last executing test programs: 45.896712173s ago: executing program 0 (id=538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x1f, 0xa000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000740)=""/196) 45.725610682s ago: executing program 0 (id=540): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x14) 45.585654569s ago: executing program 0 (id=543): setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007", @ANYRES32, @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.437768767s ago: executing program 0 (id=546): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1a1046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002020, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 45.309635944s ago: executing program 0 (id=550): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000180)="c3ef7f670000ec6783b4241544b500000000000000000653003cd83cb6543bdb090ac311e0f0544b00aab085e0dc23d907bde6a1b56f92241432fa00228f000000", 0x0, 0x4f80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000006}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 43.377567534s ago: executing program 0 (id=578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030803c000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 43.343643636s ago: executing program 32 (id=578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030803c000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 40.965540679s ago: executing program 2 (id=591): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="1e00000000000000000000b7030000000000007c1423e2395ab7e8ad5eade254e2c112541b2ec11d4e0878366afe84100d90b8a24dc756152b458f52907e29789741b3e7f5a13674b97c80ad6a2f8b69a339c468db64919df9b02814957481c7bd78aa9ec7346d18f8dc3c2964d8e413c2c9eec9157c7fd440bc9432b4ad37b345b974a3307ad8697824f1d6b963537f3eb0bac13774e240b0ceebc204c97111a38592a950265de2d1c72d24f932e81f91184e6be176b7f31607f66b30389494dc367c172f10229fc53ea847ddc9be0d52c73f37a81ea5e2ee696e", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (rerun: 64) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (rerun: 64) r4 = memfd_create(0x0, 0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(r5, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) (async, rerun: 64) writev(r4, 0x0, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, r6, 0xb) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) (rerun: 32) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0) 40.37973967s ago: executing program 2 (id=592): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) (async) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400000000", @ANYRES32], 0x44}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) 40.270263066s ago: executing program 2 (id=593): r0 = syz_io_uring_setup(0x26b6, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000800)=[0x2, 0x4]}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000540)={[{@nouid32}]}, 0x1, 0x504, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x4, 0xf01, 0x3, 0x5b5, 0x6, 0x9, 0x200, 0x4000007, 0xfffffffd}) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x18, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)) futex(&(0x7f0000004000)=0x7, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb3020000) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x400) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x8001, &(0x7f0000000400)=0x0) io_submit(r1, 0x3, &(0x7f00000015c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x8e0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0]) symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 39.931730443s ago: executing program 2 (id=596): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20044815}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x496b829b19ae4a8d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9fda0100180000000000000018000000180000000200000000000000010000850000000000000001010000000000000000005de4d3170371e4ef5ebeaecd482d15927c6a1f7c666c57ace915614d9ee9b2c94bc3d106b86e8cf7233b"], &(0x7f0000001f40)=""/4092, 0x32, 0xffc, 0xa}, 0x28) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x1, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) pread64(r4, &(0x7f0000000380)=""/257, 0x101, 0xd554) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) sched_rr_get_interval(r6, &(0x7f0000000140)) semctl$SETALL(0x0, 