last executing test programs: 12m44.821247406s ago: executing program 2 (id=1838): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004c00)=@newtfilter={0x24, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x0, 0xf}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x300) 12m44.323816321s ago: executing program 2 (id=1842): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYBLOB="200001"], 0x38}}, 0x40840) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12m42.985885511s ago: executing program 2 (id=1845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x20, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 12m41.908069539s ago: executing program 2 (id=1846): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x900, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xae8, 0x863, 0x0) unshare(0x10000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x26, 0x0, 0x7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2547181b080d29308f0e1ac6e7149b346d959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 12m39.538562633s ago: executing program 2 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x1, 0x2c7, &(0x7f0000000bc0)="$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") r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)}, 0xe9782ca385d6f00c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007514feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679f"], &(0x7f0000000000)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250}, 0x94) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x80100, 0xa) sendmsg$key(r10, 0x0, 0x4040) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 12m38.155880076s ago: executing program 2 (id=1873): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b70200000000000085000000860000001800000000040000000000000000000e"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1276c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 12m22.653594339s ago: executing program 32 (id=1873): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000b70200000000000085000000860000001800000000040000000000000000000e"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1276c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 11m28.923663895s ago: executing program 5 (id=2259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 11m28.035985932s ago: executing program 5 (id=2274): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m27.989291676s ago: executing program 5 (id=2275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060400000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) 11m27.988719265s ago: executing program 5 (id=2276): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b010000"], 0x38}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xfffff800) getpid() setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) 11m27.035783752s ago: executing program 5 (id=2284): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 11m26.704772202s ago: executing program 5 (id=2289): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0xff4c) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m26.630355061s ago: executing program 33 (id=2289): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0xff4c) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m39.252756645s ago: executing program 1 (id=5347): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x4b) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m39.136451541s ago: executing program 1 (id=5349): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x70d, 0x1f}, {0x0, 0x0, 0x0, 0x4b}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x18, 0x4b7}]}, 0xf8}}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) 4m37.781279409s ago: executing program 1 (id=5355): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 4m37.670263806s ago: executing program 1 (id=5357): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@nodioread_nolock}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@data_err_ignore}, {@barrier}, {@nodiscard}, {@mb_optimize_scan}, {@sysvgroups}]}, 0x1, 0x5ba, &(0x7f0000002480)="$eJzs3T1sG9cdAPD/HUnLH2rlAi3QFh6MtoALGKYkf7RuJ3stasCAhwJdWoGiBUOUaIhUawkCKu9GUQ9FG3hxtmTImCBDhiBLxqxZ8jEHMGIhASwPCQOKR1mWSZtSRFERfz/gyPfujvz/H4/vkXe4wwUwtE43H9KIX0TE9SRibMuyfGQLT7fWW19bKT1dWykl0Wjc+DKJJCKerK2U2usn2fOJiFiNiJ9HxAeFiLPp5lseaRdqS8uzU5VKeSGrj9fnbo/XlpbP3ZqbminPlOcv/P4Ply5fvDR5fnJruk8bW2uFnbX13qf3/33voz89vP/mW6dWS/+dSuJKjGbLtrZjL7U+k0Jc2Tb/Yj+CDVAy6ATYlVzWz5td6WcxFrms13fS2Do4jOxLekAfNUYiGpu2FIEhkOj0MKTa/wOa+7/taT//fzy62toBacZdX1sp/Sva8fOtYxNxdGPf5PhXyXN7Js39zZP7mSiH0urdiJjI51/8/ifZ92/3JvYiQfrq/autDfXi9k83x5/oMP6Mto+dfk/t8W89G//WO8TPdRn/rvcY45u/fv5a1/h3R+KXHeMnm/GTDvHTiPh7j/Ef/OXdy92WNV6POBOd47clLz8+PH7zVqU80XrsGOO9M6f+2L39Ece7xG8dsz26kcjW9h/Jckp7bP87H779q9WXxP/tr1++/Tt9/sci4j/b6t385Mkbf+627NHd5HHzX8BOt38ShXj4qoZnfnfl9CdZ0VFDAAAAAAAAAADYQ+nGuWxJWtwsp2mx2LqG96dxPK1Ua/WzN6uL89Otc95ORiFtn2k11qonzfpkdj5uu35+W/1CLguYO7ZRL5aqlekBtx0AAAAAAAAAAAAAAAAAAAAOihPbrv//Ordx/f/221UDh1X3W34Dh90O+7/hAg6R5zt0MrA8gP3nBx2GVkP/h+Gl/8Pw0v9heOn/MLw69v9j+58HsP/8/sPw0v8BAAAAAAAAAAAAAAAAAAAAAAAAAKAvrl+71pwaT9dWSs36dH5pcbb6j3PT5dpscW6xVCxVF24XZ6rVmUq5WKrOver9kmr19kTML94Zr5dr9fHa0vLf5qqL8+17ipYLfW8RAAAAAAAAAAAAAAAAAAAA/PCMbkxJWowotOppWixG/CgiTiaR3LxVKU9ExI8j4uNcYaRZnxx00gAAAAAAAAAAAAAAAAAAAHDI1JaWZ6cqlfJC/wr5LFRvr/qs3td88jtZOSJW9zaN5jvu+FWF7APs72bqsZBExAFIY9eF3Ivfw6MHIrGDVhjgoAQAAAAAAAAAAAAAAAAAAEPq2UW/vb7i2/4mBAAAAAAAAAAAAAAAAAAAAEMp/SKJiOZ0Zuw3o9uXHknWcxvPEfHPBzf+d2eqXl+YbM5/vDm//v9s/vlB5A/0Jh/tfppGRLMfAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM/UlpZnpyqV8sIuCyM9rDPoNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsxncBAAD//yZjzMs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r7, @ANYRES32=r6], 0x1c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x58, 0x0, 0x2, 0x503, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x4040004) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r14, @ANYBLOB="20002b800800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 4m37.388346517s ago: executing program 1 (id=5364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@gettaction={0x18c, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0xd8, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeca}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2565}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000890}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x40000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000080)='./bus\x00', 0x154) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 4m35.24077663s ago: executing program 1 (id=5374): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') close(0x3) file_setattr(r0, 0x0, &(0x7f0000000380)={0x180, 0x3, 0x1, 0xaa, 0x8003}, 0x18, 0x1000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0xbb, 0x7c}, 0x0, &(0x7f0000000240)="d93bac83b03be486d5803d1aad3938ef90b8293f5ba69c288174f1d301e11dcc96d9d195bf2f4001facc1a1fe8f119de3e5a13d0285e9975c36dc8b199747588b27a3283ad154a48a222ef3782b43fc964ee9e48062faea31e706f26939b0a89fbc80b6af68f75c83bd6ad8494f04f863f19d9a8d6955f0e70efc74742f468bc039a2afe0295e3ed898c8961658e5030dc6f2fb601ea35751f6de06797919c8ce5fa6d01f5bbb47ff6616021f0f4cde44fdb7c1ad3aac58dfbd2f4", &(0x7f0000000300)="94c32b78a23f5e6c1f55bfcc25f1eb2ebc416c837251ab91ab51e23810062106c1b02ee5e97843837f1a2e05514c28cc3f0cf710485a4f311c228d24e3d4cec5b26deef48d0374eb44832b0e97b48ba32686e8f95c85d0339af7450974ab8e16c02f4a1c7cbd2d5cb93dbf8da250fb75a259027a7d89225418c365f3") bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) io_setup(0x5, &(0x7f0000000100)) 4m35.24025102s ago: executing program 34 (id=5374): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') close(0x3) file_setattr(r0, 0x0, &(0x7f0000000380)={0x180, 0x3, 0x1, 0xaa, 0x8003}, 0x18, 0x1000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0xbb, 0x7c}, 0x0, &(0x7f0000000240)="d93bac83b03be486d5803d1aad3938ef90b8293f5ba69c288174f1d301e11dcc96d9d195bf2f4001facc1a1fe8f119de3e5a13d0285e9975c36dc8b199747588b27a3283ad154a48a222ef3782b43fc964ee9e48062faea31e706f26939b0a89fbc80b6af68f75c83bd6ad8494f04f863f19d9a8d6955f0e70efc74742f468bc039a2afe0295e3ed898c8961658e5030dc6f2fb601ea35751f6de06797919c8ce5fa6d01f5bbb47ff6616021f0f4cde44fdb7c1ad3aac58dfbd2f4", &(0x7f0000000300)="94c32b78a23f5e6c1f55bfcc25f1eb2ebc416c837251ab91ab51e23810062106c1b02ee5e97843837f1a2e05514c28cc3f0cf710485a4f311c228d24e3d4cec5b26deef48d0374eb44832b0e97b48ba32686e8f95c85d0339af7450974ab8e16c02f4a1c7cbd2d5cb93dbf8da250fb75a259027a7d89225418c365f3") bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) io_setup(0x5, &(0x7f0000000100)) 1m23.158197085s ago: executing program 0 (id=6591): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x2000006, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000), 0x40fffffd) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000580)={0x2, 'ip6tnl0\x00', {0x8}, 0x1}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.792990689s ago: executing program 0 (id=6603): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r1, 0x8, 0x3}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x0, 0x7, 0x0, 0x1, 0x5}, 0x50) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, @ldst={0x3, 0x2, 0x6, 0x2, 0xa, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @generic={0x47, 0xe, 0x9, 0x3, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x4f, &(0x7f0000000280)=""/79, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x5, 0x5, 0x4, 0x8}, {0x0, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xd, 0x8}, {0x4, 0x1, 0x6, 0x7}, {0x4, 0x4, 0xd, 0x2}], 0x10, 0xf7}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000480)={r1, 0x683}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240440d1}, 0x844) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x44800}, 0x20040040) socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r9, 0xffffffffffffffff, 0x24, 0x2000}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getresgid(0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, r4, 0x30, 0x2030}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xf1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000240)={r13, 0x10}, &(0x7f00000002c0)=0xc) 1m22.099822775s ago: executing program 0 (id=6595): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000900020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xc}, {}, {0xa, 0x15}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40840) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r4, 0x560d, 0x8000000000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x33b081, 0x50) mkdirat(r5, &(0x7f0000000080)='./file0\x00', 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="10180000075005002c0012800b6467650000028005001700054012455f1fae089c9c097868021b80e500000005001600010000000500260001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r7 = syz_io_uring_setup(0x88b, &(0x7f00000000c0)={0x0, 0xaee2, 0x80, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x96, 0x0, 0x5, 0x0, 0x0, 0x2, 0x80040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x0, 0x10, 0xfffe, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20, 0x1}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m21.191432456s ago: executing program 0 (id=6600): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x28) lseek(r0, 0x1237, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x1, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0xa0, &(0x7f0000000300)) io_setup(0x40000000, &(0x7f0000000080)=0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x15222011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33) io_uring_enter(r4, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_pgetevents(r1, 0x7e8, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={r5, r6+60000000}, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) io_pgetevents(r7, 0x1b, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)={r8, r9+10000000}, &(0x7f0000000580)={&(0x7f00000004c0)={[0x95]}, 0x8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES8=r11, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000380)={0x1d, r13, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) connect$can_bcm(r0, &(0x7f0000000840)={0x1d, r13}, 0x10) 1m20.526989837s ago: executing program 0 (id=6610): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/227, 0xe7, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 1m16.644713599s ago: executing program 0 (id=6615): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1c000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) flistxattr(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000080)=@tcp6, 0x2}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 1m16.345536077s ago: executing program 35 (id=6615): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1c000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) flistxattr(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000080)=@tcp6, 0x2}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 4.89648526s ago: executing program 4 (id=7042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0, 0x1000000}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa8]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000d40)="7da18017110b397d2cf538976fdbf47028c58f4c818f2502bd524d58b5cf1bd32f4d13ff81641d99175c4e07a0f305b4f88fe21fb71b2db0caab7a2dcb16cb617bb2f7a931f97c3eb27b847c55d94c0b639ab76eec110d", &(0x7f0000000e00)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7, &(0x7f0000000500)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) socket(0x1d, 0x2, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r6 = open(&(0x7f0000000280)='.\x00', 0x400, 0x0) mknodat$loop(r6, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r6, r7, 0x0, 0x0, 0x1000) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f00000000c0)={0xf3, "15889e670a03540745f2710647b1425e1290d27871d25f560a910aaa344d9641ef7b7b2ebb7e6ff6c875cd2defb88c327e15ff6cde30280c3f36679f476e9219536de39e84a31aa2b8378ccd880e9b843eedd53800500faa98f7756dd03b43a19cd989d52e57e67f57f7af15c950bb8b4ce17175ff836de1c8a080ebfc460cdd4b8cc9b139894bc95c8e6c8b1dbbedcde1103bfc1325d64423deb31a10463e00a33a5cf81d8bc093a7a64435722dfe7ab1e47ace29c9090c328dc4fe8686e8608043779108214dc7c167d2a0ae132eef417fae19a98fc9a9d7ee71eb8e47332a5549a84d7258bc3917410ac9ee50e4e33e51f5"}) 4.159579267s ago: executing program 4 (id=7052): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 3.976273319s ago: executing program 4 (id=7054): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000001140)={[{@dax_inode}, {@abort}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r1, 0x40305829, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x8202, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1408801, &(0x7f0000000080)={[{@abort}, {@i_version}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0xffffffffffff7f2c}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x5, 0x46b, &(0x7f0000000bc0)="$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") r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x9400002f) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000084800000000000002000000850000002f0000009500000000000000537f59933bbfe4305143a310a8609b36d62fe1e9ef1c3ffcbc8f8692074323a5d581813f63b71d3d1f355631f279e0eadc144a28d03f75df03159b98a2a37acad90ab05213f268b31bb7f587d52d9153d0da86f1d8a06b5be5ee1de9dc0c7b32620d41ff20c0d3c2a24aa8fac4ffe20a55eed02e702517b951"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5471}, 0x94) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) syz_open_dev$MSR(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd25, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0xc844}, 0x24000000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000c80)=[{&(0x7f00000000c0)="1729b5e88e2431f1844486b4b11893f45734914cee8ef791c4827ef0be2b50d03c973434f1aa47c52115fdf117343eb6282b7a9a77878848be29d51836b1da660db694975d58c400e80a73dee8a30009bb90d247c99ff53131b6d0d61d8453885cda4dd58d32b50abc30f98d10436487200be30730f289519681c980da69e115e8708ee0281a7fe09132ba09de3e14d042f26d0cd9aacc0554bcec06d2342edf1da9d0297148e5e9cf8cba3c2fc7428234a296c71c4954714165c648b0a3f3c7703b652dce28e22dd503", 0xca}, {&(0x7f00000001c0)="2bccd879f60421b2f414e6950ef0a097a444c68b077a2b731460514ba60f34490f2fa606f1a856f38a6c4ced7f71f9237d6affb8a603cad44d123b285e06cc0b321f34d97184ff937299b74baf3c8c871aa84882e5af713cbd01cd12d8b3b76224c2bdcda603aa17c58ff6f6f533425bc79c743e5365a66e31b474c7a782ef49da597ca8db04db23b5e0933d462dc04a9119bffa72a8bbe7cece0ae354d5ac2510da5e2a3a0935d17886c9515e735e667c8000c012376cf2adef1ab085e325a50d1d8a9aa09976c1678904abed88a7780267ff0278f8", 0xd6}, {&(0x7f0000000340)="91c59aacda66646a2d83aa80bdc061295872600f39576e5e2b63a95b5adf3c90ffd2170dddc42f9354e95ae4d73bce7344924374fb0b7dfb5443f87a8f42be757093aa23f0b0a0c0150a7440a4b54c2d6b41f3ee8a92a6fcdafde7e1f86a4f12d1005820853940d4f5ef964ac9be0eda7186db981923cddd86d9cc48b32822018ea2b2f21c3cf32116263993df3231e594a46fcc907c76dfda6d1174e8db78fa7ff3a7e9a10ca5aadec35f6eed4b322f482750b88a3c9fb3a471a65dc393ff54a664d8c3fadfd8de8571f48bbe9749de5f938c614493d775e116f55e6ffbe0193da7df4e4f8b92a533a92c3bacaef47bf5ad44859d", 0xf5}, {&(0x7f0000000440)="742b402f37f6cf8667710e1ecc704a790b2290d4bfc2760a26c37c6a82f8ebb8f2895df7564af2163414a3599c4a9ad2e54b6f8d628bd2c6e19654e08eb72d11a93c5ae9c4ff564e53d6c5fd7eda4991cb9735658669ec8b7bc450972ac3e4cf9f33b4446a16fe32173aceae2aba59e97f0ea07da915b4a38413661e6836dc", 