lvl+0x95/0xd0 [ 526.998006][T17343] dump_stack+0x15/0x1b [ 526.998072][T17343] should_fail_ex+0x263/0x280 [ 526.998107][T17343] should_failslab+0x8c/0xb0 [ 526.998166][T17343] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 526.998222][T17343] ? __alloc_skb+0x2d6/0x690 [ 526.998246][T17343] __alloc_skb+0x2d6/0x690 [ 526.998265][T17343] ? __alloc_skb+0x200/0x690 [ 526.998286][T17343] netlink_ack+0xfd/0x500 [ 526.998317][T17343] netlink_rcv_skb+0x192/0x220 [ 526.998367][T17343] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 526.998520][T17343] nfnetlink_rcv+0x167/0x1720 [ 526.998539][T17343] ? __account_obj_stock+0x3ba/0x5f0 [ 526.998566][T17343] ? xas_load+0x413/0x430 [ 526.998622][T17343] ? xas_load+0x413/0x430 [ 526.998684][T17343] ? __rcu_read_unlock+0x4e/0x70 [ 526.998706][T17343] ? xa_load+0xb1/0xe0 [ 526.998734][T17343] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 526.998822][T17343] ? set_normalized_timespec64+0xe0/0x110 [ 526.998840][T17343] ? __account_obj_stock+0x3ba/0x5f0 [ 526.998896][T17343] ? __account_obj_stock+0x3ba/0x5f0 [ 526.998919][T17343] ? __rcu_read_unlock+0x4e/0x70 [ 526.998951][T17343] ? should_fail_ex+0x30/0x280 [ 526.998969][T17343] ? __rcu_read_unlock+0x4e/0x70 [ 526.999052][T17343] ? avc_has_perm_noaudit+0xab/0x130 [ 526.999076][T17343] ? selinux_nlmsg_lookup+0x99/0x890 [ 526.999162][T17343] ? selinux_netlink_send+0x5f5/0x650 [ 526.999186][T17343] ? __rcu_read_unlock+0x33/0x70 [ 526.999203][T17343] ? __netlink_lookup+0x276/0x2b0 [ 526.999278][T17343] netlink_unicast+0x5a8/0x680 [ 526.999301][T17343] netlink_sendmsg+0x5c8/0x6f0 [ 526.999371][T17343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.999400][T17343] ____sys_sendmsg+0x563/0x5b0 [ 526.999428][T17343] ___sys_sendmsg+0x195/0x1e0 [ 526.999516][T17343] __x64_sys_sendmsg+0xd4/0x160 [ 526.999551][T17343] x64_sys_call+0x194c/0x3020 [ 526.999574][T17343] do_syscall_64+0x12c/0x3b0 [ 526.999598][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.999620][T17343] RIP: 0033:0x7fdcdb65ce59 [ 526.999633][T17343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.999647][T17343] RSP: 002b:00007fdcda0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.999667][T17343] RAX: ffffffffffffffda RBX: 00007fdcdb8d5fa0 RCX: 00007fdcdb65ce59 [ 526.999699][T17343] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 526.999710][T17343] RBP: 00007fdcda0af090 R08: 0000000000000000 R09: 0000000000000000 [ 526.999721][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.999735][T17343] R13: 00007fdcdb8d6038 R14: 00007fdcdb8d5fa0 R15: 00007fffba5e9f88 [ 526.999754][T17343] [ 527.386270][T17345] atomic_op ffff888137224d28 conn xmit_atomic 0000000000000000 [ 527.906280][T17355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17355 comm=syz.3.3950 [ 528.652856][T17344] gre0 speed is unknown, defaulting to 1000 [ 529.016947][T17344] xfrm0 speed is unknown, defaulting to 1000 [ 529.102985][T17362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17362 comm=syz.3.3952 [ 529.446596][T17365] set_capacity_and_notify: 4 callbacks suppressed [ 529.446610][T17365] loop3: detected capacity change from 0 to 1024 [ 529.528742][T17365] EXT4-fs: Ignoring removed nomblk_io_submit option [ 529.580665][T17365] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 529.743659][T17372] netlink: 'syz.6.3955': attribute type 4 has an invalid length. [ 529.949036][T17381] macvlan0: entered promiscuous mode [ 529.954404][T17381] macvlan0: entered allmulticast mode [ 529.960387][T17381] bond1: entered promiscuous mode [ 529.965915][T17381] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 529.977147][T17381] bond1: left promiscuous mode [ 530.487023][T17393] loop6: detected capacity change from 0 to 1024 [ 530.507792][T17393] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 530.531766][T17393] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 530.666654][T17393] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3961: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.680683][T17393] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 530.701795][T17393] __quota_error: 14 callbacks suppressed [ 530.701813][T17393] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 530.724564][T17393] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3961: lblock 0 mapped to illegal pblock 48 (length 1) [ 530.738658][T17393] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 530.755970][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 530.757636][T17397] loop2: detected capacity change from 0 to 8192 [ 530.765026][ C0] EXT4-fs (loop6): initial error at time 2000000035: ext4_map_blocks:791: inode 3: block 2 [ 530.787756][ C0] EXT4-fs (loop6): last error at time 2000000035: ext4_map_blocks:791: inode 3: block 48 [ 530.788383][T17397] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 530.800490][T17393] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 530.817726][T17393] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3961: Failed to acquire dquot type 0 [ 530.835491][T17393] loop6: lost filesystem error report for type 5 error -117 [ 530.851448][T17393] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 530.861472][T17393] loop6: lost filesystem error report for type 5 error -117 [ 530.862958][T17393] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3961: mark_inode_dirty error [ 530.881422][T17393] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 530.900601][T17393] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 530.919955][T17393] EXT4-fs (loop6): 1 orphan inode deleted [ 