0x0, 0x11, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x4d0, 0x0, 0x390, 0xfeffffff, 0x2d0, 0x228, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00', {}, {0xff}}, 0x0, 0x1f0, 0x228, 0x0, {}, [@common=@ttl={{0x28}, {0x82846f83166753ff, 0x96}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x0, 0xed74, 0x1, 0x6, 0x9, 0x8, 0x5, 0x1, 0x18, 0x80}, {0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {}, 0x5e, 0x2, 0xa}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 38.852189399s ago: executing program 2 (id=607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x8, 0x6, 0x5, 0x200, 0x6, 0xff, 0x7, 0x20f86}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000400), &(0x7f0000000440)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000480)={r1, &(0x7f0000000480), &(0x7f0000001540)=""/155}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) 38.253629031s ago: executing program 2 (id=615): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 38.249594451s ago: executing program 33 (id=615): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.162633575s ago: executing program 1 (id=935): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) (async) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e23, @private=0x7fffffff}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c0576f6f33e5c704fdaa02f9f1902c81846df52f32ee38a3fb602889c08d275400787ded1859c578e33d053dab7d0f76502dc32a6d7164e6d7e555a377e4cf5f723404f6918bc6968ce8eeda9f15dddd2dbd9b5c383396de5412e2e5f5389868bab4c8d91801ba3135c6af79ee662bedf9d06707145cac64ec085b3a1c523cf3321caf016f8f7c1dab79d13a0c880e02a84fe0cb105857b46dd61f3a26e4fd", 0x9f}, {&(0x7f0000000300)="784e845d7ffab79d90cfa36e2482431afacf3f232533e0091f5cd6f3de7e542b062f6eebdfcec084f404f360044fdbf21188039307ab935c0d7a3038bdc8a04ac3fe27eba30ca4d76dee9d7e32cbbdd9f775d665a822d37e48bce900ba9fd097040a6faf6fc1f32436b0f3b4597ffda5cd6b534c92e649a02d8f77ce0c6e7976a42e7614c8c045e4234ba64abb367c6397493ddd90bfadeba345951b82ef01b1af246f9d7d009320a3d18373dbc15fcad01841039208ccafcda40417bda98589832f0f34af96419529cfbb0c09bde6b960ef5328f4d03f039c2049cc50", 0xdd}, {&(0x7f0000000400)="bdec1811c6e2fe35061ec06c5eabd8be3bb63d8ffca8cf1a5c013cf53c9d3ce21e23c794204b80aca4a0f2e815ec2c618fe779b82ea918438eb857ba9016b50ccdc763b96480a66186d47595e41e70ae5791c6fb6cec652362631f8e98fc1fcbcd08914b505027389c3cf3c0bc915902870c7eb696a01eb3f033b41ec9b5f259", 0x80}, {&(0x7f0000000480)="3d683e442d51e94f36d5f87d2eb50918532c283e07b4b335cd99fcc4fd1aa07b2e4c0fda8bd56e7042302a8aca3ac070adbe288731c828043b8e1af77915466176f05a53675c9f15813bfdbc63c89bdc60ca0ec38f146410b2139c18cf3a04fd090890b2cfa8bf35319942177ab8b51e47d7aaf6691fe95de2", 0x79}, {&(0x7f0000000500)="64a6794918a1d70d4541479d5943a173b6ab2a5e7cf89ec754d97d038fccd1e0ddb4cc4203258991bdf5fb1619d3695ad83f57575d", 0x35}, {&(0x7f0000000540)="629299d88a51d0a0f53aa7e834ea6370c8bc7d1f82a78ae71d14e2240f1d5189029ba327b288173b20b0c72142181765365d6feb2d91414bff97dd60e9ffbe274673c320f11a136ed1510c6afdb14d3dae8393a1d8a10cd0ec28386a9f71", 0x5e}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="5f060067998616d0a5d7360000000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101ffffffff000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0a010102ac1414aa0000000011000000000000000000000001000000020000000000000088000000000000000000000007000000072bac7f00000164010101ac1414aa0a010100ac1414aaac1e0101ffffffffe0000002ac1e00017f000001440cb9716401010100000003441026a0fffffff80000000200000007830fa1ac1414bbffffffff00000000891fd8ac1414aaac1414bbac1e00010a0101017f000001ac1414aae0000001000000"], 0xe0}, 0xe46f563c98e4e0b) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async, rerun: 32) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind(r0, &(0x7f0000000780)=@in6={0xa, 0x4e20, 0x4, @mcast1, 0x3fa9}, 0x80) (async) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x174491, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000b, 0x4000011, r3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002dc0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfd2}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000100009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000166a049c3dc112c983264ef75a7a512ea6762b3a1c0e6e2760250046b14d6e45ef813e565fce7be0d720693820ae99d1f7563c4aebe9ba274b830e1bda0e6264391c69a91fcaca243847e20f11c3006df50faf3184f0eeff52a0dc2a497aeb2d40e212f377843c3dceed670851128639c658ea42043c2d42a9ce6d66ae63163c9e097018201dd17f4e3e1ba9a60c331c213e01341f0750370b06ca"], 