last executing test programs: 5m32.246635983s ago: executing program 2 (id=139): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x4, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r1, &(0x7f0000000600)="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", 0xa77, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x15, 0x4) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1}, 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) unshare(0x40070000) syz_open_dev$sg(0x0, 0x0, 0x20000) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) 5m31.457646852s ago: executing program 2 (id=149): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x220300, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r0]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") 5m31.293410785s ago: executing program 2 (id=151): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000f80)={0x1dc, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x2c153c4ca725a076}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x1d0, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) sigaltstack(&(0x7f0000000280)={&(0x7f00000001c0)=""/150, 0x80000001, 0x96}, &(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x0, 0x1000}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bf, &(0x7f0000000740)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x42) 5m30.927381694s ago: executing program 2 (id=153): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x10000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYRES8=r0, @ANYBLOB="86b3d438993edec377d75c6c03e5592834e20c004944db3a46523580861b2923277d0b481ba52257524277e0f5f190950b2b103686f2323d7ae6c99cf80f715c7682df71701dfbc156420985e112af577ed11b0c09a8cf9336dde7d5b40e581dbab430ce63e170fbb736012e24e0d44758d025951f45b4ae3f813cf8318a1921ec11b9df194b94b422e8af8abb1991472eb3dc22635143e8d0aa697517997f3832cc3333d3d3a5c244ced5", @ANYRESHEX], 0xff, 0x204, &(0x7f0000000300)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x8000000000000001, 0x20, 0x6463, 0x20, 0x1}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd4, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000200)='./file4\x00', 0x202002, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@discard}]}, 0xfc, 0x579, &(0x7f0000000680)="$eJzs3c9rHOUbAPBnNtk2/fH9JoVS1IMEerBSu2kSf1TwUI+ixYLe65JsQ8mmW7Kb0sSC7cFevEgRRCyI3jx491j8B/wrClooUoIevERmM5tuk910k+wmaffzgUned2Y2z/vuzPPmnZ1dNoC+NZr+yEW8HBFfJxHDTdsGI9s4urrf8uObU+mSxMrKJ38lkWTrGvsn2e8jWeWliPjty4jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596anHj3nbe71tfXL/7z3cf3Pzj31cnlb395eOxuEufjaLatuR87cKu5Mhqj2XOSj/PrdhzvQrD9JNnrBrAtA1me5yMdA4ZjIMv6llaGd7NpQI99kaY10KcS+Q99qjEPaFzbd+k6+Lnx6P3VC6CN/R9cfW0khurXRoeXk6eujNLr3ZEuxE9j/PrnvbvpEt17HQLgmW7djoizg4Mbx78kG/+272wH+6yPkcXP7zA00IH76fznjVbzn9za/CdazH+OtMjd7WiT/01yD7sQpq10/vdey/nv2k2rkYGs9r/6nC+fXL5SLqVj2/8j4lTkD6b1Te7nfJZbfrDSbmPz/C9d0viNuWDWjoeDB59+zHSxVtxRp5s8uh3xSsv5b7J2/JMWxz99Pi52GONE6d6r7bY9u/9renKLaeXHiNdaHv/kqcCb3J8cq58PY42zYqO/75z4vV38LfS/Jx79nBXa938kab5fW916jB+G/i2127bd8/9A8mm9fCBbd6NYq82PRxxIPtq4fuLJYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/72V9n968/N/3fHfeuHBh59/3y5+Z8f/zXrpVLamk/Gv0wbu5LkDAAAAAACA/SYXEUcjyRXWyrlcobD6/o7jcThXrlRrpy9XFq5OR/2zsiORzzXudA83vR9iPHs/bKM+sa4+GRHHIuKbgUP1emGqUp7e684DAAAAAAAAAAAAAAAAAADAPnEkYqjV5/9TfwzsdeuAntvkK7+BF1z7/M+2dOObnoB9adv//4e62w5g95n/Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/tpL/P13oYUMAAAAAAAAAAAAAAAAAAAAAAAAAAADgxXDxwoV0WVl+fHMqrU9fX1yYrVw/M12qzhbmFqYKU5X5a4WZSmWmXCpMVeae9ffKlcq18YlYuDFWK1VrY9XFpUtzlYWrtUtX5oozpUul/K70CgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpXUNhWYXB/NEOhy4W9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In/AgAA//+z7zor") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000007c0)=0x3, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) lseek(r3, 0x0, 0x2) poll(&(0x7f0000000140)=[{r3, 0x2402}], 0x1, 0x92) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file3'}, 0xb) madvise(&(0x7f0000869000/0x3000)=nil, 0x3000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5m30.160109602s ago: executing program 2 (id=166): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) io_uring_enter(r0, 0x2217, 0x7721, 0x16, 0x0, 0x0) 5m29.959766957s ago: executing program 2 (id=169): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 5m29.868676569s ago: executing program 32 (id=169): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 3m49.053551019s ago: executing program 0 (id=1210): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xa3a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) socket(0x2, 0x805, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x15) 3m48.924218572s ago: executing program 0 (id=1212): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) fstatfs(r0, &(0x7f00000001c0)=""/15) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x7f, 0x0, 0x0, 0x0, 0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x16, 0x8, 0x2}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r2, &(0x7f0000000180)='./file0\x00', 0x104) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") listen(0xffffffffffffffff, 0x2) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000038001a80060000000200000004000580"], 0x58}}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x8000, @empty}}, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000001c0), 0x0}, 0x23) 3m48.462929113s ago: executing program 0 (id=1214): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2a, 0x7, 0x0, {0x2, @ah_ip6_spec={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0xd4}, {0x0, @random="f5011e32f235", 0x5, 0x8000, [0x8f, 0x7bd9]}, @sctp_ip6_spec={@private2, @remote, 0x4e23, 0x4e22, 0x8}, {0x0, @empty, 0x5, 0x8000, [0x7ff, 0x3]}, 0xded7, 0x5}, 0x0, [0xcc6, 0x7, 0x7, 0x2, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x32]}}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) syz_open_procfs$userns(r0, &(0x7f0000000080)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) personality(0x619641b6fb4b8591) mount(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800000, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_read_part_table(0x5f1, &(0x7f00000008c0)="$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") 3m47.544626424s ago: executing program 0 (id=1222): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b6, &(0x7f0000006200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r7, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x28, r10, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r2, 0x410, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ptrace(0x11, r1) 3m47.255667881s ago: executing program 0 (id=1226): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, ["", "", ""]}, 0x1c}}, 0x20040004) 3m46.783742422s ago: executing program 0 (id=1230): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) creat(0x0, 0xd931d3864d39dcdb) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 3m46.783470312s ago: executing program 33 (id=1230): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) creat(0x0, 0xd931d3864d39dcdb) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 3m7.52661347s ago: executing program 1 (id=1521): socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4f3, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x3d31766ec70c8547}, 0xc, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8004001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a31000000000800410053697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000001100), 0x5}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0xa, 0xf}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m7.267189806s ago: executing program 1 (id=1526): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x4, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="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", 0xa77, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x15, 0x4) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1}, 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe72, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20000) socket$unix(0x1, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) write(r2, &(0x7f0000000080)='4', 0x1) 3m5.582942866s ago: executing program 1 (id=1536): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000180)='mountstats\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x8, 0x6e, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x9}, 0x48) 3m5.469856109s ago: executing program 1 (id=1538): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x2}, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)="737562d751f911e16c3a6536743a6d6f643ab6b7d91c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d", 0x2e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='r', 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a00), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x6, 0x1, 0x364, 0x40, 0x362, 0x7, 0xb77b, 0x38, 0x1, 0xd, 0x3303, 0x11}, [{0x60000000, 0x8d, 0x6, 0x7fffffffffffffff, 0xd, 0x3, 0x9, 0x5}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) sendfile(r5, r4, 0x0, 0x7fffffff) write$tun(r1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4606ff7fa33e0200"], 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r6 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) 3m4.502923711s ago: executing program 1 (id=1543): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0xc0100100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) openat(r6, &(0x7f0000002500)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0, 0x10a) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x50202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3m4.204716128s ago: executing program 1 (id=1546): memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0xc0100100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat(r6, &(0x7f0000002500)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0, 0x10a) read(r8, &(0x7f0000000380)=""/279, 0x117) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x50202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu<=0\x00|!\a\xf7\xc5/\xc2\x92\x9f\x9b1\xc2w8d\x91\xb3\xe4=\x05$.\x8dK\x89\x001\xa9\x19\'%r\xdd\xfc\x03\x00\x00\x00V\x94QA$\x95\xa3\xfe\x10\x00&M\xcf\xcc\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0xc0100100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat(r6, &(0x7f0000002500)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0, 0x10a) read(r8, &(0x7f0000000380)=""/279, 0x117) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x50202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu<=0\x00|!\a\xf7\xc5/\xc2\x92\x9f\x9b1\xc2w8d\x91\xb3\xe4=\x05$.\x8dK\x89\x001\xa9\x19\'%r\xdd\xfc\x03\x00\x00\x00V\x94QA$\x95\xa3\xfe\x10\x00&M\xcf\xcc0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x3, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 3.009247449s ago: executing program 3 (id=2937): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") 2.96244725s ago: executing program 4 (id=2938): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) fstatfs(r0, &(0x7f00000001c0)=""/15) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r2, &(0x7f0000000180)='./file0\x00', 0x104) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") listen(0xffffffffffffffff, 0x2) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000038001a80060000000200000004000580"], 0x58}}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x8000, @empty}}, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f00000001c0), 0x0}, 0x23) 2.794995744s ago: executing program 6 (id=2941): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x3c}}, 0x20088c4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x10000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x3d, 0x1, {0x64, 0x2, 0x80003, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f00000010c0)='\a\x00', 0x2, 0xc000, 0x0, 0x0) close(r0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) 2.751621695s ago: executing program 3 (id=2943): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x70}}, 0x0) 2.669422836s ago: executing program 3 (id=2944): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) 2.637957938s ago: executing program 3 (id=2945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x12, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000"], 0x0, 0x52}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000740), 0x5005) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@generic={0x10, 0xd, 0x6, 0x7, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r10, 0xd01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x57bb, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f80)=@filter={'filter\x00', 0x4, 0x4, 0x518, 0xffffffff, 0x2f8, 0x228, 0x2f8, 0xfeffffff, 0xffffffff, 0x448, 0x448, 0x448, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff], 'vlan1\x00', 'vlan0\x00', {}, {}, 0x32, 0x4, 0x0, 0x1e}, 0x2f2, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'macvlan1\x00', {0x80000000, 0x8000, 0x48, 0x0, 0xffff, 0x8, 0x196, 0xf, 0x18, 0x8}, {0x4f400000}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x9}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xffffffff, 0xff], [0xff, 0xffffffff, 0x0, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x29, 0x8, 0x6, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_virt_wifi\x00', {0xa, 0xd164, 0x4, 0x6fd, 0x6, 0xa, 0x2, 0x8, 0x18}, {0x200000}}}, @common=@icmp6={{0x28}, {0x8, "b349", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5ce) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$llc(r3, 0x0, 0x0) 2.611868868s ago: executing program 7 (id=2946): socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0122, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2.5443146s ago: executing program 6 (id=2947): perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c3, &(0x7f0000009c00)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_rr_get_interval(0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2.494306531s ago: executing program 7 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004820) getsockname$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xfda6) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsmount(r6, 0x0, 0x2) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000040)='nolazytime', &(0x7f00000000c0)='./file0\x00', r5) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000000002000000000000", @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="12030000000000000a00010003"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 2.358317804s ago: executing program 7 (id=2949): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18776a000c000000000000000000000000008500000061000000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000080)={[{@quota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nobarrier}, {@errors_remount}]}, 0xfd, 0x485, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bf, &(0x7f0000000740)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x42) 2.335004935s ago: executing program 4 (id=2950): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x48080) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) pipe(0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f00000002c0)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x0, 0x56b, &(0x7f0000000680)="$eJzs3V9rJWcZAPBnJjn5s5vdpOqFFlqrXdktuiebxrZBpFYQvSqI7f0ak7Mh7EnOkpy0m1Bs9hMIIip4pTfeCH4AQRa88VKEgnqrUFFEtwp6oR2ZyWSTPZmTpO3JOU3y+8HsvPPOn+d5l/POmTkzmQng3HoqIl6KiHezLHsmIibL+rQcYntnyJd758EbC/mQRJa98vckkrJud1tJOb5YrjYWEd/4WsS3koNx1ze3bs83m421cnq6vXJnen1z6/ryyvxSY6mxOjs78/zcC3PPzd3oSTsvRcSLX/nz97/z06+++MvPvf6nm3+99u08rYmymfvb8R4NHzZzp+m10bGOFdbeZ7APo7w9td2J8eOtc+8E8wEAoLv84PcjEfHpiHgmJmPo8MNZAAAA4BTKvjQR/00ismojXeoBAACAUyQt7oFN0np5L8BEpGm9vnMP78fiQtpsrbc/e6u1sbpY3CsbU1FLby03GzfKe4Wnopbk0zNFeW/62Y7p2Yh4LCK+NzleTNcXWs3FQf/4AQAAAOfExY7z/39N7pz/AwAAAGfM1KATAAAAAE7c+z3/T3ucBwAAAHByXP8HAACAM+3rL7+cD9nu+68XX9vcuN167fpiY/12fWVjob7QWrtTX2q1lopn9q0ctb1mq3Xn87G6cXe63VhvT69vbt1caW2stm8ux1hfGgQAAAAc8Ngn7/8+iYjtL4wXQ25k0EkBfTH8sJSU44re/8fLO+O3+5QU0BdDnRWXDy7z9mj1uo4T4HQb7qzo0teBs6c26ASAgUuOmN/15p3flONP9TYfAACg965+ovr6/1BEjB+65ran/8Ep19GJszcHlQjQd3949HpfNjmwTIB+K67/H/dGHkf8cKbUDt4BCJwzH/j6/5Gy7D0lBAAA9NxEMSRpvfx5byLStF6PuFS8FqCW3FpuNm6Ufxb4u8naaD49U6yZHHnOAAAAAAAAAAAAAAAAAAAAAAAAAADsyLLRyLKRotQhqaoEAAAATp+I9C/Jr3ae5X918spE5+8DI8l/ilcCj0TE6z965Qd359vttZm8/h8P69s/LOufrf6N4YteFAAAAAB9tXueXoz/PehsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhr3nnwxsLucIzFx3sV929fjoipqvjDMVaMx6IWERf+mcTwvvWSiBjqQfztexHx8ar4SZ7Ww5AV8ZPhk48fU+X/QlX7L/YgPpxn9/P9z0tV/S+Np4pxdf8bjohe9P/u+794uP8b6tL/L+3f0Gj19q+8GvH4Wz+f7hr/XsTjw4/Gv/zIBseKWFXxnz5mG7/56tZWt3nZjyOu7n7/FHu8/RH2StPtlTvT65tb15dX5pcaS43V2dmZ5+demHtu7sb0reVmo/y3MsZ3n/jFu4e1/0Ll919SZtO9/Vcqtlf1nfS/t+4++OjuxPbB+Neeroj/65+USxyMn5ZxPlOW8/lXd8vbO+X9nvzZb5/slmQef3Gv/bX97R87ov3XKtq6J90rHugoTxz3owMAnID1za3b881mY+3DUshGe5zYeEQcZ+GRGHjbFfpceLOnG8yyLMs/uhWz7kfEcbaTxHytpy1Nq/PZK3TtaAPeMQEAAD2XH+uPDDoJAAAAAAAAAAAAAAAAAAAAOOf2HvoVyUk9Za0z5t4jkHvyCH0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ74fwAAAP//pUrIQA==") mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000094) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) r4 = eventfd2(0x0, 0x0) fcntl$notify(r4, 0x5, 0x200000000000) r5 = socket(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={r7, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) 1.766769828s ago: executing program 7 (id=2952): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x3, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 1.70925838s ago: executing program 3 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x34}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 1.604774172s ago: executing program 4 (id=2955): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 1.583392272s ago: executing program 6 (id=2956): r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="bc70", 0x2}], 0x1}}], 0x2, 0x1c000) 1.551940303s ago: executing program 3 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004820) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xfda6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsmount(r7, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x2, 