530.926179][T17393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.952455][T17393] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm syz.6.3961: lblock 1 mapped to illegal pblock 1 (length 1) [ 530.968918][T17393] Quota error (device loop6): find_next_id: Can't read quota tree block 1 [ 530.977460][ T40] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.001787][ T40] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 531.010201][ T40] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 531.023916][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.033282][T16504] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 531.046133][T16504] loop6: lost filesystem error report for type 5 error -117 [ 531.046267][T16504] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 531.062969][T16504] loop6: lost filesystem error report for type 5 error -117 [ 531.063052][T16504] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 531.125286][T16504] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 531.142076][T17405] loop2: detected capacity change from 0 to 1024 [ 531.171746][T17405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.182294][T17406] tipc: Failed to remove unknown binding: 66,0,0/0:521613163/521613165 [ 531.209657][T17406] tipc: Failed to remove unknown binding: 66,0,0/0:521613163/521613164 [ 531.218269][T17405] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 531.242514][T17412] tipc: Failed to remove unknown binding: 66,0,0/0:521613163/521613165 [ 531.260220][T17412] tipc: Failed to remove unknown binding: 66,0,0/0:521613163/521613164 [ 531.314127][T17415] loop6: detected capacity change from 0 to 128 [ 531.323847][T17410] gre0 speed is unknown, defaulting to 1000 [ 531.391515][T17417] netlink: 'syz.2.3968': attribute type 4 has an invalid length. [ 531.413094][T17415] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.426482][T17410] xfrm0 speed is unknown, defaulting to 1000 [ 531.449205][T17415] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 531.460974][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3970'. [ 531.472020][ T28] audit: type=1400 audit(2000000035.900:16995): avc: denied { write } for pid=17414 comm="syz.6.3969" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.502647][T17420] loop2: detected capacity change from 0 to 512 [ 531.553529][T16504] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 531.601959][T17420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.635096][T17428] bridge0: port 3(batadv1) entered blocking state [ 531.641720][T17420] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.665445][T17428] bridge0: port 3(batadv1) entered disabled state [ 531.676844][T17428] batadv1: entered allmulticast mode [ 531.691612][ T28] audit: type=1400 audit(2000000036.110:16996): avc: denied { write } for pid=17419 comm="syz.2.3970" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.719761][T17428] batadv1: entered promiscuous mode [ 531.769161][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.903761][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 531.914305][T17438] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=764 sclass=netlink_xfrm_socket pid=17438 comm=syz.6.3974 [ 532.005183][T17446] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17446 comm=syz.5.3975 [ 532.101390][T17450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17450 comm=syz.5.3975 [ 532.127655][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 532.136913][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 532.150552][T17451] atomic_op ffff888143964528 conn xmit_atomic 0000000000000000 [ 532.668663][T17459] loop5: detected capacity change from 0 to 128 [ 532.691498][T17459] ext4: Unknown parameter 'obj_type' [ 532.721323][T17459] loop5: detected capacity change from 0 to 512 [ 532.739145][T17459] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 532.757784][T17459] EXT4-fs (loop5): 1 truncate cleaned up [ 532.763942][T17459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.777057][ T28] audit: type=1400 audit(2000000037.200:16997): avc: denied { write } for pid=17458 comm="syz.5.3977" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.817519][ T28] audit: type=1400 audit(2000000037.230:16998): avc: denied { write } for pid=17458 comm="syz.5.3977" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.966546][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.990354][T17463] loop5: detected capacity change from 0 to 1024 [ 532.997169][T17463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.022897][T17467] tipc: Enabled bearer , priority 0 [ 533.030178][T17467] syzkaller0: entered promiscuous mode [ 533.035713][T17467] syzkaller0: entered allmulticast mode [ 533.045674][T17463] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 533.049478][T17470] loop4: detected capacity change from 0 to 512 [ 533.060959][T17467] tipc: Resetting bearer [ 533.070269][T17467] tipc: Resetting bearer [ 533.079476][T17467] tipc: Disabling bearer [ 533.106053][T17470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 533.130351][T17470] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.247713][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3982'. [ 533.280705][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3983'. [ 533.321506][T17478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.439275][ T28] audit: type=1400 audit(2000000037.850:16999): avc: denied { write } for pid=17469 comm="syz.4.3981" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.487330][T17478] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.595092][ T28] audit: type=1400 audit(2000000037.960:17000): avc: denied { write } for pid=17469 comm="syz.4.3981" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.761382][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.840802][T17499] vfat: Unknown parameter '' [ 533.851904][T17499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3986'. [ 533.951886][ T3397] usb usb8-port1: attempt power cycle [ 533.962181][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 534.010162][T17509] ext4: Unknown parameter 'obj_type' [ 534.018606][T17510] FAULT_INJECTION: forcing a failure. [ 534.018606][T17510] name failslab, interval 1, probability 0, space 0, times 0 [ 534.031529][T17509] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 534.050791][T17510] CPU: 0 UID: 0 PID: 17510 Comm: syz.4.3988 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 534.050843][T17510] Tainted: [W]=WARN [ 534.050905][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.050970][T17510] Call Trace: [ 534.050977][T17510] [ 534.050985][T17510] __dump_stack+0x1d/0x30 [ 534.051009][T17510] dump_stack_lvl+0x95/0xd0 [ 534.051027][T17510] dump_stack+0x15/0x1b [ 534.051080][T17510] should_fail_ex+0x263/0x280 [ 534.051099][T17510] ? alloc_pipe_info+0xad/0x340 [ 534.051190][T17510] should_failslab+0x8c/0xb0 [ 534.051216][T17510] __kmalloc_cache_noprof+0x5f/0x400 [ 534.051355][T17510] alloc_pipe_info+0xad/0x340 [ 534.051380][T17510] splice_direct_to_actor+0x591/0x670 [ 534.051510][T17510] ? _parse_integer+0x27/0x40 [ 534.051609][T17510] ? kstrtoull+0x111/0x140 [ 534.051656][T17510] ? __pfx_direct_splice_actor+0x10/0x10 [ 534.051739][T17510] ? kstrtouint+0x76/0xc0 [ 534.051894][T17510] do_splice_direct+0x119/0x1a0 [ 534.051925][T17510] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 534.051949][T17510] vfs_copy_file_range+0x9a0/0xf30 [ 534.051974][T17510] __se_sys_copy_file_range+0x269/0x3b0 [ 534.052074][T17510] __x64_sys_copy_file_range+0x78/0x90 [ 534.052095][T17510] x64_sys_call+0x197b/0x3020 [ 534.052118][T17510] do_syscall_64+0x12c/0x3b0 [ 534.052148][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.052227][T17510] RIP: 0033:0x7f75a40ece59 [ 534.052244][T17510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.052262][T17510] RSP: 002b:00007f75a2b47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 534.052282][T17510] RAX: ffffffffffffffda RBX: 00007f75a4365fa0 RCX: 00007f75a40ece59 [ 534.052353][T17510] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 534.052367][T17510] RBP: 00007f75a2b47090 R08: 0000000000000004 R09: 0000000000000000 [ 534.052488][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.052501][T17510] R13: 00007f75a4366038 R14: 00007f75a4365fa0 R15: 00007fffd1740738 [ 534.052587][T17510] [ 534.060210][T17509] EXT4-fs (loop3): 1 truncate cleaned up [ 534.140123][T17503] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 534.198550][T17509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.319546][T17494] xt_hashlimit: size too large, truncated to 1048576 [ 534.412567][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.454355][T17532] set_capacity_and_notify: 5 callbacks suppressed [ 534.454372][T17532] loop4: detected capacity change from 0 to 1024 [ 534.459223][T17535] netlink: 'syz.3.3992': attribute type 4 has an invalid length. [ 534.469873][T17532] EXT4-fs: Ignoring removed orlov option [ 534.503884][T17538] loop5: detected capacity change from 0 to 512 [ 534.551931][T17532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.590057][T17552] netlink: 'syz.3.3995': attribute type 4 has an invalid length. [ 534.659527][T17543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17543 comm=syz.2.3994 [ 534.679154][T17543] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17543 comm=syz.2.3994 [ 534.786058][T17572] loop2: detected capacity change from 0 to 512 [ 534.793064][T17572] vfat: Unknown parameter '' [ 534.805354][T17572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3997'. [ 534.810178][T17561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17561 comm=syz.3.3996 [ 534.846044][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.860101][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.868121][T17574] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17574 comm=syz.3.3996 [ 535.041811][T17580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17580 comm=syz.3.3999 [ 535.058457][T17582] loop5: detected capacity change from 0 to 512 [ 535.067405][T17582] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 535.076561][T17582] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4000: bg 0: block 104: invalid block bitmap [ 535.089057][T17582] loop5: lost filesystem error report for type 5 error -117 [ 535.089179][T17582] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 535.105210][T17582] loop5: lost filesystem error report for type 5 error -117 [ 535.105446][T17582] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4000: invalid indirect mapped block 1 (level 1) [ 535.125859][T17582] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 535.126082][T17582] EXT4-fs (loop5): 1 truncate cleaned up [ 535.134710][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 535.135587][T17582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.140838][ C0] EXT4-fs (loop5): initial error at time 2000000039: ext4_validate_block_bitmap:432 [ 535.140860][ C0] EXT4-fs (loop5): last error at time 2000000039: ext4_free_branches:1023: inode 11 [ 535.192625][T17582] tipc: Enabling of bearer rejected, already enabled [ 535.201144][T17582] tipc: Enabling of bearer rejected, already