last executing test programs: 5m28.461619446s ago: executing program 3 (id=2305): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x7, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) close(0x3) recvmmsg(r0, 0x0, 0x0, 0x40002122, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x4, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x1) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 5m28.323138429s ago: executing program 3 (id=2310): socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000540)=""/173) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) dup(0xffffffffffffffff) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000080000000400000002000000000000", @ANYRESHEX, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0xffffe61b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb5b0}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000300)="eea6", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980), 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x1000080, 0x4) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3) keyctl$link(0x8, 0x0, r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000240)={[{@barrier}, {@dax_inode}]}, 0x3e, 0x51a, &(0x7f0000001200)="$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") shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002000010024bd7002fddbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x44044}, 0x40) 5m27.782330021s ago: executing program 3 (id=2320): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x7, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) close(0x3) recvmmsg(r0, 0x0, 0x0, 0x40002122, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x4, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x1) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 5m27.432349319s ago: executing program 3 (id=2329): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x78e, &(0x7f0000000ac0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000000)=""/34) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xc, 0x257ca9f9c2556a09, 0x40000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x108044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250604"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x26}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x0, 0x1a0, 0xfeffffff, 0x270, 0x270, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r6) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2081, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0xe, &(0x7f0000000880)={0x2, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/166, 0xa6}, {0x0}], &(0x7f0000000840)=[0x6], 0x4}, 0x20) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000000c0)={0x7, 0x9, 0x80000000}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16], 0x20}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) 5m26.578428789s ago: executing program 3 (id=2345): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000340)='.pending_reads\x00', 0x400000, 0x146) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000440)=""/186, &(0x7f0000000500)=0xba) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 5m25.845168375s ago: executing program 3 (id=2354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x7f, @private1, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813cbfba79cae0486c4303d9d8aba8e590094c6a6abac2699434a0b1dba046dbb65b2bef2c084c9d2fdb6f360ba4b44f3149af2c08b294d85798eefc119c9e6350f6abde287c8c1f22a37eea52ccdb66a949fb2f13b679", 0x58, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) shutdown(r0, 0x1) r2 = syz_clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240), {0x6}, &(0x7f0000000400)=""/156, 0x9c, &(0x7f00000004c0)=""/70, &(0x7f0000000540)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) setpgid(r3, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = fcntl$getown(r5, 0x9) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r7, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, r6, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r9 = getpgrp(r2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) capset(&(0x7f0000000040)={0x20080522, r9}, &(0x7f0000000100)={0xc000000, 0x4, 0x8, 0xc000000, 0x8, 0x2}) 5m25.830455245s ago: executing program 32 (id=2354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x7f, @private1, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="4e813cbfba79cae0486c4303d9d8aba8e590094c6a6abac2699434a0b1dba046dbb65b2bef2c084c9d2fdb6f360ba4b44f3149af2c08b294d85798eefc119c9e6350f6abde287c8c1f22a37eea52ccdb66a949fb2f13b679", 0x58, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x1}, {0xe}, 0x0, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) shutdown(r0, 0x1) r2 = syz_clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240), {0x6}, &(0x7f0000000400)=""/156, 0x9c, &(0x7f00000004c0)=""/70, &(0x7f0000000540)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(r3) setpgid(r3, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = fcntl$getown(r5, 0x9) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r7, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, r6, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r9 = getpgrp(r2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000000000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) capset(&(0x7f0000000040)={0x20080522, r9}, &(0x7f0000000100)={0xc000000, 0x4, 0x8, 0xc000000, 0x8, 0x2}) 2m59.92775896s ago: executing program 4 (id=3170): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) (async, rerun: 32) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xc6, &(0x7f0000000340)={@multicast, @empty, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0xb0, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x25, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce1, 0xd9, 0x11, 0xe5c, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x86, 0x2}, @timestamp_addr={0x44, 0x7c, 0x89, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x4}, 0x5}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x329}, {@multicast2, 0x5}, {@broadcast, 0xd47}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@private=0xa010100, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4800}, {@multicast1, 0x3}, {@multicast2, 0x9}, {@remote}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x9}]}]}}}}}}}, 0x0) (async) shmget(0x0, 0x3000, 0x200, &(0x7f0000083000/0x3000)=nil) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000110400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async) dup2(r2, r4) r5 = epoll_create(0x8001) fchmod(r5, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000010000", @ANYRES32], 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3}, 0x4200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m59.662435026s ago: executing program 4 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20000841) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000280)={{r1}, "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"}) 2m58.832249465s ago: executing program 4 (id=3174): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x2, 0xffffff40, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x1a8c1, 0x8, 0x65f8, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r5, 0x0, 0xfdef) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x9, 0xc9a, 0x80080000, 0x6, 0xe, "dee4f0020100010000001b347d5c0001021000"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x210002, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@access_user}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r9}}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}, {@afid={'afid', 0x3d, 0xffffffffffffffcd}}, {@version_L}], [{@permit_directio}]}}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8) 2m56.629104494s ago: executing program 4 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000000000000001000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000080000012001280090001007665746800000000040002800800200001000000"], 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xc2e5, 0x4d1a}, 0x0, 0x35, 0xa, 0x6, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000000000000000000029f00000040050000", @ANYRES32, @ANYBLOB="0080000000000000000000000000000000000000d6aa55e8976cc78d76e9ea16e5400dc49e105d878982ab78cd529d112b4394ec61e72c94c30b602e0fdf8ef527cb2d458c395d5d08e651ef37aaf37511ce138ba3b7d1b08db718cb1452d5232109587c15d30a7e19341625c40ba8595ac84ea14a422dd65a46f3d7740000cf8cb36b277b3afa374e7c7db63ac5c31ca0d5556950c39735547f55283b75318e576e426c966210fb881c2058780aa7453cbcdac5233c40aaf1b49f95e8376bbffa42011e802650d9eacb6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file4\x00', 0x1, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', &(0x7f0000000380)={0x10b881, 0x0, 0x2f}, 0x18) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) socket$unix(0x1, 0x1, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=0xffffffffffffffff, 0x7, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000000), &(0x7f0000000100)=""/186}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0xc, 0x24, 0x2, 0x0, 0xd, 0x2, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xb) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000280)={r8, 0x6}, &(0x7f0000000300)=0x8) epoll_create1(0x0) ptrace$getregs(0xe, r5, 0x6, &(0x7f0000001280)=""/112) 2m56.442521238s ago: executing program 4 (id=3180): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) flistxattr(r1, &(0x7f00000010c0)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4106, 0x100a}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x310e, &(0x7f0000000240)={0x0, 0xaad8, 0x0, 0x3, 0x21d, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x1000) syz_io_uring_modify_offsets$generic(r4, 0x0, 0x68, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000090000000700000000080200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f04187ad90f779d37000000000000000010000000000cebbed9d00"], 0x50) unshare(0x2a020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000e00)={{}, 0x0, 0xa, @unused=[0x100000000, 0x7, 0xc, 0x3], @devid}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000380)) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xffffffff, 0x4, 0x2, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170400e3f50327e422000000000000000000000200000000001900", 0x2f}, 0x60) 2m55.509405479s ago: executing program 4 (id=3192): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="5a2e558f30dc78387ecbc064676efe7d79aa036f20bd5971fa0eb0dea43bbad822d62c2b8793634ebc852e01c4c83caee6803fa9c35cb49b488b345428", 0x3d, 0x20000000, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x20000) read$usbmon(r2, &(0x7f0000000240)=""/161, 0xa1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00082b00fe8000000000000000000000000000aafe8000000000000000000000000000aa4e22000000089078c29d9f84bb43f6541d9506896071bce6759cab476f7acaf22ddac242cca90ec6b28efdc4624deaba4370199b22fe16a7e72241d8159276a1dffe9881c43e78e9bfe6446c19ef715c4d3eae086ebd0000000051cce374ecb76897f9477dcac3dd1f13cc7d95bc99aa1842f5c670efff7722d97fa2144e5e9fe59b7350d77a4e6ee31b164d38da7d01d0d1df99a19518ee3ab368b738c5189c2acbc2a37ced08e99d88c55a34fa46af93db03f8cf4e212c7957718bcf220f99057eae6d8ae6a8712632e5297a4893ea3f0df09cc8af25be9700f6a89ae020d18ce4eb93c748c300ba15148efd2e5c108d44d1e3e7c85febbdb2876cb178bcc7ccf44f4f791cbdf3ec01a8ce6823725aea18d2defe7915f954e2cc7708a3ae725806c79b6eec084e80ca47cfa6e93d6c487ac1ce488a0b659f5031b83ea101fb78d41b"], 0x0) 2m54.502013342s ago: executing program 33 (id=3192): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="5a2e558f30dc78387ecbc064676efe7d79aa036f20bd5971fa0eb0dea43bbad822d62c2b8793634ebc852e01c4c83caee6803fa9c35cb49b488b345428", 0x3d, 0x20000000, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x20000) read$usbmon(r2, &(0x7f0000000240)=""/161, 0xa1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00082b00fe8000000000000000000000000000aafe8000000000000000000000000000aa4e22000000089078c29d9f84bb43f6541d9506896071bce6759cab476f7acaf22ddac242cca90ec6b28efdc4624deaba4370199b22fe16a7e72241d8159276a1dffe9881c43e78e9bfe6446c19ef715c4d3eae086ebd0000000051cce374ecb76897f9477dcac3dd1f13cc7d95bc99aa1842f5c670efff7722d97fa2144e5e9fe59b7350d77a4e6ee31b164d38da7d01d0d1df99a19518ee3ab368b738c5189c2acbc2a37ced08e99d88c55a34fa46af93db03f8cf4e212c7957718bcf220f99057eae6d8ae6a8712632e5297a4893ea3f0df09cc8af25be9700f6a89ae020d18ce4eb93c748c300ba15148efd2e5c108d44d1e3e7c85febbdb2876cb178bcc7ccf44f4f791cbdf3ec01a8ce6823725aea18d2defe7915f954e2cc7708a3ae725806c79b6eec084e80ca47cfa6e93d6c487ac1ce488a0b659f5031b83ea101fb78d41b"], 0x0) 2m48.214647574s ago: executing program 5 (id=3235): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') pwrite64(r2, 0x0, 0x0, 0x40) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000011c0)='.\x00', 0x6000052e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x15, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2m48.046171647s ago: executing program 5 (id=3236): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 2m47.948638569s ago: executing program 5 (id=3237): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) 2m47.874292421s ago: executing program 5 (id=3240): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010027"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10800, 0x21) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@grpquota}, {@bh}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000240)="15ea197ba5bb9f37b5db0076b32f3ed28020e20d4f98b0cef4bbde9efa9a13a0", 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="84000000010100000000000000000000000000011c0004801800028005000100000000000c00034000000000000000044c00198008000100000200000800010030010000080001004006000508000100800800000800010010080002006000000008000100040b0000080002000300000008000200080200001200084000008000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000040)='./file0\x00', r5, r8, 0x100) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2cf7ffffff000000000000c4f4"]) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000b80)={0x3, 0xc, 0x1}) r12 = syz_clone(0x8014a000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r12) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000180)) waitid(0x2, r13, 0x0, 0x8, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x13, 0x1, 0x70bd25, 0x1, {{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x80000, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x4}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newtaction={0x78, 0x30, 0x871a15abc695fb3f, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040000}, 0x24004840) 2m47.527161749s ago: executing program 5 (id=3242): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010025bd7000fbdbdf250a00000ffd03ff0380080000080010000300000008001900", @ANYRES32=0x0, @ANYBLOB="de457d2860b9288003f47a30c3a447bc9e0caa090602d4b2c2dc026fc7fc8cc47768101265acd37f00e6b10973e188fd"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) socket$netlink(0x10, 0x3, 0x5) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x1fc13, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x5, 0xc2e}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0xfffe, 0x0, 0x200, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16, @ANYRESHEX, @ANYBLOB="c6661642861d2c6308493f48ee827febd602010823d75771baf4b438ce6e95efd9e3928c31b065c5643303bcd8e8273a86140496fe2166c8e64d8d81149f5af650", @ANYRESDEC, @ANYRES8=0x0], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) 2m47.242466306s ago: executing program 5 (id=3243): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x15, 0x803, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0xc840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair(0x29, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) socket(0x10, 0x80000000000802, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x80, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r9, &(0x7f0000001000), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f0000000040)={[{@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") 2m47.241998735s ago: executing program 34 (id=3243): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = socket(0x15, 0x803, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0xc840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair(0x29, 0x6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) socket(0x10, 0x80000000000802, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x80, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r9, &(0x7f0000001000), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f0000000040)={[{@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") 16.175619846s ago: executing program 7 (id=4130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 