0xfffffffd, 0x5, 0xc, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0xfe, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x90b, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@multicast, @random="e40a00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x10, 0x0, @opaque="a89bf388db3e017f"}}}}}, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000040)='nolazytime', &(0x7f00000000c0)='./file0\x00', r6) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000000002000000000000", @ANYRESHEX=r5, @ANYRES8=r3, @ANYRESOCT=r0, @ANYRES64=r7, @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="12030000000000000a00010003"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x5b0f, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x8, 0x3, 0x568, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x498, 0xffffffff, 0xffffffff, 0x498, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x20, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x9, 0x4, 0x3, 0x5, 0x1, 0x0, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r9, &(0x7f0000000100)='bRequestType=-', 0xe) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.515698464s ago: executing program 4 (id=2960): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0xfa, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143441, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) munlockall() r1 = socket(0x10, 0x3, 0x0) setsockopt(r0, 0xfffeffff, 0x6, &(0x7f0000000d80)="143c9e04c5c2102342d87a1b84d4bbd7a362a4367276c428d25d12e917efaf529074bf0a1315f6118266ae6eb7c84c2a8320ff404d4f0f19024f305ea3c69fbdb69f6c5106eda0ab1bc513809f45fb3d3c6d0beb846c36be693fae1678f00cd77c272cf06af222107a12ac632991fc1145e10edfd73856", 0x77) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00', 0x0, 0x1419, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x4, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x8) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) 1.514638474s ago: executing program 6 (id=2961): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2a, 0x7, 0x0, {0x2, @ah_ip6_spec={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0xd4}, {0x0, @random="f5011e32f235", 0x5, 0x8000, [0x8f, 0x7bd9]}, @sctp_ip6_spec={@private2, @remote, 0x4e23, 0x4e22, 0x8}, {0x0, @empty, 0x5, 0x8000, [0x7ff, 0x3]}, 0xded7, 0x5}, 0x0, [0xcc6, 0x7, 0x7, 0x2, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x32]}}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) syz_open_procfs$userns(r0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) personality(0x619641b6fb4b8591) mount(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800000, 0x0) getpgrp(0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_read_part_table(0x5f1, &(0x7f00000008c0)="$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") 1.423649506s ago: executing program 5 (id=2962): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2a, 0x7, 0x0, {0x2, @ah_ip6_spec={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0xd4}, {0x0, @random="f5011e32f235", 0x5, 0x8000, [0x8f, 0x7bd9]}, @sctp_ip6_spec={@private2, @remote, 0x4e23, 0x4e22, 0x8}, {0x0, @empty, 0x5, 0x8000, [0x7ff, 0x3]}, 0xded7, 0x5}, 0x0, [0xcc6, 0x7, 0x7, 0x2, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x32]}}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) syz_open_procfs$userns(r0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x11}, 0x1c) personality(0x619641b6fb4b8591) mount(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800000, 0x0) getpgrp(0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_read_part_table(0x5f1, &(0x7f00000008c0)="$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") 1.420114186s ago: executing program 5 (id=2963): socket(0x2, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="a70b54c5294faaaaaaaaaa4386dd60010100001011ff00000000000018000000000000000000fe8000000200000000000000000000aa00000e22001090780203000000000000c58ccb0e5b85791f5c000000007cb0e3444ae7bc2d396b473314883b066d10f4e508c8fcf52dd53f8a8f32cea17a88be6bcf36d2ec42114b180e071d6233f06dc7ca46ade237982b949e5db100"/158], 0x0) r1 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1\x01\x04$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x83n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebbKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[\xf4n\xe5&$\\\xc1\x92\xe8p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3\xa4\xd4\xebE\x1a\xcb\xd8N\xbepF\xdf\x88^X;\x1b\x9a5\x800*\xd8P\xa2\x1f\x81\xe6\x88\xa7\xfb\x8d\xdb\xd5Q\xbf\x1f\xbe\xd7\xbe\xb9\xf3\xb9\xc5\x8f\x86\xbcj\xf7\xd8\xcfh\'\x92V\xfe\x19u\x86\b+}2\a\xc9\xdd\x10\xc5\xf7;\xe76\x814p\xfe2\x1b#\xe7\xbc\xddI\xce\x8eE1\x1b?a\xf2\xa07\xaecT\xd0I>S\xfa\xdf)ZJ\nP\xd4i\'\xac\xd5\xc4\xa8f\xb8.P\v\xfa\xa3\xb36\'2\x9ff\x82\xd9L\x99pJ', 0x1) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x9e}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000700000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)="3facd0f76edcffc1e300138d93d96c17396678416ae9e7be67ba417f7eb1158588ab587ab62da46837b24e115a53d47ded9ebb471c9aa4e9edbf2872ddd902e6357f44e0f2b8cc6dcefdb776121416ba206236a99a3e9c344a0a1ddc521749f07f44cce346f1f61cddc6a4915a60db79d89bbdafa54577d434cf21d1e03da35561e1e6ba6e432b4230822df9942222f92b37a9936bc0b42ca1f1c733eca16572b0d4ce22d4c9e4662d1609b0e4a57e04", 0xb0, r5}, 0x68) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) io_uring_enter(r6, 0x2217, 0x7721, 0x16, 0x0, 0x0) 1.315636948s ago: executing program 5 (id=2964): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000002200)=0xc0100100) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000001500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) read(0xffffffffffffffff, &(0x7f0000000380)=""/279, 0x117) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x50202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.152215603s ago: executing program 4 (id=2965): socket(0x2, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="a70b54c5294faaaaaaaaaa4386dd60010100001011ff00000000000018000000000000000000fe8000000200000000000000000000aa00000e22001090780203000000000000c58ccb0e5b85791f5c000000007cb0e3444ae7bc2d396b473314883b066d10f4e508c8fcf52dd53f8a8f32cea17a88be6bcf36d2ec42114b180e071d6233f06dc7ca46ade237982b949e5db100"/158], 0x0) r1 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1\x01\x04$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x83n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebbKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[\xf4n\xe5&$\\\xc1\x92\xe8p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3\xa4\xd4\xebE\x1a\xcb\xd8N\xbepF\xdf\x88^X;\x1b\x9a5\x800*\xd8P\xa2\x1f\x81\xe6\x88\xa7\xfb\x8d\xdb\xd5Q\xbf\x1f\xbe\xd7\xbe\xb9\xf3\xb9\xc5\x8f\x86\xbcj\xf7\xd8\xcfh\'\x92V\xfe\x19u\x86\b+}2\a\xc9\xdd\x10\xc5\xf7;\xe76\x814p\xfe2\x1b#\xe7\xbc\xddI\xce\x8eE1\x1b?a\xf2\xa07\xaecT\xd0I>S\xfa\xdf)ZJ\nP\xd4i\'\xac\xd5\xc4\xa8f\xb8.P\v\xfa\xa3\xb36\'2\x9ff\x82\xd9L\x99pJ', 0x1) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x9e}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000700000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)="3facd0f76edcffc1e300138d93d96c17396678416ae9e7be67ba417f7eb1158588ab587ab62da46837b24e115a53d47ded9ebb471c9aa4e9edbf2872ddd902e6357f44e0f2b8cc6dcefdb776121416ba206236a99a3e9c344a0a1ddc521749f07f44cce346f1f61cddc6a4915a60db79d89bbdafa54577d434cf21d1e03da35561e1e6ba6e432b4230822df9942222f92b37a9936bc0b42ca1f1c733eca16572b0d4ce22d4c9e4662d1609b0e4a57e04", 0xb0, r5}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 755.794602ms ago: executing program 7 (id=2966): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x48080) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) pipe(0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f00000002c0)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}, 0x0, 0x56b, &(0x7f0000000680)="$eJzs3V9rJWcZAPBnJjn5s5vdpOqFFlqrXdktuiebxrZBpFYQvSqI7f0ak7Mh7EnOkpy0m1Bs9hMIIip4pTfeCH4AQRa88VKEgnqrUFFEtwp6oR2ZyWSTPZmTpO3JOU3y+8HsvPPOn+d5l/POmTkzmQng3HoqIl6KiHezLHsmIibL+rQcYntnyJd758EbC/mQRJa98vckkrJud1tJOb5YrjYWEd/4WsS3koNx1ze3bs83m421cnq6vXJnen1z6/ryyvxSY6mxOjs78/zcC3PPzd3oSTsvRcSLX/nz97/z06+++MvPvf6nm3+99u08rYmymfvb8R4NHzZzp+m10bGOFdbeZ7APo7w9td2J8eOtc+8E8wEAoLv84PcjEfHpiHgmJmPo8MNZAAAA4BTKvjQR/00ismojXeoBAACAUyQt7oFN0np5L8BEpGm9vnMP78fiQtpsrbc/e6u1sbpY3CsbU1FLby03GzfKe4Wnopbk0zNFeW/62Y7p2Yh4LCK+NzleTNcXWs3FQf/4AQAAAOfExY7z/39N7pz/AwAAAGfM1KATAAAAAE7c+z3/T3ucBwAAAHByXP8HAACAM+3rL7+cD9nu+68XX9vcuN167fpiY/12fWVjob7QWrtTX2q1lopn9q0ctb1mq3Xn87G6cXe63VhvT69vbt1caW2stm8ux1hfGgQAAAAc8Ngn7/8+iYjtL4wXQ25k0EkBfTH8sJSU44re/8fLO+O3+5QU0BdDnRWXDy7z9mj1uo4T4HQb7qzo0teBs6c26ASAgUuOmN/15p3flONP9TYfAACg965+ovr6/1BEjB+65ran/8Ep19GJszcHlQjQd3949HpfNjmwTIB+K67/H/dGHkf8cKbUDt4BCJwzH/j6/5Gy7D0lBAAA9NxEMSRpvfx5byLStF6PuFS8FqCW3FpuNm6Ufxb4u8naaD49U6yZHHnOAAAAAAAAAAAAAAAAAAAAAAAAAADsyLLRyLKRotQhqaoEAAAATp+I9C/Jr3ae5X918spE5+8DI8l/ilcCj0TE6z965Qd359vttZm8/h8P69s/LOufrf6N4YteFAAAAAB9tXueXoz/PehsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhr3nnwxsLucIzFx3sV929fjoipqvjDMVaMx6IWERf+mcTwvvWSiBjqQfztexHx8ar4SZ7Ww5AV8ZPhk48fU+X/QlX7L/YgPpxn9/P9z0tV/S+Np4pxdf8bjohe9P/u+794uP8b6tL/L+3f0Gj19q+8GvH4Wz+f7hr/XsTjw4/Gv/zIBseKWFXxnz5mG7/56tZWt3nZjyOu7n7/FHu8/RH2StPtlTvT65tb15dX5pcaS43V2dmZ5+demHtu7sb0reVmo/y3MsZ3n/jFu4e1/0Ll919SZtO9/Vcqtlf1nfS/t+4++OjuxPbB+Neeroj/65+USxyMn5ZxPlOW8/lXd8vbO+X9nvzZb5/slmQef3Gv/bX97R87ov3XKtq6J90rHugoTxz3owMAnID1za3b881mY+3DUshGe5zYeEQcZ+GRGHjbFfpceLOnG8yyLMs/uhWz7kfEcbaTxHytpy1Nq/PZK3TtaAPeMQEAAD2XH+uPDDoJAAAAAAAAAAAAAAAAAAAAOOf2HvoVyUk9Za0z5t4jkHvyCH0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ74fwAAAP//pUrIQA==") mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x38) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000094) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$can_j1939(0x1d, 0x2, 0x7) r4 = eventfd2(0x0, 0x0) fcntl$notify(r4, 0x5, 0x200000000000) r5 = socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) 608.160885ms ago: executing program 6 (id=2967): perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c3, &(0x7f0000009c00)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_rr_get_interval(0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 250.872204ms ago: executing program 5 (id=2968): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000bc0)="d1ca876f8f", 0x5}], 0x1) 189.851485ms ago: executing program 5 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x80, 0x34}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) 139.882907ms ago: executing program 4 (id=2970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000dc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x24}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) nanosleep(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='(#^})&@\x00', &(0x7f00000000c0)='./sys\x00', r2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000a80)={[{@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$eJzs3c9rHGUfAPDvzCZ5kzZ90768vLwtigEPLUjTpBarXmzrwR4KFuxBxENDk9TQ7Q+aFGwtmIIHBQURr6K9+A94l9y9iaDePAtVpKKg0pXZnWk3yW66ptlskvl8YLPP88zsPs93Z5/MMzN5MgGU1mj2I43YG3HvbBIx0rRsOBoLR/P17v5y81z2SKJWe+XnJJK8rFg/yZ935pnBiPj6RMR/Kivrnbt+48JktdbwdsSh+YtXDs1dv3Fw9uLk+enz05cmDj975Oj4cxNHJtYlzp3588lTLz/2wTtvPDPzTfVgEsfiTP9bU7EsjvUyGqNxLw+xubwvIo5miRafy1azDUIotUr+feyPiP/FSFTquYaRmH2/p40DuqpWiagBJZXo/1BSxTigOLbv4Dg46f6oZOPcOd44AFoZf1/j3EgM1o+NdtxNmo6MGuc2dq9D/Vkdf93c90n2iCXnIX6/v3X61qGedhZuRcT/W8Wf1Nu2ux5pFn+6pB3Zl2A8Igby9r34CG1o/kJ14zzMatYafxoRx/LnrPzEGusfXZbf6PgBKKfF4/mOfCHLPdj/ZWOPYvwTLcY/wy32XWvR6/1f+/Ffsb8frJ8jT5eNw7Ixy+nWb9lffGaFH947+VG7+pvHf9kjq78YC26EO7ci9i2L/90s2Hz8k8WStNj+2Spnj3VWx0vf/nRySUHTRaNex1+7HbG/5fHPg1Fpllrl+uShmdnq9HjjZ8s6vvzq9c9blaebIP5s++9oE3/T9k+Xvy77TK50WMcXp29fbLds+KHxpz8OJGfqqYG85M3J+fmrExEDyakl71UvP7x6W4p1ivfI4j/wZOv+v+T7f2vp+wwVvzI7cOXVC3fbLVvL9m+6mHyv1mEb2snin3r49l/R/7OyDzus47fXrj3ebtlq8Q89SmAAAAAAAABQQmn9GmySjt1Pp+nYWGO+7H9jR1q9PDf/1Mzla5emIg7U/x6yPy2udI808kmWn8j/HrbIH16Wfzoi9kTEx5When7s3OXqVK+DBwAAAAAAAAAAAAAAAAAAgE1iZz7/v7hP9a+Vxvx/oCS6eYM5YHPT/6G86v1/xS2egDKw/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9HwAAAAC2pT1PLH6fRMTC80P1R2YgX2ZGEGxv/b1uANAzlV43AOiZ+5f+DfahdDoa//+R/3PA7jcH6IGkVWF9cFBbvfMvtnwlAAAAAAAAAAAAANAF+/e2n/9vbjBsb6b9QXmtMv//s7W/FNgK/Ot/KC/H+MDDZvEPtltg/j8AAAAAAAAAAAAAbJjh+iNJx/K5wMORpmNjEbsiYnf0JzOz1enxiPh3RHxX6f9Xlp/odaMBAAAAAAAAAAAAAAAAAABgm5m7fuPCZLU6fbU58eeKki2YWOx85eIuqBvQsBfiH74qkq5/YruWlwxFxCbYgl1K9DWVJBEL2ZbfFA27Oheboxn1RI9/MQEAAAAAAAAAAAAAAAAAQAk1zT1ubd+nG9wiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh4D+7/371Er2MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALamvwMAAP//cUhAbA==") umount2(&(0x7f0000000240)='./sys\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000644d1fb75dd0721106c5ae50f340941216be8cba69f286bf8d7cec50a13ac071448ed1243cb050e9014fbf3c68ca75a4235d038bae328aa3ac25f3859fa294b5d290c4880c72ea36d567ef0a2bff2e22311a6033471ddd17ab4e3d369bbbf63614e2c18edfd0a7ff1c1acbb328a52e9fd12546825ceb056b54c1c627c3dd471b591628144b326500d0943985c5ec36408a29f8ac0010c6d28c62ff04f5342d89dda63fd461f1cbeaeb1cc26a69031f37fbb9289a341bb19553bc6e6b965985303dfcaae887f4ac03acc3f600fd4c63cc07ae42ef46bf15e4551cb8f6039d0057207f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)={0x5, 0x0, 0x2, {}, {}, {}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x1e, 0x2, 0x0, 0x0, "8e19a48ac4ba78c65f180bbc1aeb00e8fc11659d819cd4754b9f27301055ad2adb2f3ce95e61920bfde973993373102b6b0b743a705d31d8801edf953429b393"}}, 0x80}, 0x1, 0x0, 0x0, 0x488d4}, 0x48000) sendmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x5, 0x15, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{0x2}, 0x2, 0x6a035825891a9861}}, 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) listen(r4, 0x0) sendto(r4, 0x0, 0x0, 0x20000004, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000019040), &(0x7f0000000540), 0x6c, r3}, 0x38) clock_gettime(0x7, &(0x7f0000000900)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000940)={r6, r7+60000000}) write(r2, &(0x7f0000000040)='id_ext=0,ioc_gu\x00\x00\x00\x00\x00\x00\x00\x00=127.0.0.1,dest=127.0.0.1', 0x30) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'dvmrp1\x00', 0x2}) 39.183149ms ago: executing program 7 (id=2971): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 0s ago: executing program 5 (id=2972): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7, 0xa40, 0xffffff81, 0x7fffffff, 0x6, "662ceb757dcb7495e121fcd1f20e485396a278", 0x2, 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000. [ 337.875039][T13284] workingset_refault_file 23983 [ 337.880665][T13322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.898599][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.915349][T13284] swap 5341184 [ 337.919221][T13284] swapcached 49299456 [ 337.923945][T13284] pgpgin 169888 [ 337.954343][T13284] pgpgout 160515 [ 337.957995][T13284] pgfault 173670 [ 337.963363][T13284] pgmajfault 1275 [ 337.967927][T13284] inactive_anon 0 [ 337.972213][T13284] active_anon 4096 [ 337.975977][T13284] inactive_file 24576 [ 338.013466][T13284] active_file 991232 [ 338.021219][T13284] unevictable 37371904 [ 338.032680][T13284] hierarchical_memory_limit 314572800 [ 338.058825][T13284] hierarchical_memsw_limit 9223372036854771712 [ 338.073762][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2656'. [ 338.076458][T13284] total_cache 35127296 [ 338.087644][T13284] total_rss 3252224 [ 338.092672][T13284] total_shmem 0 [ 338.096217][T13284] total_mapped_file 34123776 [ 338.101083][T13284] total_dirty 0 [ 338.104645][T13284] total_writeback 0 [ 338.108494][T13284] total_workingset_refault_anon 6844 [ 338.114175][T13284] total_workingset_refault_file 23983 [ 338.119791][T13284] total_swap 5341184 [ 338.123756][T13284] total_swapcached 49299456 [ 338.128373][T13284] total_pgpgin 169888 [ 338.159559][T13284] total_pgpgout 160515 [ 338.163648][T13284] total_pgfault 173670 [ 338.180109][T13284] total_pgmajfault 1275 [ 338.190777][T13284] total_inactive_anon 0 [ 338.196811][T13284] total_active_anon 4096 [ 338.206168][T13284] total_inactive_file 24576 [ 338.213172][T13284] total_active_file 991232 [ 338.217930][T13284] total_unevictable 37371904 [ 338.224302][T13284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2645,pid=13275,uid=0 [ 338.240242][T13284] Memory cgroup out of memory: Killed process 13284 (syz.7.2645) total-vm:94188kB, anon-rss:4408kB, file-rss:59716kB, shmem-rss:0kB, UID:0 pgtables:224kB oom_score_adj:1000 [ 338.313293][T13341] loop5: detected capacity change from 0 to 512 [ 338.342225][T13341] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.378118][T13341] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 338.629392][T13333] loop3: detected capacity change from 0 to 2048 [ 339.329775][T13359] loop5: detected capacity change from 0 to 512 [ 339.339948][T13359] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 339.385895][T13359] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2665: bg 0: block 4: invalid block bitmap [ 339.398414][T13359] loop5: lost filesystem error report for type 5 error -117 [ 339.398839][T13359] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 339.406158][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 339.406174][ C1] EXT4-fs (loop5): initial error at time 339: ext4_validate_block_bitmap:432 [ 339.406194][ C1] EXT4-fs (loop5): last error at time 339: ext4_validate_block_bitmap:432 [ 339.442791][T13359] loop5: lost filesystem error report for type 5 error -117 [ 339.443184][T13359] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2665: invalid indirect mapped block 1 (level 1) [ 339.464303][T13359] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.464744][T13359] EXT4-fs (loop5): 1 truncate cleaned up [ 339.481197][T13359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.495121][T13359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.746720][T13368] loop7: detected capacity change from 0 to 1024 [ 339.776855][T13371] loop5: detected capacity change from 0 to 512 [ 339.802869][T13363] loop3: detected capacity change from 0 to 2048 [ 339.824075][T13373] loop4: detected capacity change from 0 to 2048 [ 