enabled [ 535.248956][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.281923][T17590] loop5: detected capacity change from 0 to 128 [ 535.291098][T17590] ext4: Unknown parameter 'obj_type' [ 535.742350][T17596] netlink: 'syz.5.4005': attribute type 4 has an invalid length. [ 535.773838][T17600] loop5: detected capacity change from 0 to 1024 [ 535.780695][T17600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.798081][T17600] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 535.837484][ T3397] usb usb8-port1: unable to enumerate USB device [ 535.995145][T17611] gre0 speed is unknown, defaulting to 1000 [ 536.290556][T17614] loop6: detected capacity change from 0 to 512 [ 536.303767][T17616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4011'. [ 536.379019][T17619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17619 comm=syz.3.4012 [ 536.393993][T17614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.425970][T17623] loop2: detected capacity change from 0 to 1024 [ 536.431643][T17611] xfrm0 speed is unknown, defaulting to 1000 [ 536.432778][T17623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.454019][T17623] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 536.474572][T17626] netlink: 'syz.3.4014': attribute type 17 has an invalid length. [ 536.482517][T17626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.554465][T17628] loop2: detected capacity change from 0 to 128 [ 536.563718][T17630] loop3: detected capacity change from 0 to 1024 [ 536.616535][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 536.616548][ T28] audit: type=1400 audit(2000000041.030:17018): avc: denied { write } for pid=17629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.649494][T17630] EXT4-fs: Ignoring removed bh option [ 536.717843][ T28] audit: type=1400 audit(2000000041.130:17019): avc: denied { write } for pid=17641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.906546][T17647] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 536.914558][T17647] FAT-fs (loop2): Filesystem has been set read-only [ 536.964964][T17630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.164344][ T28] audit: type=1400 audit(2000000041.580:17020): avc: denied { write } for pid=17625 comm="syz.3.4014" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.189380][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.299642][T17654] xt_hashlimit: size too large, truncated to 1048576 [ 537.323439][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.379987][T17657] rock: directory entry would overflow storage [ 537.401212][T17657] rock: sig=0x4654, size=5, remaining=4 [ 537.487662][T17663] netlink: 'syz.2.4021': attribute type 4 has an invalid length. [ 537.495888][T17660] atomic_op ffff88813332cd28 conn xmit_atomic 0000000000000000 [ 537.557735][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.669256][T17666] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.712697][T17666] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.742836][T17666] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 537.890383][T17675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 537.917456][T17675] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.452982][ T28] audit: type=1400 audit(2000000043.870:17021): avc: denied { write } for pid=17674 comm="syz.2.4025" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.483930][ T28] audit: type=1400 audit(2000000043.900:17022): avc: denied { write } for pid=17674 comm="syz.2.4025" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.532161][T17691] set_capacity_and_notify: 3 callbacks suppressed [ 539.532176][T17691] loop5: detected capacity change from 0 to 1024 [ 539.554153][T17691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.579437][T17691] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 539.676419][T17701] netlink: 'syz.3.4032': attribute type 4 has an invalid length. [ 539.729392][T17705] loop5: detected capacity change from 0 to 512 [ 539.736110][T17705] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 539.756350][T17705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4034: bg 0: block 104: invalid block bitmap [ 539.780655][T17705] loop5: lost filesystem error report for type 5 error -117 [ 539.780826][T17705] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 539.788219][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 539.788235][ C0] EXT4-fs (loop5): initial error at time 2000000000: ext4_validate_block_bitmap:432 [ 539.788254][ C0] EXT4-fs (loop5): last error at time 2000000000: ext4_validate_block_bitmap:432 [ 539.822224][T17705] loop5: lost filesystem error report for type 5 error -117 [ 539.822364][T17705] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4034: invalid indirect mapped block 1 (level 1) [ 539.843530][T17705] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 539.843731][T17705] EXT4-fs (loop5): 1 truncate cleaned up [ 539.868818][T17705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.919962][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'. [ 539.942473][T17705] tipc: Enabling of bearer rejected, already enabled [ 539.950723][T17705] tipc: Enabling of bearer rejected, already enabled [ 539.976028][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 540.046527][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.107475][T17717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17717 comm=syz.5.4037 [ 540.141357][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4036'. [ 540.156005][T17723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4038'. [ 