16.053869669s ago: executing program 7 (id=4133): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x2, 0xffffff40, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x1a8c1, 0x8, 0x65f8, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1100000004000000040000000010"], 0x48) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, 0x0, 0xfdef) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x9, 0xc9a, 0x80080000, 0x6, 0xe, "dee4f0020100010000001b347d5c0001021000"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x210002, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@access_user}, {@version_9p2000}, {@dfltgid}, {@cachetag={'cachetag', 0x3d, '/dev/ttyS3\x00'}}, {@afid={'afid', 0x3d, 0xffffffffffffffcd}}, {@version_L}], [{@permit_directio}]}}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x8) 15.189528458s ago: executing program 7 (id=4139): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[], 0x23) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf8, r3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) 15.146067069s ago: executing program 7 (id=4140): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[], 0x23) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xf8, r3}, 0x14) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40020) 15.083214611s ago: executing program 7 (id=4142): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0xf0ffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000000c0), 0xfd, 0x4a4, &(0x7f0000001300)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2") 14.66452867s ago: executing program 7 (id=4147): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x9}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x28}}, 0x20000080) 13.31298842s ago: executing program 6 (id=4156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 13.097290935s ago: executing program 6 (id=4157): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000000c0), 0xfd, 0x4a4, &(0x7f0000001300)="$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") 12.637302846s ago: executing program 6 (id=4160): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0xa, 0x20002f4}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\\-\'&', 0x3a, '\x00', 0x3a, './file0'}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]}) socketpair(0xb, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x50) 12.222520285s ago: executing program 1 (id=4161): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='smaps\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) 11.314553655s ago: executing program 1 (id=4165): setresuid(0x0, 0xee00, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00000013c0)=""/4100, 0x1004) 9.420263108s ago: executing program 6 (id=4166): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mount$9p_rdma(&(0x7f0000000140), &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000023c0), 0x10000, &(0x7f0000002400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8}}, {@common=@cachetag={'cachetag', 0x3d, 'exthdr\x00'}}, {@rq={'rq', 0x3d, 0x7fffffffffffffff}}, {@rq={'rq', 0x3d, 0xa}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0xb, 0x63, 0x61, 0xd5a657d86f3b20bd, 0x61, 0x36, 0x39], 0x2d, [0x34, 0x57, 0x38, 0x66], 0x2d, [0x0, 0x33, 0x38, 0x64], 0x2d, [0x65, 0x61, 0x35, 0x63], 0x2d, [0x30, 0x33, 0x64, 0x61, 0x39, 0x32, 0x33, 0x39]}}}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-(T,-\xe1'}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}, {0x85, 0x0, 0x0, 0x4b}}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r5, 0x6, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xad}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '>'}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 8.262477584s ago: executing program 1 (id=4168): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "ce2b7239806574fd65"}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x3100800, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0xfe, 0x7c2, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyHb8I1nshWV3czMsZAMhcpz1Jruwhyx7WBY2EGjPTYysmNSyFSw5xMbQmFLopdCWHgrtJef+SG+99gf01P4XPZSEtHFCAz0Ul5FGtmxLju3Yllt/PjCe9+aN9N533vx41gxSAEfWcPonF3EyIt5MIgaz5UlE9NRS3RGX6us9XV7si4hCEisrL/yQ1NZ5srxYiKbXpI5nmT9HxBevRZzJba63Mr8wNV4qFWez/Eh1+uZIZX7h7I3p8cniZHHmwujY2PmLf794Ye9i/fGbhRMP3vrvXz++9NOrf7r3xpdJXIoTWVlzHHtlOIazbdKTbsJ1/rPXlXVY0ukGsCvpodlVP8rjZAxGVy3VRv9BtgwA2C+vRMQKAHDEJK7/AHDEND4HeLK8WGhMnf1E4mA9/HdE9NXjf5pN9ZLu7J5dX+0+6MCTZN2dkSQihvag/uGIeP/Tl051Zfm0He6lAQfhzlJEXBsa3nz+TzY9s7BT57YqXOmtzYY3LD5q1x/opM/S8c8/msd/PVlJbnX8Ey3GP731Y/ePz1t/2+N/dXCVu/+8dWwlHf/9q/5s24bx3+pDa0NdWe53tWb1JNdvlIrnsm2QSvOjtVTrkdvpxz8/bld/Nv77MJ0evf3yB2n96Xxtjdz97t71r5kYr3Z/9TxBN3m4FANZckP8yWr/J23Gv1fWvVNX2zr+98/X32tXlsafxtuYNse/v1buRpxq2f9rfZls+XziSG13GGnsFC188u27A+3qb+7/dErrT+d7H2lrD5ciBh4NRpKsbYN6yWr8Q0nz85qVndfx9d3Bz9uVPTv+lvv/+LHkxVr6WLbs9ni1OjsacSz5/+bl59de28g31k/jP/2X1sd/vdrW+396lry2zfi7H3z/0e7j319p/BNb7/8b+r8vW7y25FmJe0+n2p4cttf/Y7XU6WxJ2v/Piqu5FckWDdztdgMAAAAAAAAAAAAAAAAAAAAAAACAnchFxIlIcvnVdC6Xz9d/w/sPMZArlSvVM9fLczMTUfut7KHoyTW+6rK76ftQR7OvbG3kz2/I/y0ifh8R7/T21/L5Qrk00engAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzvM3v/6e+6+106wCAfdPX6QYAAAfO9R8Ajp6dXf/7960dAMDB8f8/ABw9277+X9vfdgAAB8f//wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyzK5cvx5WliFheLKT5iVvzc1PlW2cnipWp/PRcIV8oz97MT5bLk6VivlCebvtGd+qzUrl8cyxm5m6PVIuV6khlfuHqdHlupnr1xvT4ZPFqsefAIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7avML0yNl0rF2d9E4s5aYHv8zv0djWvgcGzepkR3HIpmHOpEbxyKZuwy0XyW6O/AmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+GXAAAA//9u7RTT") r4 = creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x48) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="24000000190003012dbd7000ffdbdf251d01020008000900", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="2da4610e34b1be8591c2bbf9d2a964669ec8195fca50ab9032f293f0cb194d2fdaa090d3cff4cbb3e07d65d988abc7bbad867d6ae01b1b7fe3df14dbc12e57238d5e457b3aa9ef1e38454c58afe5a04e8df473375efc0e943aed083b70d19d4e7f13b6b58181015823ecab64f757af21e3fbea780219f7e29a2af51bc5e1387b8cfa47e6d17034275c67576d371cf10d9b5700999eb2d7b03ec81ec99c5698b132d05854769a012bc37e9e1a2f5c8980635104deab3237331c5871789012563375a67706a60e8549e9fb1287abc90723651b6e100e0d87fd3234f07b046093edc96abadf421b5bf0cefc731ee1e6b2ce239d5b00"/259], 0x24}}, 0x4040000) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f00000008c0)='./file0\x00', 0x20750e7, 0x0, 0xfc, 0x0, &(0x7f0000000900)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000240)) 7.441013603s ago: executing program 6 (id=4172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x10, &(0x7f0000000140)=ANY=[], 0x1, 0x546, &(0x7f00000005c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x2014, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xd80}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000380)}) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0x0, 0x0, 0x4a8, 0x2e8, 0x2e8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffff00, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'vxcan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2b, 0x4, 0x6}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, 0x0) pipe(&(0x7f0000000200)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") 6.116854362s ago: executing program 6 (id=4175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$eventfd(r4, &(0x7f0000000180), 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x8, 0xa, 0x20002f4}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\\-\'&', 0x3a, '\x00', 0x3a, './file0'}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]}) socketpair(0xb, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x50) 3.58820541s ago: executing program 1 (id=4180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0xffffffff, 0xffffffff, 0x406}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923", 0xeb}, {&(0x7f00000022c0)="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", 0x18a}], 0x3}, 0x0) 3.484000022s ago: executing program 0 (id=4182): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv0}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x1000000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) gettid() r1 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) sendfile(r1, r1, 0x0, 0x800000020) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x7ff00000) 3.195889358s ago: executing program 0 (id=4184): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}]}}}}}}}, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r0], 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r2) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, &(0x7f0000000240)={0x1, 0x3, 0x5b, 0xffff000000000000}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 3.132449209s ago: executing program 2 (id=4185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r2}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000d00)={0xa, 0xce1c, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001800)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xb2}, 0x106200, 0x10004, 0x30da, 0x5, 0x9, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x2400c890) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xc0, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.870266406s ago: executing program 1 (id=4186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0xc000) fallocate(r2, 0x0, 0x0, 0x8800000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x60100, 0x32) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x7, 0xc04, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x79bd}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x207, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x30, r7, 0x1, 0x8, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xfee9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x587, &(0x7f00000045c0)="$eJzs3V1rHFUcB+D/mWzSl7QmFUFrEQMFW1CTJq0oIthivfPCl4JXgjFJS+m2DU0EWyttoX4D/QCCd96Il0WkqCDeeif4AUQs0ubGu8hsZtJtu5vmZdOpneeBbebMyXDOZPn1zJydmQ2gtkbyf7KI3RExmyKG2uoaUVSOLP3erZsXpxZuXpxKsbj43j8pUrGu/P1U/BwsNt4aEb/9mOLxvnvbnTt/4dRkszlzriiPzZ+eHZs7f+HFk6cnT8ycmDkzMf7y+EuHDk4cOtCT/dwZET+PHm1cPf7Gnm+nvt516ftvrqU4HDuK+vb96JWRGFn+m7TL/66v9LqxivQV+9P+FqdGhR1iTcr3rz8inoyh6Ivbb95QfP5OpZ0DNtViilgEairJP9RUeRyQn/+Wr2qPSIAH5caRpQmAW2lpbm9hOf+NpbnB2NqaG9i+kKJ9WidFRC9m5vI2Zp9LQ/krNmkeDujs8pWIeKrT+J9a2RxuzeLn+c/uyH8WEW8XP/P1766z/ZG7yvIPD85G8v9hW/4/Wmf78g8AAAAAAAC9c/1IRLzQ6fO/bPn6n+hw/c9gRBzuQfv3//wvu9SDZoAObhyJeC0iymv/FtryXxjuK0o7W9cD9KfjJ5szByLisYjYH/1b8vL4Cm2M7Pm1v2td2/V/+Stvv7wWsOjHX40td24zPTk/uZF9BpbcuBLxdKNT/tPy+J/uHP9/eaYY+2dX2cbi0dd/6lZ3//wDm2Xxq4h9Hcf/20+uSCs/n2OsdTwwVh4V3OvTD6591619+Yfq5OP/9pXzP5zan9czt/Y2Pvv7jw3kv/Px/0A61nrkzECx7pPJ+flz4xED6a1710+svc/wKCrzUOYlz//+vZ3P/7sc/7dsi4jLq2zz2A9vXu1WZ/yH6uT5n17T+L/2hb3vf/lvt/ZXN/4fao3p+4s15v9gZasNaNX9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/oywidkTKRpeXs2x0NGIwIp6I7Vnz7Nz888fPfnxmOq9rff9/Vn7T79BSOZXf/z/cVp64q3wwInZFxBd921rl0amzzemqdx4AAAAAAAAAAAAAAAAAAAAeEoNd7v/P/dlXde+ATdeougNAZeQf6kv+ob7kH+pL/qG+5B/qS/6hvuQf6kv+ob7kHwAAAAAAHim7nr3+e4qIy69ua71yA0Vdf6U9Azbb4ao7AFTGI36gvlz6A/XlHB9I96nfuu4tAQAAAAAAAAAAAIBe2bfb/f9QV1nVHQAq0/3+f08GgEed+/+hvpzjA+7/BwAAAAAAAAAAAICH39z5C6cmm82Zc+td2LKxzS1YqM9CpB4k7gEtVP0/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPovAAD//0C19y8=") 2.828390437s ago: executing program 0 (id=4187): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}}}}}}, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r1], 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(r2) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, &(0x7f0000000240)={0x1, 0x3, 0x5b, 0xffff000000000000}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) 2.720606019s ago: executing program 0 (id=4188): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004508001c0067e3008002907800000000e00003000800907800061301"], 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x400}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000930100000003000000b70b0000ffffff7f04000000050001000500000004000000010000000101000000615f5f2e"], &(0x7f0000000f40)=""/4089, 0x4e, 0xff9, 0x9}, 0x28) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@newtaction={0x490, 0x30, 0xffff, 0x70bd2c, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x206, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xb, 0x0, 0x2, 0x9d, 0x9, 0x6, 0xd65, 0xfffffff9, 0x0, 0x8, 0x6, 0x6, 0x1, 0x100, 0x0, 0x10, 0xffff, 0x2, 0x800, 0x80000000, 0x8, 0x4dbbcd1b, 0x4, 0x8, 0x800, 0x7, 0x0, 0x8, 0xb97, 0xd6, 0x7, 0x9, 0x0, 0xea, 0x8, 0x9, 0x1, 0x8, 0xe3, 0x2, 0x2, 0x9, 0x437f, 0x200, 0x0, 0x200, 0x1, 0x1ff, 0x3, 0xd5, 0x6, 0x2, 0xfffffff9, 0x2, 0x6, 0x7, 0xcf5, 0x83a7, 0x7db, 0x3, 0xb, 0x8, 0x5, 0x809, 0x1000, 0x6, 0x7, 0x8e09, 0x7af, 0x4, 0xe8, 0x3, 0x5, 0x6, 0x81, 0x2, 0x8, 0x5, 0xfffffffe, 0x101, 0x5, 0x2, 0x2921579d, 0x6, 0xfffffff8, 0x40, 0x2, 0x9, 0x2, 0x4, 0x2, 0x8003, 0x9, 0x5, 0xfffffffd, 0x8, 0x8, 0x2, 0x3, 0x2, 0x3ff, 0x9, 0x5, 0xb3, 0x6832, 0x4, 0x8, 0x401, 0x6, 0x810b, 0x8, 0x3, 0x1, 0x6, 0x8cf60000, 0x0, 0x2, 0x7, 0x5, 0x6, 0x6, 0x9, 0x6, 0x81, 0x384, 0x7, 0x1, 0x2, 0x1000, 0x7, 0xf, 0x4, 0x1, 0x0, 0xb, 0x4, 0x0, 0x9, 0x6e55, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0xa, 0x63a82083, 0x0, 0x0, 0x80000001, 0xde, 0xb, 0x401, 0x6, 0x7, 0x8, 0x10001, 0x590a, 0x3, 0x8, 0x1, 0x0, 0x4defd41f, 0x80000000, 0x9, 0x6, 0x8, 0xfff, 0xd73, 0x0, 0xce04, 0x7, 0xf, 0x10, 0x1, 0x1, 0x7, 0xc000, 0x0, 0x81, 0xe03, 0x3, 0x3, 0x32, 0x20e2ffff, 0x222f, 0x8, 0x5, 0x74e, 0x0, 0x2, 0x0, 0x830, 0xfff, 0x7fffffff, 0x9, 0x2, 0xc, 0x0, 0x2, 0x1ff, 0x9, 0x9, 0x8, 0x3, 0x7ff, 0x6, 0x9, 0x5, 0x1d89, 0xd14, 0x2, 0xa5a, 0x4, 0x4, 0xfffffff8, 0x7, 0x4, 0x9, 0x0, 0x6, 0x5, 0x2, 0x7, 0x0, 0x3, 0x7ff, 0xfffffffa, 0x800, 0x80, 0x3, 0xf71800, 0x1, 0x101, 0x80000000, 0x5, 0x4010, 0x6, 0x7, 0x4, 0x7, 0x1, 0xe514, 0x101, 0x3, 0x10001, 0x5, 0x8, 0x6061, 0xc, 0x1ff, 0x8001, 0x8, 0x8, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setreuid(0x0, 0xee01) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d", 0x4d}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x81ff, &(0x7f0000000040)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x800e0000, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0xffffff81, 0x0, 0x6000}, 0x40004) 2.493654194s ago: executing program 0 (id=4189): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mount$9p_rdma(&(0x7f0000000140), &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000023c0), 0x10000, &(0x7f0000002400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8}}, {@common=@cachetag={'cachetag', 0x3d, 'exthdr\x00'}}, {@rq={'rq', 0x3d, 0x7fffffffffffffff}}, {@rq={'rq', 0x3d, 0xa}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0xb, 0x63, 0x61, 0xd5a657d86f3b20bd, 0x61, 0x36, 0x39], 0x2d, [0x34, 0x57, 0x38, 0x66], 0x2d, [0x0, 0x33, 0x38, 0x64], 0x2d, [0x65, 0x61, 0x35, 0x63], 0x2d, [0x30, 0x33, 0x64, 0x61, 0x39, 0x32, 0x33, 0x39]}}}, {@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-(T,-\xe1'}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}, {0x85, 0x0, 0x0, 0x4b}}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r5, 0x6, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xad}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '>'}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1.3397686s ago: executing program 2 (id=4190): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000000c0), 0xfd, 0x4a4, &(0x7f0000001300)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2") 680.301295ms ago: executing program 0 (id=4191): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "ce2b7239806574fd65"}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x3100800, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0xfe, 0x7c2, &(0x7f0000001740)="$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") r4 = creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x48) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="24000000190003012dbd7000ffdbdf251d01020008000900", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="2da4610e34b1be8591c2bbf9d2a964669ec8195fca50ab9032f293f0cb194d2fdaa090d3cff4cbb3e07d65d988abc7bbad867d6ae01b1b7fe3df14dbc12e57238d5e457b3aa9ef1e38454c58afe5a04e8df473375efc0e943aed083b70d19d4e7f13b6b58181015823ecab64f757af21e3fbea780219f7e29a2af51bc5e1387b8cfa47e6d17034275c67576d371cf10d9b5700999eb2d7b03ec81ec99c5698b132d05854769a012bc37e9e1a2f5c8980635104deab3237331c5871789012563375a67706a60e8549e9fb1287abc90723651b6e100e0d87fd3234f07b046093edc96abadf421b5bf0cefc731ee1e6b2ce239d5b00"/259], 0x24}}, 0x4040000) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f00000008c0)='./file0\x00', 0x20750e7, 0x0, 0xfc, 0x0, &(0x7f0000000900)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000240)) 635.037816ms