0x7f}, {&(0x7f00000004c0)="2afb7798e6f008468af3c5ef4e99b6ffcfd16a651c37e823b1a393b3e137e8a22eb3be53479237df4a7f01da8ca586e15fb9cadc66e4476c7318e3c48910aa96696339c198446a71865685956fbfe87ee32b5d5705990cf114144f82f981260856a4fdfb54", 0x65}, {&(0x7f0000000540)="6c3f19a6b89a32aebcf90986c06f0f349c1290ab522f1972fc91e11be0a8efbd55c775e7f330fc1c06450a5babaf19a5b83cdf1701643905953990a791451409175117a808c5161cc3672d27c278e0857216b703c61bd3a65da6f95538c2e0911b370533c54b9b43ddf45f8567df52ffc44d", 0x72}], 0x6) 2.588592309s ago: executing program 6 (id=7069): shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x80) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 2.586091399s ago: executing program 4 (id=7070): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$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") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xc}, {}, {0xa, 0x15}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40840) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$KDSETMODE(0xffffffffffffffff, 0x560d, 0x8000000000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x33b081, 0x50) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="10180000075005002c0012800b6467650000028005001700054012455f1fae089c9c097868021b80e500000005001600010000000500260001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x96, 0x0, 0x5, 0x0, 0x0, 0x2, 0x80040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x0, 0x10, 0xfffe, 0x0, 0xfffffffd}, r6, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.330125266s ago: executing program 6 (id=7073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a", 0x29}], 0x1}, 0x0) 2.183572375s ago: executing program 6 (id=7076): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 2.069554362s ago: executing program 6 (id=7077): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x1a, 0x0, 0xa, 0x3}, 0x28) r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl0\x00', r2, 0x29, 0x7, 0x81, 0xc, 0x0, @private2, @private2, 0x7800, 0x10, 0xffff, 0x2}}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) mkdirat(r5, &(0x7f00000006c0)='./file1\x00', 0x80) syz_read_part_table(0x5cf, &(0x7f0000000000)="$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") 2.068645172s ago: executing program 3 (id=7078): futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000), 0x40fffffd) getuid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.020978422s ago: executing program 7 (id=7079): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1, 0xffff, 0xfffff001) 1.941829765s ago: executing program 7 (id=7080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804) write(r0, &(0x7f00000003c0)="b3b003eb3c59f462416a38d8e34c41b1d9f661d7945066079c5489feb52b29ab912b267ae1610fded1f33d3f037a882fb9a2cc4fc7610729563b32f3da804a6a76ace741ae2d1c3cf544fad8fbfd38b4336145d4d06c55ab000f8431bda6cd95934a2a92aa200bdaa7e3d3e02e6a5b8caafe", 0x72) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x54, 0x16, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x3f, 0x42, 0xfd5153482e40b058, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x270ab426}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.941097095s ago: executing program 3 (id=7081): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000001140)={[{@dax_inode}, {@abort}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nombcache}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@nobh}]}, 0x2a, 0x645, &(0x7f0000000600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r1, 0x40305829, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x8202, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1408801, &(0x7f0000000080)={[{@abort}, {@i_version}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0xffffffffffff7f2c}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x5, 0x46b, &(0x7f0000000bc0)="$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") r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000005780)='./file0\x00', 0x9400002f) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000084800000000000002000000850000002f0000009500000000000000537f59933bbfe4305143a310a8609b36d62fe1e9ef1c3ffcbc8f8692074323a5d581813f63b71d3d1f355631f279e0eadc144a28d03f75df03159b98a2a37acad90ab05213f268b31bb7f587d52d9153d0da86f1d8a06b5be5ee1de9dc0c7b32620d41ff20c0d3c2a24aa8fac4ffe20a55eed02e702517b951"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5471}, 0x94) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x8000}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) syz_open_dev$MSR(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0xe72c5f922f23cad9, 0x70bd25, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0xc844}, 0x24000000) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000c80)=[{&(0x7f00000000c0)="1729b5e88e2431f1844486b4b11893f45734914cee8ef791c4827ef0be2b50d03c973434f1aa47c52115fdf117343eb6282b7a9a77878848be29d51836b1da660db694975d58c400e80a73dee8a30009bb90d247c99ff53131b6d0d61d8453885cda4dd58d32b50abc30f98d10436487200be30730f289519681c980da69e115e8708ee0281a7fe09132ba09de3e14d042f26d0cd9aacc0554bcec06d2342edf1da9d0297148e5e9cf8cba3c2fc7428234a296c71c4954714165c648b0a3f3c7703b652dce28e22dd503", 0xca}, {&(0x7f00000001c0)="2bccd879f60421b2f414e6950ef0a097a444c68b077a2b731460514ba60f34490f2fa606f1a856f38a6c4ced7f71f9237d6affb8a603cad44d123b285e06cc0b321f34d97184ff937299b74baf3c8c871aa84882e5af713cbd01cd12d8b3b76224c2bdcda603aa17c58ff6f6f533425bc79c743e5365a66e31b474c7a782ef49da597ca8db04db23b5e0933d462dc04a9119bffa72a8bbe7cece0ae354d5ac2510da5e2a3a0935d17886c9515e735e667c8000c012376cf2adef1ab085e325a50d1d8a9aa09976c1678904abed88a7780267ff0278f8", 0xd6}, {&(0x7f0000000340)="91c59aacda66646a2d83aa80bdc061295872600f39576e5e2b63a95b5adf3c90ffd2170dddc42f9354e95ae4d73bce7344924374fb0b7dfb5443f87a8f42be757093aa23f0b0a0c0150a7440a4b54c2d6b41f3ee8a92a6fcdafde7e1f86a4f12d1005820853940d4f5ef964ac9be0eda7186db981923cddd86d9cc48b32822018ea2b2f21c3cf32116263993df3231e594a46fcc907c76dfda6d1174e8db78fa7ff3a7e9a10ca5aadec35f6eed4b322f482750b88a3c9fb3a471a65dc393ff54a664d8c3fadfd8de8571f48bbe9749de5f938c614493d775e116f55e6ffbe0193da7df4e4f8b92a533a92c3bacaef47bf5ad44859d", 0xf5}, {&(0x7f0000000440)="742b402f37f6cf8667710e1ecc704a790b2290d4bfc2760a26c37c6a82f8ebb8f2895df7564af2163414a3599c4a9ad2e54b6f8d628bd2c6e19654e08eb72d11a93c5ae9c4ff564e53d6c5fd7eda4991cb9735658669ec8b7bc450972ac3e4cf9f33b4446a16fe32173aceae2aba59e97f0ea07da915b4a38413661e6836dc", 0x7f}, {&(0x7f00000004c0)="2afb7798e6f008468af3c5ef4e99b6ffcfd16a651c37e823b1a393b3e137e8a22eb3be53479237df4a7f01da8ca586e15fb9cadc66e4476c7318e3c48910aa96696339c198446a71865685956fbfe87ee32b5d5705990cf114144f82f981260856a4fdfb54", 0x65}, {&(0x7f0000000540)="6c3f19a6b89a32aebcf90986c06f0f349c1290ab522f1972fc91e11be0a8efbd55c775e7f330fc1c06450a5babaf19a5b83cdf1701643905953990a791451409175117a808c5161cc3672d27c278e0857216b703c61bd3a65da6f95538c2e0911b370533c54b9b43ddf45f8567df52ffc44d", 0x72}], 0x6) 1.825060511s ago: executing program 7 (id=7082): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.766937809s ago: executing program 7 (id=7084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40480d4) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x1400, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x11e210, 0x10006, 0x1, 0x6, 0xa, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0) fgetxattr(r7, &(0x7f0000009880)=@known='security.selinux\x00', 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x40, @empty}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r8 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) ptrace$getregset(0x4204, r8, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000080)={0x9, 0x7, 0x9, 0x7, 0x5}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00"], 0xc) 1.632622791s ago: executing program 4 (id=7085): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000009c0)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0xf8, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x70d, 0x1f}, {0x0, 0x0, 0x0, 0x4b}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x18, 0x4b7}]}, 0xf8}}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) 1.520619177s ago: executing program 8 (id=7087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.501237203s ago: executing program 8 (id=7088): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.116695043s ago: executing program 8 (id=7089): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x5b0}, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="4c3ef868", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="da99e9dfc557be515fabe474af2d838adca6505ca19dc183164e63582950d84cfd2f3b7a6c61c88257b18cf1e2a86e3f2af1528fabc2aefe816041602821658e79e80aa3f8a7350bce31af5cf19567a3d715b0d89795af383c683b199e9246f3451b01172f9154444301c13e49a5e4fcc15bf12946737c4046375efba01d1a9cdf59596a68a2f61e66bc26f6", 0x8c}, {&(0x7f0000000200)="23184c57d891c9f61274883b5ba94bff191de5a69a7ae3161fc33deefd54c29bdde9608ebfa074735c", 0x29}, {&(0x7f0000000980)="797d52e8714fc6af1dee0d3be42f1e267c53423f6e91ae5729f26981b50e9228583c7316b6766469e59f5205439535adb0e0fb68d0ee5f68ecfb389d216c1fb4ff0a06faadafc99ebd8a14bab8e128a25047422f187d901c9e68302f1c32513c63233caaa329c153eb55449e71d53b94d894eba0a1bf941e1657cb924cffd7357e7613078ede9aa1e31844cd047e2fbee80209f7ee5ea129509d59a3ff9483f80b43f24f7d93cd2b65b89b4a2b86266a28bb8f3d022037da6bb757a7d45db90d3c0949103a351fc15e9bd885af755cfdcf1496e5d711a7e73d688485fe223460655a3059801a6294f58324ebccd60556ee9630ee40a7cfc86fd546e6065fb188d0a26e834a2804e252171962267644985753c6e81fd1c56c9c75df4f08b89d092661031228f6dfb87d8e9deef8c7646c294a59bbe9da8e50ae594789fe14e8891dc9257ab0d6707b23865238b250324961e5e86b17b992f012d4908f1ca4a42e7f11086dcb47486fed878559fd0a6352b837f34a3334cb98dfc6ef2d7e372dfae5373fcf1551ec17a9f3fe1ceeed9c99b994c57660b72f72eee0487f4871e0f74040b395e9d1060f697b8fac33ab5632f68ca434b0a5b532badea1a5ed232e5c76f6ec3f99f3b59e7e43cc077f6bf268457972842ad8c766b4a3b7da9cdf06b1411316572320b78be3fec376ae4495b1a0ab928e5421387d31d5dd7e563478fc75545257e5cfc424ec87219dbe9829a89b452baadff47303fc6ffdc0fca1595bb71b91b5e57493614a85d56e0fa82c11668d4b064897e040d48437fce2dd729f343b613cd86e911ec53c12b39a46918a2f43d0a8d54791030d430dca69882eacc7b3ce59badd69b0de200f75bf3bcb2181c15177ff7a9f726156083b679033bb8f2c4da9c0979eb13732cc32c2b3e4dedae0a00fbe74b9d913e1911f880da29ca4bf8f73252956ecfd029b00607014303f836fcc1379eea57899aaabde85e7b9563336485e71f9a187ff7d137b29b806f061978efe2e12ccf649d5190657a171df58810063c47aab7ef871bb58cc9defb34b0a04b5c54a07293da2c30a323da1f493fa0f22214d9d36cd1f09057d9fa1b8049154771daa30db432ff6fb77a565b1e45565dffeb5d19fd4f5ad35599e296f4d0068c68d5bd0c9ce0ad4904309916c96e6cc21ab2cd5c4f97003d3e83360356429a1e3a83700f40c2219134ccf612c9ec71bd0d92ae41b27a63440ae2186ff8d9cee2a7f4a0526be70172d5d44f18285d37a6dde321d00fe450102ccfd5d05e9e736834ee84d0a7fbccb47ab3c01a8ff5b50e62ef0dc5f661a4470ba5703828c2ba72cb81968c18e92b7a5059f934247f13b145ce8db2dfef2a8b641d89ff0497d697d2909d867772cfb4aa9249d3e3030acdfeb46bbc0f465c307a3f15a06a5cee1b79237688bc678b92c38c4de2f67e0f3d6bcd4b383b8e9d56e6164342d99c8abb5d853087cd7730d2d33d91598a5442b482dbc2873a84aaf61eee0eadf24697f3da7646a7557af928c3b0ae03c85a524887d193ece8d45b91826f4a93dfe253aee59285eaaa178c6374ce5a9b588bb0f71a8cc238815aae1b13cf46aa65749a60f43dd265418e7a3d59a0ad8a190428262bee0948afc2c7fc0596eab7ece8c1b114d1e07a137fb28de756b31986625c0a5146dae891c325712d8356c4579a830977831fd206d3083cd9e661eb750", 0x4c2}], 0x3, &(0x7f0000001980)=ANY=[], 0x150}}], 0x2, 0x2008000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)={@empty, @multicast2, 0x0}, &(0x7f0000000080)=0xc) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x80) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 901.014848ms ago: executing program 3 (id=7090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCGSID(r1, 0x5429, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) (async) 747.729056ms ago: executing program 7 (id=7091): futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000), 0x40fffffd) getuid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 695.483585ms ago: executing program 4 (id=7092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40480d4) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x1400, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x11e210, 0x10006, 0x1, 0x6, 0xa, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000009840), 0x60, 0x0) fgetxattr(r7, &(0x7f0000009880)=@known='security.selinux\x00', 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000040), 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x40, @empty}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r8 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) ptrace$getregset(0x4204, r8, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000080)={0x9, 0x7, 0x9, 0x7, 0x5}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00"], 0xc) 620.64366ms ago: executing program 6 (id=7093): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0xd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2c5b3", @ANYRESHEX, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r9, &(0x7f00000005c0), 0x0, 0x4) lseek(r8, 0xfffd, 0x0) 620.37714ms ago: executing program 3 (id=7094): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) 619.84257ms ago: executing program 7 (id=7095): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x30, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xc}, {}, {0xa, 0x15}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40840) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) ioctl$KDSETMODE(0xffffffffffffffff, 0x560d, 0x8000000000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x33b081, 0x50) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="10180000075005002c0012800b6467650000028005001700054012455f1fae089c9c097868021b80e500000005001600010000000500260001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0xfe, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r5) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x96, 0x0, 0x5, 0x0, 0x0, 0x2, 0x80040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x0, 0x10, 0xfffe, 0x0, 0xfffffffd}, r6, 0x2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 523.88319ms ago: executing program 3 (id=7096): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000064}, 0x40) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000003c0)=0x40000004) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@noload}]}, 0x7, 0x7bf, &(0x7f0000000d00)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0xd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d20babc9f2ff064b5cbcbcada7c93471d07e22a4213e327e4ced96809a092b0171f6b389ee3c9f2c8e33fae168d52f9b9ee0d0cd471929b2219e8a8fad66f7632feb00225b54d883b9551f86cd6710fe291cfdc8267f9f18ca99230622c791ea3087036d56fab4bc69df3e378f2103aaa3ae96de0975cff8d7b7d13072c83b227e5c15856e07aa2c5b3", @ANYRESHEX, @ANYBLOB=',k']) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = fsopen(&(0x7f0000000400)='ocfs2\x00', 0x1) pwrite64(r9, &(0x7f00000005c0), 0x0, 0x4) lseek(r8, 0xfffd, 0x0) 236.72ms ago: executing program 8 (id=7097): shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, 0x0, 0x80) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 68.820315ms ago: executing program 8 (id=7098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, 0x0, 0x0) 49.215321ms ago: executing program 8 (id=7099): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 557.931Āµs ago: executing program 3 (id=7100): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x9, 0xfff, 0x7, 0x9, 0x2000006, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085001b18e047e28713060ce0e6e8c9ea00000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffff8e642ab74527a8aa515e4b1677f0b0a0ffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', r6, @cgroup_sock_addr=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000fa232452f1e14ee207020000f8ffffffb703000008000000b704feff2000000085000000030000009500000000000000da93d15182e4bbc222b7b7ce6930eebce68ef98c4a4ccfa5242ed8a344fccb84fec7db766cac952c5f2281c573eb3b21f9758876e40b5123ed"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=7101): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200210325bd70000000000007", @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x20044049}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") kernel console output (not intermixed with test programs): 5 error -117 [ 956.871791][T27898] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 956.915599][T27898] loop8: lost filesystem error report for type 5 error -117 [ 956.916054][T27898] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.6750: mark_inode_dirty error [ 956.954992][T27898] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 956.976548][T27898] EXT4-fs (loop8): 1 orphan inode deleted [ 956.989355][T27898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.004662][T10990] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 957.045321][T10990] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:27: Failed to release dquot type 0 [ 957.092466][T27898] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6750'. [ 957.130225][T27898] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6750'. [ 