0x18}, 0x404f444) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x50, 0x0, &(0x7f0000000280)) 2.966181535s ago: executing program 1 (id=936): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000fdb7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.913269658s ago: executing program 1 (id=937): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200000100001c0012800b0001006d616373656300000c000280050008000100000008000500", @ANYRES32=r10, @ANYBLOB="6930fb7559b2"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, 0x0, 0x1000) r13 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") 1.582281257s ago: executing program 4 (id=950): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000340)={[{@grpquota}, {@nomblk_io_submit}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x1, 0xbb2, &(0x7f0000002700)="$eJzs3E1rXNUbAPDn3kze82/SP6K2CAakKorTtCkVumpdiwq6cNmYTErI9MUkggldpHWvLkRcFKQfQXBvN64EF3Wh9RMUsUjRTdvFyJ23jp3MNKSTuW36+8GZe849Z+Y8z9zM3HNhbgJ4ak1nD2nEgYg4nURM1venzREjEZu1cXdvX5zPShKVyvt/JZFExJ3bF+cbI5P6drzeGImI628l8f/P2uddXd9YniuXSyv19uG1sxcOr65vvLF0du5M6Uzp3LHZN4/NHp+d7WGuNy989M0Lv7zz8uWrn8+8+/W+n5I4GRP1vtY8emU6ppvvSatCRMz1erKcDNTzac0zKeQYEAAAXaUta7hnYzIG4v7ibTJ+/DXX4AAAAICeqAxEVAAAAIA9LnH9DwAAAHtc43cAd25fnG+UfH+R0F+3TkXEVC3/xv3NtZ5CbFa3IzEYEWN/J9F6W2tSe9ojm85m+v7nUlZil+5D7mbzUkQ8v9XxT6r5T1Xv4m7PP42ImR7MP/1A+zHPv3mbc5b/yR7Mn3f+ADydrp2qncjaz39pc/0TW5z/C1ucu3Yi7/NfY/13t239dz//gQ7rv/e6vvK+Zu3gvdeudxrVuv778IvfF7L5s+0jJ7ZNty5FHCxslX/SzD/pkP/pbc4xPn/zSqe+LP8s30bpd/6VqxGHqqu59vwbkm7/n+jw4lK5NFN73OL11493n7/1+Gclm79xLdAP2fEfi50d/wvbnGPquT8PdOp7eP7pH0PJB9XaUH3Pp3NraytHIoaSt9v3H+0eS2NM4zWy/F99qfvnf6v8s++Ezfr7kP31XKpvs/blB+YcP3T0u53nv7uy/Bd2ePy/3OYc3/5w5eNOfXnnDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTIY2IiUjSYrOepsVixHhEPBNjafn86trri+c/ObeQ9UVMxWC6uFQuzUTEZK2dZO0j1fr99tEH2rMRsT8ivpocrbaL8+fLC3knDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNN4RExEkhYjIo2IfybTtFjMOyoAAACg56byDgAAAADYda7/AQAAYO9ru/4v/Kc10s9YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JP2v3jtRhIRmydGqyUzVO8bzDUyYLel2xs2tttxAP03kHcAQG4KLfVKpVLJMRSgz1zjA8lD+kc69gz3PBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHl+vHLh2I4mIzROj1ZIZqvcN5hoZsNvSvAMAcjPQrTN56A7gCVbIOwAgN67xgdrK/l6lpr1/pOMzhx95VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeHBPVkqTFiEir9TQtFiP+FxFTMZgsLpVLMxGxLyJ+mxwcztpH8g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnltd31ieK5dLKyoqKj2sjEbf5hqtf5g7jBnu3NWlkvMXEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuVhd31ieK5dLK6t5RwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkbXV9Y3muXC6t7GIl7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPvwEAAP//jfkJuw==") fstatfs(r0, &(0x7f0000000040)=""/204) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x808d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d314716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x42a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 1.569302908s ago: executing program 1 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000cc0)=ANY=[@ANYBLOB="cf41ba7ec4b682706b4cf0550276b61600030000000000"], 0x8) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_usb_disconnect(0xffffffffffffffff) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b22000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000069e000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f900000000000061195400000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffec8}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x656a, &(0x7f0000000040)={0x0, 0x2371, 0x400, 0x2, 0xc4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000d40)={0x14, &(0x7f0000001340)=ANY=[@ANYRES32=r2], &(0x7f0000001100)={0x0, 0x3, 0xda, @string={0xda, 0x3, "621a8a6bcb56509ce40197ac44d2d3da4ebe3a496bfa623d887c01a204ee88c1dcaef1985b6d230c76302a47be3932a1f8c6f7541465306df1248ac8400070fa5bb545a2f250ae62da47453163a03e93298460f10529648a3e536c0239e446cbb24e396d8119d7c828d198755a35aba1a35ae1e55e2f7c129a453d588ca0085217b4720da0373aaf19f7632105b12de96282adf9a962daf1c052bad680e628be330bdc6cebe891eaed27231e575bad7135945112cdb2f7cea9582edaf963e0a764cb84d53d947ef4d2e59967290da13c98f5c7d20be6aba8"}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000d80)={0x40, 