540.196961][T17730] loop5: detected capacity change from 0 to 128 [ 540.206569][T17730] ext4: Unknown parameter 'obj_type' [ 540.242412][T17730] loop5: detected capacity change from 0 to 512 [ 540.252000][T17734] netlink: 'syz.6.4043': attribute type 4 has an invalid length. [ 540.269299][T17730] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 540.291117][T17730] EXT4-fs (loop5): 1 truncate cleaned up [ 540.303308][T17730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.316785][T17740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 540.334006][ T28] audit: type=1400 audit(2000000000.680:17023): avc: denied { write } for pid=17729 comm="syz.5.4040" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.364400][ T28] audit: type=1400 audit(2000000000.680:17024): avc: denied { write } for pid=17729 comm="syz.5.4040" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 540.391220][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.415783][T17745] xt_hashlimit: size too large, truncated to 1048576 [ 540.451528][T17751] loop5: detected capacity change from 0 to 512 [ 540.467728][T17751] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 540.480663][T17751] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4047: bg 0: block 104: invalid block bitmap [ 540.498433][T17756] loop6: detected capacity change from 0 to 764 [ 540.500409][T17751] loop5: lost filesystem error report for type 5 error -117 [ 540.508020][T17751] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 540.524055][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 540.524070][ C0] EXT4-fs (loop5): initial error at time 2000000000: ext4_validate_block_bitmap:432 [ 540.524096][ C0] EXT4-fs (loop5): last error at time 2000000000: ext4_validate_block_bitmap:432 [ 540.549680][T17748] xt_hashlimit: size too large, truncated to 1048576 [ 540.572494][T17756] rock: directory entry would overflow storage [ 540.592048][T17756] rock: sig=0x4654, size=5, remaining=4 [ 540.601945][T17758] loop2: detected capacity change from 0 to 764 [ 540.609418][T17757] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 540.622611][ T28] audit: type=1400 audit(2000000000.940:17025): avc: denied { load_policy } for pid=17752 comm="syz.4.4051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 540.654947][T17757] SELinux: failed to load policy [ 540.658236][T17751] loop5: lost filesystem error report for type 5 error -117 [ 540.666690][T17751] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4047: invalid indirect mapped block 1 (level 1) [ 540.676958][T17758] rock: directory entry would overflow storage [ 540.692276][T17758] rock: sig=0x4654, size=5, remaining=4 [ 540.722091][T17751] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 540.722302][T17751] EXT4-fs (loop5): 1 truncate cleaned up [ 540.743283][T17751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.762781][ T3375] hid_parser_main: 5 callbacks suppressed [ 540.762799][ T3375] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 540.792519][ T3375] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 540.820279][T17764] loop4: detected capacity change from 0 to 4096 [ 540.833023][T17768] tipc: Enabling of bearer rejected, already enabled [ 540.847138][T17770] FAULT_INJECTION: forcing a failure. [ 540.847138][T17770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.862351][T17764] EXT4-fs: test_dummy_encryption option not supported [ 540.864927][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4052'. [ 540.879843][T17770] CPU: 0 UID: 0 PID: 17770 Comm: syz.6.4054 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 540.879871][T17770] Tainted: [W]=WARN [ 540.879877][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.879889][T17770] Call Trace: [ 540.879909][T17770] [ 540.879918][T17770] __dump_stack+0x1d/0x30 [ 540.880011][T17770] dump_stack_lvl+0x95/0xd0 [ 540.880104][T17770] dump_stack+0x15/0x1b [ 540.880120][T17770] should_fail_ex+0x263/0x280 [ 540.880139][T17770] should_fail+0xb/0x20 [ 540.880197][T17768] tipc: Enabling of bearer rejected, already enabled [ 540.880156][T17770] should_fail_usercopy+0x1a/0x20 [ 540.880227][T17770] _copy_to_user+0x20/0xa0 [ 540.880248][T17770] simple_read_from_buffer+0xb5/0x130 [ 540.880303][T17770] proc_fail_nth_read+0x10e/0x150 [ 540.880334][T17770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.880360][T17770] vfs_read+0x1ab/0x7f0 [ 540.880386][T17770] ? __rcu_read_unlock+0x4e/0x70 [ 540.880456][T17770] ? __fget_files+0x184/0x1c0 [ 540.880502][T17770] ? mutex_lock+0x57/0x90 [ 540.880526][T17770] ksys_read+0xdc/0x1a0 [ 540.880578][T17770] __x64_sys_read+0x40/0x50 [ 540.880600][T17770] x64_sys_call+0x2886/0x3020 [ 540.880644][T17770] do_syscall_64+0x12c/0x3b0 [ 540.880727][T17770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.880748][T17770] RIP: 0033:0x7fe4778ad68e [ 540.880765][T17770] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.880781][T17770] RSP: 002b:00007fe476346fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.880801][T17770] RAX: ffffffffffffffda RBX: 00007fe4763476c0 RCX: 00007fe4778ad68e [ 540.880852][T17770] RDX: 000000000000000f RSI: 00007fe4763470a0 RDI: 0000000000000004 [ 540.880866][T17770] RBP: 00007fe476347090 R08: 0000000000000000 R09: 0000000000000000 [ 540.880878][T17770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.880958][T17770] R13: 00007fe477b66038 R14: 00007fe477b65fa0 R15: 00007ffc3f888368 [ 540.880977][T17770] [ 541.090528][T17762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.112311][T17772] netlink: 'syz.6.4055': attribute type 4 has an invalid length. [ 