957.345560][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.357178][T10986] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 957.412087][T10986] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:25: Failed to release dquot type 0 [ 957.470173][T10986] loop8: lost filesystem error report for type 5 error -117 [ 957.470662][T27378] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 957.503407][T27927] loop6: detected capacity change from 0 to 1024 [ 957.536277][T27927] EXT4-fs: dax option not supported [ 957.615884][T27930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.628973][T27927] EXT4-fs: Ignoring removed i_version option [ 957.635049][T27927] ext4: Bad value for 'barrier' [ 957.643978][T27378] loop8: lost filesystem error report for type 5 error -117 [ 957.645449][T27378] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 957.709196][T27930] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.750402][T27378] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 957.809189][T27930] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6757: iget: bad i_size value: 2533274857506816 [ 957.863390][T27940] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6757: iget: bad i_size value: 2533274857506816 [ 957.949567][T27930] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.6757: iget: bad i_size value: 2533274857506816 [ 957.962950][T27945] FAULT_INJECTION: forcing a failure. [ 957.962950][T27945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.976211][T27945] CPU: 1 UID: 0 PID: 27945 Comm: syz.8.6755 Tainted: G W syzkaller #0 PREEMPT(full) [ 957.976248][T27945] Tainted: [W]=WARN [ 957.976288][T27945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 957.976306][T27945] Call Trace: [ 957.976314][T27945] [ 957.976324][T27945] __dump_stack+0x1d/0x30 [ 957.976414][T27945] dump_stack_lvl+0x95/0xd0 [ 957.976444][T27945] dump_stack+0x15/0x1b [ 957.976466][T27945] should_fail_ex+0x263/0x280 [ 957.976489][T27945] should_fail+0xb/0x20 [ 957.976556][T27945] should_fail_usercopy+0x1a/0x20 [ 957.976586][T27945] _copy_from_iter+0xcf/0xea0 [ 957.976613][T27945] ? __alloc_skb+0x4f6/0x690 [ 957.976636][T27945] ? __alloc_skb+0x200/0x690 [ 957.976667][T27945] netlink_sendmsg+0x4ae/0x6f0 [ 957.976709][T27945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.976743][T27945] ____sys_sendmsg+0x5af/0x600 [ 957.976779][T27945] ___sys_sendmsg+0x195/0x1e0 [ 957.976851][T27945] ? path_openat+0x1b01/0x2050 [ 957.976962][T27945] __sys_sendmmsg+0x185/0x320 [ 957.977008][T27945] __x64_sys_sendmmsg+0x57/0x70 [ 957.977063][T27945] x64_sys_call+0x27aa/0x3020 [ 957.977101][T27945] do_syscall_64+0x12c/0x370 [ 957.977129][T27945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.977158][T27945] RIP: 0033:0x7f5c8b01c799 [ 957.977176][T27945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.977274][T27945] RSP: 002b:00007f5c89a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 957.977300][T27945] RAX: ffffffffffffffda RBX: 00007f5c8b295fa0 RCX: 00007f5c8b01c799 [ 957.977319][T27945] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 957.977337][T27945] RBP: 00007f5c89a77090 R08: 0000000000000000 R09: 0000000000000000 [ 957.977385][T27945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.977469][T27945] R13: 00007f5c8b296038 R14: 00007f5c8b295fa0 R15: 00007fff8b84c038 [ 957.977568][T27945] [ 958.270630][T27955] set_capacity_and_notify: 2 callbacks suppressed [ 958.270654][T27955] loop8: detected capacity change from 0 to 1024 [ 958.298327][T27953] loop7: detected capacity change from 0 to 2048 [ 958.306001][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.326736][T27955] EXT4-fs: Ignoring removed nobh option [ 958.332817][T27953] EXT4-fs: Ignoring removed orlov option [ 958.348059][T27955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 958.379411][T27953] EXT4-fs: Ignoring removed oldalloc option [ 958.396330][T27927] loop6: detected capacity change from 0 to 512 [ 958.396431][T27953] EXT4-fs (loop7): filesystem too large to mount safely on this system [ 958.429232][T27955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.454859][T27927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 958.579163][T27969] loop4: detected capacity change from 0 to 2048 [ 958.579583][T27953] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 958.596225][T27969] EXT4-fs: Ignoring removed orlov option [ 958.601998][T27969] EXT4-fs: Ignoring removed oldalloc option [ 958.619894][T27927] EXT4-fs (loop6): 1 truncate cleaned up [ 958.716895][T27969] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 958.763902][T27927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.851513][T27969] syz1: rxe_newlink: already configured on xfrm0 [ 958.919662][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.080314][T27985] loop7: detected capacity change from 0 to 512 [ 959.139568][T27985] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 959.166788][T27992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.197506][T27992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.219702][T27985] EXT4-fs (loop7): 1 truncate cleaned up [ 959.246840][T27994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.249674][T27985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.255353][T27994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.270065][T27990] loop6: detected capacity change from 0 to 512 [ 959.299250][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.307594][T27992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.317719][T27992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.327768][T27990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 959.375048][T27990] EXT4-fs (loop6): 1 truncate cleaned up [ 959.412383][T27990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.462299][T28002] loop4: detected capacity change from 0 to 1024 [ 959.482453][T28002] EXT4-fs: Ignoring removed nobh option [ 959.514594][T28002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 959.550126][T28002] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 959.587574][T28002] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6770: lblock 2 mapped to illegal pblock 2 (length 1) [ 959.693825][T28002] fserror_report: 9 callbacks suppressed [ 959.693842][T28002] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 959.705891][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 959.722471][ C0] EXT4-fs (loop4): initial error at time 1772166678: ext4_map_blocks:776: inode 3: block 2 [ 959.733552][ C0] EXT4-fs (loop4): last error at time 1772166678: ext4_map_blocks:776: inode 3: block 2 [ 959.746739][T28002] __quota_error: 8 callbacks suppressed [ 959.746758][T28002] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 959.747757][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.752438][T28002] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6770: lblock 0 mapped to illegal pblock 48 (length 1) [ 959.784176][T28002] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 959.784362][T28002] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 959.804091][T28002] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6770: Failed to acquire dquot type 0 [ 959.824584][T28002] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 959.845910][T28002] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6770: mark_inode_dirty error [ 959.872361][T28002] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 959.872500][T28002] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 959.902106][T28002] EXT4-fs (loop4): 1 orphan inode deleted [ 959.904700][T10986] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 959.918875][T28002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.951211][T10986] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 959.951315][T10986] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 959.991302][T10986] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:25: Failed to release dquot type 0 [ 960.005446][T28002] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6770'. [ 960.015537][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.037197][T28002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6770'. [ 960.070759][ T28] audit: type=1326 audit(1772166678.660:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28001 comm="syz.4.6770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72ca0fc799 code=0x0 [ 960.367182][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.376818][T10986] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 960.402856][T10986] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 960.403013][T10986] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 960.424728][T10986] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:25: Failed to release dquot type 0 [ 960.425154][T24557] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 960.425346][T24557] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 960.425443][T24557] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 960.425475][T24557] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 960.478860][T16697] Process accounting resumed [ 960.573214][T28034] loop4: detected capacity change from 0 to 1024 [ 960.575393][T28034] EXT4-fs: Ignoring removed nobh option [ 960.575449][T28034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 960.701019][T28032] loop8: detected capacity change from 0 to 1024 [ 960.709831][T28032] EXT4-fs: dax option not supported [ 960.737816][T28032] loop8: detected capacity change from 0 to 512 [ 960.738070][T28032] EXT4-fs: Ignoring removed i_version option [ 960.738116][T28032] ext4: Bad value for 'barrier' [ 960.817177][T28034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.201109][T28046] Invalid argument reading file caps for ./file0 [ 961.243104][T28042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 961.271873][T28048] EXT4-fs: Ignoring removed orlov option [ 961.291330][T28048] EXT4-fs: Ignoring removed oldalloc option [ 961.310357][T28048] EXT4-fs (loop7): filesystem too large to mount safely on this system [ 961.322352][T28042] EXT4-fs (loop6): 1 truncate cleaned up [ 961.404367][T28042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.426821][T28053] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 961.497461][T28032] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 961.551530][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.573946][T28032] EXT4-fs (loop8): 1 truncate cleaned up [ 961.594369][T28032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 961.644009][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.866933][ T28] audit: type=1326 audit(1772166680.460:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28058 comm="syz.4.6787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ca0fc799 code=0x0 [ 961.989029][T28079] FAT-fs (loop4): Directory bread(block 64) failed [ 961.995646][T28079] FAT-fs (loop4): Directory bread(block 65) failed [ 962.002227][T28079] FAT-fs (loop4): Directory bread(block 66) failed [ 962.008883][T28079] FAT-fs (loop4): Directory bread(block 67) failed [ 962.015432][T28079] FAT-fs (loop4): Directory bread(block 68) failed [ 962.022079][T28079] FAT-fs (loop4): Directory bread(block 69) failed [ 962.028737][T28079] FAT-fs (loop4): Directory bread(block 70) failed [ 962.035273][T28079] FAT-fs (loop4): Directory bread(block 71) failed [ 962.041917][T28079] FAT-fs (loop4): Directory bread(block 72) failed [ 962.048515][T28079] FAT-fs (loop4): Directory bread(block 73) failed [ 962.259305][T28079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 962.282157][ T3799] xfrm0 speed is unknown, defaulting to 1000 [ 962.328035][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.281058][T28152] EXT4-fs: Ignoring removed orlov option [ 963.351298][T28152] EXT4-fs: Ignoring removed oldalloc option [ 963.415257][T28170] set_capacity_and_notify: 6 callbacks suppressed [ 963.415276][T28170] loop6: detected capacity change from 0 to 1024 [ 963.428569][T28152] EXT4-fs (loop8): filesystem too large to mount safely on this system [ 963.513870][T28170] EXT4-fs: dax option not supported [ 963.846052][T28211] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 964.341323][T28170] loop6: detected capacity change from 0 to 512 [ 964.357937][T28224] loop3: detected capacity change from 0 to 512 [ 964.613793][T28224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 964.633196][T28170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 964.734097][T28170] EXT4-fs (loop6): 1 truncate cleaned up [ 964.745360][T28224] EXT4-fs (loop3): 1 truncate cleaned up [ 964.789814][T28170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.804154][T28224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.685032][T28230] loop7: detected capacity change from 0 to 512 [ 965.726515][T28230] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 965.739316][T28230] EXT4-fs (loop7): 1 truncate cleaned up [ 965.745526][T28230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.564716][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.579307][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.648022][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.676325][T28242] FAULT_INJECTION: forcing a failure. [ 966.676325][T28242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.709352][ T28] audit: type=1400 audit(1772166685.300:4511): avc: denied { create } for pid=28232 comm="syz.4.6804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 966.713998][T28242] CPU: 1 UID: 0 PID: 28242 Comm: syz.7.6810 Tainted: G W syzkaller #0 PREEMPT(full) [ 966.714218][T28242] Tainted: [W]=WARN [ 966.714240][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.714289][T28242] Call Trace: [ 966.714311][T28242] [ 966.714334][T28242] __dump_stack+0x1d/0x30 [ 966.714426][T28242] dump_stack_lvl+0x95/0xd0 [ 966.714530][T28242] dump_stack+0x15/0x1b [ 966.714606][T28242] should_fail_ex+0x263/0x280 [ 966.714679][T28242] should_fail+0xb/0x20 [ 966.714743][T28242] should_fail_usercopy+0x1a/0x20 [ 966.714900][T28242] _copy_from_user+0x1c/0xb0 [ 966.714984][T28242] __sys_bind+0x106/0x290 [ 966.715147][T28242] __x64_sys_bind+0x3f/0x50 [ 966.715260][T28242] x64_sys_call+0x2b30/0x3020 [ 966.715487][T28242] do_syscall_64+0x12c/0x370 [ 966.715554][T28242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.715628][T28242] RIP: 0033:0x7f5bf967c799 [ 966.715680][T28242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.715764][T28242] RSP: 002b:00007f5bf80cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 966.715830][T28242] RAX: ffffffffffffffda RBX: 00007f5bf98f5fa0 RCX: 00007f5bf967c799 [ 966.715883][T28242] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000003 [ 966.715932][T28242] RBP: 00007f5bf80cf090 R08: 0000000000000000 R09: 0000000000000000 [ 966.715973][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.716014][T28242] R13: 00007f5bf98f6038 R14: 00007f5bf98f5fa0 R15: 00007ffc84786f08 [ 966.716124][T28242] [ 966.751420][T28233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=28233 comm=syz.4.6804 [ 966.993967][T28261] loop3: detected capacity change from 0 to 1024 [ 967.000706][T28261] EXT4-fs: dax option not supported [ 967.302619][T28272] loop7: detected capacity change from 0 to 256 [ 967.316316][T28272] FAT-fs (loop7): Directory bread(block 64) failed [ 967.323020][T28272] FAT-fs (loop7): Directory bread(block 65) failed [ 967.329656][T28272] FAT-fs (loop7): Directory bread(block 66) failed [ 967.336238][T28272] FAT-fs (loop7): Directory bread(block 67) failed [ 967.342839][T28272] FAT-fs (loop7): Directory bread(block 68) failed [ 967.349422][T28272] FAT-fs (loop7): Directory bread(block 69) failed [ 967.355999][T28272] FAT-fs (loop7): Directory bread(block 70) failed [ 967.362524][T28272] FAT-fs (loop7): Directory bread(block 71) failed [ 967.369164][T28272] FAT-fs (loop7): Directory bread(block 72) failed [ 967.375697][T28272] FAT-fs (loop7): Directory bread(block 73) failed [ 967.548221][T28272] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 967.730062][T28261] loop3: detected capacity change from 0 to 512 [ 967.756799][T28261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 967.810528][T28261] EXT4-fs (loop3): 1 truncate cleaned up [ 967.843464][T28261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.091954][ T28] audit: type=1326 audit(1772166685.790:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28258 comm="syz.7.6814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bf967c799 code=0x0 [ 968.126371][ T28] audit: type=1400 audit(1772166685.790:4513): avc: denied { write } for pid=28262 comm="syz.8.6816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 968.174643][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.780427][ T28] audit: type=1400 audit(1772166688.370:4514): avc: denied { mount } for pid=28290 comm="syz.6.6823" name="/" dev="configfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 970.582065][T28301] loop4: detected capacity change from 0 to 1024 [ 970.590682][T28301] EXT4-fs: Ignoring removed nobh option [ 970.607252][T28301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 970.616766][T28301] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 970.631216][T28301] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6827: lblock 2 mapped to illegal pblock 2 (length 1) [ 