0x17, 0xb3, "382e53acc477aa83dccaff592b9dbbd53921d5c0ff0c83c879bbda4b6102c24821b2e83532b8e1b641f747dff18becea8d1763712d2c90a9af7338e152ebc1ace5a4099cd7a6f0b148724e60e2df5f7e825e16b275ca2257f96af8ab12905818c94b20f04c89cc8b4543a9b2c53e1f72c57980153a6459d1e5f5c3ea45f5b322a2599cf14fa2085c5ccf6946c06295841c570caa09541794a24313e4a40b7f15e42f97496d17d3c640e633d0b488a40df219a9"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ec0)={0x20, 0x81, 0x1, 'f'}, &(0x7f0000000f00)={0x20, 0x82, 0x3, "e5d988"}, &(0x7f0000000c80)=ANY=[@ANYBLOB="208303004000a80936"], &(0x7f0000000f80)=ANY=[@ANYBLOB="2084256a020017ed"], &(0x7f0000000fc0)={0x20, 0x85, 0x3, "251ce6"}}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.427437835s ago: executing program 4 (id=955): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_ivalue=0xd1db}) r1 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f0000000500)=""/81, 0x51, 0x40, &(0x7f0000000580)=@sco={0x1f, @none}, 0x80) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611190000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) mount_setattr(r1, &(0x7f0000000080)='./bus\x00', 0x1900, &(0x7f0000000380)={0x6, 0x100000, 0x20000, {r3}}, 0x20) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xe9da3144dcfabe9c}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x280000d1}, 0x40000) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x4, 0x3) 1.427118575s ago: executing program 4 (id=956): perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x2092, 0xa3, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0xa, 0x47a) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) 1.415250036s ago: executing program 4 (id=958): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4fffd0000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) 1.33376013s ago: executing program 4 (id=960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000300000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 828.895016ms ago: executing program 5 (id=963): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x3, @mcast2, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000380)="0fee9a98892d70d38e0615f75f0aface18c372c358ccfc9b87d31f13a66fcf3e439e35a6380d998df689a77fc78d8aa1279db3ee955e9f2b4c0c5eaa0081296ab1d8ed37d3caef2470a0ee9f34c85de9bff1930c35bc5c01ca52c21747345fd8acd64670ae31c2a95bfdb4558b57d90b4089e7dd5974cdedf6ded753c8d70bb30ce6", 0x82}, {&(0x7f0000000440)="aaeba60171f0afba188dc727c68f6844f9fad045ec23f40e15fca0985a5b46869ff9377895411be0c85976effa0ea8b4813fab9a1b7c9885fd03d62124f485f22f2a059d2fad852800ff2a177b8d25507134e10795073f3e0f3a50ce685667f75fd542", 0x63}], 0x2, &(0x7f0000000680)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @dstopts={{0xa0, 0x29, 0x37, {0x3c, 0x10, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x32, 0x6, [0x6]}}, @generic={0x0, 0x6e, "392240f07f468f4c293ffc78dcddadd5df8874a558568ab17fc5194ac9cc7d4321199fcd7fa030b4c76d39808f2015c0af1a692d794ec31ce4167db44797a85606aed13674b545344d6789fee0b16879a345c55d06c5d35fd743bfb84f148a418a534baa89d47307579d38dc4e2e"}]}}}, @rthdrdstopts={{0x170, 0x29, 0x37, {0x0, 0x2a, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x9, [0xe86]}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x3, 0x2, 0xee, 0x5, [0x7]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x40, 0xcab6, [0x40, 0x80]}}, @generic={0x5, 0xec, "3cc337fa422f0d9209aeef6cf99cfb2529e975ada8da77c17ab654ea8af110f6f3314423af7e3af82a4d38d606a787d63926e1f32d6321e4420485e797af3bfaf02862feb73a9b6b41b8b57721c5d7bfd1d0cdc98d08c90d0357e7b64262ad6e24652f643b741050c73c8fae36c8bbfd1fe40a97cf9eb401b7a7be97abea2b74135291776eca21948e40b2e1bc20879ca54f80a7bc417a6b96135e605561eb3e80dd9f2c6927073940e7749f5363fce2dccf57192dbd2eed4043e052862d74bc8b27877a80e510aa487b4a7ed091b6650d7d381fbb3739e6ae0269daaf63e6b67209753d921d134a77b29296"}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x250}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0x1, @mcast1, 0x7fff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000940)="fa52bfd7929c8a5318a8a827e58fdd1606f242ec9ca2e81f76fbf5ff84a66ea87bf0351b45d473bfea5a783e7435550dfe3925", 0x33}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="b33966ef2cb77b390062b3cc20910263a08df88fa5f425773608c014455ef2869b425ea7882a0f7a0899b1167963911435bfac74", 