ago: executing program 2 (id=4192): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000001840)=[{&(0x7f0000002880)="d64a4084c3fb97b2527b91a366375d46eab01f92ba26e2a671dfc2413f0e6c8353e4ef36eb31b31d8c0a239785a53d74a25693d00b327086f8ba1348a4191fd4b30a021e0db8834c02d249abdfd78c95868a743da457e221583cbeba12d62dce7193265c4bc594e735b88b4dbec02e6b9f50fa0d62d2a20a34548b2a14f2fd44e60ae1e62ef9f2a08f38dac5633814608955", 0x92}, {&(0x7f00000013c0)="5a0c91718a617b6e53a446aa924e113f0fd7c035cf4da8f849fe3553f73430d287391147cd47808b621d3565dcb90362a1513ba5b2a5", 0x36}, {&(0x7f0000001400)="60fbfef30f7446729f60b5942f7f60eab07d418f2e7dc0e36d6fea1370240fce5798d7945329d450e9180a6a41b59513757404a5db8e562a5c0ed7922270bbc3ab50f0ba3e171e4158d0ac11d1247f8ff43e8a2df0419e36498dd61964e8557b763283dbbee83843c6972f1007bb17fc3ef14b31ea5127ca74af9098cdcd60db396877ae0b190510fa8cb12a05a9af7bd1cdd330a74784576631eb57f991a80831fba71113dfefabae7afc", 0xab}, {&(0x7f00000014c0)="50d26b21e650f3360e1b04ccbed4147f56cfe29793e3f71a31c1f84e34dbd7a36d72c5dfc888efbd475a24284155b941e356078659b6bed82ee7a02d58c680acff8cb2cbc44d86d183f5b5f8b093e6e83fdb5eecd0b039f638aa6fd75f683facb1cc58bdca3c77b56f5938d7318a75d946430c1536e55090f327f742ba35d32bedb9547df9dbc5412f57083835c3e5e4d2874284a046014d442c816ba7a21c342e1cd09fd8841d0980bf95bd336aa800ff24db2271946abe3ae89984170604023852d42d9c00a9980b2ef93cc2868c5deae36e77b46d257511f0ff1d843eb7ab1e661614", 0xe4}, {&(0x7f00000015c0)="a401539476c0be087d6eeca0c364e8d30cec5c48ccaffec7aa55c31b3de948f28316ffaf2262c90d4dac385e95c7520fbcbb1380b418206d3180c99bcf9220e6e107ff64de3d57245b73a1b2a239d752d8ed19eb2d9cecf0bcc70c12686c1313985acc0733fdfbbbfcff14738621d50d794276176ce3d2571fe7a91872", 0x7d}, {&(0x7f0000001640)="ada423fc0243ff6f15676b6d0d3c37e7ae107cebaa619306e42deb89b6a885f690a0cbe72c1208decc75ebefa7742e0b97c969684f067d437047f0bda760594963ee9667261d4d5479df8e18ce92e8f9647c1f1f4b5162ea09ebb0a21db2a0112aa1a8588398882a13d08feaabc2f02a7ee8f44703a6033b22716057731c8ffc7c9f6dffd7afa6af736fcab707cf871d9ce65a24408792e3870c622a2af15529724235ea1ee614e71d26cbf59e19a7302bc7dc96de3269842549ea2aaac7b1a4378630c2114de5edcd0cba32137d9e", 0xcf}, {&(0x7f0000002740)="48a4812b4230d2043261634b002c0ff987d4515e1f1eb6af3b18851484101aa47880db6c305205f74a207ba01f68b45672bacf", 0x33}, {&(0x7f0000000200)="ddc50c4a251180ab68dcb700237bcad2601a11fad3021c7a9418b0b4acfdb8212a7179dfa9b349ac2639b99ef0fc9086defe98c2d40b7343d215d96b2e21ae027b29b4ce28bf6c0fd1c1", 0x4a}, {0x0}], 0x9, 0x5, 0x401) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @window={0x3, 0x1, 0x7}, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendfile(r1, r0, 0x0, 0xf03a0005) 525.842128ms ago: executing program 2 (id=4193): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 422.518611ms ago: executing program 2 (id=4194): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x7) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB='memory_localevents,pids_localevents,memory_hugetlb_accounting,pids_localevents,memory_hugetlb_accounting']) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af0ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 109.709057ms ago: executing program 2 (id=4195): socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x5) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000540)=""/173) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRESHEX, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0xffffe61b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb5b0}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000300)="eea6", 0x2}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980), 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000000c0)=0x1000080, 0x4) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)='\x00\x00', 0x2, r2) keyctl$link(0x8, 0x0, r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000240)={[{@barrier}, {@dax_inode}]}, 0x3e, 0x51a, &(0x7f0000001200)="$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") shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002000010024bd7002fddbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x44044}, 0x40) 0s ago: executing program 1 (id=4196): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x7, 0xbd6, 0x2, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd [ 568.085815][T16498] __dump_stack+0x1d/0x30 [ 568.085859][T16498] dump_stack_lvl+0x95/0xd0 [ 568.085883][T16498] dump_stack+0x15/0x1b [ 568.085906][T16498] should_fail_ex+0x25e/0x270 [ 568.085936][T16498] should_failslab+0x8c/0xb0 [ 568.085966][T16498] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 568.086117][T16498] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 568.086144][T16498] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 568.086175][T16498] ? strlen+0x19/0x40 [ 568.086201][T16498] kmemdup_nul+0x36/0xc0 [ 568.086272][T16498] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 568.086297][T16498] vfs_parse_monolithic_sep+0x16a/0x270 [ 568.086336][T16498] generic_parse_monolithic+0x24/0x30 [ 568.086367][T16498] parse_monolithic_mount_data+0x46/0x60 [ 568.086446][T16498] do_new_mount+0x24e/0x8d0 [ 568.086475][T16498] path_mount+0x4ad/0xb90 [ 568.086502][T16498] __se_sys_mount+0x28c/0x2e0 [ 568.086533][T16498] ? exit_to_user_mode_loop+0x5a/0x8c0 [ 568.086627][T16498] __x64_sys_mount+0x67/0x80 [ 568.086649][T16498] x64_sys_call+0x2d61/0x3020 [ 568.086741][T16498] do_syscall_64+0x136/0x3c0 [ 568.086809][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.086830][T16498] RIP: 0033:0x7f00ebdade99 [ 568.086848][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.086967][T16498] RSP: 002b:00007f00ea807028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 568.086989][T16498] RAX: ffffffffffffffda RBX: 00007f00ec035fa0 RCX: 00007f00ebdade99 [ 568.087006][T16498] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 568.087023][T16498] RBP: 00007f00ea807090 R08: 0000200000000100 R09: 0000000000000000 [ 568.087081][T16498] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000002 [ 568.087093][T16498] R13: 00007f00ec036038 R14: 00007f00ec035fa0 R15: 00007ffde7cec6b8 [ 568.087112][T16498] [ 568.347165][T16504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16504 comm=syz.7.3802 [ 568.425421][T16506] set_capacity_and_notify: 3 callbacks suppressed [ 568.425436][T16506] loop0: detected capacity change from 0 to 1024 [ 568.440059][T16506] EXT4-fs: Ignoring removed oldalloc option [ 568.445985][T16506] EXT4-fs: Ignoring removed bh option [ 568.490898][T16510] loop1: detected capacity change from 0 to 512 [ 568.500063][T16510] EXT4-fs: dax option not supported [ 568.506784][T16506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 568.518830][T16506] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.635221][T16519] loop6: detected capacity change from 0 to 512 [ 568.648686][T16519] EXT4-fs: Ignoring removed i_version option [ 568.656005][T16519] EXT4-fs: Ignoring removed bh option [ 568.786392][T16519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.801598][T16519] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.109435][T16528] netlink: 'syz.1.3808': attribute type 2 has an invalid length. [ 569.295109][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 569.527253][T16528] loop1: detected capacity change from 0 to 512 [ 570.141182][T16537] loop2: detected capacity change from 0 to 512 [ 570.153559][T16528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 570.169775][T16528] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 570.193193][T16537] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.3809: corrupted xattr block 95: invalid header [ 570.206969][T16537] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 570.207322][T16537] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3809: bg 0: block 7: invalid block bitmap [ 570.216453][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 570.216474][ C1] EXT4-fs (loop2): initial error at time 4000000763: ext4_expand_extra_isize_ea:2810: inode 11 [ 570.216501][ C1] EXT4-fs (loop2): last error at time 4000000763: ext4_expand_extra_isize_ea:2810: inode 11 [ 570.255619][T16537] loop2: lost filesystem error report for type 5 error -117 [ 570.255942][T16537] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 570.271926][T16537] loop2: lost filesystem error report for type 5 error -117 [ 570.272287][T16537] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.3809: corrupted xattr block 95: invalid header [ 570.293099][T16537] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 570.299062][T16537] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 570.317345][T16537] EXT4-fs (loop2): 1 orphan inode deleted [ 570.323525][T16537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.350017][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.374173][T16528] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3808: corrupted inode contents [ 570.440324][T16528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 570.440893][T16528] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.3808: mark_inode_dirty error [ 570.450352][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 570.450380][ C1] EXT4-fs (loop1): initial error at time 4000000763: ext4_do_update_inode:5742: inode 15 [ 570.450472][ C1] EXT4-fs (loop1): last error at time 4000000763: ext4_do_update_inode:5742: inode 15 [ 570.527887][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.563278][T16528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 570.586151][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3813'. [ 570.695319][T16528] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.3808: corrupted inode contents [ 570.731794][T16528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 570.732575][T16528] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.3808: mark_inode_dirty error [ 570.754113][T16528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 570.754327][T16528] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.3808: mark inode dirty (error -117) [ 570.776015][T16528] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 570.781989][T16528] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 570.783598][T16554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16554 comm=syz.7.3816 [ 570.817251][T16528] EXT4-fs (loop1): 1 orphan inode deleted [ 570.851167][T16528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 570.935438][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.966347][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 570.984036][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 571.012801][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 571.110128][T16559] loop7: detected capacity change from 0 to 512 [ 571.117354][T16559] EXT4-fs: dax option not supported [ 571.139423][T16565] loop2: detected capacity change from 0 to 1024 [ 571.148206][T16565] EXT4-fs: Ignoring removed oldalloc option [ 571.154723][T16565] EXT4-fs: Ignoring removed bh option [ 571.230510][T16576] loop1: detected capacity change from 0 to 512 [ 571.238041][T16576] EXT4-fs: Ignoring removed i_version option [ 571.244156][T16576] EXT4-fs: Ignoring removed bh option [ 571.351343][T16576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.366984][T16576] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.458611][T16575] loop7: detected capacity change from 0 to 1024 [ 571.467192][T16565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 571.543533][T13933] xfrm0 speed is unknown, defaulting to 1000 [ 571.549789][T16563] infiniband syz0: set active [ 571.588049][T16575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.611894][T16563] infiniband syz0: added xfrm0 [ 571.625827][T16565] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.695230][T16563] RDS/IB: syz0: added [ 571.720296][T16563] smc: adding ib device syz0 with port count 1 [ 571.734971][T16563] smc: ib device syz0 port 1 has no pnetid [ 571.741385][T13933] xfrm0 speed is unknown, defaulting to 1000 [ 571.749206][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 571.901342][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 571.937365][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.021350][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 572.138533][T16591] loop2: detected capacity change from 0 to 1024 [ 572.162312][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.174254][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.206643][T16591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.299156][T16601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16601 comm=syz.6.3828 [ 572.344753][T16599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.374088][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.492325][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.536496][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3830'. [ 572.698221][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.711802][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.800366][T16563] xfrm0 speed is unknown, defaulting to 1000 [ 572.916434][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.008782][ T28] audit: type=1400 audit(4000000765.795:2082): avc: denied { create } for pid=16618 comm="syz.1.3831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 573.030264][T16617] EXT4-fs: dax option not supported [ 573.088349][T16629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3836'. [ 573.131281][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.201815][T16633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.203598][T16641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16641 comm=syz.7.3839 [ 573.316151][T16633] EXT4-fs (loop1): shut down requested (0) [ 573.346263][T16645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.371132][T16633] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 573.487306][T16655] set_capacity_and_notify: 6 callbacks suppressed [ 573.487398][T16655] loop2: detected capacity change from 0 to 512 [ 573.508710][T16655] EXT4-fs: Ignoring removed i_version option [ 573.515466][T16655] EXT4-fs: Ignoring removed bh option [ 573.585447][T16655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.601214][T16655] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.901437][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.141022][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.181853][ T28] audit: type=1400 audit(4000000766.975:2083): avc: denied { ioctl } for pid=16671 comm="syz.6.3850" path="socket:[53853]" dev="sockfs" ino=53853 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 574.208234][T16673] loop0: detected capacity change from 0 to 256 [ 574.226887][T16673] FAT-fs (loop0): Directory bread(block 1285) failed [ 574.249142][T16673] FAT-fs (loop0): Directory bread(block 1286) failed [ 574.270543][T16676] loop6: detected capacity change from 0 to 512 [ 574.277026][T16673] FAT-fs (loop0): Directory bread(block 1287) failed [ 574.292627][T16676] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 574.302747][T16673] FAT-fs (loop0): Directory bread(block 1288) failed [ 574.310733][T16673] vfat filesystem being mounted at /147/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 574.326633][T16676] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 574.384365][T16676] EXT4-fs (loop6): 1 truncate cleaned up [ 574.396403][T16676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.553489][T16680] loop1: detected capacity change from 0 to 512 [ 574.580479][T16680] EXT4-fs: dax option not supported [ 574.594044][T16688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16688 comm=syz.7.3854 [ 574.685736][T16692] xt_hashlimit: size too large, truncated to 1048576 [ 574.815607][T16694] loop7: detected capacity change from 0 to 4096 [ 574.895827][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.928810][T16694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.958969][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.022956][T16701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3853'. [ 575.139517][T16692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=16692 comm=syz.7.3856 [ 575.193026][T16704] loop0: detected capacity change from 0 to 512 [ 575.302632][T16704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.330358][T16704] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.506522][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.646615][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.666619][T16726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16726 comm=syz.1.3866 [ 575.763736][T16731] loop0: detected capacity change from 0 to 512 [ 575.771945][T16731] EXT4-fs: dax option not supported [ 575.846685][T16735] xt_hashlimit: size too