970.648508][T28301] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 970.648695][T28301] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 970.657828][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 970.657852][ C0] EXT4-fs (loop4): initial error at time 1772166689: ext4_map_blocks:776: inode 3: block 2 [ 970.657891][ C0] EXT4-fs (loop4): last error at time 1772166689: ext4_map_blocks:776: inode 3: block 2 [ 970.701850][T28301] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6827: lblock 0 mapped to illegal pblock 48 (length 1) [ 970.721206][T28301] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 970.721532][T28301] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 970.744591][T28301] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6827: Failed to acquire dquot type 0 [ 970.758840][T28301] fserror_report: 6 callbacks suppressed [ 970.758885][T28301] loop4: lost filesystem error report for type 5 error -117 [ 970.765965][T28301] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 970.797959][T28301] loop4: lost filesystem error report for type 5 error -117 [ 970.798323][T28301] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6827: mark_inode_dirty error [ 970.821271][T28301] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 970.821596][T28301] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 970.846731][T28301] EXT4-fs (loop4): 1 orphan inode deleted [ 970.852901][T28301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 970.866510][T25073] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 970.882162][T25073] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 970.890990][T25073] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 970.909780][T28301] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6827'. [ 971.116744][T11003] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 971.131613][T11003] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 971.131778][T11003] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 971.154298][T11003] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:34: Failed to release dquot type 0 [ 971.171059][T11003] loop4: lost filesystem error report for type 5 error -117 [ 971.171433][T24557] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 971.195795][T24557] loop4: lost filesystem error report for type 5 error -117 [ 971.196657][T24557] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 971.217302][T24557] loop4: lost filesystem error report for type 5 error -117 [ 971.223057][T28304] loop6: detected capacity change from 0 to 512 [ 971.241708][T28306] loop7: detected capacity change from 0 to 1024 [ 971.248395][T24557] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 971.260434][T28306] EXT4-fs: Ignoring removed nobh option [ 971.270172][T28306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 971.276873][T24557] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 971.303527][T28304] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 971.375484][T28304] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 971.414446][T28304] System zones: 0-1, 15-15, 18-18, 34-34 [ 971.446376][T28304] EXT4-fs (loop6): orphan cleanup on readonly fs [ 971.461860][T28304] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 971.478489][T28318] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 971.485538][T28304] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 971.514444][T28304] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 971.536790][ T28] audit: type=1400 audit(1772166690.130:4515): avc: denied { create } for pid=28322 comm="syz.7.6832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 971.564793][T28304] EXT4-fs (loop6): 1 truncate cleaned up [ 971.716494][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 971.716513][ T28] audit: type=1326 audit(1772166690.310:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.779733][ T28] audit: type=1326 audit(1772166690.310:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.822918][ T28] audit: type=1326 audit(1772166690.310:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.849797][ T28] audit: type=1326 audit(1772166690.310:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.889545][ T28] audit: type=1326 audit(1772166690.310:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.913374][ T28] audit: type=1326 audit(1772166690.310:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.937301][ T28] audit: type=1326 audit(1772166690.310:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.961153][ T28] audit: type=1326 audit(1772166690.310:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 971.986099][ T28] audit: type=1326 audit(1772166690.310:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 972.011855][ T28] audit: type=1326 audit(1772166690.310:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28325 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72ca0bcfce code=0x7ffc0000 [ 973.068413][T28338] loop4: detected capacity change from 0 to 512 [ 973.085547][T28338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 973.109061][T28338] EXT4-fs (loop4): 1 truncate cleaned up [ 973.269415][T28342] loop4: detected capacity change from 0 to 512 [ 973.290209][T28342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 973.312304][T28342] EXT4-fs (loop4): 1 truncate cleaned up [ 973.410571][T28345] loop4: detected capacity change from 0 to 512 [ 973.432211][T28345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 973.453042][T28345] EXT4-fs (loop4): 1 truncate cleaned up [ 974.233077][T28308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 974.299298][T28355] loop3: detected capacity change from 0 to 1024 [ 974.307152][T28355] EXT4-fs: Ignoring removed nobh option [ 974.313302][T28355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.057819][T28363] loop8: detected capacity change from 0 to 1024 [ 975.086292][T28363] EXT4-fs: dax option not supported [ 975.161128][T28364] loop8: detected capacity change from 0 to 512 [ 975.186060][T28364] EXT4-fs: Ignoring removed i_version option [ 975.197525][T28364] ext4: Bad value for 'barrier' [ 975.402589][T28366] loop7: detected capacity change from 0 to 512 [ 975.437048][T28366] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 975.514190][T28366] EXT4-fs (loop7): 1 truncate cleaned up [ 975.662436][T28364] loop8: detected capacity change from 0 to 512 [ 975.717929][T28364] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 975.761107][T28364] EXT4-fs (loop8): 1 truncate cleaned up [ 975.991654][T28377] lo speed is unknown, defaulting to 1000 [ 976.004368][T28377] xfrm0 speed is unknown, defaulting to 1000 [ 976.013622][T28381] loop6: detected capacity change from 0 to 512 [ 976.025615][T28382] loop3: detected capacity change from 0 to 512 [ 976.074337][T28382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 976.084831][T28381] EXT4-fs (loop6): orphan cleanup on readonly fs [ 976.121567][T28381] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #11: block 1: comm syz.6.6841: lblock 0 mapped to illegal pblock 1 (length 1) [ 976.158186][T28381] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 976.158465][T28381] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 976.167749][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 976.167773][ C1] EXT4-fs (loop6): initial error at time 1772166694: ext4_map_blocks:776: inode 11: block 1 [ 976.167809][ C1] EXT4-fs (loop6): last error at time 1772166694: ext4_map_blocks:776: inode 11: block 1 [ 976.208084][T28381] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.6841: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 976.223228][T28381] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 976.233259][T28382] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 976.255504][T28381] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.6841: ea_inode dec ref err=-117 [ 976.268968][T28393] loop4: detected capacity change from 0 to 512 [ 976.269941][T28381] EXT4-fs (loop6): 1 orphan inode deleted [ 976.281097][T28382] EXT4-fs (loop3): 1 truncate cleaned up [ 976.342954][T28393] msdos: Unknown parameter 'dwŸÄArd' [ 976.450719][T28395] loop7: detected capacity change from 0 to 736 [ 976.487799][T28395] 8021q: VLANs not supported on team0 [ 976.653919][T23716] EXT4-fs unmount: 19 callbacks suppressed [ 976.653939][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.669367][T28398] loop7: detected capacity change from 0 to 128 [ 976.681881][T28398] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 976.702828][ T36] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 976.747527][T28398] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6851'. [ 976.762495][T28400] loop3: detected capacity change from 0 to 512 [ 976.824780][T28400] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 976.851348][T28400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 976.955830][T28400] System zones: 0-1, 15-15, 18-18, 34-34 [ 976.967936][T28400] EXT4-fs (loop3): orphan cleanup on readonly fs [ 976.974513][T28400] __quota_error: 69 callbacks suppressed [ 976.974528][T28400] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 977.016115][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.051840][T28400] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 977.167717][T28400] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 977.208595][T28400] EXT4-fs (loop3): 1 truncate cleaned up [ 977.222790][T28400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 977.303960][T28416] loop8: detected capacity change from 0 to 1024 [ 977.343404][T28416] EXT4-fs: Ignoring removed nobh option [ 977.399104][T28416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 977.443420][T28416] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 977.497598][T28416] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.6857: lblock 2 mapped to illegal pblock 2 (length 1) [ 977.526656][T21531] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 977.553576][T28416] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 977.553760][T28416] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 977.562900][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 977.562917][ C0] EXT4-fs (loop8): initial error at time 1772166696: ext4_map_blocks:776: inode 3: block 2 [ 977.562955][ C0] EXT4-fs (loop8): last error at time 1772166696: ext4_map_blocks:776: inode 3: block 2 [ 977.661883][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.793075][T28424] loop3: detected capacity change from 0 to 1024 [ 977.814251][T28416] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.6857: lblock 0 mapped to illegal pblock 48 (length 1) [ 977.852436][T28424] EXT4-fs: dax option not supported [ 977.907426][T28416] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 977.907548][T28416] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 977.947587][T28425] loop3: detected capacity change from 0 to 512 [ 977.985289][T28425] EXT4-fs: Ignoring removed i_version option [ 978.014318][T28425] ext4: Bad value for 'barrier' [ 978.021971][T28416] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.6857: Failed to acquire dquot type 0 [ 978.100328][T28416] loop8: lost filesystem error report for type 5 error -117 [ 978.100453][T28416] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 978.195796][T28416] loop8: lost filesystem error report for type 5 error -117 [ 978.195983][T28416] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.6857: mark_inode_dirty error [ 978.296475][T28416] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 978.296650][T28416] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 978.393255][T28416] EXT4-fs (loop8): 1 orphan inode deleted [ 978.410818][T10959] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 978.450681][T28416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.497453][T10959] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 978.497633][T10959] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 978.553361][T10959] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 978.586599][T28416] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6857'. [ 978.854189][T28430] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 978.866734][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.887064][ T36] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 978.921388][ T36] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 978.921518][ T36] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 978.979382][T28430] EXT4-fs (loop6): 1 truncate cleaned up [ 979.014371][T28430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.028094][ T36] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 979.065764][ T36] loop8: lost filesystem error report for type 5 error -117 [ 979.076161][T27378] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 979.139095][T28425] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 979.157914][T27378] loop8: lost filesystem error report for type 5 error -117 [ 979.161419][T27378] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 979.185915][T27378] loop8: lost filesystem error report for type 5 error -117 [ 979.186118][T27378] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 979.210870][T27378] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 979.212608][T28425] EXT4-fs (loop3): 1 truncate cleaned up [ 979.282195][T28425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.106623][T28452] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 980.139077][T28452] EXT4-fs (loop8): 1 truncate cleaned up [ 980.145264][T28452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.204270][ T28] audit: type=1400 audit(1772166698.790:4696): avc: denied { map } for pid=28451 comm="syz.8.6866" path="socket:[111605]" dev="sockfs" ino=111605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 980.314019][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.324621][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.374349][ T28] audit: type=1400 audit(1772166698.960:4697): avc: denied { write } for pid=28456 comm="syz.7.6868" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 980.429684][ T28] audit: type=1400 audit(1772166698.960:4698): avc: denied { open } for pid=28456 comm="syz.7.6868" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 980.460953][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.514233][T28465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.539417][T28455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 980.564389][T28465] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.570673][T28455] EXT4-fs (loop3): 1 truncate cleaned up [ 980.591606][T28455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.609729][ T28] audit: type=1400 audit(1772166955.199:4699): avc: denied { ioctl } for pid=28469 comm="syz.6.6869" path="socket:[113825]" dev="sockfs" ino=113825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 980.635974][ T28] audit: type=1400 audit(1772166955.199:4700): avc: denied { connect } for pid=28469 comm="syz.6.6869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.667874][T28465] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.6870: iget: bad i_size value: 2533274857506816 [ 980.683056][T28465] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.6870: iget: bad i_size value: 2533274857506816 [ 980.698790][T28465] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz.8.6870: iget: bad i_size value: 2533274857506816 [ 980.734819][T28475] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6871'. [ 980.748234][T28475] set_capacity_and_notify: 5 callbacks suppressed [ 980.748255][T28475] loop7: detected capacity change from 0 to 512 [ 980.780940][T28475] ------------[ cut here ]------------ [ 980.783485][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.786588][T28475] EA inode 11 i_nlink=2 [ 980.786600][T28475] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.7.6871/28475 [ 980.810778][T28475] Modules linked in: [ 980.814720][T28475] CPU: 0 UID: 0 PID: 28475 Comm: syz.7.6871 Tainted: G W syzkaller #0 PREEMPT(full) [ 980.826057][T28475] Tainted: [W]=WARN [ 980.829908][T28475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.840064][T28475] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 980.846751][T28475] Code: b4 5f 99 ff 4c 8d 2d ad ee 5d 05 49 8d 7e 40 e8 34 f1 b5 ff 49 8b 6e 40 4c 89 e7 e8 68 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ff 49 dd 03 66 66 66 66 66 66 2e [ 980.866706][T28475] RSP: 0018:ffffc900062b35a8 EFLAGS: 00010246 [ 980.872804][T28475] RAX: ffff888104289af8 RBX: ffff88811ad401a8 RCX: ffffffff81bff598 [ 980.880943][T28475] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de430 [ 980.888963][T28475] RBP: 000000000000000b R08: 000188811ad4015b R09: 0000000000000000 [ 980.896999][T28475] R10: ffffc900062b34d8 R11: 0001c900062b34d8 R12: ffff88811ad40158 [ 980.904997][T28475] R13: ffffffff871de430 R14: ffff88811ad40110 R15: 0000000000000001 [ 980.913122][T28475] FS: 00007f5bf80cf6c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 980.922111][T28475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.928747][T28475] CR2: 00007f5bf972ea7c CR3: 000000011519a000 CR4: 00000000003506f0 [ 980.936803][T28475] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 980.944885][T28475] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 980.953033][T28475] Call