0x34}, {&(0x7f0000000a00)="fcc42c5af6b50cc7c6f76c7dee26759dfe00c1ca99afbaa1db1e8ddc20b899647a52255f2f31e6d3c220c5de256fabb50bfe20c04508f487da719b3c0d8ce48b03f28f063397eba83b0460c46804e1bc54337e8d28521c84608daf97e65990961776f6db6481953fab8161401e6e1b35cbfd4bff91", 0x75}], 0x4, &(0x7f0000000ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffffff80}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x98d}, @pad1]}}}, @hopopts_2292={{0xe8, 0x29, 0x36, {0x3c, 0x19, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x7, 0x4cf4, [0xb8, 0x5, 0x8, 0x9, 0x4, 0x6, 0x100000001, 0x2]}}, @generic={0xff, 0x76, "052e18f33e70faa5e3dab29ab1530c87948acb1d0fede4b19a8b06d8a9db86cc50b87e1e41be2b482f50718ede4c0cc554fcc1a99cdeb759bd189a4fcc4bde032c2a2066c660fe7805351afc599096aea2f7786a34481bb268f93eea2aaad70841d3ddd01b3a625c355659bcc4691fd204c88a036f0e"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x158}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)="f40ee5abec574ae7aac5136f6bb86df635e6971db31cdeed2b520ae2b7a10aad9c126a29b42799170884928a0d4d3082155db220f081d5fe49f41d2325b63101b1d9d4c8ea747abd65be67f996a93bf3fc8844601d5703ef4a5e6325ac723ffce8992875d7f42c5336d876b5d4d0a98990245c9399850ceeb4", 0x79}, {&(0x7f0000000cc0)="a9a6f20bf68db60efc7184015f780088eca0c7621345fe488d426d2ecb435a7af11672a1d11052da805483ab7dd49fdb0b72bf60fa0e76d9701ca20f5ce8568a81fba909c0e3c1eac102ae60cf0305b2cd30e4a559662914ca9996387e9ce7892554961df0a13d0830f8c6ecc5866c097e906ce357d9b4eb78d699e76df2831594be743e87c79c688114b1af6099bc778a31243177f4cfb0449c12ebc3c952ef8f2452d270870bf74de403b1af4c18e90826", 0xb2}], 0x2}}, {{&(0x7f0000000dc0)={0xa, 0x4e24, 0x800, @loopback, 0x2e1}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000e00)="54e28b2a98ed55e55761f13d90ff1df36effdfef3ad10b737f20c59fec439bccc0a4431b8e74c7e6e42806b5bcc87121925fe9730837e397e7213aaa8fbd2b8479546feecca45844f745780f8ec7", 0x4e}], 0x1, &(0x7f0000000ec0)=[@rthdr={{0x28, 0x29, 0x39, {0x89, 0x2, 0x2, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3b, 0x2, '\x00', [@generic={0x7, 0x13, "2ff3dfd8692d2b69348e25e26a29ea93646687"}]}}}], 0x70}}], 0x4, 0x884) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x219100, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000640)="f8a5ffece0692da2b89e08f086dd96bbc59d8f37f30c63c489d23eafdce458f21a4d8d457abf08e68382732f8e4ae645cf8c760a5ccd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xf, 0x8, 0x40, 0xc0, 0x1, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x0, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x80, 0x8, 0x5}, {0x0, 0x2, 0x2}}}]}]}]}}]}, 0x54}}, 0x8810) 725.480512ms ago: executing program 6 (id=964): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102100, 0x3, 0xfefffffa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc, 0x6c2f2, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d3a329, 0x0, @perf_bp={0x0}, 0x2080, 0x0, 0xfffffff9, 0x3, 0x0, 0xfffffffe}, 0x0, 0xfffefffffffffbff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2284455, &(0x7f00000006c0)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@journal_path={'journal_path', 0x3d, './file2/file0'}}, {}]}, 0x3, 0x43a, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x20000000000}, 0x80a0, 0xa88, 0x0, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffbfbfffffffffff, 0xffffffffffffffff, 0x1) getpgrp(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @loopback, 0x4, "d30f388c42647612d91de400", 0x0, 0x8, 0x6, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f00000002c0)) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000002c0)=""/211, &(0x7f0000000400)=0xd3) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xfffffc44, &(0x7f0000000680)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) 683.130554ms ago: executing program 6 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000080)="a4af014b7ec9734fd77ae561cca4fb70858f297c5bca281bff6ee350c6ab7366d3a6df621d9a870e7e", &(0x7f0000000100)=""/15, &(0x7f0000000140)="8caef8cad1d2115dd1cf712451fc", &(0x7f0000000400)="67254860a347ff8e43ed86cf564603aaadb3b90fae5cc7a359f60c78225cfadc2d5b2e441e365f6474bc1ec1c7426605399ed6e5f034dea2c6b8075089518857d51bf5c135645f4792a89e0be24d57cd1bb3b8d57508fa22578408e8a49bab2d244c869aeadcab28cdd8d58ad6cc8f6919d016e207676ddb580d0501e545393b306657dfd73ea028bb1af5", 