339.884517][T13368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 339.891125][T13371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.917248][T13371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.996333][T13381] loop6: detected capacity change from 0 to 128 [ 340.132696][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 340.250605][T13390] loop7: detected capacity change from 0 to 2048 [ 340.331241][T13363] loop3: unable to read partition table [ 340.360708][T13363] loop3: partition table beyond EOD, truncated [ 340.384733][T13395] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 340.399998][T13363] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 340.484628][T13373] loop4: unable to read partition table [ 340.521113][ T2980] loop3: unable to read partition table [ 340.531724][ T7932] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 340.543172][ T2980] loop3: partition table beyond EOD, truncated [ 340.549536][T13373] loop4: partition table beyond EOD, truncated [ 340.580058][T13373] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 340.605072][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 340.605139][ T7932] Tainted: [W]=WARN [ 340.605147][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.605161][ T7932] Call Trace: [ 340.605167][ T7932] [ 340.605174][ T7932] __dump_stack+0x1d/0x30 [ 340.605269][ T7932] dump_stack_lvl+0x95/0xd0 [ 340.605288][ T7932] dump_stack+0x15/0x1b [ 340.605307][ T7932] dump_header+0x80/0x240 [ 340.605332][ T7932] oom_kill_process+0x295/0x350 [ 340.605384][ T7932] out_of_memory+0x981/0xbc0 [ 340.605405][ T7932] try_charge_memcg+0x624/0xa10 [ 340.605437][ T7932] charge_memcg+0x6d/0x120 [ 340.605469][ T7932] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 340.605495][ T7932] swap_cache_alloc_folio+0x47b/0x5e0 [ 340.605533][ T7932] swap_cluster_readahead+0x2b1/0x460 [ 340.605588][ T7932] swapin_readahead+0xd8/0x8a0 [ 340.605617][ T7932] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 340.605695][ T7932] ? hrtimer_start_range_ns+0x108/0x120 [ 340.605721][ T7932] ? __rcu_read_unlock+0x4e/0x70 [ 340.605818][ T7932] ? swap_cache_get_folio+0x1f7/0x200 [ 340.605846][ T7932] do_swap_page+0x2a2/0x1ec0 [ 340.605877][ T7932] ? __schedule+0x79b/0xd20 [ 340.605918][ T7932] ? __rcu_read_lock+0x36/0x50 [ 340.605942][ T7932] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 340.605972][ T7932] handle_mm_fault+0xb3c/0x2da0 [ 340.606030][ T7932] do_user_addr_fault+0x636/0x1060 [ 340.606128][ T7932] ? trace_page_fault_user+0x1f/0xa0 [ 340.606160][ T7932] exc_page_fault+0x62/0xa0 [ 340.606178][ T7932] asm_exc_page_fault+0x26/0x30 [ 340.606224][ T7932] RIP: 0033:0x7fba60fa9257 [ 340.606242][ T7932] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 340.606261][ T7932] RSP: 002b:00007ffe1de2b170 EFLAGS: 00010202 [ 340.606279][ T7932] RAX: 0000000000000000 RBX: 000055556538e500 RCX: 00007fba60fa9257 [ 340.606292][ T7932] RDX: 00007ffe1de2b1b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.606305][ T7932] RBP: 00007ffe1de2b21c R08: 0000000000000000 R09: 0000000000000000 [ 340.606334][ T7932] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 340.606349][ T7932] R13: 00000000000927c0 R14: 0000000000053172 R15: 00007ffe1de2b270 [ 340.606444][ T7932] [ 340.606461][ T7932] memory: usage 307200kB, limit 307200kB, failcnt 611 [ 340.768965][ T2980] loop4: unable to read partition table [ 340.785690][ T7932] memory+swap: usage 9508kB, limit 9007199254740988kB, failcnt 0 [ 340.794994][T13400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2674: iget: bad extra_isize 90 (inode size 256) [ 340.799403][ T7932] kmem: usage 596kB, limit 9007199254740988kB, failcnt 0 [ 340.799420][ T7932] Memory cgroup stats for /syz6: [ 340.799619][ T7932] cache 315392 [ 340.825121][T13400] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 340.831503][ T7932] rss 3252224 [ 340.831514][ T7932] shmem 0 [ 340.831522][ T7932] mapped_file 315392 [ 340.831530][ T7932] dirty 0 [ 340.859470][ T2980] loop4: partition table beyond EOD, [ 340.867944][ T7932] writeback 0 [ 340.914156][ T7932] workingset_refault_anon 12678 [ 340.914747][ T2980] truncated [ 340.919038][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 340.919058][ C1] EXT4-fs (loop3): initial error at time 340: ext4_xattr_inode_iget:441: inode 18 [ 340.919095][ C1] EXT4-fs (loop3): last error at time 340: ext4_xattr_inode_iget:441: inode 18 [ 340.919160][ T7932] workingset_refault_file 19439 [ 340.923192][T13400] EXT4-fs (loop3): Remounting filesystem read-only [ 340.928681][ T7932] swap 5332992 [ 340.928691][ T7932] swapcached 64733184 [ 340.928700][ T7932] pgpgin 178795 [ 340.969303][ T7932] pgpgout 177920 [ 340.972895][ T7932] pgfault 192053 [ 340.976469][ T7932] pgmajfault 2038 [ 340.980203][ T7932] inactive_anon 4096 [ 340.986267][ T7932] active_anon 0 [ 340.991219][T13400] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 341.000437][ T7932] inactive_file 12288 [ 341.004812][ T7932] active_file 0 [ 341.011310][T13400] EXT4-fs (loop3): 1 orphan inode deleted [ 341.018063][ T7932] unevictable 3567616 [ 341.019552][T13403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.023251][T13400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.043574][ T7932] hierarchical_memory_limit 314572800 [ 341.048947][ T7932] hierarchical_memsw_limit 9223372036854771712 [ 341.052612][T13403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.056230][ T7932] total_cache 315392 [ 341.068633][ T7932] total_rss 3252224 [ 341.072531][ T7932] total_shmem 0 [ 341.076056][ T7932] total_mapped_file 315392 [ 341.094584][T13403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.104107][T13403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.114297][ T7932] total_dirty 0 [ 341.135109][ T7932] total_writeback 0 [ 341.138921][ T7932] total_workingset_refault_anon 12678 [ 341.144374][ T7932] total_workingset_refault_file 19439 [ 341.145023][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 341.145036][ T28] audit: type=1400 audit(341.188:22031): avc: denied { write } for pid=13399 comm="syz.3.2674" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.149765][ T7932] total_swap 5332992 [ 341.180845][ T7932] total_swapcached 64733184 [ 341.185338][ T7932] total_pgpgin 178795 [ 341.189342][ T7932] total_pgpgout 177920 [ 341.193438][ T7932] total_pgfault 192053 [ 341.197583][ T7932] total_pgmajfault 2038 [ 341.203905][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.259721][ T7932] total_inactive_anon 4096 [ 341.264226][ T7932] total_active_anon 0 [ 341.268269][ T7932] total_inactive_file 12288 [ 341.284567][T13411] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 341.308441][T13411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2678: bg 0: block 4: invalid block bitmap [ 341.308600][ T7932] total_active_file 0 [ 341.320918][T13411] loop5: lost filesystem error report for type 5 error -117 [ 341.337814][T13411] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 341.343993][ T7932] total_unevictable 3567616 [ 341.345196][T13411] loop5: lost filesystem error report for type 5 error -117 [ 341.353962][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 341.353984][ C1] EXT4-fs (loop5): initial error at time 341: ext4_validate_block_bitmap:432 [ 341.354011][ C1] EXT4-fs (loop5): last error at time 341: ext4_validate_block_bitmap:432 [ 341.356438][ T7932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2671,pid=13386,uid=0 [ 341.444060][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.455386][ T7932] Memory cgroup out of memory: OOM victim 13386 (syz.6.2671) is already exiting. Skip killing the task [ 341.468949][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.476902][T13411] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2678: invalid indirect mapped block 1 (level 1) [ 341.490033][T13411] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.504502][T13411] EXT4-fs (loop5): 1 truncate cleaned up [ 341.518310][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.519671][T13411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.534407][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.549540][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.551703][T13411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.558532][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.603259][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.611677][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.677774][ T28] audit: type=1400 audit(341.718:22032): avc: denied { create } for pid=13419 comm="syz.5.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 341.677997][T13420] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 341.707114][ T28] audit: type=1400 audit(341.718:22033): avc: denied { checkpoint_restore } for pid=13419 comm="syz.5.2681" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.850919][T13426] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 341.862026][T13426] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2684: bg 0: block 4: invalid block bitmap [ 341.877202][T13429] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 341.877264][T13426] loop5: lost filesystem error report for type 5 error -117 [ 341.884451][T13426] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 341.891800][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 341.891817][ C0] EXT4-fs (loop5): initial error at time 341: ext4_validate_block_bitmap:432 [ 341.891846][ C0] EXT4-fs (loop5): last error at time 341: ext4_validate_block_bitmap:432 [ 341.926331][T13426] loop5: lost filesystem error report for type 5 error -117 [ 341.926518][T13426] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2684: invalid indirect mapped block 1 (level 1) [ 341.946999][T13426] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.947390][T13426] EXT4-fs (loop5): 1 truncate cleaned up [ 341.962597][T13426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.975308][T13426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.069704][ T28] audit: type=1326 audit(342.118:22034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.095012][ T28] audit: type=1326 audit(342.118:22035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.120245][ T28] audit: type=1326 audit(342.118:22036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.145443][ T28] audit: type=1326 audit(342.118:22037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.170463][ T28] audit: type=1326 audit(342.118:22038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.195433][ T28] audit: type=1326 audit(342.118:22039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.220417][ T28] audit: type=1326 audit(342.118:22040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13435 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08dc8e0d9 code=0x7ffc0000 [ 342.418161][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.429992][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.450693][T13441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.466509][T13441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.476980][T13438] loop5: unable to read partition table [ 342.482630][T13438] loop5: partition table beyond EOD, truncated [ 342.488816][T13438] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 342.536195][ T2980] loop5: unable to read partition table [ 342.541909][ T2980] loop5: partition table beyond EOD, truncated [ 342.615855][T13445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.637316][T13445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.710875][T13445] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2689'. [ 342.748623][T13455] set_capacity_and_notify: 6 callbacks suppressed [ 342.748702][T13455] loop5: detected capacity change from 0 to 512 [ 342.777060][T13455] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 342.802819][T13455] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2691: bg 0: block 4: invalid block bitmap [ 342.822842][T13458] loop7: detected capacity change from 0 to 1024 [ 342.829874][T13458] EXT4-fs: inline encryption not supported [ 342.835973][T13455] loop5: lost filesystem error report for type 5 error -117 [ 342.836078][T13455] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 342.843466][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 342.843484][ C1] EXT4-fs (loop5): initial error at time 342: ext4_validate_block_bitmap:432 [ 342.843505][ C1] EXT4-fs (loop5): last error at time 342: ext4_validate_block_bitmap:432 [ 342.891664][T13458] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.911548][T13458] EXT4-fs error (device loop7): ext4_map_blocks:835: inode #3: block 1: comm syz.7.2692: lblock 1 mapped to illegal pblock 1 (length 1) [ 342.925710][T13455] loop5: lost filesystem error report for type 5 error -117 [ 342.925942][T13455] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2691: invalid indirect mapped block 1 (level 1) [ 342.946755][T13458] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 342.946899][T13458] EXT4-fs (loop7): Remounting filesystem read-only [ 342.955981][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 342.955997][ C1] EXT4-fs (loop7): initial error at time 342: ext4_map_blocks:835: inode 3: block 1 [ 342.956025][ C1] EXT4-fs (loop7): last error at time 342: ext4_map_blocks:835: inode 3: block 1 [ 342.988722][T13455] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 342.990318][T13455] EXT4-fs (loop5): 1 truncate cleaned up [ 343.006085][T13455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.018319][T13458] EXT4-fs (loop7): 1 orphan inode deleted [ 343.024617][T13458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.027799][T13455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.059428][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.090877][T13462] FAULT_INJECTION: forcing a failure. [ 343.090877][T13462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.104466][T13462] CPU: 0 UID: 0 PID: 13462 Comm: syz.7.2693 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 343.104519][T13462] Tainted: [W]=WARN [ 343.104527][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.104538][T13462] Call Trace: [ 343.104545][T13462] [ 343.104554][T13462] __dump_stack+0x1d/0x30 [ 343.104587][T13462] dump_stack_lvl+0x95/0xd0 [ 343.104607][T13462] dump_stack+0x15/0x1b [ 343.104640][T13462] should_fail_ex+0x262/0x280 [ 343.104667][T13462] should_fail+0xb/0x20 [ 343.104757][T13462] should_fail_usercopy+0x1a/0x20 [ 343.104820][T13462] _copy_from_user+0x1c/0xb0 [ 343.104836][T13462] io_register_mem_region+0xdb/0x2f0 [ 343.104865][T13462] __se_sys_io_uring_register+0xa4a/0x1330 [ 343.104920][T13462] ? fput+0x91/0xc0 [ 343.105020][T13462] ? ksys_write+0x194/0x1a0 [ 343.105041][T13462] __x64_sys_io_uring_register+0x55/0x70 [ 343.105065][T13462] x64_sys_call+0x1ff6/0x2550 [ 343.105213][T13462] do_syscall_64+0x112/0x360 [ 343.105239][T13462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.105258][T13462] RIP: 0033:0x7fe1ff3ee0d9 [ 343.105273][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.105288][T13462] RSP: 002b:00007fe1fde47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 343.105408][T13462] RAX: ffffffffffffffda RBX: 00007fe1ff675fa0 RCX: 00007fe1ff3ee0d9 [ 343.105421][T13462] RDX: 0000200000000380 RSI: 0000000000000022 RDI: 0000000000000003 [ 343.105433][T13462] RBP: 00007fe1fde47090 R08: 0000000000000000 R09: 0000000000000000 [ 343.105510][T13462] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 343.105524][T13462] R13: 00007fe1ff676038 R14: 00007fe1ff675fa0 R15: 00007fffb30991e8 [ 343.105544][T13462] [ 343.295908][T13459] syz.3.2690 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 343.306871][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.3.2690 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 343.306902][T13459] Tainted: [W]=WARN [ 343.306911][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.307025][T13459] Call Trace: [ 343.307033][T13459] [ 343.307042][T13459] __dump_stack+0x1d/0x30 [ 343.307068][T13459] dump_stack_lvl+0x95/0xd0 [ 343.307089][T13459] dump_stack+0x15/0x1b [ 343.307111][T13459] dump_header+0x80/0x240 [ 343.307136][T13459] oom_kill_process+0x295/0x350 [ 343.307169][T13459] out_of_memory+0x981/0xbc0 [ 343.307189][T13459] try_charge_memcg+0x624/0xa10 [ 343.307287][T13459] ? should_fail_ex+0x31/0x280 [ 343.307325][T13459] charge_memcg+0x6d/0x120 [ 343.307349][T13459] __mem_cgroup_charge+0x28/0xb0 [ 343.307467][T13459] filemap_add_folio+0x109/0x350 [ 343.307491][T13459] __filemap_get_folio_mpol+0x32e/0x840 [ 343.307518][T13459] filemap_fault+0x458/0xb60 [ 343.307541][T13459] handle_mm_fault+0x167a/0x2da0 [ 343.307574][T13459] __get_user_pages+0x129c/0x1f10 [ 343.307612][T13459] __mm_populate+0x242/0x390 [ 343.307631][T13459] __se_sys_mlockall+0x35e/0x3c0 [ 343.307662][T13459] __x64_sys_mlockall+0x1f/0x30 [ 343.307737][T13459] x64_sys_call+0x2253/0x2550 [ 343.307767][T13459] do_syscall_64+0x112/0x360 [ 343.307792][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.307814][T13459] RIP: 0033:0x7f17b8ede0d9 [ 343.307859][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.307879][T13459] RSP: 002b:00007f17b7916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 343.307901][T13459] RAX: ffffffffffffffda RBX: 00007f17b9166090 RCX: 00007f17b8ede0d9 [ 343.307918][T13459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 343.307930][T13459] RBP: 00007f17b8f75024 R08: 0000000000000000 R09: 0000000000000000 [ 343.307943][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.307990][T13459] R13: 00007f17b9166128 R14: 00007f17b9166090 R15: 00007ffd95d23288 [ 343.308011][T13459] [ 343.308017][T13459] memory: usage 307200kB, limit 307200kB, failcnt 1767 [ 343.526344][T13459] memory+swap: usage 24336kB, limit 9007199254740988kB, failcnt 0 [ 343.541942][T13459] kmem: usage 636kB, limit 9007199254740988kB, failcnt 0 [ 343.548070][T13467] loop6: detected capacity change from 0 to 512 [ 343.557178][T13459] Memory cgroup stats for /syz3: [ 343.557444][T13459] cache 15314944 [ 343.566059][T13459] rss 3244032 [ 343.569494][T13459] shmem 0 [ 343.572434][T13459] mapped_file 14938112 [ 