Trace: [ 980.956351][T28475] [ 980.959368][T28475] ext4_xattr_set_entry+0x77c/0x1010 [ 980.964729][T28475] ext4_xattr_ibody_set+0x184/0x3c0 [ 980.970079][T28475] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 980.976006][T28475] __ext4_expand_extra_isize+0x246/0x280 [ 980.981831][T28475] __ext4_mark_inode_dirty+0x29b/0x400 [ 980.987772][T28475] ext4_evict_inode+0x7c3/0xd60 [ 980.992790][T28475] ? __pfx_ext4_evict_inode+0x10/0x10 [ 980.998285][T28475] evict+0x2af/0x510 [ 981.002301][T28475] ? __dquot_initialize+0x146/0x7c0 [ 981.007574][T28475] iput+0x41a/0x580 [ 981.011438][T28475] ext4_process_orphan+0x1a9/0x1c0 [ 981.016732][T28475] ext4_orphan_cleanup+0x6a8/0xa00 [ 981.021905][T28475] ext4_fill_super+0x3408/0x37c0 [ 981.026965][T28475] ? set_blocksize+0x14c/0x270 [ 981.031800][T28475] ? setup_bdev_super+0x30e/0x370 [ 981.036875][T28475] ? __pfx_ext4_fill_super+0x10/0x10 [ 981.042196][T28475] get_tree_bdev_flags+0x291/0x300 [ 981.047470][T28475] ? __pfx_ext4_fill_super+0x10/0x10 [ 981.052822][T28475] get_tree_bdev+0x1f/0x30 [ 981.057498][T28475] ext4_get_tree+0x1c/0x30 [ 981.061954][T28475] vfs_get_tree+0x57/0x1d0 [ 981.066512][T28475] do_new_mount+0x288/0x8d0 [ 981.071050][T28475] path_mount+0x4d0/0xbc0 [ 981.075398][T28475] __se_sys_mount+0x28c/0x2e0 [ 981.080223][T28475] __x64_sys_mount+0x67/0x80 [ 981.084918][T28475] x64_sys_call+0x2d61/0x3020 [ 981.089679][T28475] do_syscall_64+0x12c/0x370 [ 981.094380][T28475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.100407][T28475] RIP: 0033:0x7f5bf967da0a [ 981.104849][T28475] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.124548][T28475] RSP: 002b:00007f5bf80cee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 981.133183][T28475] RAX: ffffffffffffffda RBX: 00007f5bf80ceee0 RCX: 00007f5bf967da0a [ 981.141335][T28475] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5bf80ceea0 [ 981.149427][T28475] RBP: 0000200000000180 R08: 00007f5bf80ceee0 R09: 0000000000800700 [ 981.157463][T28475] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 981.165547][T28475] R13: 00007f5bf80ceea0 R14: 000000000000046f R15: 000000000000002c [ 981.173645][T28475] [ 981.176801][T28475] ---[ end trace 0000000000000000 ]--- [ 981.182436][T28475] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.6871: iget: bad extra_isize 90 (inode size 256) [ 981.196067][T28475] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 981.205728][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 981.206072][T28475] EXT4-fs (loop7): Remounting filesystem read-only [ 981.214888][ C0] EXT4-fs (loop7): initial error at time 1772166955: ext4_xattr_inode_iget:441: inode 18 [ 981.214921][ C0] EXT4-fs (loop7): last error at time 1772166955: ext4_xattr_inode_iget:441: inode 18 [ 981.249495][T28475] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -30) [ 981.253132][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.258800][T28475] EXT4-fs (loop7): 1 orphan inode deleted [ 981.274423][T28475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.392167][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6876'. [ 981.402321][T28485] IPv6: NLM_F_CREATE should be specified when creating new route [ 981.617565][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.125426][T28439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.184925][T28495] loop6: detected capacity change from 0 to 2048 [ 982.211100][T28495] EXT4-fs: Ignoring removed orlov option [ 982.235844][T28495] EXT4-fs: Ignoring removed oldalloc option [ 982.248308][T28495] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 982.347697][T28495] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 982.381326][T28497] loop4: detected capacity change from 0 to 512 [ 982.395936][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 982.395951][ T28] audit: type=1400 audit(1772166956.979:4719): avc: denied { write } for pid=28499 comm="syz.8.6882" name="tcp6" dev="proc" ino=4026532902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 982.438779][T28501] loop8: detected capacity change from 0 to 512 [ 982.446794][T28501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 982.459927][T28501] EXT4-fs (loop8): orphan cleanup on readonly fs [ 982.492345][T28497] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 982.507890][T28501] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 982.551558][T28501] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 982.563502][T28497] EXT4-fs (loop4): 1 truncate cleaned up [ 982.570376][T28501] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.6882: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 982.593879][T28497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.625679][T28501] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 982.626084][T28501] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6882: couldn't read orphan inode 13 (err -117) [ 982.647130][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 982.647160][ C0] EXT4-fs (loop8): last error at time 1772166957: ext4_ext_check_inode:521: inode 13 [ 982.668618][T28501] loop8: lost filesystem error report for type 5 error -117 [ 982.669252][T28501] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 984.542432][T28501] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 984.558282][T28501] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 985.230820][T28521] netlink: 296 bytes leftover after parsing attributes in process `syz.3.6886'. [ 985.240662][ T28] audit: type=1400 audit(1772166959.829:4720): avc: denied { read write } for pid=28520 comm="syz.3.6886" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 985.277032][T28524] FAULT_INJECTION: forcing a failure. [ 985.277032][T28524] name failslab, interval 1, probability 0, space 0, times 0 [ 985.280938][ T28] audit: type=1400 audit(1772166959.829:4721): avc: denied { open } for pid=28520 comm="syz.3.6886" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 985.291228][T28524] CPU: 0 UID: 0 PID: 28524 Comm: syz.6.6887 Tainted: G W syzkaller #0 PREEMPT(full) [ 985.291367][T28524] Tainted: [W]=WARN [ 985.291389][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.291440][T28524] Call Trace: [ 985.291463][T28524] [ 985.291493][T28524] __dump_stack+0x1d/0x30 [ 985.291600][T28524] dump_stack_lvl+0x95/0xd0 [ 985.291711][T28524] dump_stack+0x15/0x1b [ 985.291813][T28524] should_fail_ex+0x263/0x280 [ 985.291995][T28524] should_failslab+0x8c/0xb0 [ 985.292062][T28524] kmem_cache_alloc_noprof+0x66/0x400 [ 985.292149][T28524] ? skb_clone+0x151/0x1f0 [ 985.292249][T28524] skb_clone+0x151/0x1f0 [ 985.292345][T28524] __netlink_deliver_tap+0x2c9/0x500 [ 985.292525][T28524] netlink_unicast+0x66b/0x690 [ 985.292654][T28524] netlink_sendmsg+0x5c8/0x6f0 [ 985.292757][T28524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.292858][T28524] ____sys_sendmsg+0x5af/0x600 [ 985.292966][T28524] ___sys_sendmsg+0x195/0x1e0 [ 985.293144][T28524] __x64_sys_sendmsg+0xd4/0x160 [ 985.293385][T28524] x64_sys_call+0x194c/0x3020 [ 985.293521][T28524] do_syscall_64+0x12c/0x370 [ 985.293595][T28524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.293670][T28524] RIP: 0033:0x7f43361dc799 [ 985.293759][T28524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.293800][T28524] RSP: 002b:00007f4334c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.293885][T28524] RAX: ffffffffffffffda RBX: 00007f4336455fa0 RCX: 00007f43361dc799 [ 985.293989][T28524] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 985.294032][T28524] RBP: 00007f4334c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 985.294166][T28524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.294203][T28524] R13: 00007f4336456038 R14: 00007f4336455fa0 R15: 00007ffd069c0588 [ 985.294267][T28524] [ 985.294477][T28524] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6887'. [ 985.564042][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.574107][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.592153][T28530] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6889'. [ 985.609263][T28532] loop7: detected capacity change from 0 to 1024 [ 985.640946][T28532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.650381][ T28] audit: type=1400 audit(1772166960.229:4722): avc: denied { ioctl } for pid=28531 comm="syz.7.6891" path="socket:[114945]" dev="sockfs" ino=114945 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 985.685954][T28541] loop8: detected capacity change from 0 to 2048 [ 985.694325][T28541] EXT4-fs: Ignoring removed orlov option [ 985.704154][T28541] EXT4-fs: Ignoring removed oldalloc option [ 985.713117][T28541] EXT4-fs (loop8): filesystem too large to mount safely on this system [ 985.723410][ T28] audit: type=1400 audit(1772166960.279:4723): avc: denied { setopt } for pid=28533 comm="syz.4.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 985.766222][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.812525][T28538] syzkaller0: entered promiscuous mode [ 985.835431][T28538] syzkaller0: entered allmulticast mode [ 985.883049][ T28] audit: type=1400 audit(1772166960.469:4724): avc: denied { bind } for pid=28533 comm="syz.4.6890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 985.885171][T28541] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 985.940025][ T28] audit: type=1400 audit(1772166960.529:4725): avc: denied { bind } for pid=28559 comm="syz.6.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 985.968029][T28560] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6895'. [ 985.987157][ T28] audit: type=1400 audit(1772166960.529:4726): avc: denied { node_bind } for pid=28559 comm="syz.6.6895" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 986.062218][ T28] audit: type=1400 audit(1772166960.649:4727): avc: denied { read } for pid=28571 comm="syz.7.6896" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 986.305866][ T28] audit: type=1400 audit(1772166960.879:4728): avc: denied { unmount } for pid=23716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 986.386616][T28585] loop6: detected capacity change from 0 to 512 [ 986.397371][T28585] EXT4-fs: Ignoring removed i_version option [ 986.422421][T28585] EXT4-fs: Ignoring removed bh option [ 986.539868][T28585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.588097][T28588] loop4: detected capacity change from 0 to 2048 [ 986.598157][T28585] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 986.636477][T28588] EXT4-fs: Ignoring removed orlov option [ 986.681487][T28588] EXT4-fs: Ignoring removed oldalloc option [ 986.916496][T28588] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 987.693361][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.704570][T28590] syz1: rxe_newlink: already configured on xfrm0 [ 987.722168][T28605] loop7: detected capacity change from 0 to 1024 [ 987.748539][T28605] EXT4-fs: inline encryption not supported [ 987.752294][T28607] loop8: detected capacity change from 0 to 1024 [ 987.754531][T28605] EXT4-fs: quotafile must be on filesystem root [ 987.826902][T28607] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 987.846260][T28607] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 987.934792][T28607] EXT4-fs (loop8): orphan cleanup on readonly fs [ 987.953955][T28607] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz.8.6903: Invalid inode table block 0 in block_group 0 [ 987.976219][ T28] audit: type=1400 audit(1772166962.569:4729): avc: denied { lock } for pid=28618 comm="syz.3.6904" path="socket:[114426]" dev="sockfs" ino=114426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 988.007418][T28607] loop8: lost filesystem error report for type 5 error -117 [ 988.015740][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 988.029655][ C1] EXT4-fs (loop8): initial error at time 1772166962: __ext4_get_inode_loc:4782 [ 988.038746][ C1] EXT4-fs (loop8): last error at time 1772166962: __ext4_get_inode_loc:4782 [ 988.049352][T28607] EXT4-fs (loop8): Remounting filesystem read-only [ 988.069011][T28607] Quota error (device loop8): write_blk: dquota write failed [ 988.090166][T28607] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 988.122381][T28607] EXT4-fs (loop8): 1 truncate cleaned up [ 988.136638][T28607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 988.207185][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.385435][T28639] loop6: detected capacity change from 0 to 256 [ 989.239439][T28650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6912'. [ 989.270144][T28652] loop6: detected capacity change from 0 to 1024 [ 989.367600][T28652] EXT4-fs: Ignoring removed nobh option [ 989.437500][T28652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 989.515920][T28652] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 989.697187][T28652] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.6913: lblock 2 mapped to illegal pblock 2 (length 1) [ 989.818943][T28652] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 989.825730][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 989.841492][ C0] EXT4-fs (loop6): initial error at time 1772166964: ext4_map_blocks:776: inode 3: block 2 [ 989.851759][ C0] EXT4-fs (loop6): last error at time 1772166964: ext4_map_blocks:776: inode 3: block 2 [ 989.871918][T28652] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 989.923085][T28652] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.6913: lblock 0 mapped to illegal pblock 48 (length 1) [ 989.967772][ T28] audit: type=1400 audit(1772166964.549:4730): avc: denied { create } for pid=28653 comm="syz.4.6914" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 990.065859][T28652] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.085881][ T28] audit: type=1400 audit(1772166964.559:4731): avc: denied { read write } for pid=28653 comm="syz.4.6914" name="file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 990.138508][T28652] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 990.204690][T28652] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6913: Failed to acquire dquot type 0 [ 990.216205][ T28] audit: type=1400 audit(1772166964.559:4732): avc: denied { open } for pid=28653 comm="syz.4.6914" path="/197/file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 990.268645][ T28] audit: type=1400 audit(1772166964.729:4733): avc: denied { unlink } for pid=24557 comm="syz-executor" name="file0" dev="tmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 990.296261][T28663] loop8: detected capacity change from 0 to 256 [ 990.302615][T28652] loop6: lost filesystem error report for type 5 error -117 [ 990.302861][T28652] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 990.323407][T28665] loop7: detected capacity change from 0 to 1024 [ 990.341879][T28666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 990.371335][T28665] EXT4-fs: dax option not supported [ 990.412508][T28652] loop6: lost filesystem error report for type 5 error -117 [ 990.412681][T28652] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.6913: mark_inode_dirty error [ 990.444560][T28665] loop7: detected capacity change from 0 to 512 [ 990.469004][T28665] EXT4-fs: Ignoring removed i_version option [ 990.497295][T28665] ext4: Bad value for 'barrier' [ 990.578340][T28652] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 990.583056][T28652] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 990.620272][T28671] loop8: detected capacity change from 0 to 512 [ 990.686029][T28652] EXT4-fs (loop6): 1 orphan inode deleted [ 990.699363][T28671] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 990.703196][T28652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.721697][T11003] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 990.766041][T28678] EXT4-fs: Ignoring removed nobh option [ 990.774107][T11003] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.776229][T11003] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 990.793867][T11003] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:34: Failed to release dquot type 0 [ 990.802200][T28678] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 990.805692][T11003] loop6: lost filesystem error report for type 5 error -117 [ 990.833638][T28678] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 990.836466][T28671] EXT4-fs (loop8): 1 truncate cleaned up [ 990.862676][T28678] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6925: lblock 2 mapped to illegal pblock 2 (length 1) [ 990.885017][T28671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.920281][T28678] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 990.920429][T28678] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6925: lblock 0 mapped to illegal pblock 48 (length 1) [ 990.929658][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 990.929685][ C0] EXT4-fs (loop4): initial error at time 1772166965: ext4_map_blocks:776: inode 3: block 2 [ 990.929749][ C0] EXT4-fs (loop4): last error at time 1772166965: ext4_map_blocks:776: inode 3: block 2 [ 991.067274][T28652] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6913'. [ 991.107119][T28678] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 991.113786][T28678] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6925: Failed to acquire dquot type 0 [ 991.256687][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.311830][T28665] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 