large, truncated to 1048576 [ 575.863222][T16730] loop7: detected capacity change from 0 to 128 [ 575.992877][T16737] loop1: detected capacity change from 0 to 512 [ 576.005775][T16737] EXT4-fs: Ignoring removed i_version option [ 576.012777][T16737] EXT4-fs: Ignoring removed bh option [ 576.114969][T16737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.130758][T16737] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.405615][T16746] loop6: detected capacity change from 0 to 512 [ 576.464216][T16746] ext4: Unknown parameter 'subj_type' [ 576.471007][T16739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.745273][T16730] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.810311][T16730] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.951073][T16746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.026347][T16746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 577.034293][T16746] System zones: 1-12 [ 577.040662][T16756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=16756 comm=syz.0.3868 [ 577.077890][T16746] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3869: invalid indirect mapped block 8 (level 2) [ 577.091070][T16746] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 577.114929][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 577.130510][ C1] EXT4-fs (loop6): initial error at time 4000000769: ext4_free_branches:1023: inode 11 [ 577.140198][ C1] EXT4-fs (loop6): last error at time 4000000769: ext4_free_branches:1023: inode 11 [ 577.174178][T16746] EXT4-fs (loop6): 1 truncate cleaned up [ 577.201630][T14439] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.223635][T16746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.474971][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.560049][T16767] EXT4-fs: Ignoring removed nobh option [ 577.570324][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.592910][T16767] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.3872: corrupted in-inode xattr: overlapping e_value [ 577.651634][T16767] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 577.661515][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 577.663312][T16767] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3872: couldn't read orphan inode 15 (err -117) [ 577.670705][ C0] EXT4-fs (loop1): initial error at time 4000000770: ext4_iget_extra_inode:5180: inode 15 [ 577.698976][T16767] loop1: lost filesystem error report for type 5 error -117 [ 577.699016][ C0] EXT4-fs (loop1): last error at time 4000000770: ext4_orphan_get:1404 [ 577.699765][T16767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.706360][ C0] [ 577.719539][T16771] EXT4-fs: dax option not supported [ 577.792417][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.837168][T16777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16777 comm=syz.1.3877 [ 577.860096][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.878124][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3879'. [ 577.916657][T16779] gtp0: entered promiscuous mode [ 577.921699][T16779] gtp0: entered allmulticast mode [ 578.216590][T16781] EXT4-fs: dax option not supported [ 578.341323][T16794] EXT4-fs: Ignoring removed i_version option [ 578.347999][T16794] EXT4-fs: Ignoring removed bh option [ 578.515471][T16794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.530808][T16794] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 580.543712][T16811] set_capacity_and_notify: 7 callbacks suppressed [ 580.543740][T16811] loop1: detected capacity change from 0 to 512 [ 580.809829][T16802] loop7: detected capacity change from 0 to 128 [ 581.076511][T16811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 581.118489][T16811] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.3884: invalid indirect mapped block 4294967295 (level 0) [ 581.189536][T16811] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.190835][T16811] EXT4-fs (loop1): Remounting filesystem read-only [ 581.200277][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 581.200323][ C1] EXT4-fs (loop1): initial error at time 4000000773: ext4_free_branches:1023: inode 16 [ 581.200392][ C1] EXT4-fs (loop1): last error at time 4000000773: ext4_free_branches:1023: inode 16 [ 581.329573][T16811] EXT4-fs (loop1): 1 orphan inode deleted [ 581.349713][T16811] EXT4-fs (loop1): 1 truncate cleaned up [ 581.391153][T16811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.437211][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.461798][ T28] audit: type=1400 audit(4000000774.255:2084): avc: denied { shutdown } for pid=16815 comm="syz.7.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 581.536601][ T28] audit: type=1400 audit(4000000774.335:2085): avc: denied { write } for pid=16797 comm="syz.1.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 581.558921][T16821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16821 comm=syz.7.3890 [ 581.723614][T16830] loop7: detected capacity change from 0 to 512 [ 581.733694][T16830] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 581.750441][T16830] EXT4-fs (loop7): 1 truncate cleaned up [ 581.757715][T16830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.825982][T16833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 582.029438][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.059958][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.394321][T16853] FAULT_INJECTION: forcing a failure. [ 582.394321][T16853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.417861][T16853] CPU: 1 UID: 0 PID: 16853 Comm: syz.7.3895 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 582.417897][T16853] Tainted: [W]=WARN [ 582.417905][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.417919][T16853] Call Trace: [ 582.417926][T16853] [ 582.417975][T16853] __dump_stack+0x1d/0x30 [ 582.418013][T16853] dump_stack_lvl+0x95/0xd0 [ 582.418083][T16853] dump_stack+0x15/0x1b [ 582.418105][T16853] should_fail_ex+0x25e/0x270 [ 582.418169][T16853] should_fail+0xb/0x20 [ 582.418208][T16853] should_fail_usercopy+0x1a/0x20 [ 582.418244][T16853] _copy_to_user+0x20/0xa0 [ 582.418330][T16853] simple_read_from_buffer+0xb5/0x130 [ 582.418411][T16853] proc_fail_nth_read+0x10e/0x150 [ 582.418437][T16853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 582.418562][T16853] vfs_read+0x18e/0x7c0 [ 582.418582][T16853] ? __rcu_read_unlock+0x4e/0x70 [ 582.418669][T16853] ? __fget_files+0x184/0x1c0 [ 582.418694][T16853] ? mutex_lock+0x57/0x90 [ 582.418763][T16853] ksys_read+0xdc/0x1a0 [ 582.418782][T16853] __x64_sys_read+0x40/0x50 [ 582.418805][T16853] x64_sys_call+0x2886/0x3020 [ 582.418829][T16853] do_syscall_64+0x136/0x3c0 [ 582.418853][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.418920][T16853] RIP: 0033:0x7f134b00e6ce [ 582.418936][T16853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.418953][T16853] RSP: 002b:00007f1349a85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 582.418972][T16853] RAX: ffffffffffffffda RBX: 00007f1349a866c0 RCX: 00007f134b00e6ce [ 582.418989][T16853] RDX: 000000000000000f RSI: 00007f1349a860a0 RDI: 0000000000000005 [ 582.419084][T16853] RBP: 00007f1349a86090 R08: 0000000000000000 R09: 0000000000000000 [ 582.419098][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.419110][T16853] R13: 00007f134b2d6128 R14: 00007f134b2d6090 R15: 00007ffc81a89b38 [ 582.419127][T16853] [ 582.651618][T16847] loop1: detected capacity change from 0 to 512 [ 582.658652][T16847] EXT4-fs: dax option not supported [ 582.718619][T16861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3902'. [ 583.124898][T16871] xt_TPROXY: Can be used only with -p tcp or -p udp [ 583.273487][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 583.323596][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'. [ 583.589572][T16878] loop7: detected capacity change from 0 to 512 [ 583.648602][T16878] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 583.676144][T16878] EXT4-fs (loop7): 1 truncate cleaned up [ 583.683354][T16878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.722962][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.001294][T16906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 584.268251][T16909] loop0: detected capacity change from 0 to 512 [ 584.316995][T16909] EXT4-fs: dax option not supported [ 584.504530][T16898] loop2: detected capacity change from 0 to 1024 [ 584.511245][T16913] loop0: detected capacity change from 0 to 1024 [ 584.517999][T16913] EXT4-fs: Ignoring removed oldalloc option [ 584.524023][T16913] EXT4-fs: Ignoring removed bh option [ 584.572233][T16898] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 584.577432][T16913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 584.594056][T16898] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 584.605662][T16898] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.3910: Failed to acquire dquot type 0 [ 584.615458][T16913] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.618991][T16898] loop2: lost filesystem error report for type 5 error -117 [ 584.631611][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 584.646851][ C1] EXT4-fs (loop2): initial error at time 4000000777: ext4_acquire_dquot:7041 [ 584.656419][ C1] EXT4-fs (loop2): last error at time 4000000777: ext4_acquire_dquot:7041 [ 584.670266][T16919] loop6: detected capacity change from 0 to 512 [ 584.677334][T16898] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 584.717307][T16919] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.3914: iget: bad extra_isize 90 (inode size 256) [ 584.741697][T16898] EXT4-fs (loop2): 1 truncate cleaned up [ 584.767039][T16919] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 584.767208][T16898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.770773][T16924] batman_adv: batadv0: Adding interface: macsec1 [ 584.782717][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 584.789047][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 584.796599][T16925] 9p: Bad value for 'rfdno' [ 584.804284][ C1] EXT4-fs (loop6): initial error at time 4000000777: ext4_xattr_inode_iget:441: inode 18 [ 584.804315][ C1] EXT4-fs (loop6): last error at time 4000000777: ext4_xattr_inode_iget:441: inode 18 [ 584.804611][T16924] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 584.812587][T16919] EXT4-fs (loop6): Remounting filesystem read-only [ 584.816073][T16924] batman_adv: batadv0: Interface activated: macsec1 [ 584.830688][T16919] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 584.894296][T16928] loop1: detected capacity change from 0 to 512 [ 584.907209][T16929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3917'. [ 584.917042][T16919] EXT4-fs (loop6): 1 orphan inode deleted [ 584.923584][T16928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 584.927806][T16919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.958355][T16928] EXT4-fs (loop1): 1 truncate cleaned up [ 584.973158][T16928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.070584][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.112853][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.170499][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 585.532458][T16946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 585.683431][T16936] EXT4-fs: dax option not supported [ 585.702426][T16943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3923'. [ 585.824792][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.839842][T16948] syzkaller1: entered promiscuous mode [ 585.883381][T16948] syzkaller1: entered allmulticast mode [ 585.890395][T16951] set_capacity_and_notify: 1 callbacks suppressed [ 585.890409][T16951] loop2: detected capacity change from 0 to 1024 [ 585.932070][T16951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.024955][T16962] loop1: detected capacity change from 0 to 1024 [ 586.034709][T16962] EXT4-fs: Ignoring removed oldalloc option [ 586.042507][T16962] EXT4-fs: Ignoring removed bh option [ 586.090303][T16962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 586.105313][T16962] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.144901][T16970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3344 sclass=netlink_route_socket pid=16970 comm=syz.0.3928 [ 586.257820][T16977] xt_hashlimit: size too large, truncated to 1048576 [ 586.286548][T16979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3931'. [ 586.341585][T16980] loop1: detected capacity change from 0 to 4096 [ 586.455592][T16977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=16977 comm=syz.1.3929 [ 586.567288][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3933'. [ 586.860200][T16993] loop7: detected capacity change from 0 to 512 [ 586.898429][T16993] EXT4-fs: dax option not supported [ 586.948357][T16999] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3937'. [ 587.145191][T17002] loop7: detected capacity change from 0 to 1024 [ 587.160315][T17002] EXT4-fs: Ignoring removed oldalloc option [ 587.166248][T17002] EXT4-fs: Ignoring removed bh option [ 587.305097][T17009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 587.345666][T17002] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.681801][T17016] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3942'. [ 587.802718][T17022] loop2: detected capacity change from 0 to 512 [ 587.829694][T17023] loop1: detected capacity change from 0 to 1024 [ 587.848255][T17022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 587.873999][T17022] EXT4-fs (loop2): 1 truncate cleaned up [ 587.920467][ T28] audit: type=1400 audit(4000000780.724:2086): avc: denied { name_bind } for pid=17029 comm="syz.0.3947" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 587.962816][T17036] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3949'. [ 588.154018][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.167170][T17052] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 588.248068][T17055] syzkaller0: entered promiscuous mode [ 588.254394][T17055] syzkaller0: entered allmulticast mode [ 588.671754][T17064] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3958'. [ 588.747110][ T28] audit: type=1400 audit(4000000781.544:2087): avc: denied { ioctl } for pid=17063 comm="syz.7.3958" path="socket:[55603]" dev="sockfs" ino=55603 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 589.376778][T17074] loop1: detected capacity change from 0 to 512 [ 589.418508][T17069] loop2: detected capacity change from 0 to 764 [ 589.512027][T17074] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.532401][T17078] loop7: detected capacity change from 0 to 512 [ 589.559202][T17078] EXT4-fs: Ignoring removed nobh option [ 589.586844][T17078] EXT4-fs: Mount option(s) incompatible with ext2 [ 589.606149][T17074] EXT4-fs (loop1): 1 truncate cleaned up [ 589.780440][T17086] syzkaller0: entered promiscuous mode [ 589.786428][T17086] syzkaller0: entered allmulticast mode [ 590.007772][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 590.936281][T17103] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 591.006586][T17103] EXT4-fs (loop7): 1 truncate cleaned up [ 592.092080][T17105] set_capacity_and_notify: 1 callbacks suppressed [ 592.092146][T17105] loop0: detected capacity change from 0 to 512 [ 592.124515][T17105] EXT4-fs: Ignoring removed i_version option [ 592.131414][T17105] EXT4-fs: Ignoring removed bh option [ 592.446465][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3973'. [ 592.958753][T17112] gtp0: entered promiscuous mode [ 592.964289][T17112] gtp0: entered allmulticast mode [ 593.854379][T17119] loop7: detected capacity change from 0 to 512 [ 593.889873][T17119] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 593.906860][T17105] EXT4-fs warning (device loop0): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop0. [ 593.927188][T17119] EXT4-fs (loop7): 1 truncate cleaned up [ 594.620872][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3977'. [ 594.685727][T17125] gtp1: entered promiscuous mode [ 594.691127][T17125] gtp1: entered allmulticast mode [ 594.724285][T17133] syzkaller0: entered promiscuous mode [ 594.729773][T17133] syzkaller0: entered allmulticast mode [ 594.863828][T17144] loop1: detected capacity change from 0 to 512 [ 594.880376][T17144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 594.942393][T17144] EXT4-fs (loop1): 1 truncate cleaned up [ 595.090112][T13158] EXT4-fs unmount: 17 callbacks suppressed [ 595.090140][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.178051][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3986'. [ 595.270646][T17154] loop2: detected capacity change from 0 to 512 [ 595.326260][T17154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 595.382149][T17150] gtp0: entered promiscuous mode [ 595.416694][T17154] EXT4-fs (loop2): 1 truncate cleaned up [ 595.433188][T17150] gtp0: entered allmulticast mode [ 595.453261][T17154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.661963][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.756263][ T28] audit: type=1326 audit(4000000789.564:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 596.972219][ T28] audit: type=1326 audit(4000000789.564:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 597.743840][T17191] loop0: detected capacity change from 0 to 512 [ 597.759093][T17182] loop1: detected capacity change from 0 to 1024 [ 597.765769][T17182] EXT4-fs: Ignoring removed oldalloc option [ 597.771679][T17182] EXT4-fs: Ignoring removed bh option [ 597.948408][ T28] audit: type=1326 audit(4000000789.564:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 597.979491][ T28] audit: type=1326 audit(4000000789.564:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 598.062053][ T28] audit: type=1326 audit(4000000789.564:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 598.107848][T17191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 598.268298][T17195] loop2: detected capacity change from 0 to 512 [ 598.293793][T17195] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 598.449089][T17191] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3995: iget: bad i_size value: 38620345925642 [ 598.474381][T17182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 598.959879][T17182] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.975833][T17191] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 598.976243][T17191] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3995: couldn't read orphan inode 15 (err -117) [ 598.985448][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 598.985483][ C1] EXT4-fs (loop0): initial error at time 4000000791: ext4_orphan_get:1399: inode 15 [ 598.985548][ C1] EXT4-fs (loop0): last error at time 4000000791: ext4_orphan_get:1399: inode 15 [ 599.103584][T17202] loop7: detected capacity change from 0 to 512 [ 599.110221][T17202] EXT4-fs: Ignoring removed i_version option [ 599.116272][T17202] EXT4-fs: Ignoring removed bh option [ 599.124940][ T28] audit: type=1326 audit(4000000789.564:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 599.150782][ T28] audit: type=1326 audit(4000000789.564:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 599.176415][ T28] audit: type=1326 audit(4000000789.774:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 599.201951][ T28] audit: type=1326 audit(4000000789.774:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 599.260940][T17123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 599.294619][T17191] loop0: lost filesystem error report for type 5 error -117 [ 599.303273][T17195] EXT4-fs (loop2): 1 truncate cleaned up [ 599.340219][T17191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.379104][T17202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.394779][T17202] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.430050][T17202] ªªªªªª: renamed from vlan0 (while UP) [ 599.547998][T17195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.564671][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 599.580224][ T28] audit: type=1326 audit(4000000789.774:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.3995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 599.776035][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.786927][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.094218][T17214] loop1: detected capacity change from 0 to 512 [ 600.105920][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 600.119321][T17214] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.3999: invalid block [ 600.158639][T17214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 600.158831][T17214] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3999: couldn't read orphan inode 11 (err -117) [ 600.168064][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 600.168079][ C0] EXT4-fs (loop1): initial error at time 4000000792: __ext4_iget:5533: inode 11: block 1 [ 600.168139][ C0] EXT4-fs (loop1): last error at time 4000000792: __ext4_iget:5533: inode 11: block 1 [ 600.402453][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.411656][T17214] loop1: lost filesystem error report for type 5 error -117 [ 600.412423][T17214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.417529][T17216] gtp0: entered promiscuous mode [ 600.443721][T17216] gtp0: entered allmulticast mode [ 600.471997][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.497182][T17229] loop7: detected capacity change from 0 to 128 [ 600.570489][T17229] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 600.598368][T17229] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 600.622773][T17229] vfat filesystem being mounted at /145/bus supports timestamps until 2107-12-31 (0x10391447e) [ 600.653162][T17240] loop2: detected capacity change from 0 to 512 [ 600.663014][T17240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 600.675870][T17240] EXT4-fs (loop2): 1 truncate cleaned up [ 600.684745][T17240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.707336][T17169] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 600.724230][T17240] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.729292][T17243] loop7: detected capacity change from 0 to 512 [ 600.834626][T17243] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 600.875364][T17243] EXT4-fs (loop7): 1 truncate cleaned up [ 600.982714][T17243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.284217][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.311774][T17254] loop6: detected capacity change from 0 to 512 [ 601.385243][T17254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.405788][T17254] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.894901][T17263] FAULT_INJECTION: forcing a failure. [ 601.894901][T17263] name failslab, interval 1, probability 0, space 0, times 0 [ 601.981804][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.001951][T17263] CPU: 1 UID: 0 PID: 17263 Comm: syz.7.4016 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 602.002062][T17263] Tainted: [W]=WARN [ 602.002071][T17263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 602.002084][T17263] Call Trace: [ 602.002093][T17263] [ 602.002102][T17263] __dump_stack+0x1d/0x30 [ 602.002157][T17263] dump_stack_lvl+0x95/0xd0 [ 602.002182][T17263] dump_stack+0x15/0x1b [ 602.002204][T17263] should_fail_ex+0x25e/0x270 [ 602.002231][T17263] should_failslab+0x8c/0xb0 [ 602.002265][T17263] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 602.002291][T17263] ? do_getname+0x2e/0x1c0 [ 602.002318][T17263] ? do_getname+0x2e/0x1c0 [ 602.002341][T17263] do_getname+0x2e/0x1c0 [ 602.002432][T17263] __se_sys_rename+0x2f/0x1c0 [ 602.002461][T17263] __x64_sys_rename+0x31/0x40 [ 602.002489][T17263] x64_sys_call+0x2b3/0x3020 [ 602.002512][T17263] do_syscall_64+0x136/0x3c0 [ 602.002606][T17263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.002627][T17263] RIP: 0033:0x7f134b04de99 [ 602.002675][T17263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.002696][T17263] RSP: 002b:00007f1349aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 602.002719][T17263] RAX: ffffffffffffffda RBX: 00007f134b2d5fa0 RCX: 00007f134b04de99 [ 602.002765][T17263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.002778][T17263] RBP: 00007f1349aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 602.002794][T17263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.002809][T17263] R13: 00007f134b2d6038 R14: 00007f134b2d5fa0 R15: 00007ffc81a89b38 [ 602.002831][T17263] [ 602.218941][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4018'. [ 602.230260][T17265] gtp1: entered promiscuous mode [ 602.235206][T17265] gtp1: entered allmulticast mode [ 602.247784][T17267] loop7: detected capacity change from 0 to 4096 [ 602.319169][T17267] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 602.367659][T17275] 9p: Bad value for 'wfdno' [ 602.391300][T17267] EXT4-fs (loop7): mount failed [ 602.424014][T17277] xt_hashlimit: size too large, truncated to 1048576 [ 602.526487][T17278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.685878][T17280] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4019: iget: bad extra_isize 90 (inode size 256) [ 602.723679][T17280] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 602.724694][T17280] EXT4-fs (loop6): Remounting filesystem read-only [ 602.734185][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 602.734270][ C1] EXT4-fs (loop6): initial error at time 4000000795: ext4_xattr_inode_iget:441: inode 18 [ 602.734364][ C1] EXT4-fs (loop6): last error at time 4000000795: ext4_xattr_inode_iget:441: inode 18 [ 602.776030][T17280] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 602.786495][T17280] EXT4-fs (loop6): 1 orphan inode deleted [ 602.796805][T17280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.902814][T17277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17277 comm=syz.2.4024 [ 603.051979][T17296] set_capacity_and_notify: 2 callbacks suppressed [ 603.052078][T17296] loop1: detected capacity change from 0 to 512 [ 603.066031][T17296] EXT4-fs: Ignoring removed i_version option [ 603.072050][T17296] EXT4-fs: Ignoring removed bh option [ 603.166668][T17296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.179708][T17296] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 603.516827][T17304] loop0: detected capacity change from 0 to 512 [ 603.716558][T17304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.751005][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.044987][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.127223][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4032'. [ 604.604511][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 604.604525][ T28] audit: type=1326 audit(4000000797.364:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.6.4030" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8a69dde99 code=0x0 [ 604.717351][T17311] gtp2: entered promiscuous mode [ 604.730891][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.741098][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.795282][T17311] gtp2: entered allmulticast mode [ 605.916922][T17326] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4036'. [ 607.913338][ T28] audit: type=1326 audit(4000000800.434:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="syz.2.4033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ff486de99 code=0x0 [ 608.755344][T17354] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4040'. [ 608.798711][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4045'. [ 608.841013][T17361] gtp3: entered promiscuous mode [ 608.846844][T17361] gtp3: entered allmulticast mode [ 608.863715][T17362] 9p: Bad value for 'wfdno' [ 608.938082][T17357] loop1: detected capacity change from 0 to 512 [ 608.973761][T17367] loop7: detected capacity change from 0 to 512 [ 609.059804][T17370] loop2: detected capacity change from 0 to 1024 [ 609.067016][T17370] EXT4-fs: inline encryption not supported [ 609.076059][T17370] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 609.156336][T17370] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.4044: lblock 2 mapped to illegal pblock 2 (length 1) [ 609.170373][T17370] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 609.171076][T17370] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 609.180147][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 609.180169][ C0] EXT4-fs (loop2): initial error at time 4000000801: ext4_map_blocks:791: inode 3: block 2 [ 609.180212][ C0] EXT4-fs (loop2): last error at time 4000000801: ext4_map_blocks:791: inode 3: block 2 [ 609.214758][T17370] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.4044: Invalid inode table block 1 in block_group 0 [ 609.227399][T17370] loop2: lost filesystem error report for type 5 error -117 [ 609.231298][T17370] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 609.248019][T17370] loop2: lost filesystem error report for type 5 error -117 [ 609.248629][T17370] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.4044: mark_inode_dirty error [ 609.267088][T17370] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 609.267585][T17370] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 609.285559][T17370] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.4044: Failed to acquire dquot type 0 [ 609.296929][T17370] loop2: lost filesystem error report for type 5 error -117 [ 609.297483][T17370] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 609.314263][T17370] loop2: lost filesystem error report for type 5 error -117 [ 609.314722][T17370] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.4044: mark_inode_dirty error [ 609.333312][T17370] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 609.333831][T17370] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 609.353243][T17370] EXT4-fs (loop2): 1 orphan inode deleted [ 609.359910][T17370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.380536][T17169] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 609.401052][T17357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.438381][T17367] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.4046: iget: bad extra_isize 90 (inode size 256) [ 609.469322][T17169] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 609.485756][T17367] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 609.486897][T17367] EXT4-fs (loop7): Remounting filesystem read-only [ 609.496339][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 609.496529][ C0] EXT4-fs (loop7): initial error at time 4000000802: ext4_xattr_inode_iget:441: inode 18 [ 609.496661][ C0] EXT4-fs (loop7): last error at time 4000000802: ext4_xattr_inode_iget:441: inode 18 [ 609.538815][T17169] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 0 [ 609.586763][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.598756][T17367] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -30) [ 609.609905][T17367] EXT4-fs (loop7): 1 orphan inode deleted [ 610.025813][T17367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.677024][T17388] loop1: detected capacity change from 0 to 512 [ 610.696475][T17388] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4047: iget: bad extra_isize 90 (inode size 256) [ 611.091949][T17388] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 611.101642][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 611.117521][ C1] EXT4-fs (loop1): initial error at time 4000000803: ext4_xattr_inode_iget:441: inode 18 [ 611.127602][ C1] EXT4-fs (loop1): last error at time 4000000803: ext4_xattr_inode_iget:441: inode 18 [ 611.258720][T17388] EXT4-fs (loop1): Remounting filesystem read-only [ 611.267517][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.285962][T17388] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 611.304982][T13477] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 611.319603][T17388] EXT4-fs (loop1): 1 orphan inode deleted [ 611.326297][T17388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.542925][T13477] loop2: lost filesystem error report for type 5 error -117 [ 611.543060][T13477] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 611.570161][T13477] loop2: lost filesystem error report for type 5 error -117 [ 611.570267][T13477] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 611.609647][T13477] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 611.683138][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 611.701080][T17392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 611.838790][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.851816][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 611.861722][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.000521][T17392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 612.092440][T17398] FAULT_INJECTION: forcing a failure. [ 612.092440][T17398] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 612.123130][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4055'. [ 612.133346][T17398] CPU: 1 UID: 0 PID: 17398 Comm: syz.2.4054 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 612.133435][T17398] Tainted: [W]=WARN [ 612.133443][T17398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.133458][T17398] Call Trace: [ 612.133466][T17398] [ 612.133475][T17398] __dump_stack+0x1d/0x30 [ 612.133500][T17398] dump_stack_lvl+0x95/0xd0 [ 612.133520][T17398] dump_stack+0x15/0x1b [ 612.133576][T17398] should_fail_ex+0x25e/0x270 [ 612.133608][T17398] should_fail_alloc_page+0xf2/0x100 [ 612.133669][T17398] __alloc_frozen_pages_noprof+0x108/0x350 [ 612.133705][T17398] alloc_pages_mpol+0xa9/0x1d0 [ 612.133740][T17398] alloc_pages_noprof+0x8f/0x140 [ 612.133800][T17398] __pmd_alloc+0x47/0x430 [ 612.133849][T17398] handle_mm_fault+0x1ea1/0x2da0 [ 612.133887][T17398] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 612.133951][T17398] ? clockevents_program_event+0x2fd/0x340 [ 612.133991][T17398] do_user_addr_fault+0x402/0x1060 [ 612.134021][T17398] exc_page_fault+0x62/0xa0 [ 612.134048][T17398] asm_exc_page_fault+0x26/0x30 [ 612.134074][T17398] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 612.134128][T17398] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 1f 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 612.134146][T17398] RSP: 0018:ffffc9000329fe00 EFLAGS: 00050246 [ 612.134234][T17398] RAX: ffff8881039e9c70 RBX: 0000000000000008 RCX: 0000000000000008 [ 612.134249][T17398] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc9000329fe28 [ 612.134264][T17398] RBP: 0000000000005414 R08: 0000000000000035 R09: 0000000000000000 [ 612.134316][T17398] R10: 0001c9000329fe28 R11: 0001c9000329fe2f R12: ffff88811b0aac00 [ 612.134329][T17398] R13: 0000000000005414 R14: ffffc9000329fe28 R15: 0000200000000200 [ 612.134416][T17398] _copy_from_user+0x6f/0xb0 [ 612.134453][T17398] tiocswinsz+0x44/0xe0 [ 612.134563][T17398] tty_ioctl+0x1b1/0xb80 [ 612.134596][T17398] ? __pfx_tty_ioctl+0x10/0x10 [ 612.134676][T17398] __se_sys_ioctl+0xce/0x140 [ 612.134697][T17398] __x64_sys_ioctl+0x43/0x50 [ 612.134719][T17398] x64_sys_call+0x1563/0x3020 [ 612.134748][T17398] do_syscall_64+0x136/0x3c0 [ 612.134794][T17398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.134819][T17398] RIP: 0033:0x7f8ff486de99 [ 612.134833][T17398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.134853][T17398] RSP: 002b:00007f8ff32c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.134876][T17398] RAX: ffffffffffffffda RBX: 00007f8ff4af5fa0 RCX: 00007f8ff486de99 [ 612.134891][T17398] RDX: 0000200000000200 RSI: 0000000000005414 RDI: 0000000000000003 [ 612.134907][T17398] RBP: 00007f8ff32c7090 R08: 0000000000000000 R09: 0000000000000000 [ 612.134987][T17398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.135002][T17398] R13: 00007f8ff4af6038 R14: 00007f8ff4af5fa0 R15: 00007ffd47c60ab8 [ 612.135023][T17398] [ 612.275400][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4056'. [ 612.346068][T17402] gtp2: entered promiscuous mode [ 612.346159][T17402] gtp2: entered allmulticast mode [ 612.614055][T17406] loop6: detected capacity change from 0 to 512 [ 612.645655][T17416] 9p: Bad value for 'wfdno' [ 612.922398][T17406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 612.923833][T17406] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 612.927470][T17406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 612.927558][T17406] System zones: 1-12 [ 612.929142][T17406] EXT4-fs (loop6): orphan cleanup on readonly fs [ 612.933011][T17406] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4057: Block bitmap for bg 0 marked uninitialized [ 612.933192][T17406] loop6: lost filesystem error report for type 5 error -117 [ 612.941528][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 612.941570][ C0] EXT4-fs (loop6): initial error at time 4000000805: ext4_read_block_bitmap_nowait:517 [ 612.941609][ C0] EXT4-fs (loop6): last error at time 4000000805: ext4_read_block_bitmap_nowait:517 [ 612.947943][T17406] EXT4-fs (loop6): Remounting filesystem read-only [ 612.949021][T17406] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 612.949446][T17406] EXT4-fs (loop6): 1 truncate cleaned up [ 612.961274][T17406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.449199][T17421] loop0: detected capacity change from 0 to 512 [ 614.455952][T17421] EXT4-fs: Ignoring removed i_version option [ 614.456306][T17421] EXT4-fs: Ignoring removed bh option [ 615.559310][T17424] 9p: Bad value for 'rfdno' [ 615.916586][T17421] EXT4-fs warning (device loop0): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop0. [ 616.026998][ T28] audit: type=1400 audit(4000000808.834:2345): avc: denied { map } for pid=17429 comm="syz.0.4061" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 616.115915][ T28] audit: type=1400 audit(4000000808.834:2346): avc: denied { execute } for pid=17429 comm="syz.0.4061" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 616.156932][T17435] FAULT_INJECTION: forcing a failure. [ 616.156932][T17435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.172152][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.191541][T17435] CPU: 0 UID: 0 PID: 17435 Comm: syz.1.4064 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 616.191578][T17435] Tainted: [W]=WARN [ 616.191586][T17435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.191670][T17435] Call Trace: [ 616.191677][T17435] [ 616.191684][T17435] __dump_stack+0x1d/0x30 [ 616.191710][T17435] dump_stack_lvl+0x95/0xd0 [ 616.191735][T17435] dump_stack+0x15/0x1b [ 616.191756][T17435] should_fail_ex+0x25e/0x270 [ 616.191849][T17435] should_fail_alloc_page+0xf2/0x100 [ 616.191875][T17435] alloc_pages_bulk_noprof+0xf5/0x550 [ 616.191908][T17435] copy_splice_read+0xf3/0x6b0 [ 616.192016][T17435] ? __kmalloc_noprof+0x252/0x4a0 [ 616.192037][T17435] ? alloc_pipe_info+0x1c8/0x340 [ 616.192071][T17435] ? __pfx_copy_splice_read+0x10/0x10 [ 616.192126][T17435] splice_direct_to_actor+0x261/0x680 [ 616.192149][T17435] ? __pfx_direct_splice_actor+0x10/0x10 [ 616.192259][T17435] do_splice_direct+0x119/0x1a0 [ 616.192281][T17435] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 616.192403][T17435] do_sendfile+0x37d/0x640 [ 616.192428][T17435] __x64_sys_sendfile64+0x105/0x150 [ 616.192458][T17435] x64_sys_call+0x2dc4/0x3020 [ 616.192543][T17435] do_syscall_64+0x136/0x3c0 [ 616.192569][T17435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.192639][T17435] RIP: 0033:0x7f00ebdade99 [ 616.192657][T17435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.192676][T17435] RSP: 002b:00007f00ea807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 616.192696][T17435] RAX: ffffffffffffffda RBX: 00007f00ec035fa0 RCX: 00007f00ebdade99 [ 616.192789][T17435] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 616.192806][T17435] RBP: 00007f00ea807090 R08: 0000000000000000 R09: 0000000000000000 [ 616.192822][T17435] R10: 0020000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 616.192859][T17435] R13: 00007f00ec036038 R14: 00007f00ec035fa0 R15: 00007ffde7cec6b8 [ 616.192891][T17435] [ 616.595584][T17443] loop7: detected capacity change from 0 to 1024 [ 616.619662][T17445] loop1: detected capacity change from 0 to 512 [ 616.773438][T17433] loop2: detected capacity change from 0 to 512 [ 617.113575][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4069'. [ 617.669293][T17458] loop6: detected capacity change from 0 to 512 [ 617.694001][T17443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.711315][T17458] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.4070: corrupted xattr block 95: invalid header [ 617.725893][T17458] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 617.728985][T17433] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.4063: corrupted xattr block 95: invalid header [ 617.738610][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 617.738678][ C0] EXT4-fs (loop6): initial error at time 4000000810: ext4_expand_extra_isize_ea:2810: inode 11 [ 617.738917][ C0] EXT4-fs (loop6): last error at time 4000000810: ext4_expand_extra_isize_ea:2810: inode 11 [ 617.782533][T17458] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 617.797077][T17458] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4070: bg 0: block 7: invalid block bitmap [ 617.809977][T17458] loop6: lost filesystem error report for type 5 error -117 [ 617.820685][T17458] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 617.838010][T17458] loop6: lost filesystem error report for type 5 error -117 [ 617.845549][T17445] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4068: iget: bad extra_isize 90 (inode size 256) [ 617.876661][T17458] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.4070: corrupted xattr block 95: invalid header [ 617.891370][T17458] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 617.925378][T17458] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 617.945402][T17458] EXT4-fs (loop6): 1 orphan inode deleted [ 617.957169][T17458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.028760][T17445] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 618.031003][T17445] EXT4-fs (loop1): Remounting filesystem read-only [ 618.040551][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 618.040610][ C0] EXT4-fs (loop1): initial error at time 4000000810: ext4_xattr_inode_iget:441: inode 18 [ 618.040691][ C0] EXT4-fs (loop1): last error at time 4000000810: ext4_xattr_inode_iget:441: inode 18 [ 618.136401][T17433] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 618.141549][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 618.158023][ C0] EXT4-fs (loop2): initial error at time 4000000810: ext4_expand_extra_isize_ea:2810: inode 11 [ 618.169033][ C0] EXT4-fs (loop2): last error at time 4000000810: ext4_expand_extra_isize_ea:2810: inode 11 [ 618.217958][T17445] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 618.264414][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.276093][T17445] EXT4-fs (loop1): 1 orphan inode deleted [ 618.314201][T17445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.326916][T17433] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4063: bg 0: block 7: invalid block bitmap [ 618.326996][T17433] loop2: lost filesystem error report for type 5 error -117 [ 618.354161][T17433] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 618.359582][ T8888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.361536][T17433] loop2: lost filesystem error report for type 5 error -117 [ 618.457111][T17433] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.4063: corrupted xattr block 95: invalid header [ 618.477923][T17433] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 618.533688][ T28] audit: type=1326 audit(4000000811.294:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 618.550355][T17471] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 618.572045][ T28] audit: type=1326 audit(4000000811.294:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 618.602482][T17433] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 618.617538][T17471] bond2: entered promiscuous mode [ 618.623404][T17433] EXT4-fs (loop2): 1 orphan inode deleted [ 618.626813][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.634346][T17471] bond2: entered allmulticast mode [ 618.639116][ T28] audit: type=1326 audit(4000000811.294:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 618.667853][T17433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.670518][ T28] audit: type=1326 audit(4000000811.294:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 618.866613][ T28] audit: type=1326 audit(4000000811.294:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 618.892982][T17471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.987576][ T8888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.044716][ T28] audit: type=1326 audit(4000000811.294:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 619.085883][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.260237][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.270550][ T8888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.236573][ T28] audit: type=1326 audit(4000000811.294:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 620.262285][ T28] audit: type=1326 audit(4000000811.294:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 620.806169][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'. [ 621.170192][ T28] audit: type=1326 audit(4000000811.294:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 621.209196][T17471] erspan1: entered allmulticast mode [ 621.231393][T17471] bond2: (slave erspan1): making interface the new active one [ 621.283706][ T28] audit: type=1326 audit(4000000811.294:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 621.309303][ T28] audit: type=1326 audit(4000000811.294:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 621.383576][T17471] erspan1: entered promiscuous mode [ 621.392200][T17471] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 622.221596][ T28] audit: type=1326 audit(4000000811.294:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 622.533111][ T28] audit: type=1326 audit(4000000811.294:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 623.511933][ T28] audit: type=1326 audit(4000000811.294:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 623.537515][ T28] audit: type=1326 audit(4000000811.294:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 623.593537][ T28] audit: type=1326 audit(4000000811.294:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 623.651327][T17475] bond2 (unregistering): (slave erspan1): Releasing active interface [ 623.667295][T17475] erspan1: left promiscuous mode [ 623.687987][T17475] bond2 (unregistering): Released all slaves [ 623.712977][T17505] loop6: detected capacity change from 0 to 1024 [ 623.730809][ T28] audit: type=1326 audit(4000000811.294:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.0.4073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b3ee8de99 code=0x7ffc0000 [ 623.798509][ T28] audit: type=1326 audit(4000000811.584:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17464 comm="syz.7.4071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f134b04de99 code=0x0 [ 623.827600][ T8888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.838644][T17505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.968136][ T8888] geneve1: left allmulticast mode [ 623.977083][ T8888] geneve1: left promiscuous mode [ 623.987051][ T8888] bridge0: port 3(geneve1) entered disabled state [ 624.001907][ T8888] bridge_slave_1: left allmulticast mode [ 624.007629][ T8888] bridge_slave_1: left promiscuous mode [ 624.017842][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.029422][ T8888] bridge_slave_0: left allmulticast mode [ 624.035150][ T8888] bridge_slave_0: left promiscuous mode [ 624.045394][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.100698][ T8888] bridge_slave_1: left allmulticast mode [ 624.122545][ T8888] bridge_slave_1: left promiscuous mode [ 624.222259][ T8888] ªªªªª»: port 2(bridge_slave_1) entered disabled state [ 624.232072][ T8888] bridge_slave_0: left allmulticast mode [ 624.237744][ T8888] bridge_slave_0: left promiscuous mode [ 624.243719][ T8888] ªªªªª»: port 1(bridge_slave_0) entered disabled state [ 624.249456][T17533] loop7: detected capacity change from 0 to 512 [ 624.457229][T17533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.477263][T17533] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.604079][ T8888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.641336][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.655390][ T8888] bond0 (unregistering): Released all slaves [ 624.800953][ T8888] bond1 (unregistering): Released all slaves [ 624.809074][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.926193][ T8888] bond2 (unregistering): Released all slaves [ 624.989934][ T8888] bond3 (unregistering): Released all slaves [ 625.005256][ T8888] bond4 (unregistering): Released all slaves [ 625.027047][ T8888] bond5 (unregistering): Released all slaves [ 625.054014][ T8888] bond6 (unregistering): Released all slaves [ 625.121880][T17552] loop7: detected capacity change from 0 to 128 [ 625.153661][T17552] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 625.182027][T17552] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 625.893431][ T8888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.953400][ T8888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.963443][ T8888] bond0 (unregistering): Released all slaves [ 625.972070][ T8888] bond1 (unregistering): Released all slaves [ 625.980755][ T8888] bond2 (unregistering): Released all slaves [ 625.990874][T14439] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.991262][ T8888] bond3 (unregistering): Released all slaves [ 626.009274][ T8888] bond4 (unregistering): Released all slaves [ 626.029350][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 626.054906][T17562] loop2: detected capacity change from 0 to 512 [ 626.092379][T17562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 626.113226][T17562] EXT4-fs (loop2): 1 truncate cleaned up [ 626.136393][T17570] xt_hashlimit: size too large, truncated