343.576496][T13459] dirty 20480 [ 343.576710][T13467] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 343.580071][T13459] writeback 0 [ 343.591433][T13459] workingset_refault_anon 9968 [ 343.596195][T13459] workingset_refault_file 40208 [ 343.603328][T13459] swap 5349376 [ 343.606781][T13459] swapcached 59633664 [ 343.611381][T13459] pgpgin 310860 [ 343.611853][T13467] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2695: bg 0: block 4: invalid block bitmap [ 343.627173][T13459] pgpgout 306324 [ 343.627277][T13467] loop6: lost filesystem error report for type 5 error -117 [ 343.630868][T13459] pgfault 322661 [ 343.631040][T13467] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 343.638229][T13459] pgmajfault 2192 [ 343.641795][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 343.651579][T13472] loop5: detected capacity change from 0 to 512 [ 343.654075][ C0] EXT4-fs (loop6): initial error at time 343: ext4_validate_block_bitmap:432 [ 343.654120][ C0] EXT4-fs (loop6): last error at time 343: ext4_validate_block_bitmap:432 [ 343.654262][T13467] loop6: lost filesystem error report for type 5 error -117 [ 343.664290][T13459] inactive_anon 0 [ 343.673152][T13467] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2695: invalid indirect mapped block 1 (level 1) [ 343.704276][T13459] active_anon 0 [ 343.711323][T13467] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.711882][T13459] inactive_file 405504 [ 343.723346][T13467] EXT4-fs (loop6): 1 truncate cleaned up [ 343.725124][T13459] active_file 4096 [ 343.734704][T13459] unevictable 18169856 [ 343.735451][T13467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.738948][T13459] hierarchical_memory_limit 314572800 [ 343.756044][T13472] EXT4-fs error (device loop5): ext4_quota_enable:7240: comm syz.5.2696: inode #16777216: comm syz.5.2696: iget: illegal inode # [ 343.756226][T13459] hierarchical_memsw_limit 9223372036854771712 [ 343.775754][T13459] total_cache 15314944 [ 343.776645][T13472] loop5: lost filesystem error report for type 5 error -117 [ 343.782422][T13472] EXT4-fs error (device loop5): ext4_quota_enable:7243: comm syz.5.2696: Bad quota inode: 16777216, type: 2 [ 343.782824][T13467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.789850][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 343.789870][ C1] EXT4-fs (loop5): initial error at time 343: ext4_quota_enable:7240 [ 343.789894][ C1] EXT4-fs (loop5): last error at time 343: ext4_quota_enable:7240 [ 343.793056][T13459] total_rss 3244032 [ 343.808049][T13472] loop5: lost filesystem error report for type 5 error -117 [ 343.818240][T13459] total_shmem 0 [ 343.847844][T13459] total_mapped_file 14938112 [ 343.848520][T13472] EXT4-fs warning (device loop5): ext4_enable_quotas:7284: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 343.867747][T13459] total_dirty 20480 [ 343.867758][T13459] total_writeback 0 [ 343.867766][T13459] total_workingset_refault_anon 9968 [ 343.879094][T13482] loop4: detected capacity change from 0 to 512 [ 343.897164][T13472] EXT4-fs (loop5): mount failed [ 343.907535][T13459] total_workingset_refault_file 40208 [ 343.918542][T13459] total_swap 5349376 [ 343.925402][T13459] total_swapcached 59633664 [ 343.934638][T13459] total_pgpgin 310860 [ 343.935009][T13482] EXT4-fs error (device loop4): ext4_quota_enable:7240: comm syz.4.2698: inode #16777216: comm syz.4.2698: iget: illegal inode # [ 343.943811][T13459] total_pgpgout 306324 [ 343.951888][T13482] loop4: lost filesystem error report for type 5 error -117 [ 343.952248][T13482] EXT4-fs error (device loop4): ext4_quota_enable:7243: comm syz.4.2698: Bad quota inode: 16777216, type: 2 [ 343.974729][T13482] loop4: lost filesystem error report for type 5 error -117 [ 343.976938][T13459] total_pgfault 322661 [ 343.988519][T13459] total_pgmajfault 2192 [ 343.992822][T13459] total_inactive_anon 0 [ 343.997052][T13459] total_active_anon 0 [ 344.001074][T13459] total_inactive_file 405504 [ 344.005728][T13459] total_active_file 4096 [ 344.009990][T13459] total_unevictable 18169856 [ 344.015215][T13482] EXT4-fs warning (device loop4): ext4_enable_quotas:7284: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 344.016668][T13459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 344.030541][T13482] EXT4-fs (loop4): mount failed [ 344.037419][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 344.037439][ C0] EXT4-fs (loop4): initial error at time 343: ext4_quota_enable:7240 [ 344.037476][ C0] EXT4-fs (loop4): last error at time 343: ext4_quota_enable:7243 [ 344.037574][T13459] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2690,pid=13450,uid=0 [ 344.077138][T13459] Memory cgroup out of memory: Killed process 13459 (syz.3.2690) total-vm:94188kB, anon-rss:4404kB, file-rss:37716kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 344.360838][T13483] loop7: detected capacity change from 0 to 2048 [ 344.490241][T13492] FAULT_INJECTION: forcing a failure. [ 344.490241][T13492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.535010][T13492] CPU: 1 UID: 0 PID: 13492 Comm: syz.3.2700 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 344.535085][T13492] Tainted: [W]=WARN [ 344.535091][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.535103][T13492] Call Trace: [ 344.535109][T13492] [ 344.535171][T13492] __dump_stack+0x1d/0x30 [ 344.535198][T13492] dump_stack_lvl+0x95/0xd0 [ 344.535237][T13492] dump_stack+0x15/0x1b [ 344.535276][T13492] should_fail_ex+0x262/0x280 [ 344.535309][T13492] should_fail+0xb/0x20 [ 344.535339][T13492] should_fail_usercopy+0x1a/0x20 [ 344.535418][T13492] _copy_from_user+0x1c/0xb0 [ 344.535439][T13492] __sys_bpf+0x1e2/0xc30 [ 344.535540][T13492] ? get_pid_task+0x92/0xc0 [ 344.535624][T13492] ? vfs_write+0x850/0x9a0 [ 344.535656][T13492] __x64_sys_bpf+0x69/0x80 [ 344.535691][T13492] x64_sys_call+0xf26/0x2550 [ 344.535726][T13492] do_syscall_64+0x112/0x360 [ 344.535757][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.535875][T13492] RIP: 0033:0x7f17b8ede0d9 [ 344.535892][T13492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.535912][T13492] RSP: 002b:00007f17b7937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.535937][T13492] RAX: ffffffffffffffda RBX: 00007f17b9165fa0 RCX: 00007f17b8ede0d9 [ 344.535953][T13492] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 344.535975][T13492] RBP: 00007f17b7937090 R08: 0000000000000000 R09: 0000000000000000 [ 344.535990][T13492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.536039][T13492] R13: 00007f17b9166038 R14: 00007f17b9165fa0 R15: 00007ffd95d23288 [ 344.536060][T13492] [ 344.578353][T13483] loop7: unable to read partition table [ 344.631573][T13502] loop5: detected capacity change from 0 to 1024 [ 344.633937][T13483] loop7: partition table beyond EOD, [ 344.646088][T13502] EXT4-fs: inline encryption not supported [ 344.657987][T13483] truncated [ 344.702405][T13502] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 344.716775][T13483] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 344.747216][T13502] EXT4-fs error (device loop5): ext4_map_blocks:835: inode #3: block 1: comm syz.5.2703: lblock 1 mapped to illegal pblock 1 (length 1) [ 344.772483][T13502] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 344.778592][T13502] EXT4-fs (loop5): Remounting filesystem read-only [ 344.789014][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 344.800598][ C1] EXT4-fs (loop5): initial error at time 344: ext4_map_blocks:835: inode 3: block 1 [ 344.810066][ C1] EXT4-fs (loop5): last error at time 344: ext4_map_blocks:835: inode 3: block 1 [ 344.823899][T13502] EXT4-fs (loop5): 1 orphan inode deleted [ 344.830171][T13502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.832387][ T2980] loop7: unable to read partition table [ 344.848958][ T2980] loop7: partition table beyond EOD, truncated [ 344.894492][ T4057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.911208][T13507] loop4: detected capacity change from 0 to 512 [ 344.993473][T13507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.012801][T13509] loop7: detected capacity change from 0 to 512 [ 345.050986][T13507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.108106][T13509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.142245][T13509] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.161218][T13511] loop5: detected capacity change from 0 to 2048 [ 345.216419][T13506] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2704'. [ 345.217964][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2709'. [ 345.359746][T13509] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2705'. [ 345.399691][T13511] loop5: unable to read partition table [ 345.405366][T13511] loop5: partition table beyond EOD, truncated [ 345.411580][T13511] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 345.468942][ T2980] loop5: unable to read partition table [ 345.474797][ T2980] loop5: partition table beyond EOD, truncated [ 345.923878][T13544] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2713: iget: bad extra_isize 90 (inode size 256) [ 345.943493][T13544] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 345.948197][T13544] EXT4-fs (loop6): Remounting filesystem read-only [ 345.957436][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 345.957470][ C0] EXT4-fs (loop6): initial error at time 345: ext4_xattr_inode_iget:441: inode 18 [ 345.957537][ C0] EXT4-fs (loop6): last error at time 345: ext4_xattr_inode_iget:441: inode 18 [ 345.989396][T13544] EXT4-fs warning (device loop6): ext4_evict_inode:289: xattr delete (err -30) [ 345.998536][T13544] EXT4-fs (loop6): 1 orphan inode deleted [ 346.006096][T13544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.050427][T13542] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2712: iget: bad extra_isize 90 (inode size 256) [ 346.126735][ T7932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.137441][T13542] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 346.139020][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 346.154607][ C1] EXT4-fs (loop3): initial error at time 346: ext4_xattr_inode_iget:441: inode 18 [ 346.159110][T13542] EXT4-fs (loop3): Remounting filesystem read-only [ 346.163832][ C1] EXT4-fs (loop3): last error at time 346: ext4_xattr_inode_iget:441: inode 18 [ 346.170431][T13542] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 346.188183][T13542] EXT4-fs (loop3): 1 orphan inode deleted [ 346.194498][T13542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.322014][T13554] EXT4-fs: inline encryption not supported [ 346.357213][T13554] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 346.384697][T13554] EXT4-fs error (device loop4): ext4_map_blocks:835: inode #3: block 1: comm syz.4.2716: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.409107][T13554] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 346.409204][T13554] EXT4-fs (loop4): Remounting filesystem read-only [ 346.424740][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 346.424771][ C0] EXT4-fs (loop4): initial error at time 346: ext4_map_blocks:835: inode 3: block 1 [ 346.424807][ C0] EXT4-fs (loop4): last error at time 346: ext4_map_blocks:835: inode 3: block 1 [ 346.479479][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 346.479493][ T28] audit: type=1400 audit(346.494:22061): avc: denied { write } for pid=13541 comm="syz.3.2712" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.521568][T13554] Quota error (device loop4): write_blk: dquota write failed [ 346.528958][T13554] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 346.538967][T13554] EXT4-fs (loop4): 1 orphan inode deleted [ 346.545117][T13554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.578904][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.589139][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.624857][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2718'. [ 346.770126][T13548] loop7: unable to read partition table [ 346.775805][T13548] loop7: partition table beyond EOD, truncated [ 346.779853][T13555] loop6: unable to read partition table [ 346.782044][T13548] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 346.787586][T13555] loop6: partition table beyond EOD, truncated [ 346.787607][T13555] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 346.816840][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.819862][ T28] audit: type=1400 audit(346.850:22062): avc: denied { getopt } for pid=13578 comm="syz.6.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.852251][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.880055][T13572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.880407][ T2980] loop7: unable to read partition table [ 346.903485][T13579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.904968][ T2980] loop7: partition table beyond EOD, truncated [ 346.920533][T13572] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.925140][T13579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.026374][T13565] loop3: unable to read partition table [ 347.032034][T13565] loop3: partition table beyond EOD, truncated [ 347.038193][T13565] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 347.056946][T13572] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2720'. [ 347.070841][ T2980] loop3: unable to read partition table [ 347.076479][ T2980] loop3: partition table beyond EOD, truncated [ 347.167771][T13587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4122 sclass=netlink_route_socket pid=13587 comm=syz.7.2725 [ 347.190947][T13593] EXT4-fs: inline encryption not supported [ 347.201835][T13593] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 347.222509][T13593] EXT4-fs error (device loop5): ext4_map_blocks:835: inode #3: block 1: comm syz.5.2728: lblock 1 mapped to illegal pblock 1 (length 1) [ 347.240659][ T28] audit: type=1400 audit(347.280:22063): avc: denied { listen } for pid=13596 comm="syz.7.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 347.240827][T13593] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 347.259926][T13593] EXT4-fs (loop5): Remounting filesystem read-only [ 347.269037][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 347.269057][ C0] EXT4-fs (loop5): initial error at time 347: ext4_map_blocks:835: inode 3: block 1 [ 347.269090][ C0] EXT4-fs (loop5): last error at time 347: ext4_map_blocks:835: inode 3: block 1 [ 347.300628][T13593] Quota error (device loop5): write_blk: dquota write failed [ 347.308056][T13593] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 347.318077][T13593] EXT4-fs (loop5): 1 orphan inode deleted [ 347.324208][T13593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.345141][T13601] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 347.361657][T13601] EXT4-fs (loop7): 1 truncate cleaned up [ 347.367695][T13601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.392827][ T4057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.551490][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.692395][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.700881][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.718261][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.729614][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.799077][T13605] syz.3.2730 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 347.813258][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.3.2730 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 347.813288][T13605] Tainted: [W]=WARN [ 347.813295][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.813353][T13605] Call Trace: [ 347.813359][T13605] [ 347.813366][T13605] __dump_stack+0x1d/0x30 [ 347.813389][T13605] dump_stack_lvl+0x95/0xd0 [ 347.813413][T13605] dump_stack+0x15/0x1b [ 347.813435][T13605] dump_header+0x80/0x240 [ 347.813459][T13605] oom_kill_process+0x295/0x350 [ 347.813556][T13605] out_of_memory+0x981/0xbc0 [ 347.813575][T13605] try_charge_memcg+0x624/0xa10 [ 347.813602][T13605] __memcg_kmem_charge_page+0x19a/0x3a0 [ 347.813679][T13605] __alloc_frozen_pages_noprof+0x18a/0x350 [ 347.813764][T13605] alloc_pages_bulk_noprof+0x4c7/0x550 [ 347.813836][T13605] ? policy_nodemask+0x417/0x5e0 [ 347.813915][T13605] alloc_pages_bulk_mempolicy_noprof+0x2ee/0xea0 [ 347.813936][T13605] ? alloc_pages_mpol+0xd9/0x1d0 [ 347.813966][T13605] __vmalloc_node_range_noprof+0x88e/0x11e0 [ 347.814056][T13605] __kvmalloc_node_noprof+0x3a3/0x590 [ 347.814082][T13605] ? futex_hash_allocate+0x1a3/0x940 [ 347.814103][T13605] ? futex_hash_allocate+0x1a3/0x940 [ 347.814123][T13605] ? futex_hash_allocate+0x1a3/0x940 [ 347.814223][T13605] futex_hash_allocate+0x1a3/0x940 [ 347.814245][T13605] ? cap_task_prctl+0x13f/0x6b0 [ 347.814270][T13605] futex_hash_prctl+0xd8/0xf0 [ 347.814291][T13605] __se_sys_prctl+0x4f4/0x13b0 [ 347.814424][T13605] __x64_sys_prctl+0x67/0x80 [ 347.814447][T13605] x64_sys_call+0x2421/0x2550 [ 347.814470][T13605] do_syscall_64+0x112/0x360 [ 347.814525][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.814545][T13605] RIP: 0033:0x7f17b8ede0d9 [ 347.814580][T13605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.814597][T13605] RSP: 002b:00007f17b7916028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 347.814690][T13605] RAX: ffffffffffffffda RBX: 00007f17b9166090 RCX: 00007f17b8ede0d9 [ 347.814703][T13605] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 347.814721][T13605] RBP: 00007f17b8f75024 R08: 0000000000000000 R09: 0000000000000000 [ 347.814733][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.814745][T13605] R13: 00007f17b9166128 R14: 00007f17b9166090 R15: 00007ffd95d23288 [ 347.814762][T13605] [ 347.814842][T13605] memory: usage 307200kB, limit 307200kB, failcnt 1968 [ 347.871110][T13616] set_capacity_and_notify: 9 callbacks suppressed [ 347.871124][T13616] loop6: detected capacity change from 0 to 2048 [ 347.956419][T13605] memory+swap: usage 307216kB, limit 9007199254740988kB, failcnt 0 [ 348.043453][T13612] loop5: detected capacity change from 0 to 2048 [ 348.056097][T13605] kmem: usage 256740kB, limit 9007199254740988kB, failcnt 0 [ 348.096265][T13605] Memory cgroup stats for /syz3: [ 348.096506][T13605] cache 37789696 [ 348.104956][T13605] rss 13860864 [ 348.133675][T13605] shmem 0 [ 348.136749][T13605] mapped_file 37789696 [ 348.141074][T13605] dirty 0 [ 348.144065][T13605] writeback 0 [ 348.147379][T13605] workingset_refault_anon 11273 [ 348.156798][T13605] workingset_refault_file 44509 [ 348.161886][T13605] swap 16384 [ 348.165193][T13605] swapcached 64970752 [ 348.169417][T13605] pgpgin 324915 [ 348.172903][T13605] pgpgout 312300 [ 348.176618][T13605] pgfault 331841 [ 348.181814][T13605] pgmajfault 2364 [ 348.186953][T13605] inactive_anon 0 [ 348.190784][T13605] active_anon 0 [ 348.195804][T13605] inactive_file 16384 [ 348.203476][T13605] active_file 4096 [ 348.208602][T13605] unevictable 51650560 [ 348.212993][T13605] hierarchical_memory_limit 314572800 [ 348.218368][T13605] hierarchical_memsw_limit 9223372036854771712 [ 348.228128][T13605] total_cache 37789696 [ 348.233586][T13605] total_rss 13860864 [ 348.244840][T13605] total_shmem 0 [ 348.249774][T13605] total_mapped_file 37789696 [ 348.254509][T13605] total_dirty 0 [ 348.257994][T13605] total_writeback 0 [ 348.262172][T13605] total_workingset_refault_anon 11273 [ 348.267610][T13605] total_workingset_refault_file 44509 [ 348.273277][T13605] total_swap 16384 [ 348.277029][T13605] total_swapcached 64970752 [ 348.283852][T13605] total_pgpgin 324915 [ 348.300894][T13605] total_pgpgout 312300 [ 348.307899][T13605] total_pgfault 331841 [ 348.313667][T13605] total_pgmajfault 2364 [ 348.317837][T13605] total_inactive_anon 0 [ 348.322040][T13605] total_active_anon 0 [ 348.326049][T13605] total_inactive_file 16384 [ 348.330586][T13605] total_active_file 4096 [ 348.334812][T13605] total_unevictable 51650560 [ 348.339748][T13605] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2730,pid=13594,uid=0 [ 348.354558][T13605] Memory cgroup out of memory: Killed process 13605 (syz.3.2730) total-vm:94188kB, anon-rss:14776kB, file-rss:62472kB, shmem-rss:0kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 348.389332][T13616] loop6: unable to read partition table [ 348.394969][T13616] loop6: partition table beyond EOD, truncated [ 348.401116][T13616] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 348.411854][T13612] loop5: unable to read partition table [ 348.417550][T13612] loop5: partition table beyond EOD, truncated [ 348.423741][T13612] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 348.453358][ T2980] loop6: unable to read partition table [ 348.458997][ T2980] loop6: partition table beyond EOD, truncated [ 348.527789][ T2980] loop5: unable to read partition table [ 348.536951][ T2980] loop5: partition table beyond EOD, truncated [ 348.542073][T13621] loop3: detected capacity change from 0 to 2048 [ 348.565782][ T28] audit: type=1400 audit(348.602:22064): avc: denied { write } for pid=13626 comm="syz.5.2738" name="c_chmask" dev="configfs" ino=40807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 348.588220][ T28] audit: type=1400 audit(348.602:22065): avc: denied { open } for pid=13626 comm="syz.5.2738" path="/537/config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask" dev="configfs" ino=40807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 348.632570][T13630] loop4: detected capacity change from 0 to 1024 [ 348.639379][T13630] EXT4-fs: inline encryption not supported [ 348.645781][T13630] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 348.663076][T13630] EXT4-fs error (device loop4): ext4_map_blocks:835: inode #3: block 1: comm syz.4.2741: lblock 1 mapped to illegal pblock 1 (length 1) [ 348.667899][T13636] loop5: detected capacity change from 0 to 512 [ 348.684118][T13630] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 348.687086][T13636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 348.696165][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 348.696186][ C0] EXT4-fs (loop4): initial error at time 348: ext4_map_blocks:835: inode 3: block 1 [ 348.696223][ C0] EXT4-fs (loop4): last error at time 348: ext4_map_blocks:835: inode 3: block 1 [ 348.729621][T13630] EXT4-fs (loop4): Remounting filesystem read-only [ 348.734087][T13636] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 348.737825][T13630] Quota error (device loop4): write_blk: dquota write failed [ 348.737908][T13630] EXT4-fs (loop4): 1 orphan inode deleted [ 348.760787][T13630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.848064][T13621] loop3: unable to read partition table [ 348.854108][T13621] loop3: partition table beyond EOD, truncated [ 348.861083][T13621] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 348.887722][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.912122][ T2980] loop3: unable to read partition table [ 348.917838][ T2980] loop3: partition table beyond EOD, truncated [ 349.491707][T13644] loop3: detected capacity change from 0 to 512 [ 349.604876][T13644] EXT4-fs error (device loop3): ext4_quota_enable:7240: comm syz.3.2747: inode #16777216: comm syz.3.2747: iget: illegal inode # [ 349.618438][T13644] loop3: lost filesystem error report for type 5 error -117 [ 349.618646][T13644] EXT4-fs error (device loop3): ext4_quota_enable:7243: comm syz.3.2747: Bad quota inode: 16777216, type: 2 [ 349.625976][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 349.625991][ C0] EXT4-fs (loop3): initial error at time 349: ext4_quota_enable:7240 [ 349.626011][ C0] EXT4-fs (loop3): last error at time 349: ext4_quota_enable:7240 [ 349.629493][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2749'. [ 349.638128][T13644] loop3: lost filesystem error report for type 5 error -117 [ 349.921438][T13658] loop7: detected capacity change from 0 to 512 [ 350.037941][T13658] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2750: iget: bad extra_isize 90 (inode size 256) [ 350.054266][T13658] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 350.054668][T13658] EXT4-fs (loop7): Remounting filesystem read-only [ 350.063864][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 350.063894][ C1] EXT4-fs (loop7): initial error at time 350: ext4_xattr_inode_iget:441: inode 18 [ 350.063942][ C1] EXT4-fs (loop7): last error at time 350: ext4_xattr_inode_iget:441: inode 18 [ 350.069660][T13644] EXT4-fs warning (device loop3): ext4_enable_quotas:7284: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 350.070912][T13658] EXT4-fs warning (device loop7): ext4_evict_inode:289: xattr delete (err -30) [ 350.107411][T13644] EXT4-fs (loop3): mount failed [ 350.111314][T13658] EXT4-fs (loop7): 1 orphan inode deleted [ 350.131928][T13658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.196935][T13665] x_tables: duplicate underflow at hook 3 [ 350.242833][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.359265][T13669] loop4: detected capacity change from 0 to 512 [ 350.373138][T13672] loop5: detected capacity change from 0 to 512 [ 350.393682][T13674] loop7: detected capacity change from 0 to 1024 [ 350.401924][T13674] EXT4-fs: inline encryption not supported [ 350.408055][T13672] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2755: inode has both inline data and extents flags [ 350.424915][T13674] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.445131][T13672] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 350.445725][T13672] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2755: couldn't read orphan inode 15 (err -117) [ 350.449021][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 350.456034][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.466708][ C0] EXT4-fs (loop5): initial error at time 350: ext4_orphan_get:1399: inode 15 [ 350.466759][ C0] EXT4-fs (loop5): last error at time 350: ext4_orphan_get:1399: inode 15 [ 350.486792][T13672] loop5: lost filesystem error report for type 5 error -117 [ 350.502073][T13674] EXT4-fs error (device loop7): ext4_map_blocks:835: inode #3: block 1: comm syz.7.2754: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.524662][T13672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.533282][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.555174][T13674] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.555954][T13674] EXT4-fs (loop7): Remounting filesystem read-only [ 350.569116][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 350.578236][ C1] EXT4-fs (loop7): initial error at time 350: ext4_map_blocks:835: inode 3: block 1 [ 350.588615][ C1] EXT4-fs (loop7): last error at time 350: ext4_map_blocks:835: inode 3: block 1 [ 350.589370][T13674] EXT4-fs (loop7): 1 orphan inode deleted [ 350.599060][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.613825][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.624847][T13674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.652960][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.703756][T13685] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 350.714280][T13685] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 350.776652][T13679] loop3: unable to read partition table [ 350.782323][T13679] loop3: partition table beyond EOD, truncated [ 350.788491][T13679] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 350.869302][T13687] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 350.886868][T13687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2760: bg 0: block 4: invalid block bitmap [ 350.904675][T13687] loop3: lost filesystem error report for type 5 error -117 [ 350.905166][T13687] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 350.912523][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 350.912544][ C0] EXT4-fs (loop3): initial error at time 350: ext4_validate_block_bitmap:432 [ 350.912573][ C0] EXT4-fs (loop3): last error at time 350: ext4_validate_block_bitmap:432 [ 350.947222][T13687] loop3: lost filesystem error report for type 5 error -117 [ 350.980761][T13687] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2760: invalid indirect mapped block 1 (level 1) [ 351.002119][T13687] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.002806][T13687] EXT4-fs (loop3): 1 truncate cleaned up [ 351.019643][T13687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.034525][T13687] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.226893][ T4057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.306990][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'. [ 351.321923][T13687] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2760'. [ 351.730223][T13709] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 351.748026][T13711] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2768'. [ 351.750416][T13709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2767: bg 0: block 4: invalid block bitmap [ 351.815279][T13709] loop3: lost filesystem error report for type 5 error -117 [ 351.815391][T13709] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 351.822755][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 351.822775][ C1] EXT4-fs (loop3): initial error at time 351: ext4_validate_block_bitmap:432 [ 351.822821][ C1] EXT4-fs (loop3): last error at time 351: ext4_validate_block_bitmap:432 [ 352.057582][T13709] loop3: lost filesystem error report for type 5 error -117 [ 352.057943][T13709] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2767: invalid indirect mapped block 1 (level 1) [ 352.094426][T13709] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 352.094697][T13709] EXT4-fs (loop3): 1 truncate cleaned up [ 352.566214][T13709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.600316][T13709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.622135][ T2980] loop5: unable to read partition table [ 352.627837][ T2980] loop5: partition table beyond EOD, truncated [ 352.707723][T13723] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2771: iget: bad extra_isize 90 (inode size 256) [ 352.721147][T13723] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 352.721245][T13723] EXT4-fs (loop3): Remounting filesystem read-only [ 352.736951][T13723] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 352.746245][T13723] EXT4-fs (loop3): 1 orphan inode deleted [ 352.752206][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 352.752231][ C1] EXT4-fs (loop3): initial error at time 352: ext4_xattr_inode_iget:441: inode 18 [ 352.752336][ C1] EXT4-fs (loop3): last error at time 352: ext4_xattr_inode_iget:441: inode 18 [ 352.769718][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.790807][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.822264][T13723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.854682][T13728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2773'. [ 352.864690][T13728] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 352.903128][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.923741][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 352.923753][ T28] audit: type=1400 audit(352.854:22069): avc: denied { write } for pid=13722 comm="syz.3.2771" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.987500][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2774'. [ 353.071181][T13720] loop5: unable to read partition table [ 353.076837][T13720] loop5: partition table beyond EOD, truncated [ 353.083068][T13720] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 353.114284][T13734] set_capacity_and_notify: 7 callbacks suppressed [ 353.114300][T13734] loop5: detected capacity change from 0 to 512 [ 353.132687][T13734] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.142652][T13734] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 353.187907][T13737] loop3: detected capacity change from 0 to 512 [ 353.196315][T13737] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 353.212347][T13737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2777: bg 0: block 4: invalid block bitmap [ 353.224919][T13737] loop3: lost filesystem error report for type 5 error -117 [ 353.225093][T13737] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 353.232401][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 353.232416][ C1] EXT4-fs (loop3): initial error at time 353: ext4_validate_block_bitmap:432 [ 353.232455][ C1] EXT4-fs (loop3): last error at time 353: ext4_validate_block_bitmap:432 [ 353.265133][T13737] loop3: lost filesystem error report for type 5 error -117 [ 353.265521][T13737] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2777: invalid indirect mapped block 1 (level 1) [ 353.286033][T13737] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 353.286421][T13737] EXT4-fs (loop3): 1 truncate cleaned up [ 353.301778][T13737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.321264][T13737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.333496][T13741] loop4: detected capacity change from 0 to 512 [ 353.399311][T13741] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2778: inode has both inline data and extents flags [ 353.425640][T13741] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.425786][T13741] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2778: couldn't read orphan inode 15 (err -117) [ 353.435004][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 353.435046][ C1] EXT4-fs (loop4): initial error at time 353: ext4_orphan_get:1399: inode 15 [ 353.435074][ C1] EXT4-fs (loop4): last error at time 353: ext4_orphan_get:1399: inode 15 [ 353.470811][T13741] loop4: lost filesystem error report for type 5 error -117 [ 353.471878][T13741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.507750][T13736] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2777'. [ 353.600743][ T28] audit: type=1400 audit(353.644:22070): avc: denied { write } for pid=13740 comm="syz.4.2778" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.809855][T13748] loop7: detected capacity change from 0 to 2048 [ 353.927961][T13758] loop6: detected capacity change from 0 to 512 [ 353.948354][T13758] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2784: iget: bad extra_isize 90 (inode size 256) [ 353.962143][T13758] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 353.962304][T13758] EXT4-fs (loop6): Remounting filesystem read-only [ 353.971695][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 353.971742][ C0] EXT4-fs (loop6): initial error at time 354: ext4_xattr_inode_iget:441: inode 18 [ 353.971823][ C0] EXT4-fs (loop6): last error at time 354: ext4_xattr_inode_iget:441: inode 18 [ 353.978608][T13748] loop7: unable to read partition table [ 353.985366][T13758] EXT4-fs warning (device loop6): ext4_evict_inode:289: xattr delete (err -30) [ 353.994193][T13748] loop7: partition table beyond EOD, truncated [ 353.994214][T13748] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 354.031568][ T2980] loop7: unable to read partition table [ 354.037479][ T2980] loop7: partition table beyond EOD, truncated [ 354.039123][T13758] EXT4-fs (loop6): 1 orphan inode deleted [ 354.050166][T13758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.109357][ T28] audit: type=1400 audit(354.044:22071): avc: denied { write } for pid=13757 comm="syz.6.2784" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.125876][ T7932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.149243][T13763] loop5: detected capacity change from 0 to 128 [ 354.167228][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.254753][T13766] random: crng reseeded on system resumption [ 354.284876][T13764] loop7: detected capacity change from 0 to 2048 [ 354.304810][T13766] tmpfs: Bad value for 'mpol' [ 354.332990][ T28] audit: type=1326 audit(354.374:22072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.358299][ T28] audit: type=1326 audit(354.374:22073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.383563][ T28] audit: type=1326 audit(354.374:22074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.408555][ T28] audit: type=1326 audit(354.374:22075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.433464][ T28] audit: type=1326 audit(354.374:22076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.458648][T13780] loop3: detected capacity change from 0 to 512 [ 354.475670][T13780] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 354.494641][ T28] audit: type=1326 