541.163077][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'. [ 541.193083][T17774] loop2: detected capacity change from 0 to 512 [ 541.210248][T14186] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.243041][T17774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.268146][T17774] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.285069][ T28] audit: type=1400 audit(2000000001.640:17026): avc: denied { write } for pid=17773 comm="syz.2.4056" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.324819][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.799261][T17801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.809698][T17801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.824627][T17801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.834985][T17801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.894897][T17803] tipc: Enabled bearer , priority 0 [ 541.901971][T17803] syzkaller0: entered promiscuous mode [ 541.907677][T17803] syzkaller0: entered allmulticast mode [ 541.915103][T17803] tipc: Resetting bearer [ 541.921394][T17802] tipc: Resetting bearer [ 541.927722][T17802] tipc: Disabling bearer [ 542.077401][T17808] loop3: detected capacity change from 0 to 128 [ 542.078998][T17811] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 542.103828][T17811] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4069: bg 0: block 104: invalid block bitmap [ 542.127305][T17811] loop6: lost filesystem error report for type 5 error -117 [ 542.127512][T17811] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 542.143511][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 542.143548][ C1] EXT4-fs (loop6): initial error at time 2000000000: ext4_validate_block_bitmap:432 [ 542.143575][ C1] EXT4-fs (loop6): last error at time 2000000000: ext4_validate_block_bitmap:432 [ 542.185529][T17811] loop6: lost filesystem error report for type 5 error -117 [ 542.207297][T17811] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4069: invalid indirect mapped block 1 (level 1) [ 542.228545][T17818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.259016][T17818] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 542.264845][T17811] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 542.270596][T17811] EXT4-fs (loop6): 1 truncate cleaned up [ 542.286420][T17811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.348999][T17811] tipc: Started in network mode [ 542.354513][T17811] tipc: Node identity ac1414aa, cluster identity 4711 [ 542.363294][T17811] tipc: Enabled bearer , priority 10 [ 542.371865][T17811] tipc: Enabled bearer , priority 0 [ 542.421337][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4076'. [ 542.449323][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4075'. [ 542.491831][T16504] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.524365][T17833] tipc: Enabled bearer , priority 0 [ 542.543384][T17833] syzkaller0: entered promiscuous mode [ 542.556876][T17833] syzkaller0: entered allmulticast mode [ 542.564466][T17833] tipc: Resetting bearer [ 542.583920][T17833] tipc: Resetting bearer [ 542.598927][T17833] tipc: Disabling bearer [ 542.608792][T17846] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4083'. [ 542.622302][T17846] netlink: 'syz.4.4083': attribute type 21 has an invalid length. [ 542.630525][T17846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4083'. [ 542.669401][ T28] audit: type=1326 audit(2000000000.020:17027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.703363][ T28] audit: type=1326 audit(2000000000.020:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.729152][ T28] audit: type=1326 audit(2000000000.020:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.754993][ T28] audit: type=1326 audit(2000000000.020:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.780747][ T28] audit: type=1326 audit(2000000000.020:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.806426][ T28] audit: type=1326 audit(2000000000.020:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.832099][ T28] audit: type=1326 audit(2000000000.020:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.857810][ T28] audit: type=1326 audit(2000000000.020:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e3ef7ce59 code=0x7ffc0000 [ 542.883750][ T28] audit: type=1326 audit(2000000000.020:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e3ef7e6c7 code=0x7ffc0000 [ 542.909427][ T28] audit: type=1326 audit(2000000000.020:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17834 comm="syz.5.4079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4e3ef3d68e code=0x7ffc0000 [ 542.940477][T17853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4084'. [ 542.992083][T17858] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 543.009459][T17858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4087: bg 0: block 104: invalid block bitmap [ 543.028769][T17858] loop3: lost filesystem error report for type 5 error -117 [ 543.028819][T17861] netlink: 'syz.4.4088': attribute type 4 has an invalid length. [ 543.028981][T17858] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 543.044126][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 543.044141][ C1] EXT4-fs (loop3): initial error at time 2000000000: ext4_validate_block_bitmap:432 [ 543.044181][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_validate_block_bitmap:432 [ 543.053625][T17863] EXT4-fs: Ignoring removed nobh option [ 543.084256][T17858] loop3: lost filesystem error report for type 5 error -117 [ 543.084481][T17858] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4087: invalid indirect mapped block 1 (level 1) [ 543.085505][T17863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 543.092083][T17858] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 543.106809][T17863] EXT4-fs (loop4): 1 truncate cleaned up [ 543.118579][T17858] EXT4-fs (loop3): 1 truncate cleaned up [ 543.125067][T17863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.130508][T17858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.160206][T13638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.240425][T17858] tipc: Enabling of bearer rejected, already enabled [ 543.248821][T17858] tipc: Enabling of bearer rejected, already enabled [ 543.277913][T17872] vhci_hcd vhci_hcd.0: default hub control req: 800b vc2fd i0007 l54 [ 543.287002][T13900] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.316725][T17874] tipc: Enabled bearer , priority 0 [ 543.324013][T17874] syzkaller0: entered promiscuous mode [ 543.329563][T17874] syzkaller0: entered allmulticast mode [ 543.337461][T17874] tipc: Resetting bearer [ 543.344317][T17874] tipc: Disabling bearer [ 543.487381][ T3389] tipc: Node number set to 2886997162 [ 543.502628][T17884] ISOFS: Unable to identify CD-ROM format. [ 543.703005][T17898] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 543.757314][T17900] ext4: Bad value for 'commit' [ 543.800604][T17898] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4104: bg 0: block 104: invalid block bitmap [ 543.837291][T17898] loop2: lost filesystem error report for type 5 error -117 [ 543.839423][T17898] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 543.857279][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 543.863713][ C0] EXT4-fs (loop2): initial error at time 2000000001: ext4_validate_block_bitmap:432 [ 543.873125][ C0] EXT4-fs (loop2): last error at time 2000000001: ext4_validate_block_bitmap:432 [ 543.905869][T17898] loop2: lost filesystem error report for type 5 error -117 [ 543.975834][T17896] syz.4.4103 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 543.997285][T17896] CPU: 1 UID: 0 PID: 17896 Comm: syz.4.4103 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 543.997314][T17896] Tainted: [W]=WARN [ 543.997321][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.997364][T17896] Call Trace: [ 543.997371][T17896] [ 543.997379][T17896] __dump_stack+0x1d/0x30 [ 543.997407][T17896] dump_stack_lvl+0x95/0xd0 [ 543.997427][T17896] dump_stack+0x15/0x1b [ 543.997488][T17896] dump_header+0x80/0x240 [ 543.997563][T17896] oom_kill_process+0x295/0x350 [ 543.997597][T17896] out_of_memory+0x97d/0xb80 [ 543.997627][T17896] try_charge_memcg+0x62f/0xa10 [ 543.997654][T17896] ? irqentry_exit+0x7d/0x5d0 [ 543.997752][T17896] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 543.997776][T17896] __alloc_frozen_pages_noprof+0x18a/0x350 [ 543.997801][T17896] alloc_pages_mpol+0xb3/0x260 [ 543.997892][T17896] alloc_pages_noprof+0x8f/0x140 [ 543.997914][T17896] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 543.998032][T17896] __kvmalloc_node_noprof+0x3d4/0x640 [ 543.998057][T17896] ? futex_hash_allocate+0x190/0x9a0 [ 543.998087][T17896] ? futex_hash_allocate+0x190/0x9a0 [ 543.998128][T17896] futex_hash_allocate+0x190/0x9a0 [ 543.998223][T17896] ? cap_task_prctl+0x13f/0x6b0 [ 543.998299][T17896] futex_hash_prctl+0xd8/0xf0 [ 543.998328][T17896] __se_sys_prctl+0x4f4/0x1400 [ 543.998383][T17896] __x64_sys_prctl+0x67/0x80 [ 543.998415][T17896] x64_sys_call+0x2533/0x3020 [ 543.998438][T17896] do_syscall_64+0x12c/0x3b0 [ 543.998522][T17896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.998543][T17896] RIP: 0033:0x7f75a40ece59 [ 543.998558][T17896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.998628][T17896] RSP: 002b:00007f75a2b47028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 543.998647][T17896] RAX: ffffffffffffffda RBX: 00007f75a4365fa0 RCX: 00007f75a40ece59 [ 543.998690][T17896] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 543.998702][T17896] RBP: 00007f75a4182d6f R08: 0000000000000000 R09: 0000000000000000 [ 543.998715][T17896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.998727][T17896] R13: 00007f75a4366038 R14: 00007f75a4365fa0 R15: 00007fffd1740738 [ 543.998745][T17896] [ 543.998756][T17896] memory: usage 307200kB, limit 307200kB, failcnt 205 [ 544.230226][T17896] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 544.238116][T17896] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 544.245397][T17896] Memory cgroup stats for /syz4: [ 544.245577][T17896] cache 0 [ 544.253461][T17896] rss 0 [ 544.256205][T17896] shmem 0 [ 544.259136][T17896] mapped_file 0 [ 544.262612][T17896] dirty 0 [ 544.265574][T17896] writeback 0 [ 544.268875][T17896] workingset_refault_anon 1374 [ 544.273652][T17896] workingset_refault_file 321 [ 544.278317][T17896] swap 389120 [ 544.281579][T17896] swapcached 11751424 [ 544.285535][T17896] pgpgin 544020 [ 544.288985][T17896] pgpgout 544018 [ 544.292507][T17896] pgfault 622720 [ 544.296031][T17896] pgmajfault 217 [ 544.299604][T17896] inactive_anon 0 [ 544.303214][T17896] active_anon 8192 [ 544.306967][T17896] inactive_file 0 [ 544.310589][T17896] active_file 0 [ 544.314026][T17896] unevictable 0 [ 544.317479][T17896] hierarchical_memory_limit 314572800 [ 544.322847][T17896] hierarchical_memsw_limit 9223372036854771712 [ 544.328991][T17896] total_cache 0 [ 544.332484][T17896] total_rss 0 [ 544.335796][T17896] total_shmem 0 [ 544.339296][T17896] total_mapped_file 0 [ 544.343257][T17896] total_dirty 0 [ 544.346739][T17896] total_writeback 0 [ 544.350637][T17896] total_workingset_refault_anon 