991.441044][T28678] loop4: lost filesystem error report for type 5 error -117 [ 991.441404][T28678] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 991.522993][T28665] EXT4-fs (loop7): 1 truncate cleaned up [ 991.603987][T28665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.649525][T28678] loop4: lost filesystem error report for type 5 error -117 [ 991.649811][T28678] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6925: mark_inode_dirty error [ 991.909137][T28678] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 991.909324][T28678] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 991.987641][T28678] EXT4-fs (loop4): 1 orphan inode deleted [ 992.016156][T28678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 992.060259][ T36] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 992.129552][ T36] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 992.129784][ T36] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 992.150715][T28678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6925'. [ 992.225842][ T36] loop6: lost filesystem error report for type 5 error -117 [ 992.878342][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.903767][T22089] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 992.936086][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.948711][T21531] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 992.963464][T22089] loop6: lost filesystem error report for type 5 error -117 [ 992.985758][T21531] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 992.985776][T22089] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 993.012108][T21531] __quota_error: 4 callbacks suppressed [ 993.012124][T21531] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 993.032399][T22089] loop6: lost filesystem error report for type 5 error -117 [ 993.032615][T22089] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 993.051341][T22089] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 993.068699][T21531] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 993.134797][T28696] FAULT_INJECTION: forcing a failure. [ 993.134797][T28696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.149353][T28698] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6926'. [ 993.158920][T28698] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6926'. [ 993.168076][T21531] loop4: lost filesystem error report for type 5 error -117 [ 993.168455][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6926'. [ 993.186009][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.195930][T24557] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 993.209032][T28698] set_capacity_and_notify: 2 callbacks suppressed [ 993.209052][T28698] loop6: detected capacity change from 0 to 512 [ 993.219919][T28696] CPU: 1 UID: 0 PID: 28696 Comm: syz.3.6929 Tainted: G W syzkaller #0 PREEMPT(full) [ 993.220024][T28696] Tainted: [W]=WARN [ 993.220053][T28696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 993.220094][T28696] Call Trace: [ 993.220123][T28696] [ 993.220152][T28696] __dump_stack+0x1d/0x30 [ 993.220245][T28696] dump_stack_lvl+0x95/0xd0 [ 993.220349][T28696] dump_stack+0x15/0x1b [ 993.220417][T28696] should_fail_ex+0x263/0x280 [ 993.220502][T28696] should_fail+0xb/0x20 [ 993.220568][T28696] should_fail_usercopy+0x1a/0x20 [ 993.220653][T28696] _copy_to_user+0x20/0xa0 [ 993.220752][T28696] simple_read_from_buffer+0xb5/0x130 [ 993.220869][T28696] proc_fail_nth_read+0x10e/0x150 [ 993.220972][T28696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.221144][T28696] vfs_read+0x1ab/0x7f0 [ 993.221263][T28696] ? __rcu_read_unlock+0x4e/0x70 [ 993.221389][T28696] ? __fget_files+0x184/0x1c0 [ 993.221411][T28696] ? __sys_bind+0x222/0x290 [ 993.221433][T28696] ? mutex_lock+0x57/0x90 [ 993.221485][T28696] ksys_read+0xdc/0x1a0 [ 993.221611][T28696] __x64_sys_read+0x40/0x50 [ 993.221729][T28696] x64_sys_call+0x2886/0x3020 [ 993.221810][T28696] do_syscall_64+0x12c/0x370 [ 993.221910][T28696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.222009][T28696] RIP: 0033:0x7f0a4a9fcfce [ 993.222083][T28696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 993.222137][T28696] RSP: 002b:00007f0a4943afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.222210][T28696] RAX: ffffffffffffffda RBX: 00007f0a4943b6c0 RCX: 00007f0a4a9fcfce [ 993.222272][T28696] RDX: 000000000000000f RSI: 00007f0a4943b0a0 RDI: 0000000000000005 [ 993.222313][T28696] RBP: 00007f0a4943b090 R08: 0000000000000000 R09: 0000000000000000 [ 993.222356][T28696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.222396][T28696] R13: 00007f0a4acb6128 R14: 00007f0a4acb6090 R15: 00007ffd16b5f6f8 [ 993.222526][T28696] [ 993.285805][T24557] loop4: lost filesystem error report for type 5 error -117 [ 993.439575][T24557] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 993.490387][T24557] loop4: lost filesystem error report for type 5 error -117 [ 993.490514][T24557] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 993.530104][T28698] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.6926: corrupted in-inode xattr: invalid ea_ino [ 993.554489][T28698] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6926: couldn't read orphan inode 15 (err -117) [ 993.566543][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 993.566568][ C0] EXT4-fs (loop6): initial error at time 1772166968: ext4_iget_extra_inode:5025: inode 15 [ 993.566632][ C0] EXT4-fs (loop6): last error at time 1772166968: ext4_iget_extra_inode:5025: inode 15 [ 993.638852][T28698] loop6: lost filesystem error report for type 5 error -117 [ 993.639570][T28698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.676981][T28702] loop8: detected capacity change from 0 to 512 [ 993.724517][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.740729][T28702] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 993.821920][T28702] EXT4-fs (loop8): 1 truncate cleaned up [ 993.875359][T28702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.921288][T28720] loop6: detected capacity change from 0 to 1024 [ 993.928245][T28720] EXT4-fs: dax option not supported [ 993.930551][T28718] loop4: detected capacity change from 0 to 1024 [ 993.946114][T28720] loop6: detected capacity change from 0 to 512 [ 993.966901][T28720] EXT4-fs: Ignoring removed i_version option [ 993.973311][T28720] ext4: Bad value for 'barrier' [ 994.008506][T28718] EXT4-fs: Ignoring removed nobh option [ 994.039247][T28712] loop3: detected capacity change from 0 to 512 [ 994.081859][T28718] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 994.121214][T28718] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 994.157188][T28712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 994.175235][T28712] EXT4-fs (loop3): 1 truncate cleaned up [ 994.200573][T28712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.228696][T28718] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.6936: lblock 2 mapped to illegal pblock 2 (length 1) [ 994.315746][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 994.322262][ C0] EXT4-fs (loop4): initial error at time 1772166968: ext4_map_blocks:776: inode 3: block 2 [ 994.332338][ C0] EXT4-fs (loop4): last error at time 1772166968: ext4_map_blocks:776: inode 3: block 2 [ 994.366319][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.456122][T28718] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 994.488766][T28718] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.6936: lblock 0 mapped to illegal pblock 48 (length 1) [ 994.515935][T28718] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 994.527399][T27378] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.580520][T28718] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6936: Failed to acquire dquot type 0 [ 994.629771][T28720] loop6: detected capacity change from 0 to 512 [ 994.640744][T28718] loop4: lost filesystem error report for type 5 error -117 [ 994.640924][T28718] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 994.715856][T28718] loop4: lost filesystem error report for type 5 error -117 [ 994.717131][T28718] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.6936: mark_inode_dirty error [ 994.737302][T28734] loop7: detected capacity change from 0 to 2048 [ 994.744382][T28734] EXT4-fs: Ignoring removed orlov option [ 994.778373][T28720] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 994.791874][T28734] EXT4-fs: Ignoring removed oldalloc option [ 994.865430][T28734] EXT4-fs (loop7): filesystem too large to mount safely on this system [ 994.884246][T28720] EXT4-fs (loop6): 1 truncate cleaned up [ 994.891103][T28718] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 994.901785][T28718] EXT4-fs (loop4): 1 orphan inode deleted [ 994.908043][T28718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.928650][ T36] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 994.971717][T28718] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6936'. [ 994.996083][ T36] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 994.996464][T28720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.004558][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 995.198180][T28734] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 995.317459][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.552001][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.573628][T10966] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 995.604710][T10966] fserror_report: 5 callbacks suppressed [ 995.604728][T10966] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.646087][T10966] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 995.667046][T10966] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 0 [ 995.679619][T10966] loop4: lost filesystem error report for type 5 error -117 [ 995.797531][T24557] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 995.845869][T24557] loop4: lost filesystem error report for type 5 error -117 [ 995.847813][T24557] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 995.897282][T28764] netlink: 296 bytes leftover after parsing attributes in process `syz.6.6951'. [ 995.901795][T24557] loop4: lost filesystem error report for type 5 error -117 [ 995.911997][T24557] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 995.966550][ T28] audit: type=1400 audit(1772166970.549:4735): avc: denied { create } for pid=28766 comm="syz.8.6953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 995.973948][T24557] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.989081][ T28] audit: type=1400 audit(1772166970.549:4736): avc: denied { setopt } for pid=28766 comm="syz.8.6953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 996.055106][T28776] loop3: detected capacity change from 0 to 2048 [ 996.076297][T28776] EXT4-fs: Ignoring removed orlov option [ 996.082067][T28776] EXT4-fs: Ignoring removed oldalloc option [ 996.103222][T28776] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 996.200900][T28776] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 996.319469][T28797] loop7: detected capacity change from 0 to 2048 [ 996.328405][T28797] EXT4-fs: Ignoring removed orlov option [ 996.345831][ T28] audit: type=1326 audit(1772166970.929:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28795 comm="syz.4.6958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72ca0fc799 code=0x0 [ 996.358567][T28797] EXT4-fs: Ignoring removed oldalloc option [ 996.399692][T28797] EXT4-fs (loop7): filesystem too large to mount safely on this system [ 996.470865][T28807] FAT-fs (loop4): Directory bread(block 64) failed [ 996.477512][T28807] FAT-fs (loop4): Directory bread(block 65) failed [ 996.484206][T28807] FAT-fs (loop4): Directory bread(block 66) failed [ 996.490786][T28807] FAT-fs (loop4): Directory bread(block 67) failed [ 996.497473][T28807] FAT-fs (loop4): Directory bread(block 68) failed [ 996.504507][T28807] FAT-fs (loop4): Directory bread(block 69) failed [ 996.511133][T28807] FAT-fs (loop4): Directory bread(block 70) failed [ 996.517695][T28807] FAT-fs (loop4): Directory bread(block 71) failed [ 996.524328][T28807] FAT-fs (loop4): Directory bread(block 72) failed [ 996.530895][T28807] FAT-fs (loop4): Directory bread(block 73) failed [ 996.605477][T28810] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 996.895687][T28807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.301531][ T28] audit: type=1326 audit(1772166972.889:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28839 comm="syz.8.6966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b01c799 code=0x0 [ 998.655883][T28850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.792691][ T28] audit: type=1326 audit(1772166973.379:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.3.6970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4aa3c799 code=0x0 [ 998.894972][T28878] set_capacity_and_notify: 1 callbacks suppressed [ 998.894993][T28878] loop3: detected capacity change from 0 to 256 [ 998.921066][T28878] FAT-fs (loop3): Directory bread(block 64) failed [ 998.927777][T28878] FAT-fs (loop3): Directory bread(block 65) failed [ 998.934396][T28878] FAT-fs (loop3): Directory bread(block 66) failed [ 998.941008][T28878] FAT-fs (loop3): Directory bread(block 67) failed [ 998.947745][T28878] FAT-fs (loop3): Directory bread(block 68) failed [ 998.954316][T28878] FAT-fs (loop3): Directory bread(block 69) failed [ 998.960915][T28878] FAT-fs (loop3): Directory bread(block 70) failed [ 998.967504][T28878] FAT-fs (loop3): Directory bread(block 71) failed [ 998.974163][T28878] FAT-fs (loop3): Directory bread(block 72) failed [ 998.980762][T28878] FAT-fs (loop3): Directory bread(block 73) failed [ 999.039590][T28880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=28880 comm=syz.6.6971 [ 999.251992][T28878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.535285][T28911] netlink: 4108 bytes leftover after parsing attributes in process `syz.4.6977'. [ 999.750256][T28929] loop6: detected capacity change from 0 to 2048 [ 999.779509][T28929] EXT4-fs: Ignoring removed orlov option [ 999.806837][T28929] EXT4-fs: Ignoring removed oldalloc option [ 999.828891][T28929] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 999.971927][T28929] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1000.299627][ T28] audit: type=1326 audit(1772166974.889:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.361265][ T28] audit: type=1326 audit(1772166974.889:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.415318][T28922] loop4: detected capacity change from 0 to 1024 [ 1000.423140][ T28] audit: type=1326 audit(1772166974.889:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.467545][T28922] EXT4-fs: Ignoring removed orlov option [ 1000.482458][T28939] loop7: detected capacity change from 0 to 1024 [ 1000.502146][ T28] audit: type=1326 audit(1772166974.889:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.526162][T28939] EXT4-fs: Ignoring removed nobh option [ 1000.543900][ T28] audit: type=1326 audit(1772166974.919:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.571285][ T28] audit: type=1326 audit(1772166974.919:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.599343][ T28] audit: type=1326 audit(1772166974.919:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.607781][T28939] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1000.636663][T28922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.649988][ T28] audit: type=1326 audit(1772166974.919:4747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28936 comm="syz.6.