0xb, 0x1, 0x4}, 0x38) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0xf848, @mcast2, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x4d9}], 0x1, &(0x7f0000000500)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x16, 0xb, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x7, [0x8001, 0x8]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0xd, 0x0, [0x80000000, 0x6, 0x3, 0x8000000000000000, 0x7, 0x1]}}, @ra={0x5, 0x2, 0x100}]}}}], 0x88}, 0x200080c4) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8002b00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 599.927678ms ago: executing program 6 (id=966): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x18120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2020, 0x400001, 0x0, 0x0, 0x80000001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03000000040600"], 0x50) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet6_int(r3, 0x29, 0x93, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="94073ed1a3b2991178d0d2575ebe342297000004db384eaf4a1cf26fb629c1b97fcea696fb376565551ae673be802c210dd5d6ac0000000000000000d8855084e2b5d89eb9cfa0d4a6eaaeb59648c20db592e2a33998f2247b391b30e4a75d1890c07b5b65e7c055145b76c3316c2140f8d927006ca79d216d98cb6ba57e6a1e4d49b58fd979a6ae4ad733b7ffca99fc1a47d4193488ea80327beef2d9303c1ae58dfb19adaa374853d1d1c92c56935c4987a35430d395683029cb7093cd8f024ddbbb33239373f316835300000000000000", @ANYRES64=r0, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="56c26cb6e501ef8617a6c3303a1caf047c84808f5c1007c908c5e095b05ab5cca84b02491934ebbe8f983426499d4528901591cd010000000000ffffff7f00000000"], 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x3) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x4, 0x8000, 0x3d, 0x3}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440)={r8, 0xf4, "6fb1845388bf9273345971e3fbfd1ede8c9b5376e32e16eee43aa2a471e5723eb91bcbb76588c517fa88cd2631d298c9acc199a6dc9e69e32b11bc2c16727bcf003dd607a9cb92050027c3a15d0ddba7470970fc39ac804813377459f55a4233ee66415184e9efee4a6950bf626d54e6eafa4a980000c41e47eee99618824c0a0abd6c1e7c9c20d367ed7cde7995b45f06eeb8b18e34599ebcd238054d53a199bfa988a7e91fff33d84d70227dcadd8efc3747456f46ce71dd517588a02f6609f7d22049fcdb8cdca55dd78f48ae17bb5805e0f496cd4f9e7d698a728b345b512f05ae0cd6b984bda1b391a1ad8e565fd62eea59"}, &(0x7f0000000540)=0xfc) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(0x0, 0x6f5e, 0x1) r9 = socket$inet(0x2, 0x801, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r9, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r9, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) 530.331562ms ago: executing program 3 (id=967): r0 = socket(0x15, 0x800, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x101}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}}}, 0x108) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, {{0xa, 0xffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000040)=0x1) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000400), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) shutdown(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r6, &(0x7f0000004240)=[{{&(0x7f0000000340)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000880)=[{0xffffffffffffffff}, {&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f00000006c0)=""/49, 0x31}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000700)=""/150, 0x96}], 0x6, &(0x7f0000000900)=""/243, 0xf3}, 0x100}, {{&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000004380)=""/4103, 0x1007}, 0x9}, {{&(0x7f0000002a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b00)=""/100, 0x64}, {&(0x7f0000002b80)=""/84, 0x54}, {&(0x7f0000002c00)=""/84, 0x54}, {&(0x7f0000002c80)=""/27, 0x1b}, {&(0x7f0000002cc0)=""/40, 0x28}, {&(0x7f0000002d00)=""/245, 0xf5}], 0x6, &(0x7f0000002e80)=""/228, 0xe4}, 0xefa}, {{&(0x7f0000002f80)=@hci, 0x80, &(0x7f0000004200)=[{&(0x7f0000003000)=""/43, 0x2b}, {&(0x7f0000003040)=""/213, 0xd5}, {&(0x7f0000000a80)=""/149, 0x95}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x4}, 0x3}], 0x4, 0x2000, &(0x7f0000004340)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 529.843132ms ago: executing program 5 (id=968): perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x2092, 0xa3, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0xa, 