audit(354.374:22077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.530124][T13780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2792: bg 0: block 4: invalid block bitmap [ 354.538625][ T28] audit: type=1326 audit(354.374:22078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13775 comm="syz.6.2791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba60fee0d9 code=0x7ffc0000 [ 354.569011][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 354.574995][T13780] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 354.575495][ C1] EXT4-fs (loop3): initial error at time 354: ext4_validate_block_bitmap:432 [ 354.593023][ C1] EXT4-fs (loop3): last error at time 354: ext4_validate_block_bitmap:432 [ 354.609458][T13782] loop5: detected capacity change from 0 to 512 [ 354.619101][T13780] fserror_report: 1 callbacks suppressed [ 354.619115][T13780] loop3: lost filesystem error report for type 5 error -117 [ 354.625919][T13780] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2792: invalid indirect mapped block 1 (level 1) [ 354.629220][T13764] loop7: unable to read partition table [ 354.633679][T13780] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 354.646306][T13764] loop7: partition table beyond EOD, truncated [ 354.667160][T13764] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 354.672652][T13780] EXT4-fs (loop3): 1 truncate cleaned up [ 354.698744][T13782] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.2793: iget: bad extra_isize 90 (inode size 256) [ 354.700147][T13780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.724360][T13782] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 354.725289][T13780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.734550][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 354.734569][ C0] EXT4-fs (loop5): initial error at time 354: ext4_xattr_inode_iget:441: inode 18 [ 354.734610][ C0] EXT4-fs (loop5): last error at time 354: ext4_xattr_inode_iget:441: inode 18 [ 354.775886][T13782] EXT4-fs (loop5): Remounting filesystem read-only [ 354.786024][T13782] EXT4-fs warning (device loop5): ext4_evict_inode:289: xattr delete (err -30) [ 354.793923][ T2980] loop7: unable to read partition table [ 354.798362][T13782] EXT4-fs (loop5): 1 orphan inode deleted [ 354.800726][ T2980] loop7: partition table beyond EOD, truncated [ 354.826397][T13778] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2792'. [ 354.845543][T13793] loop7: detected capacity change from 0 to 512 [ 354.876821][T13795] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 354.892109][T13793] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 354.906816][T13795] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 354.916247][T13793] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2797: bg 0: block 4: invalid block bitmap [ 354.939172][T13793] loop7: lost filesystem error report for type 5 error -117 [ 354.939292][T13793] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 354.955292][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 354.955329][ C0] EXT4-fs (loop7): initial error at time 354: ext4_validate_block_bitmap:432 [ 354.955356][ C0] EXT4-fs (loop7): last error at time 354: ext4_validate_block_bitmap:432 [ 354.979732][T13793] loop7: lost filesystem error report for type 5 error -117 [ 354.979858][T13793] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2797: invalid indirect mapped block 1 (level 1) [ 355.007633][T13793] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 355.008004][T13793] EXT4-fs (loop7): 1 truncate cleaned up [ 355.738179][T13797] loop5: unable to read partition table [ 355.743932][T13797] loop5: partition table beyond EOD, truncated [ 355.750478][T13797] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 356.028137][T13816] random: crng reseeded on system resumption [ 356.055166][T13821] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2806: iget: bad extra_isize 90 (inode size 256) [ 356.099435][T13821] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 356.100095][T13821] EXT4-fs (loop6): Remounting filesystem read-only [ 356.109314][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 356.109346][ C1] EXT4-fs (loop6): initial error at time 356: ext4_xattr_inode_iget:441: inode 18 [ 356.109433][ C1] EXT4-fs (loop6): last error at time 356: ext4_xattr_inode_iget:441: inode 18 [ 356.172294][T13816] tmpfs: Bad value for 'mpol' [ 356.208662][T13821] EXT4-fs warning (device loop6): ext4_evict_inode:289: xattr delete (err -30) [ 356.218258][T13821] EXT4-fs (loop6): 1 orphan inode deleted [ 356.377759][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.429852][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.438106][T13814] loop5: unable to read partition table [ 356.443752][T13814] loop5: partition table beyond EOD, truncated [ 356.449905][T13814] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 356.462775][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.483665][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.492312][T13833] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2810: iget: bad extra_isize 90 (inode size 256) [ 356.511989][ T2980] loop5: unable to read partition table [ 356.512662][T13833] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 356.518712][ T2980] loop5: partition table beyond EOD, [ 356.526865][T13833] EXT4-fs (loop7): Remounting filesystem read-only [ 356.527894][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 356.527914][ C0] EXT4-fs (loop7): initial error at time 356: ext4_xattr_inode_iget:441: inode 18 [ 356.527961][ C0] EXT4-fs (loop7): last error at time 356: ext4_xattr_inode_iget:441: inode 18 [ 356.528599][ T2980] truncated [ 356.575874][T13833] EXT4-fs warning (device loop7): ext4_evict_inode:289: xattr delete (err -30) [ 356.586597][T13833] EXT4-fs (loop7): 1 orphan inode deleted [ 356.660314][T13847] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 356.703761][T13847] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2813: bg 0: block 4: invalid block bitmap [ 356.739268][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.758984][T13847] loop7: lost filesystem error report for type 5 error -117 [ 356.759231][T13847] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 356.775261][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 356.775282][ C0] EXT4-fs (loop7): initial error at time 356: ext4_validate_block_bitmap:432 [ 356.775310][ C0] EXT4-fs (loop7): last error at time 356: ext4_validate_block_bitmap:432 [ 356.801391][T13847] loop7: lost filesystem error report for type 5 error -117 [ 356.801627][T13847] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2813: invalid indirect mapped block 1 (level 1) [ 356.820602][T13852] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.838201][T13847] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 356.838687][T13847] EXT4-fs (loop7): 1 truncate cleaned up [ 356.855133][T13852] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.895020][ T49] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 356.904997][T13854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.922615][T13854] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 357.014636][T13856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.2817: iget: bad extra_isize 90 (inode size 256) [ 357.029298][T13856] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 357.031917][T13856] EXT4-fs (loop5): Remounting filesystem read-only [ 357.041113][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 357.041161][ C1] EXT4-fs (loop5): initial error at time 357: ext4_xattr_inode_iget:441: inode 18 [ 357.041228][ C1] EXT4-fs (loop5): last error at time 357: ext4_xattr_inode_iget:441: inode 18 [ 357.079818][T13856] EXT4-fs warning (device loop5): ext4_evict_inode:289: xattr delete (err -30) [ 357.088859][T13856] EXT4-fs (loop5): 1 orphan inode deleted [ 357.124404][T13864] random: crng reseeded on system resumption [ 357.190451][T13864] tmpfs: Bad value for 'mpol' [ 357.808673][T13869] syz.5.2820 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 357.834567][T13879] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 357.841664][T13869] CPU: 1 UID: 0 PID: 13869 Comm: syz.5.2820 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 357.841746][T13869] Tainted: [W]=WARN [ 357.841754][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.841768][T13869] Call Trace: [ 357.841776][T13869] [ 357.841784][T13869] __dump_stack+0x1d/0x30 [ 357.841842][T13869] dump_stack_lvl+0x95/0xd0 [ 357.841866][T13869] dump_stack+0x15/0x1b [ 357.841886][T13869] dump_header+0x80/0x240 [ 357.841906][T13869] oom_kill_process+0x295/0x350 [ 357.841974][T13869] out_of_memory+0x981/0xbc0 [ 357.842070][T13869] try_charge_memcg+0x624/0xa10 [ 357.842096][T13869] ? __rcu_read_unlock+0x4e/0x70 [ 357.842132][T13869] __memcg_kmem_charge_page+0x19a/0x3a0 [ 357.842170][T13869] __alloc_frozen_pages_noprof+0x18a/0x350 [ 357.842303][T13869] alloc_pages_mpol+0xa9/0x1d0 [ 357.842374][T13869] alloc_pages_noprof+0x94/0x140 [ 357.842393][T13869] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 357.842435][T13869] __kvmalloc_node_noprof+0x3a3/0x590 [ 357.842461][T13869] ? futex_hash_allocate+0x1a3/0x940 [ 357.842535][T13869] ? futex_hash_allocate+0x1a3/0x940 [ 357.842555][T13869] ? futex_hash_allocate+0x1a3/0x940 [ 357.842580][T13869] futex_hash_allocate+0x1a3/0x940 [ 357.842620][T13869] ? cap_task_prctl+0x13f/0x6b0 [ 357.842646][T13869] futex_hash_prctl+0xd8/0xf0 [ 357.842671][T13869] __se_sys_prctl+0x4f4/0x13b0 [ 357.842819][T13869] __x64_sys_prctl+0x67/0x80 [ 357.842919][T13869] x64_sys_call+0x2421/0x2550 [ 357.842940][T13869] do_syscall_64+0x112/0x360 [ 357.842968][T13869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.843016][T13869] RIP: 0033:0x7fb08dc8e0d9 [ 357.843035][T13869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.843126][T13869] RSP: 002b:00007fb08c6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 357.843149][T13869] RAX: ffffffffffffffda RBX: 00007fb08df16090 RCX: 00007fb08dc8e0d9 [ 357.843234][T13869] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 357.843249][T13869] RBP: 00007fb08dd25024 R08: 0000000000000000 R09: 0000000000000000 [ 357.843263][T13869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.843275][T13869] R13: 00007fb08df16128 R14: 00007fb08df16090 R15: 00007ffd26063818 [ 357.843292][T13869] [ 357.843304][T13869] memory: usage 307200kB, limit 307200kB, failcnt 1510 [ 358.082828][T13869] memory+swap: usage 19244kB, limit 9007199254740988kB, failcnt 0 [ 358.086410][T13877] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2823: iget: bad extra_isize 90 (inode size 256) [ 358.090691][T13869] kmem: usage 848kB, limit 9007199254740988kB, failcnt 0 [ 358.090707][T13869] Memory cgroup stats for /syz5: [ 358.091016][T13869] cache 9113600 [ 358.112661][T13877] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 358.116244][T13869] rss 4640768 [ 358.130592][T13877] EXT4-fs (loop3): Remounting filesystem read-only [ 358.132112][T13869] shmem 0 [ 358.139011][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 358.141511][T13869] mapped_file 9113600 [ 358.147902][ C0] EXT4-fs (loop3): initial error at time 358: ext4_xattr_inode_iget:441 [ 358.151866][T13869] dirty 0 [ 358.151868][ C0] : inode 18 [ 358.160186][ C0] [ 358.163213][T13869] writeback 0 [ 358.166283][ C0] EXT4-fs (loop3): last error at time 358: ext4_xattr_inode_iget:441 [ 358.168586][T13869] workingset_refault_anon 17769 [ 358.171860][ C0] : inode 18 [ 358.174858][T13877] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 358.180134][T13869] workingset_refault_file 13832 [ 358.185312][T13877] EXT4-fs (loop3): 1 orphan inode deleted [ 358.188108][T13869] swap 4915200 [ 358.188118][T13869] swapcached 90701824 [ 358.188128][T13869] pgpgin 337681 [ 358.188137][T13869] pgpgout 334318 [ 358.188147][T13869] pgfault 366947 [ 358.188156][T13869] pgmajfault 3074 [ 358.229562][T13869] inactive_anon 4096 [ 358.233468][T13869] active_anon 0 [ 358.239350][T13869] inactive_file 12288 [ 358.249111][T13869] active_file 8192 [ 358.254222][T13869] unevictable 13750272 [ 358.274284][T13869] hierarchical_memory_limit 314572800 [ 358.279691][T13869] hierarchical_memsw_limit 9223372036854771712 [ 358.285845][T13869] total_cache 9113600 [ 358.291465][T13869] total_rss 4640768 [ 358.297445][T13869] total_shmem 0 [ 358.305828][T13869] total_mapped_file 9113600 [ 358.311943][T13869] total_dirty 0 [ 358.320515][T13869] total_writeback 0 [ 358.326504][T13869] total_workingset_refault_anon 17769 [ 358.326842][T13886] set_capacity_and_notify: 11 callbacks suppressed [ 358.326862][T13886] loop6: detected capacity change from 0 to 2048 [ 358.336531][T13869] total_workingset_refault_file 13832 [ 358.354791][T13869] total_swap 4915200 [ 358.358697][T13869] total_swapcached 90701824 [ 358.363226][T13869] total_pgpgin 337681 [ 358.367195][T13869] total_pgpgout 334318 [ 358.371248][T13869] total_pgfault 366947 [ 358.375308][T13869] total_pgmajfault 3074 [ 358.379453][T13869] total_inactive_anon 4096 [ 358.383863][T13869] total_active_anon 0 [ 358.387836][T13869] total_inactive_file 12288 [ 358.392324][T13869] total_active_file 8192 [ 358.396599][T13869] total_unevictable 13750272 [ 358.401255][T13869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2820,pid=13866,uid=0 [ 358.416078][T13869] Memory cgroup out of memory: Killed process 13869 (syz.5.2820) total-vm:94188kB, anon-rss:5772kB, file-rss:62472kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 358.465539][T13891] loop7: detected capacity change from 0 to 2048 [ 358.487635][T13901] random: crng reseeded on system resumption [ 358.498137][T13886] loop6: unable to read partition table [ 358.499311][T13901] tmpfs: Bad value for 'mpol' [ 358.503773][T13886] loop6: partition table beyond EOD, truncated [ 358.514556][T13886] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 358.557993][ T2980] loop6: unable to read partition table [ 358.563665][ T2980] loop6: partition table beyond EOD, truncated [ 358.627612][T13904] loop3: detected capacity change from 0 to 512 [ 358.640190][T13909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.650869][T13909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.659982][T13909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.661041][T13904] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2832: inode has both inline data and extents flags [ 358.668474][T13909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.702542][T13904] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 358.703007][T13904] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2832: couldn't read orphan inode 15 (err -117) [ 358.721306][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 358.730398][ C1] EXT4-fs (loop3): initial error at time 358: ext4_orphan_get:1399: inode 15 [ 358.739225][ C1] EXT4-fs (loop3): last error at time 358: ext4_orphan_get:1399: inode 15 [ 358.757261][T13904] loop3: lost filesystem error report for type 5 error -117 [ 358.794912][T13891] loop7: unable to read partition table [ 358.807816][T13891] loop7: partition table beyond EOD, truncated [ 358.813970][T13891] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 358.853137][T13912] loop4: detected capacity change from 0 to 512 [ 358.889074][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 358.889086][ T28] audit: type=1400 audit(358.922:22082): avc: denied { write } for pid=13902 comm="syz.3.2832" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.943021][ T2980] loop7: unable to read partition table [ 358.948695][ T2980] loop7: partition table beyond EOD, truncated [ 359.087804][T13912] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2835'. [ 359.353233][T13936] loop4: detected capacity change from 0 to 2048 [ 359.561605][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2843'. [ 359.584478][T13936] loop4: unable to read partition table [ 359.609521][T13936] loop4: partition table beyond EOD, truncated [ 359.616793][T13936] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 359.647219][T13941] random: crng reseeded on system resumption [ 359.702104][T13941] tmpfs: Bad value for 'mpol' [ 359.752792][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.761379][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.779417][ T2980] loop4: unable to read partition table [ 359.780318][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.785057][ T2980] loop4: partition table beyond EOD, truncated [ 359.800079][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.900740][T13953] loop4: detected capacity change from 0 to 512 [ 359.912083][T13953] EXT4-fs: Ignoring removed nobh option [ 359.958337][ T28] audit: type=1400 audit(359.992:22083): avc: denied { setattr } for pid=13952 comm="syz.4.2848" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.103723][T13966] loop7: detected capacity change from 0 to 512 [ 360.112795][T13963] loop3: detected capacity change from 0 to 512 [ 360.140334][T13966] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2852: inode has both inline data and extents flags [ 360.164371][T13966] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.167071][T13966] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2852: couldn't read orphan inode 15 (err -117) [ 360.176304][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 360.176325][ C0] EXT4-fs (loop7): initial error at time 360: ext4_orphan_get:1399: inode 15 [ 360.176359][ C0] EXT4-fs (loop7): last error at time 360: ext4_orphan_get:1399: inode 15 [ 360.215019][T13957] syz.5.2844 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 360.230044][T13966] loop7: lost filesystem error report for type 5 error -117 [ 360.230694][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.5.2844 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 360.230729][T13957] Tainted: [W]=WARN [ 360.230805][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.230852][T13957] Call Trace: [ 360.230860][T13957] [ 360.230868][T13957] __dump_stack+0x1d/0x30 [ 360.230960][T13957] dump_stack_lvl+0x95/0xd0 [ 360.231063][T13957] dump_stack+0x15/0x1b [ 360.231086][T13957] dump_header+0x80/0x240 [ 360.231107][T13957] oom_kill_process+0x295/0x350 [ 360.231172][T13957] out_of_memory+0x981/0xbc0 [ 360.231193][T13957] try_charge_memcg+0x624/0xa10 [ 360.231294][T13957] ? __rcu_read_unlock+0x4e/0x70 [ 360.231332][T13957] __memcg_kmem_charge_page+0x19a/0x3a0 [ 360.231372][T13957] __alloc_frozen_pages_noprof+0x18a/0x350 [ 360.231413][T13957] alloc_pages_mpol+0xa9/0x1d0 [ 360.231473][T13957] alloc_pages_noprof+0x94/0x140 [ 360.231491][T13957] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 360.231536][T13957] __kvmalloc_node_noprof+0x3a3/0x590 [ 360.231634][T13957] ? futex_hash_allocate+0x1a3/0x940 [ 360.231660][T13957] ? futex_hash_allocate+0x1a3/0x940 [ 360.231762][T13957] ? futex_hash_allocate+0x1a3/0x940 [ 360.231789][T13957] futex_hash_allocate+0x1a3/0x940 [ 360.231818][T13957] ? cap_task_prctl+0x13f/0x6b0 [ 360.231849][T13957] futex_hash_prctl+0xd8/0xf0 [ 360.231877][T13957] __se_sys_prctl+0x4f4/0x13b0 [ 360.231920][T13957] __x64_sys_prctl+0x67/0x80 [ 360.231945][T13957] x64_sys_call+0x2421/0x2550 [ 360.232050][T13957] do_syscall_64+0x112/0x360 [ 360.232077][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.232145][T13957] RIP: 0033:0x7fb08dc8e0d9 [ 360.232164][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.232182][T13957] RSP: 002b:00007fb08c6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 360.232201][T13957] RAX: ffffffffffffffda RBX: 00007fb08df16090 RCX: 00007fb08dc8e0d9 [ 360.232216][T13957] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 360.232271][T13957] RBP: 00007fb08dd25024 R08: 0000000000000000 R09: 0000000000000000 [ 360.232286][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.232301][T13957] R13: 00007fb08df16128 R14: 00007fb08df16090 R15: 00007ffd26063818 [ 360.232362][T13957] [ 360.232381][T13957] memory: usage 307200kB, limit 307200kB, failcnt 1634 [ 360.413849][T13963] EXT4-fs (loop3): orphan cleanup on readonly fs [ 360.418664][T13957] memory+swap: usage 19932kB, limit 9007199254740988kB, failcnt 0 [ 360.418682][T13957] kmem: usage 1512kB, limit 9007199254740988kB, failcnt 0 [ 360.434196][T13963] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 360.435214][T13957] Memory cgroup stats for /syz5: [ 360.435516][T13957] cache 9113600 [ 360.444035][T13963] EXT4-fs warning (device loop3): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.451698][ T28] audit: type=1400 audit(360.492:22084): avc: denied { write } for pid=13965 comm="syz.7.2852" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.451802][T13957] rss 8192000 [ 360.461049][T13963] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 360.467985][T13957] shmem 0 [ 360.491086][T13963] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #14: comm syz.3.2851: invalid orphan symlink nlink 1 [ 360.493533][T13957] mapped_file 9113600 [ 360.501267][T13963] loop3: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 360.511957][T13957] dirty 0 [ 360.515282][T13963] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2851: couldn't read orphan inode 14 (err -117) [ 360.517979][T13957] writeback 0 [ 360.517989][T13957] workingset_refault_anon 18747 [ 360.518000][T13957] workingset_refault_file 13832 [ 360.518010][T13957] swap 1363968 [ 360.518020][T13957] swapcached 96051200 [ 360.518029][T13957] pgpgin 341153 [ 360.518038][T13957] pgpgout 336923 [ 360.518046][T13957] pgfault 371353 [ 360.518055][T13957] pgmajfault 3204 [ 360.518107][T13957] inactive_anon 0 [ 360.518116][T13957] active_anon 0 [ 360.518125][T13957] inactive_file 16384 [ 360.518134][T13957] active_file 4096 [ 360.518143][T13957] unevictable 17305600 [ 360.518177][T13957] hierarchical_memory_limit 314572800 [ 360.518188][T13957] hierarchical_memsw_limit 9223372036854771712 [ 360.518198][T13957] total_cache 9113600 [ 360.518206][T13957] total_rss 8192000 [ 360.518216][T13957] total_shmem 0 [ 360.532830][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 360.568383][T13957] total_mapped_file 9113600 [ 360.580258][ C1] EXT4-fs (loop3): last error at time 360: ext4_orphan_get:1399 [ 360.584434][T13957] total_dirty 0 [ 360.584443][T13957] total_writeback 0 [ 360.593578][ C1] : inode 14 [ 360.596739][T13957] total_workingset_refault_anon 18747 [ 360.596806][T13957] total_workingset_refault_file 13832 [ 360.608568][ C1] [ 360.612171][T13957] total_swap 1363968 [ 360.619348][T13963] loop3: lost filesystem error report for type 5 error -117 [ 360.621850][T13957] total_swapcached 96051200 [ 360.628173][T13963] EXT4-fs (loop3): 1 truncate cleaned up [ 360.629398][T13957] total_pgpgin 341153 [ 360.629421][T13957] total_pgpgout 336923 [ 360.629430][T13957] total_pgfault 371353 [ 360.629439][T13957] total_pgmajfault 3204 [ 360.629449][T13957] total_inactive_anon 0 [ 360.629458][T13957] total_active_anon 0 [ 360.629468][T13957] total_inactive_file 16384 [ 360.629478][T13957] total_active_file 4096 [ 360.629487][T13957] total_unevictable 17305600 [ 360.629497][T13957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2844,pid=13942,uid=0 [ 360.629614][T13957] Memory cgroup out of memory: Killed process 13957 (syz.5.2844) total-vm:94188kB, anon-rss:9244kB, file-rss:62472kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 360.904866][T13976] loop4: detected capacity change from 0 to 512 [ 360.908198][T13963] FAULT_INJECTION: forcing a failure. [ 360.908198][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 360.924870][T13976] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.2855: iget: bad extra_isize 90 (inode size 256) [ 360.944324][T13976] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 360.944550][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.3.2851 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 360.944580][T13963] Tainted: [W]=WARN [ 360.944588][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.944601][T13963] Call Trace: [ 360.944609][T13963] [ 360.944616][T13963] __dump_stack+0x1d/0x30 [ 360.944663][T13963] dump_stack_lvl+0x95/0xd0 [ 360.944682][T13963] dump_stack+0x15/0x1b [ 360.944704][T13963] should_fail_ex+0x262/0x280 [ 360.944736][T13963] ? single_open+0x3e/0x170 [ 360.944835][T13963] should_failslab+0x8c/0xb0 [ 360.944862][T13963] __kmalloc_cache_noprof+0x7b/0x3d0 [ 360.944891][T13963] ? single_open+0x3e/0x170 [ 360.944919][T13976] EXT4-fs (loop4): Remounting filesystem read-only [ 360.944955][T13963] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 360.944975][T13963] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 360.944996][T13963] single_open+0x3e/0x170 [ 360.945021][T13963] tracing_trace_options_open+0x165/0x280 [ 360.945117][T13963] do_dentry_open+0x49f/0xa60 [ 360.945150][T13963] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 360.945176][T13963] vfs_open+0x37/0x1e0 [ 360.945222][T13963] path_openat+0xc01/0x10d0 [ 360.945252][T13963] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 360.945276][T13963] do_file_open+0x16c/0x290 [ 360.945350][T13963] do_sys_openat2+0xa0/0x130 [ 360.945384][T13963] __x64_sys_openat+0xf2/0x120 [ 360.945402][T13963] x64_sys_call+0x1f72/0x2550 [ 360.945453][T13963] do_syscall_64+0x112/0x360 [ 360.945521][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.945543][T13963] RIP: 0033:0x7f17b8ede0d9 [ 360.945560][T13963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.945578][T13963] RSP: 002b:00007f17b7937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.945599][T13963] RAX: ffffffffffffffda RBX: 00007f17b9165fa0 RCX: 00007f17b8ede0d9 [ 360.945620][T13963] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 360.945635][T13963] RBP: 00007f17b7937090 R08: 0000000000000000 R09: 0000000000000000 [ 360.945649][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.945662][T13963] R13: 00007f17b9166038 R14: 00007f17b9165fa0 R15: 00007ffd95d23288 [ 360.945681][T13963] [ 360.959114][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 361.002783][T13976] EXT4-fs warning (device loop4): ext4_evict_inode:289: xattr delete (err -30) [ 361.005324][ C1] EXT4-fs (loop4): initial error at time 360: ext4_xattr_inode_iget:441 [ 361.020317][T13976] EXT4-fs (loop4): 1 orphan inode deleted [ 361.024594][ C1] : inode 18 [ 361.032116][T13978] random: crng reseeded on system resumption [ 361.037526][ C1] [ 361.051363][T13978] tmpfs: Bad value for 'mpol' [ 361.054114][ C1] EXT4-fs (loop4): last error at time 360: ext4_xattr_inode_iget:441: inode 18 [ 361.414757][T13991] loop3: detected capacity change from 0 to 1024 [ 361.567311][T13996] loop6: unable to read partition table [ 361.572980][T13996] loop6: partition table beyond EOD, truncated [ 361.579199][T13996] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 361.609438][T13985] loop7: unable to read partition table [ 361.615444][T13985] loop7: partition table beyond EOD, truncated [ 361.621763][ T2980] loop6: unable to read partition table [ 361.621781][ T2980] loop6: partition table beyond EOD, truncated [ 361.635476][T13985] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 361.772644][T14008] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 361.831013][ T2980] loop7: unable to read partition table [ 361.837028][ T2980] loop7: partition table beyond EOD, truncated [ 361.844325][T14008] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2865: bg 0: block 4: invalid block bitmap [ 361.932542][T14008] loop5: lost filesystem error report for type 5 error -117 [ 361.933474][T14008] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 361.940877][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 361.940893][ C1] EXT4-fs (loop5): initial error at time 361: ext4_validate_block_bitmap:432 [ 361.940924][ C1] EXT4-fs (loop5): last error at time 361: ext4_validate_block_bitmap:432 [ 362.289108][ T28] audit: type=1400 audit(362.302:22085): avc: denied { write } for pid=14004 comm="syz.3.2864" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.295777][T14008] loop5: lost filesystem error report for type 5 error -117 [ 362.342120][T14008] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2865: invalid indirect mapped block 1 (level 1) [ 362.373534][T14008] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.373875][T14008] EXT4-fs (loop5): 1 truncate cleaned up [ 362.429076][ T28] audit: type=1400 audit(362.422:22086): avc: denied { remount } for pid=14013 comm="syz.7.2866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 362.456581][T14005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2864'. [ 362.525347][ T28] audit: type=1400 audit(362.562:22087): avc: denied { create } for pid=14013 comm="syz.7.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 364.431407][T14052] set_capacity_and_notify: 6 callbacks suppressed [ 364.431421][T14052] loop3: detected capacity change from 0 to 512 [ 364.464288][T14054] loop6: detected capacity change from 0 to 2048 [ 364.497401][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.505842][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.516549][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.524955][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.578663][T14047] loop5: detected capacity change from 0 to 2048 [ 364.618082][T14054] loop6: unable to read partition table [ 364.623806][T14054] loop6: partition table beyond EOD, truncated [ 364.630045][T14054] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 364.665258][T14052] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2875'. [ 364.756122][T14047] loop5: unable to read partition table [ 364.761802][T14047] loop5: partition table beyond EOD, truncated [ 364.767949][T14047] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 364.814771][ T2980] loop5: unable to read partition table [ 364.820953][ T2980] loop5: partition table beyond EOD, truncated [ 364.860978][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.883458][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.894131][T14077] loop6: detected capacity change from 0 to 1024 [ 364.902470][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.912425][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.158956][T14090] FAULT_INJECTION: forcing a failure. [ 365.158956][T14090] name failslab, interval 1, probability 0, space 0, times 0 [ 365.172602][T14090] CPU: 0 UID: 0 PID: 14090 Comm: syz.5.2886 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 365.172621][T14090] Tainted: [W]=WARN [ 365.172696][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.172764][T14090] Call Trace: [ 365.172768][T14090] [ 365.172772][T14090] __dump_stack+0x1d/0x30 [ 365.172788][T14090] dump_stack_lvl+0x95/0xd0 [ 365.172800][T14090] dump_stack+0x15/0x1b [ 365.172811][T14090] should_fail_ex+0x262/0x280 [ 365.172945][T14090] ? alloc_pipe_info+0xad/0x340 [ 365.172961][T14090] should_failslab+0x8c/0xb0 [ 365.173020][T14090] __kmalloc_cache_noprof+0x7b/0x3d0 [ 365.173036][T14090] ? alloc_pipe_info+0xad/0x340 [ 365.173075][T14090] ? irqentry_exit+0x58f/0x610 [ 365.173087][T14090] alloc_pipe_info+0xad/0x340 [ 365.173102][T14090] splice_direct_to_actor+0x593/0x680 [ 365.173197][T14090] ? __pfx_direct_splice_actor+0x10/0x10 [ 365.173215][T14090] ? do_splice_direct+0xff/0x1a0 [ 365.173234][T14090] ? __pfx_direct_splice_actor+0x10/0x10 [ 365.173294][T14090] do_splice_direct+0x119/0x1a0 [ 365.173373][T14090] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 365.173458][T14090] do_sendfile+0x37d/0x640 [ 365.173477][T14090] __x64_sys_sendfile64+0x105/0x150 [ 365.173494][T14090] x64_sys_call+0x1015/0x2550 [ 365.173510][T14090] do_syscall_64+0x112/0x360 [ 365.173525][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.173538][T14090] RIP: 0033:0x7fb08dc8e0d9 [ 365.173548][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.173611][T14090] RSP: 002b:00007fb08c6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 365.173624][T14090] RAX: ffffffffffffffda RBX: 00007fb08df15fa0 RCX: 00007fb08dc8e0d9 [ 365.173633][T14090] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 365.173641][T14090] RBP: 00007fb08c6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 365.173648][T14090] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 365.173656][T14090] R13: 00007fb08df16038 R14: 00007fb08df15fa0 R15: 00007ffd26063818 [ 365.173671][T14090] [ 365.508342][T14098] loop6: detected capacity change from 0 to 512 [ 365.516048][T14098] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 365.540186][T14098] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2889: bg 0: block 4: invalid block bitmap [ 365.554033][T14098] loop6: lost filesystem error report for type 5 error -117 [ 365.612748][T14095] loop4: detected capacity change from 0 to 2048 [ 365.646519][T14102] loop7: detected capacity change from 0 to 2048 [ 365.709100][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 365.715811][ C1] EXT4-fs (loop6): initial error at time 365: ext4_validate_block_bitmap:432 [ 365.724870][ C1] EXT4-fs (loop6): last error at time 365: ext4_validate_block_bitmap:432 [ 365.743177][T14098] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 365.784341][T14098] loop6: lost filesystem error report for type 5 error -117 [ 365.784762][T14098] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2889: invalid indirect mapped block 1 (level 1) [ 365.915660][T14098] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 365.920129][T14098] EXT4-fs (loop6): 1 truncate cleaned up [ 366.018953][T14102] loop7: unable to read partition table [ 366.024617][T14102] loop7: partition table beyond EOD, truncated [ 366.030863][T14102] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 366.067618][T14095] loop4: unable to read partition table [ 366.073308][T14095] loop4: partition table beyond EOD, truncated [ 366.079458][T14095] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 366.132566][ T2980] loop7: unable to read partition table [ 366.148237][ T2980] loop7: partition table beyond EOD, truncated [ 366.170564][T14112] loop4: detected capacity change from 0 to 512 [ 366.214087][T14108] loop6: detected capacity change from 0 to 512 [ 366.216729][T14112] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 366.247766][T14108] EXT4-fs (loop6): orphan cleanup on readonly fs [ 366.255146][T14112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2892: bg 0: block 4: invalid block bitmap [ 366.263437][T14118] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 366.271479][T14121] loop3: detected capacity change from 0 to 512 [ 366.281835][T14108] Quota error (device loop6): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 366.294388][T14108] EXT4-fs warning (device loop6): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 366.309539][T14112] loop4: lost filesystem error report for type 5 error -117 [ 366.309688][T14112] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 366.325668][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 366.325689][ C0] EXT4-fs (loop4): initial error at time 366: ext4_validate_block_bitmap:432 [ 366.325724][ C0] EXT4-fs (loop4): last error at time 366: ext4_validate_block_bitmap:432 [ 366.329524][T14108] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 366.332355][T14112] loop4: lost filesystem error report for type 5 error -117 [ 366.332481][T14112] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2892: invalid indirect mapped block 1 (level 1) [ 366.332514][T14112] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 366.332779][T14112] EXT4-fs (loop4): 1 truncate cleaned up [ 366.369778][T14121] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2897: iget: bad extra_isize 90 (inode size 256) [ 366.402929][T14108] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #14: comm syz.6.2893: invalid orphan symlink nlink 1 [ 366.418184][T14121] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 366.418503][T14121] EXT4-fs (loop3): Remounting filesystem read-only [ 366.427333][T14108] loop6: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 366.432885][T14121] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 366.434516][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 366.453963][T14121] EXT4-fs (loop3): 1 orphan inode deleted [ 366.459534][ C1] EXT4-fs (loop3): initial error at time 366: ext4_xattr_inode_iget:441: inode 18 [ 366.475844][ C1] EXT4-fs (loop3): last error at time 366: ext4_xattr_inode_iget:441: inode 18 [ 366.487402][T14108] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2893: couldn't read orphan inode 14 (err -117) [ 366.500424][T14108] loop6: lost filesystem error report for type 5 error -117 [ 366.501637][T14108] EXT4-fs (loop6): 1 truncate cleaned up [ 366.591163][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.599607][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.612244][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.620668][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.863319][T14138] loop3: unable to read partition table [ 366.868994][T14138] loop3: partition table beyond EOD, truncated [ 366.875153][T14138] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 366.911232][T14134] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2901'. [ 366.917223][ T2980] loop3: unable to read partition table [ 366.925878][ T2980] loop3: partition table beyond EOD, truncated [ 367.072789][T14150] EXT4-fs (loop4): orphan cleanup on readonly fs [ 367.083824][T14154] netlink: 772 bytes leftover after parsing attributes in process `syz.7.2906'. [ 367.093766][T14150] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 367.094278][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2906'. [ 367.112996][T14154] netlink: 'syz.7.2906': attribute type 10 has an invalid length. [ 367.120851][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2906'. [ 367.120993][T14150] EXT4-fs warning (device loop4): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 367.132212][T14154] geneve2: entered promiscuous mode [ 367.151780][T14150] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 367.159418][T14154] geneve2: entered allmulticast mode [ 367.163938][T14150] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #14: comm syz.4.2905: invalid orphan symlink nlink 1 [ 367.177090][T14150] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 367.177505][T14150] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2905: couldn't read orphan inode 14 (err -117) [ 367.186786][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 367.186864][ C0] EXT4-fs (loop4): last error at time 367: ext4_orphan_get:1399: inode 14 [ 367.214165][T14150] loop4: lost filesystem error report for type 5 error -117 [ 367.214515][T14150] EXT4-fs (loop4): 1 truncate cleaned up [ 367.414971][T14148] loop3: unable to read partition table [ 367.420658][T14148] loop3: partition table beyond EOD, truncated [ 367.426816][T14148] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 367.485347][T14161] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2909: iget: bad extra_isize 90 (inode size 256) [ 367.498668][T14161] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 367.504368][T14161] EXT4-fs (loop7): Remounting filesystem read-only [ 367.513677][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 367.513709][ C0] EXT4-fs (loop7): initial error at time 367: ext4_xattr_inode_iget:441: inode 18 [ 367.513827][ C0] EXT4-fs (loop7): last error at time 367: ext4_xattr_inode_iget:441: inode 18 [ 367.547470][T14161] EXT4-fs warning (device loop7): ext4_evict_inode:289: xattr delete (err -30) [ 367.558415][T14161] EXT4-fs (loop7): 1 orphan inode deleted [ 367.934282][ T9260] EXT4-fs unmount: 51 callbacks suppressed [ 367.934299][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.029193][T14179] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 368.090357][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.099372][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.264158][T14174] loop7: unable to read partition table [ 368.269838][T14174] loop7: partition table beyond EOD, truncated [ 368.275985][T14174] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 368.312429][ T2980] loop7: unable to read partition table [ 368.318086][ T2980] loop7: partition table beyond EOD, truncated [ 368.352859][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2919'. [ 368.382395][T14192] EXT4-fs: Ignoring removed nobh option [ 368.414639][T14192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.444214][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.472878][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.484013][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.497690][T14200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.506939][T14200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.665489][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.674448][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.685025][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.694372][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.824948][T14210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 368.834916][T14210] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 369.521811][T14225] set_capacity_and_notify: 8 callbacks suppressed [ 369.521828][T14225] loop7: detected capacity change from 0 to 512 [ 369.550139][T14225] EXT4-fs: Ignoring removed nobh option [ 369.577448][T14223] loop4: detected capacity change from 0 to 512 [ 369.589039][T14225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.614712][T14223] EXT4-fs (loop4): orphan cleanup on readonly fs [ 369.624976][T14223] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 369.644705][T14223] EXT4-fs warning (device loop4): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 369.687968][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.697411][T14223] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 369.706894][T14223] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #14: comm syz.4.2932: invalid orphan symlink nlink 1 [ 369.719440][T14223] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 369.719947][T14223] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2932: couldn't read orphan inode 14 (err -117) [ 369.729259][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 369.729297][ C0] EXT4-fs (loop4): last error at time 369: ext4_orphan_get:1399: inode 14 [ 369.770321][T14223] loop4: lost filesystem error report for type 5 error -117 [ 369.770732][T14223] EXT4-fs (loop4): 1 truncate cleaned up [ 369.813412][T14223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.818060][T14232] loop7: detected capacity change from 0 to 1024 [ 369.853408][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.874851][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2936'. [ 369.875287][T14232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 369.918302][T14238] loop3: detected capacity change from 0 to 512 [ 369.947702][T14238] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.2937: iget: bad extra_isize 90 (inode size 256) [ 369.951022][T14241] loop4: detected capacity change from 0 to 512 [ 369.961472][T14238] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 369.967716][T14238] EXT4-fs (loop3): Remounting filesystem read-only [ 369.976923][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 369.976951][ C0] EXT4-fs (loop3): initial error at time 370: ext4_xattr_inode_iget:441: inode 18 [ 369.977022][ C0] EXT4-fs (loop3): last error at time 370: ext4_xattr_inode_iget:441: inode 18 [ 370.008950][T14238] EXT4-fs warning (device loop3): ext4_evict_inode:289: xattr delete (err -30) [ 370.016790][T14241] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 370.018705][T14238] EXT4-fs (loop3): 1 orphan inode deleted [ 370.034106][T14238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.050911][T14241] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2938: bg 0: block 4: invalid block bitmap [ 370.065782][T14241] loop4: lost filesystem error report for type 5 error -117 [ 370.065952][T14241] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 370.073274][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 370.073290][ C1] EXT4-fs (loop4): initial error at time 370: ext4_validate_block_bitmap:432 [ 370.073326][ C1] EXT4-fs (loop4): last error at time 370: ext4_validate_block_bitmap:432 [ 370.121327][T14249] netlink: 772 bytes leftover after parsing attributes in process `syz.6.2941'. [ 370.121713][T14241] loop4: lost filesystem error report for type 5 error -117 [ 370.132426][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.149787][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.159170][T14241] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2938: invalid indirect mapped block 1 (level 1) [ 370.180717][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2941'. [ 370.195991][T14241] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 370.196351][T14241] EXT4-fs (loop4): 1 truncate cleaned up [ 370.212569][T14249] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2941'. [ 370.222215][T14241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.236754][T14241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.237703][T14249] geneve2: entered promiscuous mode [ 370.259233][T14249] geneve2: entered allmulticast mode [ 370.280032][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.288460][T14257] loop3: detected capacity change from 0 to 512 [ 370.292475][T14247] loop5: detected capacity change from 0 to 512 [ 370.299647][T14257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 370.311957][ T9637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.329285][ T3468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.331958][T14257] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 370.379152][T14261] loop6: detected capacity change from 0 to 512 [ 370.399759][T14247] EXT4-fs (loop5): orphan cleanup on readonly fs [ 370.426161][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2948'. [ 370.435478][T14247] Quota error (device loop5): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 370.451414][T14247] EXT4-fs warning (device loop5): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.490947][T14247] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 370.509552][T14247] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #14: comm syz.5.2940: invalid orphan symlink nlink 1 [ 370.522196][T14247] loop5: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 370.523165][T14247] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2940: couldn't read orphan inode 14 (err -117) [ 370.532494][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 370.532635][ C0] EXT4-fs (loop5): last error at time 370: ext4_orphan_get:1399: inode 14 [ 370.560786][T14247] loop5: lost filesystem error report for type 5 error -117 [ 370.561222][T14261] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2947: inode has both inline data and extents flags [ 370.582023][T14247] EXT4-fs (loop5): 1 truncate cleaned up [ 370.587584][T14261] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2947: couldn't read orphan inode 15 (err -117) [ 370.598118][T14247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.599710][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 370.599729][ C0] EXT4-fs (loop6): initial error at time 370: ext4_orphan_get:1399: inode 15 [ 370.599767][ C0] EXT4-fs (loop6): last error at time 370: ext4_orphan_get:1399: inode 15 [ 370.611129][T14261] loop6: lost filesystem error report for type 5 error -117 [ 370.627830][T14271] loop7: detected capacity change from 0 to 512 [ 370.669865][T14274] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 370.713761][T14272] loop4: detected capacity change from 0 to 512 [ 370.768123][T14272] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 370.795794][T14271] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2949: iget: bad extra_isize 90 (inode size 256) [ 370.886688][T14271] EXT4-fs (loop7): Remounting filesystem read-only [ 370.893403][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 370.893431][ C1] EXT4-fs (loop7): initial error at time 370: ext4_xattr_inode_iget:441: inode 18 [ 370.893482][ C1] EXT4-fs (loop7): last error at time 370: ext4_xattr_inode_iget:441: inode 18 [ 370.933231][ T4057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.943791][T14271] EXT4-fs warning (device loop7): ext4_evict_inode:289: xattr delete (err -30) [ 370.953302][T14271] EXT4-fs (loop7): 1 orphan inode deleted [ 370.964055][T14271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.029285][ T28] audit: type=1400 audit(370.722:22088): avc: denied { getopt } for pid=14256 comm="syz.3.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 371.062389][T14261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.063934][ T28] audit: type=1400 audit(371.102:22089): avc: denied { write } for pid=14269 comm="syz.7.2949" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.138138][ T9260] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.162984][ T28] audit: type=1400 audit(371.182:22090): avc: denied { write } for pid=14260 comm="syz.6.2947" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.252001][T14281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 371.318497][ T7932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.349780][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 371.403933][T14302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2959'. [ 371.416197][T14302] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 372.352983][T14322] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2967: inode has both inline data and extents flags [ 372.471829][T14322] fserror_report: 2 callbacks suppressed [ 372.471844][T14322] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 372.482259][T14322] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2967: couldn't read orphan inode 15 (err -117) [ 372.503186][T14322] loop6: lost filesystem error report for type 5 error -117 [ 372.504464][T14322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.629315][ T28] audit: type=1400 audit(372.662:22091): avc: denied { write } for pid=14321 comm="syz.6.2967" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.783599][T14330] EXT4-fs: inline encryption not supported [ 372.832337][T14330] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.848019][T14330] EXT4-fs error (device loop4): ext4_map_blocks:835: inode #3: block 1: comm syz.4.2970: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.862877][T14330] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 372.863034][T14330] EXT4-fs (loop4): Remounting filesystem read-only [ 372.865682][T14328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 372.872058][T14330] Quota error (device loop4): write_blk: dquota write failed [ 372.872076][T14330] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 372.872141][T14330] EXT4-fs (loop4): 1 orphan inode deleted [ 372.907905][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 372.907925][ C0] EXT4-fs (loop4): initial error at time 372: ext4_map_blocks:835: inode 3: block 1 [ 372.907974][ C0] EXT4-fs (loop4): last error at time 372: ext4_map_blocks:835: inode 3: block 1 [ 372.939539][ T4057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.939588][T14330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.939682][ T4057] ================================================================== [ 372.939716][ T4057] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 372.939756][ T4057] [ 372.939764][ T4057] write to 0xffffffff8959885b of 19 bytes by task 14330 on cpu 1: [ 372.939783][ T4057] vsnprintf+0x2c0/0x8c0 [ 372.939811][ T4057] pointer+0x844/0xc90 [ 372.939838][ T4057] vsnprintf+0x49e/0x8c0 [ 372.939875][ T4057] vscnprintf+0x41/0x90 [ 372.939907][ T4057] printk_sprint+0x30/0x2b0 [ 372.939930][ T4057] vprintk_store+0x57f/0x910 [ 372.939954][ T4057] vprintk_emit+0x1a4/0x610 [ 372.939980][ T4057] vprintk_default+0x26/0x30 [ 372.940005][ T4057] vprintk+0x1d/0x30 [ 372.940023][ T4057] _printk+0x79/0xa0 [ 372.940040][ T4057] __ext4_msg+0x1aa/0x1c0 [ 372.940063][ T4057] ext4_fill_super+0x2f25/0x3770 [ 372.940087][ T4057] get_tree_bdev_flags+0x291/0x300 [ 372.940113][ T4057] get_tree_bdev+0x1f/0x30 [ 372.940137][ T4057] ext4_get_tree+0x1c/0x30 [ 372.940159][ T4057] vfs_get_tree+0x57/0x1d0 [ 372.940183][ T4057] do_new_mount+0x288/0x8d0 [ 372.940212][ T4057] path_mount+0x4ad/0xb90 [ 372.940239][ T4057] __se_sys_mount+0x28c/0x2e0 [ 372.940269][ T4057] __x64_sys_mount+0x67/0x80 [ 372.940298][ T4057] x64_sys_call+0xc3b/0x2550 [ 372.940325][ T4057] do_syscall_64+0x112/0x360 [ 372.940350][ T4057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.940374][ T4057] [ 372.940384][ T4057] read to 0xffffffff89598860 of 8 bytes by task 4057 on cpu 0: [ 372.940403][ T4057] data_push_tail+0x104/0x440 [ 372.940429][ T4057] data_alloc+0x111/0x380 [ 372.940452][ T4057] prb_reserve+0x8e3/0xaf0 [ 372.940476][ T4057] vprintk_store+0x54e/0x910 [ 372.940501][ T4057] vprintk_emit+0x1a4/0x610 [ 372.940528][ T4057] vprintk_default+0x26/0x30 [ 372.940555][ T4057] vprintk+0x1d/0x30 [ 372.940574][ T4057] _printk+0x79/0xa0 [ 372.940592][ T4057] __ext4_msg+0x1aa/0x1c0 [ 372.940615][ T4057] ext4_put_super+0x90/0x7c0 [ 372.940642][ T4057] generic_shutdown_super+0xee/0x220 [ 372.940664][ T4057] kill_block_super+0x2d/0xb0 [ 372.940690][ T4057] ext4_kill_sb+0x42/0x80 [ 372.940712][ T4057] deactivate_locked_super+0x75/0x200 [ 372.940734][ T4057] deactivate_super+0x9a/0xb0 [ 372.940754][ T4057] cleanup_mnt+0x2c3/0x340 [ 372.940774][ T4057] __cleanup_mnt+0x19/0x20 [ 372.940794][ T4057] task_work_run+0x130/0x1a0 [ 372.940816][ T4057] exit_to_user_mode_loop+0x1e4/0x8c0 [ 372.940845][ T4057] do_syscall_64+0x212/0x360 [ 372.940877][ T4057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.940901][ T4057] [ 372.940907][ T4057] value changed: 0x00000000000004c8 -> 0x73656c6966206465 [ 372.940922][ T4057] [ 372.940929][ T4057] Reported by Kernel Concurrency Sanitizer on: [ 372.940946][ T4057] CPU: 0 UID: 0 PID: 4057 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 372.940980][ T4057] Tainted: [W]=WARN [ 372.940990][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.941005][ T4057] ================================================================== [ 373.262197][ T7932] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.273827][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.