1374 [ 544.355902][T17896] total_workingset_refault_file 321 [ 544.361163][T17896] total_swap 389120 [ 544.364946][T17896] total_swapcached 11751424 [ 544.369442][T17896] total_pgpgin 544020 [ 544.373400][T17896] total_pgpgout 544018 [ 544.377458][T17896] total_pgfault 622720 [ 544.381502][T17896] total_pgmajfault 217 [ 544.385545][T17896] total_inactive_anon 0 [ 544.389691][T17896] total_active_anon 8192 [ 544.393958][T17896] total_inactive_file 0 [ 544.398141][T17896] total_active_file 0 [ 544.402167][T17896] total_unevictable 0 [ 544.406186][T17896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4103,pid=17895,uid=0 [ 544.420877][T17896] Memory cgroup out of memory: Killed process 17895 (syz.4.4103) total-vm:94168kB, anon-rss:1236kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 544.467334][T17900] ================================================================== [ 544.475430][T17900] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 544.485259][T17900] [ 544.487563][T17900] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 544.495604][T17900] tick_do_update_jiffies64+0x113/0x1c0 [ 544.501147][T17900] tick_nohz_handler+0x8d/0x3d0 [ 544.505986][T17900] __hrtimer_run_queues+0x276/0x4f0 [ 544.511164][T17900] hrtimer_interrupt+0x261/0x850 [ 544.516083][T17900] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 544.521992][T17900] sysvec_apic_timer_interrupt+0x6f/0x80 [ 544.527607][T17900] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 544.533567][T17900] kcsan_setup_watchpoint+0x404/0x410 [ 544.538920][T17900] do_try_to_free_pages+0x51b/0xc90 [ 544.544099][T17900] try_to_free_mem_cgroup_pages+0x201/0x420 [ 544.549973][T17900] try_charge_memcg+0x373/0xa10 [ 544.554808][T17900] charge_memcg+0x6d/0x120 [ 544.559208][T17900] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 544.565170][T17900] __swap_cache_prepare_and_add+0x69/0x4a0 [ 544.570957][T17900] swap_cache_alloc_folio+0xa2/0x120 [ 544.576222][T17900] swap_cluster_readahead+0x35c/0x3c0 [ 544.581575][T17900] swapin_readahead+0xde/0x840 [ 544.586339][T17900] do_swap_page+0x31e/0x2180 [ 544.590913][T17900] handle_mm_fault+0xb30/0x2e70 [ 544.595753][T17900] do_user_addr_fault+0x3fd/0x1050 [ 544.600855][T17900] exc_page_fault+0x62/0xa0 [ 544.605346][T17900] asm_exc_page_fault+0x26/0x30 [ 544.610182][T17900] __put_user_4+0xd/0x20 [ 544.614412][T17900] mm_release+0x7b/0x180 [ 544.618638][T17900] exit_mm_release+0x25/0x30 [ 544.623212][T17900] exit_mm+0x38/0x1f0 [ 544.627182][T17900] do_exit+0x442/0x1530 [ 544.631322][T17900] do_group_exit+0xfe/0x140 [ 544.635811][T17900] get_signal+0xe30/0xf20 [ 544.640129][T17900] arch_do_signal_or_restart+0x96/0x480 [ 544.645663][T17900] exit_to_user_mode_loop+0x6f/0x820 [ 544.650929][T17900] do_syscall_64+0x232/0x3b0 [ 544.655506][T17900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.661383][T17900] [ 544.663694][T17900] read to 0xffffffff86c07a00 of 8 bytes by task 17900 on cpu 0: [ 544.671303][T17900] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 544.677538][T17900] count_shadow_nodes+0x6a/0x250 [ 544.682461][T17900] do_shrink_slab+0x63/0x660 [ 544.687044][T17900] shrink_slab+0x545/0x8f0 [ 544.691447][T17900] shrink_node+0x6d4/0x20a0 [ 544.695938][T17900] do_try_to_free_pages+0x408/0xc90 [ 544.701120][T17900] try_to_free_mem_cgroup_pages+0x201/0x420 [ 544.706998][T17900] try_charge_memcg+0x373/0xa10 [ 544.711834][T17900] charge_memcg+0x6d/0x120 [ 544.716237][T17900] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 544.722205][T17900] __swap_cache_prepare_and_add+0x69/0x4a0 [ 544.728000][T17900] swap_cache_alloc_folio+0xa2/0x120 [ 544.733270][T17900] swap_cluster_readahead+0x35c/0x3c0 [ 544.738633][T17900] swapin_readahead+0xde/0x840 [ 544.743399][T17900] do_swap_page+0x31e/0x2180 [ 544.747986][T17900] handle_mm_fault+0xb30/0x2e70 [ 544.752829][T17900] do_user_addr_fault+0x3fd/0x1050 [ 544.757934][T17900] exc_page_fault+0x62/0xa0 [ 544.762428][T17900] asm_exc_page_fault+0x26/0x30 [ 544.767268][T17900] __put_user_4+0xd/0x20 [ 544.771504][T17900] mm_release+0x7b/0x180 [ 544.775731][T17900] exit_mm_release+0x25/0x30 [ 544.780307][T17900] exit_mm+0x38/0x1f0 [ 544.784283][T17900] do_exit+0x442/0x1530 [ 544.788429][T17900] do_group_exit+0xfe/0x140 [ 544.792921][T17900] get_signal+0xe30/0xf20 [ 544.797242][T17900] arch_do_signal_or_restart+0x96/0x480 [ 544.802789][T17900] exit_to_user_mode_loop+0x6f/0x820 [ 544.808061][T17900] do_syscall_64+0x232/0x3b0 [ 544.812644][T17900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.818524][T17900] [ 544.820830][T17900] value changed: 0x0000000100005f53 -> 0x0000000100005f54 [ 544.827918][T17900] [ 544.830227][T17900] Reported by Kernel Concurrency Sanitizer on: [ 544.836360][T17900] CPU: 0 UID: 0 PID: 17900 Comm: syz.4.4103 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 544.847285][T17900] Tainted: [W]=WARN [ 544.851069][T17900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.861109][T17900] ================================================================== [ 544.963694][T17898] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4104: invalid indirect mapped block 1 (level 1) [ 545.037531][T17898] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 545.039309][T17898] EXT4-fs (loop2): 1 truncate cleaned up [ 545.096681][T17898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.210128][T17898] tipc: Enabling of bearer rejected, already enabled [ 545.237000][T17898] tipc: Enabling of bearer rejected, already enabled [ 545.348072][T14389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.