to 1048576 [ 626.166986][T17562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.205448][T17575] loop6: detected capacity change from 0 to 4096 [ 626.228877][T17575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.278894][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.323376][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 626.323461][ T28] audit: type=1400 audit(4000000819.134:2383): avc: denied { write } for pid=17574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.420447][T17593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17593 comm=syz.6.4095 [ 626.443238][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 626.457597][ T28] audit: type=1400 audit(4000000819.254:2384): avc: denied { write } for pid=17589 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.489896][T17590] loop1: detected capacity change from 0 to 512 [ 626.501298][T17590] EXT4-fs: Ignoring removed nobh option [ 626.509134][T17590] EXT4-fs (loop1): orphan cleanup on readonly fs [ 626.539119][T17590] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.4097: EA inode hash validation failed [ 626.552810][T17590] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 626.567925][T17590] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.4097: corrupted inode contents [ 626.580181][T17590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.580863][T17590] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.4097: mark_inode_dirty error [ 626.590384][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 626.590413][ C1] EXT4-fs (loop1): initial error at time 4000000819: ext4_do_update_inode:5742: inode 15 [ 626.590574][ C1] EXT4-fs (loop1): last error at time 4000000819: ext4_do_update_inode:5742: inode 15 [ 626.629740][T17590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.634826][T17590] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.4097: corrupted inode contents [ 626.674287][T17590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.674812][T17590] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.4097: mark_inode_dirty error [ 626.707324][T17592] gtp0: entered promiscuous mode [ 626.723122][T17592] gtp0: entered allmulticast mode [ 626.738768][T17590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.739410][T17590] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.4097: mark inode dirty (error -117) [ 626.763760][T17590] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.764360][T17590] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 626.784082][T17590] EXT4-fs (loop1): 1 orphan inode deleted [ 626.802812][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 626.804628][T17590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 626.837829][ T8888] hsr_slave_0: left promiscuous mode [ 626.845393][ T8888] hsr_slave_1: left promiscuous mode [ 626.851113][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.867118][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.889192][ T8888] hsr_slave_0: left promiscuous mode [ 626.901708][ T8888] hsr_slave_1: left promiscuous mode [ 626.907994][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.929261][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.954026][ T8888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.975021][ T8888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.015394][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4099'. [ 627.054865][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.109846][T17601] loop2: detected capacity change from 0 to 512 [ 627.127117][T17601] EXT4-fs: Ignoring removed i_version option [ 627.147592][T17601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 627.175222][T17601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.196318][T17601] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.219975][T17601] mmap: syz.2.4098 (17601): VmData 155860992 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 627.299831][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.734187][ T8888] veth1_macvtap: left promiscuous mode [ 627.750294][ T8888] veth0_macvtap: left promiscuous mode [ 627.887167][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.914386][ T8888] team0 (unregistering): Port device veth1_to_hsr removed [ 627.967373][T17611] loop2: detected capacity change from 0 to 1024 [ 627.975295][ T8888] team0 (unregistering): Port device team_slave_1 removed [ 627.997398][ T8888] team0 (unregistering): Port device team_slave_0 removed [ 628.020437][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4102'. [ 628.072796][T17611] EXT4-fs: Ignoring removed oldalloc option [ 628.079248][ T40] smc: removing ib device syg0 [ 628.084500][ T3424] smc: removing ib device sz1 [ 628.097535][T17611] EXT4-fs: Ignoring removed bh option [ 628.183027][T17625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2081 sclass=netlink_xfrm_socket pid=17625 comm=syz.7.4105 [ 628.231568][T17625] loop7: detected capacity change from 0 to 256 [ 628.310053][T17626] loop6: detected capacity change from 0 to 512 [ 628.333975][T17626] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 628.390754][T17626] EXT4-fs (loop6): 1 truncate cleaned up [ 628.423428][T17626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.445617][ T8888] team0 (unregistering): Port device team_slave_1 removed [ 628.477514][ T8888] team0 (unregistering): Port device team_slave_0 removed [ 628.534127][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.701957][T17611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 628.720092][T17611] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.844028][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 629.230511][T17637] loop1: detected capacity change from 0 to 512 [ 629.604950][T17655] xt_hashlimit: size too large, truncated to 1048576 [ 629.663987][ T28] audit: type=1400 audit(4000000822.444:2385): avc: denied { write } for pid=17641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.741270][T17637] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4110: iget: bad extra_isize 90 (inode size 256) [ 629.853018][T17637] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 629.861508][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 629.877125][ C0] EXT4-fs (loop1): initial error at time 4000000822: ext4_xattr_inode_iget:441: inode 18 [ 629.887003][ C0] EXT4-fs (loop1): last error at time 4000000822: ext4_xattr_inode_iget:441: inode 18 [ 629.896996][T17637] EXT4-fs (loop1): Remounting filesystem read-only [ 629.909220][T17637] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 629.945525][ T28] audit: type=1400 audit(4000000822.744:2386): avc: denied { write } for pid=17660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.969911][T17637] EXT4-fs (loop1): 1 orphan inode deleted [ 630.000743][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4113'. [ 630.225785][T17637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.265481][T17669] loop0: detected capacity change from 0 to 512 [ 630.272310][T17669] EXT4-fs: dax option not supported [ 630.299197][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 630.316829][T17659] loop7: detected capacity change from 0 to 4096 [ 630.323939][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.378062][T17659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.875710][T17673] cgroup: none used incorrectly [ 630.894346][T17659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17659 comm=syz.7.4112 [ 631.046717][ T28] audit: type=1400 audit(4000000823.854:2387): avc: denied { write } for pid=17679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.124511][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 631.136700][ T28] audit: type=1400 audit(4000000823.914:2388): avc: denied { write } for pid=17705 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 631.155621][T17684] loop0: detected capacity change from 0 to 1024 [ 631.210354][T17684] EXT4-fs: Ignoring removed oldalloc option [ 631.229301][T17684] EXT4-fs: Ignoring removed bh option [ 631.263646][T17684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 631.310402][T17684] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.743915][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 633.843631][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.895612][T17726] loop6: detected capacity change from 0 to 1024 [ 633.909690][T17728] 9p: Bad value for 'rfdno' [ 633.936629][T17726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.944773][T17724] loop1: detected capacity change from 0 to 164 [ 633.967955][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.978054][T17724] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 634.275063][T17745] loop6: detected capacity change from 0 to 1024 [ 634.378118][T17745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.391624][T17745] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.411606][T17745] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4132: bg 0: block 112: padding at end of block bitmap is not set [ 634.432560][T17745] bridge_slave_1: left allmulticast mode [ 634.438860][T17745] bridge_slave_1: left promiscuous mode [ 634.447429][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.462102][T17745] bridge_slave_0: left allmulticast mode [ 634.468115][T17745] bridge_slave_0: left promiscuous mode [ 634.476039][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.642495][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 634.704681][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4134'. [ 634.722658][T17757] xt_hashlimit: size too large, truncated to 1048576 [ 634.834738][T17758] loop0: detected capacity change from 0 to 4096 [ 634.884598][T17758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.909227][T17760] lo speed is unknown, defaulting to 1000 [ 634.963852][T17760] lo speed is unknown, defaulting to 1000 [ 634.997881][T17760] lo speed is unknown, defaulting to 1000 [ 635.006888][T17757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17757 comm=syz.0.4135 [ 635.047221][T17767] loop1: detected capacity change from 0 to 1024 [ 635.087875][T17775] 9p: Bad value for 'rfdno' [ 635.100014][T17767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.216427][T17760] infiniband sz1: set active [ 635.221277][ T3375] lo speed is unknown, defaulting to 1000 [ 635.236812][T17760] infiniband sz1: added lo [ 635.290595][T17779] loop7: detected capacity change from 0 to 512 [ 635.299392][T17760] RDS/IB: sz1: added [ 635.310270][T17779] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.7.4142: corrupted xattr block 95: invalid header [ 635.316511][T17760] smc: adding ib device sz1 with port count 1 [ 635.324062][T17779] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 635.331437][T17779] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 635.331700][T17760] smc: ib device sz1 port 1 has no pnetid [ 635.340823][T17779] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4142: bg 0: block 7: invalid block bitmap [ 635.354101][ T3375] lo speed is unknown, defaulting to 1000 [ 635.359706][T17779] loop7: lost filesystem error report for type 5 error -117 [ 635.360442][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.374145][T17760] lo speed is unknown, defaulting to 1000 [ 635.377807][T17779] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 635.394439][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 635.394517][ C1] EXT4-fs (loop7): initial error at time 4000000828: ext4_expand_extra_isize_ea:2810: inode 11 [ 635.394723][ C1] EXT4-fs (loop7): last error at time 4000000828: ext4_validate_block_bitmap:432 [ 635.439473][T17779] loop7: lost filesystem error report for type 5 error -117 [ 635.441722][T17779] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #11: comm syz.7.4142: corrupted xattr block 95: invalid header [ 635.464808][T17779] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 635.472516][T17779] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 635.495665][T17779] EXT4-fs (loop7): 1 orphan inode deleted [ 635.513872][T17779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.552906][T14439] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.560585][T17760] lo speed is unknown, defaulting to 1000 [ 635.593907][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4148'. [ 635.668248][T17760] lo speed is unknown, defaulting to 1000 [ 635.807075][T17760] lo speed is unknown, defaulting to 1000 [ 635.838289][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.933666][T17760] lo speed is unknown, defaulting to 1000 [ 636.073993][T17760] lo speed is unknown, defaulting to 1000 [ 636.143401][T17808] FAULT_INJECTION: forcing a failure. [ 636.143401][T17808] name failslab, interval 1, probability 0, space 0, times 0 [ 636.186957][T17808] CPU: 0 UID: 0 PID: 17808 Comm: syz.1.4151 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 636.187068][T17808] Tainted: [W]=WARN [ 636.187076][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.187109][T17808] Call Trace: [ 636.187115][T17808] [ 636.187122][T17808] __dump_stack+0x1d/0x30 [ 636.187205][T17808] dump_stack_lvl+0x95/0xd0 [ 636.187229][T17808] dump_stack+0x15/0x1b [ 636.187251][T17808] should_fail_ex+0x25e/0x270 [ 636.187311][T17808] should_failslab+0x8c/0xb0 [ 636.187332][T17808] __kmalloc_node_noprof+0xda/0x4c0 [ 636.187359][T17808] ? __vmalloc_node_range_noprof+0x403/0x11e0 [ 636.187441][T17808] ? __vmalloc_node_range_noprof+0x403/0x11e0 [ 636.187470][T17808] __vmalloc_node_range_noprof+0x403/0x11e0 [ 636.187495][T17808] ? lockref_put_return+0xf7/0x130 [ 636.187514][T17808] ? __rcu_read_unlock+0x4e/0x70 [ 636.187565][T17808] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 636.187594][T17808] __vmalloc_noprof+0xa4/0xf0 [ 636.187642][T17808] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 636.187721][T17808] bpf_prog_alloc_no_stats+0x47/0x390 [ 636.187747][T17808] ? bpf_prog_alloc+0x2a/0x150 [ 636.187775][T17808] bpf_prog_alloc+0x3c/0x150 [ 636.187807][T17808] __get_filter+0x92/0x230 [ 636.187858][T17808] sk_attach_filter+0x25/0x280 [ 636.187899][T17808] ? sk_setsockopt+0x1eec/0x20e0 [ 636.187927][T17808] sk_setsockopt+0x1ef9/0x20e0 [ 636.187960][T17808] sock_setsockopt+0x40/0x50 [ 636.187992][T17808] __sys_setsockopt+0x13a/0x200 [ 636.188054][T17808] __x64_sys_setsockopt+0x64/0x80 [ 636.188137][T17808] x64_sys_call+0x2327/0x3020 [ 636.188163][T17808] do_syscall_64+0x136/0x3c0 [ 636.188208][T17808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.188255][T17808] RIP: 0033:0x7f00ebdade99 [ 636.188270][T17808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.188287][T17808] RSP: 002b:00007f00ea807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 636.188307][T17808] RAX: ffffffffffffffda RBX: 00007f00ec035fa0 RCX: 00007f00ebdade99 [ 636.188403][T17808] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 636.188418][T17808] RBP: 00007f00ea807090 R08: 0000000000000010 R09: 0000000000000000 [ 636.188433][T17808] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.188448][T17808] R13: 00007f00ec036038 R14: 00007f00ec035fa0 R15: 00007ffde7cec6b8 [ 636.188469][T17808] [ 636.433001][T17808] syz.1.4151: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 636.456481][T17808] CPU: 0 UID: 0 PID: 17808 Comm: syz.1.4151 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 636.456585][T17808] Tainted: [W]=WARN [ 636.456592][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.456604][T17808] Call Trace: [ 636.456611][T17808] [ 636.456619][T17808] __dump_stack+0x1d/0x30 [ 636.456708][T17808] dump_stack_lvl+0x95/0xd0 [ 636.456752][T17808] dump_stack+0x15/0x1b [ 636.456770][T17808] warn_alloc+0x145/0x1c0 [ 636.456796][T17808] __vmalloc_node_range_noprof+0x7e7/0x11e0 [ 636.456869][T17808] ? lockref_put_return+0xf7/0x130 [ 636.456892][T17808] ? __rcu_read_unlock+0x4e/0x70 [ 636.456935][T17808] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 636.456969][T17808] __vmalloc_noprof+0xa4/0xf0 [ 636.456997][T17808] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 636.457122][T17808] bpf_prog_alloc_no_stats+0x47/0x390 [ 636.457147][T17808] ? bpf_prog_alloc+0x2a/0x150 [ 636.457172][T17808] bpf_prog_alloc+0x3c/0x150 [ 636.457231][T17808] __get_filter+0x92/0x230 [ 636.457259][T17808] sk_attach_filter+0x25/0x280 [ 636.457293][T17808] ? sk_setsockopt+0x1eec/0x20e0 [ 636.457322][T17808] sk_setsockopt+0x1ef9/0x20e0 [ 636.457356][T17808] sock_setsockopt+0x40/0x50 [ 636.457468][T17808] __sys_setsockopt+0x13a/0x200 [ 636.457495][T17808] __x64_sys_setsockopt+0x64/0x80 [ 636.457525][T17808] x64_sys_call+0x2327/0x3020 [ 636.457552][T17808] do_syscall_64+0x136/0x3c0 [ 636.457579][T17808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.457605][T17808] RIP: 0033:0x7f00ebdade99 [ 