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43361dc799 code=0x7ffc0000 [ 1000.689775][T28939] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1000.706191][T28922] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.6977: bit already cleared for inode 13 [ 1000.720105][T28939] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.6982: lblock 2 mapped to illegal pblock 2 (length 1) [ 1000.756471][T28939] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1000.756718][T28939] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.6982: lblock 0 mapped to illegal pblock 48 (length 1) [ 1000.765968][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1000.765992][ C1] EXT4-fs (loop7): initial error at time 1772166975: ext4_map_blocks:776: inode 3: block 2 [ 1000.766036][ C1] EXT4-fs (loop7): last error at time 1772166975: ext4_map_blocks:776: inode 3: block 2 [ 1000.832173][T28939] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1000.832409][T28939] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.6982: Failed to acquire dquot type 0 [ 1000.911054][T28939] loop7: lost filesystem error report for type 5 error -117 [ 1000.911201][T28939] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1000.954276][T28939] loop7: lost filesystem error report for type 5 error -117 [ 1000.954419][T28939] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.6982: mark_inode_dirty error [ 1000.976160][T28939] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1000.976350][T28939] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1000.995963][T28939] EXT4-fs (loop7): 1 orphan inode deleted [ 1001.002312][T28939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.015874][T25073] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1001.038469][T25073] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 1001.053887][T28939] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6982'. [ 1001.130671][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.280800][T28952] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6984'. [ 1001.343615][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.436443][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1001.446014][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1001.478493][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1001.488080][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1001.513791][T28963] loop4: detected capacity change from 0 to 256 [ 1001.548150][T28963] FAT-fs (loop4): Directory bread(block 64) failed [ 1001.554845][T28963] FAT-fs (loop4): Directory bread(block 65) failed [ 1001.561531][T28963] FAT-fs (loop4): Directory bread(block 66) failed [ 1001.568114][T28963] FAT-fs (loop4): Directory bread(block 67) failed [ 1001.574802][T28963] FAT-fs (loop4): Directory bread(block 68) failed [ 1001.581598][T28963] FAT-fs (loop4): Directory bread(block 69) failed [ 1001.588228][T28963] FAT-fs (loop4): Directory bread(block 70) failed [ 1001.594834][T28963] FAT-fs (loop4): Directory bread(block 71) failed [ 1001.601485][T28963] FAT-fs (loop4): Directory bread(block 72) failed [ 1001.608073][T28963] FAT-fs (loop4): Directory bread(block 73) failed [ 1001.899812][T28963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1002.114182][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1002.149184][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1002.254923][T28972] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1002.317391][T21531] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1002.384965][T21531] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1002.385906][T21531] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 1002.466129][T21531] loop7: lost filesystem error report for type 5 error -117 [ 1002.467204][T22489] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1002.549435][T22489] loop7: lost filesystem error report for type 5 error -117 [ 1002.549697][T22489] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1002.617210][T22489] loop7: lost filesystem error report for type 5 error -117 [ 1002.617476][T22489] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1002.702802][T22489] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1003.278482][T28981] loop6: detected capacity change from 0 to 512 [ 1003.350455][T28981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1003.373413][T28981] EXT4-fs (loop6): 1 truncate cleaned up [ 1003.379766][T28981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.497147][T28993] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6996'. [ 1003.499722][T28991] loop7: detected capacity change from 0 to 512 [ 1003.529834][T28991] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1003.540657][ T28] kauditd_printk_skb: 246 callbacks suppressed [ 1003.540675][ T28] audit: type=1326 audit(1772166978.129:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28992 comm="syz.8.6996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8b01c799 code=0x0 [ 1003.583640][T28991] EXT4-fs (loop7): 1 truncate cleaned up [ 1003.630877][T28991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.650640][T28989] loop3: detected capacity change from 0 to 512 [ 1003.696202][T28989] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1003.744247][T28989] EXT4-fs (loop3): 1 truncate cleaned up [ 1003.763190][T28989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.833647][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.891857][T28999] loop6: detected capacity change from 0 to 1024 [ 1003.906490][T28999] EXT4-fs: dax option not supported [ 1004.005511][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.047131][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.148799][T29007] lo speed is unknown, defaulting to 1000 [ 1004.159572][T29007] xfrm0 speed is unknown, defaulting to 1000 [ 1004.199085][T29011] loop7: detected capacity change from 0 to 1764 [ 1004.225661][ T28] audit: type=1400 audit(1772166978.809:4991): avc: denied { read } for pid=29012 comm="syz.3.7001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1004.257275][T28999] loop6: detected capacity change from 0 to 512 [ 1004.389758][T28999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1004.439822][ T28] audit: type=1400 audit(1772166978.999:4992): avc: denied { getopt } for pid=29000 comm="syz.7.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1004.442445][T28999] EXT4-fs (loop6): 1 truncate cleaned up [ 1004.466916][T29021] loop4: detected capacity change from 0 to 1024 [ 1004.467332][T29021] EXT4-fs: dax option not supported [ 1004.493102][T28999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.510074][T29015] loop3: detected capacity change from 0 to 512 [ 1004.553526][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.573462][T29015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1004.628837][ T28] audit: type=1400 audit(1772166979.219:4993): avc: denied { create } for pid=29024 comm="syz.7.7006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1004.630876][T29023] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1004.668286][T29028] __nla_validate_parse: 7 callbacks suppressed [ 1004.668305][T29028] netlink: 296 bytes leftover after parsing attributes in process `syz.6.7007'. [ 1004.694398][T29015] EXT4-fs (loop3): 1 truncate cleaned up [ 1004.720181][T29015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.829709][T29032] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1004.884344][ T28] audit: type=1326 audit(1772166979.469:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1004.957172][ T28] audit: type=1326 audit(1772166979.469:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1004.990164][ T28] audit: type=1326 audit(1772166979.509:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1005.045646][ T28] audit: type=1326 audit(1772166979.519:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1005.131338][T29047] loop7: detected capacity change from 0 to 256 [ 1005.220135][T29047] FAT-fs (loop7): Directory bread(block 64) failed [ 1005.228054][T29047] FAT-fs (loop7): Directory bread(block 65) failed [ 1005.235356][T29047] FAT-fs (loop7): Directory bread(block 66) failed [ 1005.242455][T29047] FAT-fs (loop7): Directory bread(block 67) failed [ 1005.249915][T29047] FAT-fs (loop7): Directory bread(block 68) failed [ 1005.257204][T29047] FAT-fs (loop7): Directory bread(block 69) failed [ 1005.264674][T29047] FAT-fs (loop7): Directory bread(block 70) failed [ 1005.272144][T29047] FAT-fs (loop7): Directory bread(block 71) failed [ 1005.279722][T29047] FAT-fs (loop7): Directory bread(block 72) failed [ 1005.286924][T29047] FAT-fs (loop7): Directory bread(block 73) failed [ 1005.466729][ T28] audit: type=1326 audit(1772166979.519:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1005.521530][ T28] audit: type=1326 audit(1772166979.519:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29033 comm="syz.8.7008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c8b01c799 code=0x7ffc0000 [ 1005.598397][T29021] loop4: detected capacity change from 0 to 512 [ 1005.688946][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.690268][T29021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1005.758736][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1005.783204][T29073] netlink: 'syz.7.7013': attribute type 3 has an invalid length. [ 1005.800991][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1005.835553][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1005.844682][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1005.869501][T29021] EXT4-fs (loop4): 1 truncate cleaned up [ 1005.919091][T29066] loop6: detected capacity change from 0 to 512 [ 1005.947005][T29078] loop7: detected capacity change from 0 to 1024 [ 1005.953923][T29078] EXT4-fs: Ignoring removed nobh option [ 1005.971638][T29021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.989771][T29066] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1006.021465][T29078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1006.049511][T29078] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1006.069639][T29078] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.7015: lblock 2 mapped to illegal pblock 2 (length 1) [ 1006.073805][T29066] EXT4-fs (loop6): 1 truncate cleaned up [ 1006.103474][T29066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.121755][T29078] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1006.124053][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1006.133186][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1006.133209][ C0] EXT4-fs (loop7): initial error at time 1772166980: ext4_map_blocks:776: inode 3: block 2 [ 1006.133261][ C0] EXT4-fs (loop7): last error at time 1772166980: ext4_map_blocks:776: inode 3: block 2 [ 1006.182159][T29078] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.7015: lblock 0 mapped to illegal pblock 48 (length 1) [ 1006.530228][T29090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1006.602714][T29078] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1006.603008][T29078] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.7015: Failed to acquire dquot type 0 [ 1006.682552][T29078] loop7: lost filesystem error report for type 5 error -117 [ 1006.683050][T29078] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1006.708655][T29068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1006.746463][T29078] loop7: lost filesystem error report for type 5 error -117 [ 1006.747039][T29078] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.7015: mark_inode_dirty error [ 1006.766088][T29078] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1006.766337][T29078] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1006.786418][T29078] EXT4-fs (loop7): 1 orphan inode deleted [ 1006.793131][T29078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.805789][T25073] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1006.824548][T25073] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1006.824748][T25073] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 1006.861336][T29078] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7015'. [ 1006.891891][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.906852][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.009228][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.115997][T10049] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1007.162080][T29096] loop6: detected capacity change from 0 to 1024 [ 1007.178929][T10049] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1007.179062][T10049] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 1007.202604][T10049] loop7: lost filesystem error report for type 5 error -117 [ 1007.322710][T22489] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1007.404534][T29107] loop3: detected capacity change from 0 to 512 [ 1007.422639][T29096] EXT4-fs: dax option not supported [ 1007.522263][T22489] loop7: lost filesystem error report for type 5 error -117 [ 1007.522769][T29107] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1007.543944][T22489] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1007.674450][T29096] EXT4-fs: Ignoring removed i_version option [ 1007.703379][T22489] loop7: lost filesystem error report for type 5 error -117 [ 1007.703668][T22489] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1007.798036][T29096] ext4: Bad value for 'barrier' [ 1007.823401][T29107] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1007.905579][T29107] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.7021: Allocating blocks 41-42 which overlap fs metadata [ 1007.971498][T22489] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1008.090730][T29107] loop3: lost filesystem error report for type 5 error -117 [ 1008.149932][T29107] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.7021: Failed to acquire dquot type 1 [ 1008.157411][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1008.157428][ C1] EXT4-fs (loop3): initial error at time 1772166982: ext4_mb_mark_diskspace_used:4222 [ 1008.157454][ C1] EXT4-fs (loop3): last error at time 1772166982: ext4_mb_mark_diskspace_used:4222 [ 1008.286637][T29128] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1008.306517][T29107] loop3: lost filesystem error report for type 5 error -117 [ 1008.310278][T29107] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1008.355915][T29107] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.7021: corrupted inode contents [ 1008.391230][T29128] EXT4-fs (loop7): 1 truncate cleaned up [ 1008.397784][T29128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.405949][T29107] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1008.417764][T29107] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #12: comm syz.3.7021: mark_inode_dirty error [ 1008.443708][T29107] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1008.443970][T29107] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.7021: corrupted inode contents [ 1008.504140][T29096] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1008.530402][T29107] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1008.530636][T29107] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.7021: mark_inode_dirty error [ 1008.567578][T29096] EXT4-fs (loop6): 1 truncate cleaned up [ 1008.573017][T29107] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1008.573591][T29107] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.7021: corrupted inode contents [ 1008.610342][T29107] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1008.642376][T29107] loop3: lost filesystem error report for type 5 error -117 [ 1008.655530][T29107] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #12: comm syz.3.7021: corrupted inode contents [ 1008.666974][T29096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.675494][T29107] EXT4-fs error (device loop3): ext4_truncate:4587: inode #12: comm syz.3.7021: mark_inode_dirty error [ 1008.675780][T29107] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1008.708462][T29107] loop3: lost filesystem error report for type 5 error -117 [ 1008.708760][T29107] EXT4-fs (loop3): 1 truncate cleaned up [ 1008.722305][T29107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1008.780066][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.806671][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.834497][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 1008.834515][ T28] audit: type=1400 audit(1772166983.419:5150): avc: denied { name_bind } for pid=29144 comm="syz.3.7025" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1008.939637][ T28] audit: type=1400 audit(1772166983.529:5151): avc: denied { nlmsg_read } for pid=29151 comm="syz.3.7027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1008.960587][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7028'. [ 1008.989264][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7028'. [ 1009.015037][ T28] audit: type=1400 audit(1772166983.569:5152): avc: denied { ioctl } for pid=29151 comm="syz.3.7027" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x451f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1009.062682][T29162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1009.083749][T29164] EXT4-fs: Ignoring removed nobh option [ 1009.095404][T29164] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1009.129308][T29164] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1009.152315][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.221387][T29170] iso9660: Unknown parameter 'cą·ck' [ 1009.221382][T29164] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.7029: lblock 2 mapped to illegal pblock 2 (length 1) [ 1009.258286][T29164] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1009.266475][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1009.266492][ C0] EXT4-fs (loop3): initial error at time 1772166983: ext4_map_blocks:776: inode 3: block 2 [ 1009.266542][ C0] EXT4-fs (loop3): last error at time 1772166983: ext4_map_blocks:776: inode 3: block 2 [ 1009.384793][T29164] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.7029: lblock 0 mapped to illegal pblock 48 (length 1) [ 1009.395234][T29193] set_capacity_and_notify: 5 callbacks suppressed [ 1009.395332][T29193] loop6: detected capacity change from 0 to 512 [ 1009.415956][T29164] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1009.424802][T29164] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.7029: Failed to acquire dquot type 0 [ 1009.442990][T29164] loop3: lost filesystem error report for type 5 error -117 [ 1009.443159][T29164] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1009.460745][T29164] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.7029: mark_inode_dirty error [ 1009.482399][T29164] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1009.497054][T29199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=29199 comm=syz.7.7036 [ 1009.515943][T29164] EXT4-fs (loop3): 1 orphan inode deleted [ 1009.522375][T29164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.544844][T21531] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1009.568890][T29193] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.581676][T21531] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1009.611707][T21531] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 1009.623908][T29193] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.645659][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.656776][T21531] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1009.707844][T21531] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1009.740212][T21531] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 1009.757486][T29211] __nla_validate_parse: 4 callbacks suppressed [ 1009.757563][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1009.778420][T29212] loop4: detected capacity change from 0 to 512 [ 1009.785418][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.794841][T23716] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1009.808785][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1009.826736][T23716] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1009.836632][T29212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1009.874920][T23716] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1009.894613][T29219] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1009.896687][T29212] EXT4-fs (loop4): 1 truncate cleaned up [ 1009.940329][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1009.956918][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1009.969162][T29212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.029170][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1010.062786][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7043'. [ 1010.171455][T29236] loop7: detected capacity change from 0 to 1024 [ 1010.196215][T29239] netlink: 'syz.6.7050': attribute type 63 has an invalid length. [ 1010.204167][T29239] lo: entered promiscuous mode [ 1010.214163][T29236] EXT4-fs: Ignoring removed nobh option [ 1010.220021][T29239] lo: entered allmulticast mode [ 1010.241581][T29236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1010.250472][ T28] audit: type=1400 audit(1772166984.829:5153): avc: denied { connect } for pid=29238 comm="syz.6.7050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1010.275965][T29236] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1010.290710][T29236] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.7049: lblock 2 mapped to illegal pblock 2 (length 1) [ 1010.330075][T29236] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1010.338248][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1010.338283][ C1] EXT4-fs (loop7): initial error at time 1772166984: ext4_map_blocks:776: inode 3: block 2 [ 1010.338358][ C1] EXT4-fs (loop7): last error at time 1772166984: ext4_map_blocks:776: inode 3: block 2 [ 1010.456720][T29236] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.7049: lblock 0 mapped to illegal pblock 48 (length 1) [ 1010.484231][T29244] 9p: Bad value for 'wfdno' [ 1010.491201][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.514339][T29236] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1010.540092][T29236] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.7049: Failed to acquire dquot type 0 [ 1010.637071][T29236] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1010.651770][T29252] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1010.657361][T29236] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.7049: mark_inode_dirty error [ 1010.687380][T29250] loop4: detected capacity change from 0 to 1024 [ 1010.694780][T29250] EXT4-fs: dax option not supported [ 1010.723327][T29250] loop4: detected capacity change from 0 to 512 [ 1010.741699][T29250] EXT4-fs: Ignoring removed i_version option [ 1010.759103][T29250] ext4: Bad value for 'barrier' [ 1010.851887][T29254] loop6: detected capacity change from 0 to 512 [ 1010.909246][T29236] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1010.939881][T29236] EXT4-fs (loop7): 1 orphan inode deleted [ 1010.952627][T29254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.965923][T21531] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1010.983958][T29236] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.005854][T29254] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.024506][T21531] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 1011.070187][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.086326][T10997] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 1011.088996][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1011.120630][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1011.125499][T10997] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 0 [ 1011.156181][T29263] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.7056: iget: bad i_size value: 2533274857506816 [ 1011.169606][T29254] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.7056: iget: bad i_size value: 2533274857506816 [ 1011.187081][T29254] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.7056: iget: bad i_size value: 2533274857506816 [ 1011.188713][T22489] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1011.212743][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1011.235985][T29262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7059'. [ 1011.245194][T22489] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1011.267122][T22089] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.276440][T22489] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1011.307148][T22489] fserror_report: 12 callbacks suppressed [ 1011.307164][T22489] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1011.641273][T29286] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1011.658658][T29280] loop3: detected capacity change from 0 to 512 [ 1011.666486][T29250] loop4: detected capacity change from 0 to 512 [ 1011.742230][T29280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1011.755991][T29250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1011.787700][T29280] EXT4-fs (loop3): 1 truncate cleaned up [ 1011.819183][T29250] EXT4-fs (loop4): 1 truncate cleaned up [ 1011.879800][T29280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1011.951996][T29250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.060323][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.146088][T29298] loop4: detected capacity change from 0 to 1024 [ 1012.177951][T29298] EXT4-fs: Ignoring removed nobh option [ 1012.266207][T29303] cgroup: Unexpected value for 'all' [ 1012.349510][T29298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1012.464159][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.516525][T29298] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1012.547996][T29298] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.7070: lblock 2 mapped to illegal pblock 2 (length 1) [ 1012.594151][T29298] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1012.596049][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1012.596078][ C0] EXT4-fs (loop4): initial error at time 1772166987: ext4_map_blocks:776: inode 3: block 2 [ 1012.596486][ C0] EXT4-fs (loop4): last error at time 1772166987: ext4_map_blocks:776: inode 3: block 2 [ 1012.601044][T29298] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.7070: lblock 0 mapped to illegal pblock 48 (length 1) [ 1012.601084][T29298] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1012.601322][T29298] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.7070: Failed to acquire dquot type 0 [ 1012.601352][T29298] fserror_report: 9 callbacks suppressed [ 1012.601365][T29298] loop4: lost filesystem error report for type 5 error -117 [ 1012.601696][T29298] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1012.601753][T29298] loop4: lost filesystem error report for type 5 error -117 [ 1012.611017][T29298] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.7070: mark_inode_dirty error [ 1012.611082][T29298] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1012.625945][T29298] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1012.625989][T29298] EXT4-fs (loop4): 1 orphan inode deleted [ 1012.626480][T29298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.626615][T25073] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1012.626769][T25073] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1012.626948][T25073] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 1012.626995][T25073] loop4: lost filesystem error report for type 5 error -117 [ 1012.629868][T29318] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1012.717618][T29327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29327 comm=syz.7.7080 [ 1012.723747][T29324] loop3: detected capacity change from 0 to 1024 [ 1012.743646][T29324] EXT4-fs: dax option not supported [ 1012.750277][T29324] EXT4-fs: Ignoring removed i_version option [ 1012.750309][T29324] ext4: Bad value for 'barrier' [ 1012.940095][T29329] loop6: p1 < > p4 [ 1012.960206][T24557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.960347][T10997] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 1012.960390][T10997] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1012.960531][T10997] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 0 [ 1012.960561][T10997] loop4: lost filesystem error report for type 5 error -117 [ 1012.960926][T24557] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1012.960970][T24557] loop4: lost filesystem error report for type 5 error -117 [ 1012.961137][T24557] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1012.961161][T24557] loop4: lost filesystem error report for type 5 error -117 [ 1012.961231][T24557] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1012.961315][T24557] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1013.030298][T29329] loop6: p4 start 42180 is beyond EOD, truncated [ 1013.356549][T29324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1013.388110][T29324] EXT4-fs (loop3): 1 truncate cleaned up [ 1013.409586][T29324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.740994][T23716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.914952][T29359] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1014.082629][T29375] EXT4-fs: Ignoring removed nobh option [ 1014.115827][T29375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1014.137204][T29367] EXT4-fs: Ignoring removed orlov option [ 1014.149487][T29375] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1014.169858][T29367] EXT4-fs: Ignoring removed oldalloc option [ 1014.179838][T29379] EXT4-fs: Ignoring removed orlov option [ 1014.192583][T29379] EXT4-fs: Ignoring removed oldalloc option [ 1014.200725][T29375] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.7095: lblock 2 mapped to illegal pblock 2 (length 1) [ 1014.209161][T29367] EXT4-fs (loop6): filesystem too large to mount safely on this system [ 1014.216316][T29375] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.224566][T29379] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 1014.229465][T29375] __quota_error: 204 callbacks suppressed [ 1014.229513][T29375] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1014.233701][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1014.233717][ C1] EXT4-fs (loop7): initial error at time 1772166988: ext4_map_blocks:776: inode 3: block 2 [ 1014.272451][ C1] EXT4-fs (loop7): last error at time 1772166988: ext4_map_blocks:776: inode 3: block 2 [ 1014.300357][T29375] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.7095: lblock 0 mapped to illegal pblock 48 (length 1) [ 1014.330504][T29375] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1014.342265][T29387] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1014.358274][T29375] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1014.385566][T29375] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.7095: Failed to acquire dquot type 0 [ 1014.415897][T29375] loop7: lost filesystem error report for type 5 error -117 [ 1014.416235][T29375] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1014.439723][T29375] loop7: lost filesystem error report for type 5 error -117 [ 1014.440073][T29375] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.7095: mark_inode_dirty error [ 1014.496395][T29375] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1014.496573][T29375] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1014.530568][T29375] EXT4-fs (loop7): 1 orphan inode deleted [ 1014.538256][T29375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.550681][T10995] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 1014.572533][T10995] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1014.581183][T10995] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:29: Failed to release dquot type 0 [ 1014.607159][ T28] audit: type=1326 audit(1772166989.199:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29373 comm="syz.7.7095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bf967c799 code=0x0 [ 1014.653353][T12979] ================================================================== [ 1014.661520][T12979] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 1014.668502][T12979] [ 1014.670844][T12979] write to 0xffff88810350f82c of 4 bytes by task 13493 on cpu 0: [ 1014.678599][T12979] shmem_mknod+0x143/0x170 [ 1014.683048][T12979] shmem_create+0x34/0x50 [ 1014.687409][T12979] path_openat+0xd75/0x2050 [ 1014.691948][T12979] do_file_open+0x16c/0x290 [ 1014.696492][T12979] do_sys_openat2+0x94/0x130 [ 1014.701109][T12979] __x64_sys_openat+0xf2/0x120 [ 1014.705913][T12979] x64_sys_call+0x1e39/0x3020 [ 1014.710627][T12979] do_syscall_64+0x12c/0x370 [ 1014.715256][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.721608][T12979] [ 1014.723951][T12979] read to 0xffff88810350f82c of 4 bytes by task 12979 on cpu 1: [ 1014.731600][T12979] fill_mg_cmtime+0x5b/0x270 [ 1014.736212][T12979] generic_fillattr+0x24a/0x340 [ 1014.741176][T12979] shmem_getattr+0x181/0x200 [ 1014.745798][T12979] vfs_getattr_nosec+0x146/0x1e0 [ 1014.750846][T12979] vfs_getattr+0x48/0x60 [ 1014.755116][T12979] vfs_statx_path+0x28/0x140 [ 1014.759737][T12979] vfs_statx+0xc4/0x170 [ 1014.763934][T12979] vfs_fstatat+0x118/0x170 [ 1014.768372][T12979] __se_sys_newfstatat+0x55/0x3e0 [ 1014.773427][T12979] __x64_sys_newfstatat+0x55/0x70 [ 1014.778494][T12979] x64_sys_call+0x2c64/0x3020 [ 1014.783200][T12979] do_syscall_64+0x12c/0x370 [ 1014.787808][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.793900][T12979] [ 1014.796237][T12979] value changed: 0x3a06e9ec -> 0x0e42eb9f [ 1014.801976][T12979] [ 1014.804831][T12979] Reported by Kernel Concurrency Sanitizer on: [ 1014.810996][T12979] CPU: 1 UID: 0 PID: 12979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 1014.821522][T12979] Tainted: [W]=WARN [ 1014.825344][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1014.835442][T12979] ================================================================== [ 1014.884321][ T28] audit: type=1400 audit(1772166989.469:5353): avc: denied { getopt } for pid=29404 comm="syz.3.7100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1014.907576][T29408] netlink: 'syz.6.7101': attribute type 1 has an invalid length. [ 1014.919535][T29408] netlink: 'syz.6.7101': attribute type 4 has an invalid length. [ 1014.936330][ T28] audit: type=1400 audit(1772166989.469:5354): avc: denied { create } for pid=29404 comm="syz.3.7100" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1014.984356][T29411] netlink: 'syz.6.7101': attribute type 1 has an invalid length. [ 1015.007058][T22489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.009329][T29408] __nla_validate_parse: 12 callbacks suppressed [ 1015.009380][T29408] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.7101'. [ 1015.025867][T29411] netlink: 'syz.6.7101': attribute type 4 has an invalid length. [ 1015.039533][T25073] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1015.054072][T29408] set_capacity_and_notify: 6 callbacks suppressed [ 1015.054101][T29408] loop6: detected capacity change from 0 to 256 [ 1015.068933][ T28] audit: type=1400 audit(1772166989.509:5355): avc: denied { setattr } for pid=29404 comm="syz.3.7100" name="file0" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1015.092176][ T28] audit: type=1400 audit(1772166989.519:5356): avc: denied { write } for pid=29404 comm="syz.3.7100" name="file0" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1015.161137][T29411] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.7101'. [ 1015.224326][T29408] FAT-fs (loop6): count of clusters too big (178174) [ 1015.271112][T29408] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1015.520727][ T28] audit: type=1400 audit(1772166990.109:5357): avc: denied { unlink } for pid=23716 comm="syz-executor" name="file0" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1015.562972][T25073] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1015.571601][T25073] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 1015.583070][T25073] loop7: lost filesystem error report for type 5 error -117 [ 1015.584260][T22489] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1015.610340][T22489] loop7: lost filesystem error report for type 5 error -117 [ 1015.610555][T22489] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1015.627806][T22489] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error