636.457663][T17808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.457681][T17808] RSP: 002b:00007f00ea807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 636.457699][T17808] RAX: ffffffffffffffda RBX: 00007f00ec035fa0 RCX: 00007f00ebdade99 [ 636.457716][T17808] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 636.457731][T17808] RBP: 00007f00ea807090 R08: 0000000000000010 R09: 0000000000000000 [ 636.457778][T17808] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.457790][T17808] R13: 00007f00ec036038 R14: 00007f00ec035fa0 R15: 00007ffde7cec6b8 [ 636.457809][T17808] [ 636.459542][T17808] Mem-Info: [ 636.497824][T17810] 9p: Bad value for 'rfdno' [ 636.504124][T17808] active_anon:37969 inactive_anon:6 isolated_anon:0 [ 636.504124][T17808] active_file:97 inactive_file:30416 isolated_file:0 [ 636.504124][T17808] unevictable:0 dirty:157 writeback:0 [ 636.504124][T17808] slab_reclaimable:4128 slab_unreclaimable:23722 [ 636.504124][T17808] mapped:34561 shmem:28299 pagetables:7632 [ 636.504124][T17808] sec_pagetables:0 bounce:0 [ 636.504124][T17808] kernel_misc_reclaimable:0 [ 636.504124][T17808] free:1822749 free_pcp:10543 free_cma:0 [ 636.504264][T17808] Node 0 active_anon:151876kB inactive_anon:24kB active_file:388kB inactive_file:121664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138244kB dirty:628kB writeback:0kB shmem:113196kB kernel_stack:4160kB pagetables:30528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 636.762483][T17808] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.797994][T17818] xt_hashlimit: size too large, truncated to 1048576 [ 636.827758][T17808] lowmem_reserve[]: 0 2878 7857 7857 [ 636.846059][T17819] loop2: detected capacity change from 0 to 4096 [ 636.849481][T17808] Node 0 DMA32 free:2944044kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947672kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 636.929602][T17819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.943880][T17822] loop0: detected capacity change from 0 to 512 [ 637.002417][T17822] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.4155: corrupted xattr block 95: invalid header [ 637.019394][T17822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 637.021530][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 637.037100][ C0] EXT4-fs (loop0): initial error at time 4000000829: ext4_expand_extra_isize_ea:2810: inode 11 [ 637.047469][ C0] EXT4-fs (loop0): last error at time 4000000829: ext4_expand_extra_isize_ea:2810: inode 11 [ 637.059777][T17822] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4155: bg 0: block 7: invalid block bitmap [ 637.073009][T17822] loop0: lost filesystem error report for type 5 error -117 [ 637.075752][T17822] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 637.093413][T17822] loop0: lost filesystem error report for type 5 error -117 [ 637.096239][T17822] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.4155: corrupted xattr block 95: invalid header [ 637.118868][T17822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 637.120333][T17808] lowmem_reserve[]: [ 637.129575][T17822] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 637.138763][T17829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17829 comm=syz.2.4154 [ 637.144110][T17822] EXT4-fs (loop0): 1 orphan inode deleted [ 637.167818][T17822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.177326][T17808] 0 0 4978 4978 [ 637.219751][T17808] Node 0 Normal free:4314680kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168160kB inactive_anon:24kB active_file:388kB inactive_file:123084kB unevictable:116kB writepending:936kB zspages:0kB present:5242880kB managed:5098236kB mlocked:116kB bounce:0kB free_pcp:20252kB local_pcp:4724kB free_cma:0kB [ 637.285009][T17833] loop6: detected capacity change from 0 to 512 [ 637.304647][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.325410][T17833] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.6.4157: corrupted xattr block 95: invalid header [ 637.340827][T17833] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 637.341564][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 637.357792][ C0] EXT4-fs (loop6): initial error at time 4000000830: ext4_expand_extra_isize_ea:2810: inode 11 [ 637.368804][ C0] EXT4-fs (loop6): last error at time 4000000830: ext4_expand_extra_isize_ea:2810: inode 11 [ 637.380299][T17808] lowmem_reserve[]: 0 0 0 0 [ 637.389077][T17833] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4157: bg 0: block 7: invalid block bitmap [ 637.401926][T17833] loop6: lost filesystem error report for type 5 error -117 [ 637.405253][T17833] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 637.411603][T17808] Node 0 [ 637.413175][T17833] loop6: lost filesystem error report for type 5 error -117 [ 637.432685][T17833] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #11: comm syz.6.4157: corrupted xattr block 95: invalid header [ 637.455179][T17833] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 637.456072][T17833] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 637.476908][T17833] EXT4-fs (loop6): 1 orphan inode deleted [ 637.489264][T17833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.511882][T17808] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 637.525586][T17808] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944044kB [ 637.556017][T17808] Node 0 Normal: 1162*4kB (UME) 838*8kB (UM) 743*16kB (UME) 400*32kB (UME) 173*64kB (UME) 93*128kB (UM) 76*256kB (UM) 41*512kB (UME) 28*1024kB (UM) 27*2048kB (UME) 1010*4096kB (UM) = 4320392kB [ 637.597830][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 637.598239][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.721734][T17808] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 637.792464][T17808] 67809 total pagecache pages [ 637.824375][T17808] 6 pages in swap cache [ 637.853265][T17808] Free swap = 124972kB [ 637.880303][T17808] Total swap = 124996kB [ 637.901826][T17808] 2097051 pages RAM [ 637.919509][T17808] 0 pages HighMem/MovableOnly [ 637.938904][T17808] 81734 pages reserved [ 638.467445][ T28] audit: type=1326 audit(4000000831.264:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17844 comm="syz.6.4160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8a69dde99 code=0x0 [ 638.547705][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.610013][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 640.546206][T17855] loop0: detected capacity change from 0 to 512 [ 640.554778][T17855] EXT4-fs: Ignoring removed i_version option [ 640.561019][T17855] EXT4-fs: Ignoring removed bh option [ 640.982720][T17855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.002184][T17855] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 641.167558][T17868] loop6: detected capacity change from 0 to 512 [ 641.181323][T17868] EXT4-fs: Ignoring removed i_version option [ 641.187895][T17868] EXT4-fs: Ignoring removed bh option [ 641.294530][T17868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.310935][T17868] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 641.565814][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.002892][ T28] audit: type=1400 audit(4000000834.784:2390): avc: denied { listen } for pid=17881 comm="syz.0.4167" path="/215/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 642.350230][ T28] audit: type=1400 audit(4000000835.154:2391): avc: denied { write } for pid=17862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.499592][ T28] audit: type=1400 audit(4000000835.304:2392): avc: denied { write } for pid=17893 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.778975][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.827216][T17882] loop0: detected capacity change from 0 to 2048 [ 642.855574][ T28] audit: type=1400 audit(4000000835.654:2393): avc: denied { mounton } for pid=17881 comm="syz.0.4167" path="/215/file0" dev="tmpfs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 642.966398][T17887] loop1: detected capacity change from 0 to 512 [ 643.159802][T17914] loop6: detected capacity change from 0 to 512 [ 643.223656][T17914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.277696][T17914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.290402][T17914] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.332301][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'. [ 644.102944][T14161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.202914][T17887] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4168: iget: bad extra_isize 90 (inode size 256) [ 644.313068][T17887] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 644.321553][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 644.337822][ C0] EXT4-fs (loop1): initial error at time 4000000837: ext4_xattr_inode_iget:441: inode 18 [ 644.348213][ C0] EXT4-fs (loop1): last error at time 4000000837: ext4_xattr_inode_iget:441: inode 18 [ 644.359315][T17887] EXT4-fs (loop1): Remounting filesystem read-only [ 644.381425][T17887] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -30) [ 644.515022][T17887] EXT4-fs (loop1): 1 orphan inode deleted [ 644.577567][ T28] audit: type=1326 audit(4000000837.384:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17922 comm="syz.6.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8a69dde99 code=0x0 [ 644.686891][T17932] loop2: detected capacity change from 0 to 512 [ 644.699318][T17932] EXT4-fs: Ignoring removed i_version option [ 644.706238][T17932] EXT4-fs: Ignoring removed bh option [ 644.757437][T17932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.774114][T17932] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.907205][T17887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.384207][T17882] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 645.571295][ T28] audit: type=1400 audit(4000000838.374:2395): avc: denied { write } for pid=17937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.229001][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.267170][ T28] audit: type=1400 audit(4000000838.434:2396): avc: denied { write } for pid=17951 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.572632][ T28] audit: type=1400 audit(4000000839.374:2397): avc: denied { write } for pid=17954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.639658][ T28] audit: type=1400 audit(4000000839.434:2398): avc: denied { write } for pid=17969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.665388][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.752408][T17979] loop0: detected capacity change from 0 to 1024 [ 646.759243][T17979] EXT4-fs: Ignoring removed bh option [ 646.805128][T17979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.880290][T17979] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 646.935473][T17979] bridge1: entered promiscuous mode [ 646.997483][ T28] audit: type=1400 audit(4000000839.804:2399): avc: denied { write } for pid=17974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.027069][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.104898][ T28] audit: type=1400 audit(4000000839.884:2400): avc: denied { write } for pid=17998 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.155977][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'. [ 647.616175][T18005] xt_hashlimit: size too large, truncated to 1048576 [ 647.986957][T18016] loop0: detected capacity change from 0 to 512 [ 647.994314][T18016] EXT4-fs: Ignoring removed i_version option [ 648.000629][T18016] EXT4-fs: Ignoring removed bh option [ 648.051165][T18008] loop1: detected capacity change from 0 to 4096 [ 648.104563][T18016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.121070][T18016] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 648.263723][T18008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.030988][T18027] loop2: detected capacity change from 0 to 512 [ 649.133052][T18028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=18028 comm=syz.1.4186 [ 649.162190][T18027] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.4190: corrupted xattr block 95: invalid header [ 649.176620][T18027] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 649.191484][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 649.207069][ C1] EXT4-fs (loop2): initial error at time 4000000841: ext4_expand_extra_isize_ea:2810: inode 11 [ 649.217436][ C1] EXT4-fs (loop2): last error at time 4000000841: ext4_expand_extra_isize_ea:2810: inode 11 [ 649.232531][T18027] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4190: bg 0: block 7: invalid block bitmap [ 649.246286][T18027] loop2: lost filesystem error report for type 5 error -117 [ 649.261110][T18027] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 649.279440][T18027] loop2: lost filesystem error report for type 5 error -117 [ 649.287914][T18027] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.4190: corrupted xattr block 95: invalid header [ 649.309975][T18027] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 649.314430][T18027] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 649.334118][T18027] EXT4-fs (loop2): 1 orphan inode deleted [ 649.349339][T18027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.560992][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.590473][T13477] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.782367][T18034] loop0: detected capacity change from 0 to 512 [ 649.831124][T18034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.4191: iget: bad extra_isize 90 (inode size 256) [ 649.880790][T18034] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 649.881568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 649.897589][ C0] EXT4-fs (loop0): initial error at time 4000000842: ext4_xattr_inode_iget:441: inode 18 [ 649.907588][ C0] EXT4-fs (loop0): last error at time 4000000842: ext4_xattr_inode_iget:441: inode 18 [ 649.921697][T18034] EXT4-fs (loop0): Remounting filesystem read-only [ 649.943238][T18034] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 649.976164][T18034] EXT4-fs (loop0): 1 orphan inode deleted [ 650.006664][T18034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.249041][T13158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.309645][T13158] ================================================================== [ 650.317757][T13158] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 650.325313][T13158] [ 650.327627][T13158] read-write to 0xffff888237d26528 of 1 bytes by task 17800 on cpu 1: [ 650.335780][T13158] folio_add_lru+0xa4/0x250 [ 650.340287][T13158] folio_add_lru_vma+0x49/0x70 [ 650.345053][T13158] do_wp_page+0x13a5/0x2030 [ 650.349576][T13158] handle_mm_fault+0x8bc/0x2da0 [ 650.354440][T13158] do_user_addr_fault+0x402/0x1060 [ 650.359560][T13158] exc_page_fault+0x62/0xa0 [ 650.360689][T18043] loop2: detected capacity change from 0 to 512 [ 650.364071][T13158] asm_exc_page_fault+0x26/0x30 [ 650.364094][T13158] rep_movs_alternative+0x4a/0xa0 [ 650.364118][T13158] _copy_to_user+0x7c/0xa0 [ 650.364136][T13158] __se_sys_move_pages+0x1132/0x1510 [ 650.364159][T13158] __x64_sys_move_pages+0x78/0x90 [ 650.364181][T13158] x64_sys_call+0x1d35/0x3020 [ 650.364205][T13158] do_syscall_64+0x136/0x3c0 [ 650.364223][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.364242][T13158] [ 650.364248][T13158] read to 0xffff888237d26528 of 1 bytes by task 13158 on cpu 0: [ 650.420051][T13158] __lru_add_drain_all+0x17e/0x450 [ 650.425176][T13158] lru_add_drain_all+0x10/0x20 [ 650.429942][T13158] invalidate_bdev+0x47/0x70 [ 650.434528][T13158] ext4_put_super+0x614/0x7c0 [ 650.439217][T13158] generic_shutdown_super+0xee/0x220 [ 650.444508][T13158] kill_block_super+0x2a/0x70 [ 650.449188][T13158] ext4_kill_sb+0x42/0x80 [ 650.453526][T13158] deactivate_locked_super+0x75/0x1c0 [ 650.458893][T13158] deactivate_super+0x97/0xa0 [ 650.463578][T13158] cleanup_mnt+0x2c3/0x340 [ 650.467999][T13158] __cleanup_mnt+0x19/0x20 [ 650.472428][T13158] task_work_run+0x130/0x1a0 [ 650.476226][T18043] EXT4-fs: dax option not supported [ 650.477011][T13158] exit_to_user_mode_loop+0x1e4/0x8c0 [ 650.477042][T13158] do_syscall_64+0x23c/0x3c0 [ 650.477065][T13158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.477097][T13158] [ 650.477102][T13158] value changed: 0x07 -> 0x08 [ 650.477114][T13158] [ 650.477118][T13158] Reported by Kernel Concurrency Sanitizer on: [ 650.477135][T13158] CPU: 0 UID: 0 PID: 13158 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 650.477169][T13158] Tainted: [W]=WARN [ 650.477177][T13158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.477191][T13158] ================================================================== [ 650.846592][T13843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.