0x47a) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) 529.418282ms ago: executing program 5 (id=969): r0 = semget(0x3, 0x0, 0x2) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000000)=""/169) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f00000000c0)=""/238) r1 = msgget$private(0x0, 0x200) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000001c0)=""/98) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) r4 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000500)={{0x1, r3, r4, r5, r6, 0x4, 0x6}, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000580)=""/101) msgctl$IPC_RMID(r1, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000600)=""/176) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000780)={0x0, 'team0\x00', {0x1}, 0x5}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$EVIOCGLED(r8, 0x80404519, &(0x7f0000000800)=""/16) r9 = shmget(0x2, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r9, 0xb) r10 = getpgrp(0xffffffffffffffff) r11 = getpgid(0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000a40)=0x0) r13 = gettid() ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000a80)=0x0) syz_clone3(&(0x7f0000000b00)={0xa888200, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x37}, &(0x7f0000000900)=""/163, 0xa3, &(0x7f00000009c0)=""/121, &(0x7f0000000ac0)=[0x0, r10, r11, r12, r13, r14], 0x6, {r8}}, 0x58) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000b80)={{0x2, 0x4e21, @loopback}, {0x306, @remote}, 0x8, {0x2, 0x4e23, @private=0xa010101}, 'veth0_macvtap\x00'}) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000c00)=""/205) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0xd, 0x29, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x0, 0x4, 0x7, 0xfffffffffffffff4, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000ec0)=""/4096, 0x41000, 0x71, '\x00', r2, @fallback=0xd, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ec0)={0x4, 0x3, 0x8, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000001f00)=[{0x5, 0x4, 0x0, 0x14}, {0x3, 0x1, 0x3, 0x4}, {0x1, 0x2, 0x7}, {0x0, 0x2, 0x7}], 0x10, 0x80000000}, 0x94) 499.801243ms ago: executing program 5 (id=970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa4fffe0000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) 453.623656ms ago: executing program 4 (id=971): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfafe}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x20000, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xfd, 0x44d, &(0x7f0000000d80)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x95, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000008240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) gettid() get_mempolicy(0x0, 0x0, 0xffffffff, &(0x7f0000185000/0x4000)=nil, 0x3) 453.197236ms ago: executing program 6 (id=972): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xb, {"a2e3ad21ed9b52f91b5d330987f70e06d038e7ff7fc6e5539b3247298b089b3208356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a49179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b9ed8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a6e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3937f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042890324659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe5ad58bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdee6fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a0148f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d60e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1c8cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x409, 0x800000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10, 0xa}}, 0x1c}}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0xb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0) (async) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) (async) io_setup(0x3, &(0x7f0000008240)) (async) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @local}, {0x1, @broadcast}, 0x60, {0x2, 0x4e23, @remote}, 'syz_tun\x00'}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x783801) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000100)='bond_slave_1\x00'}) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r9 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r9, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r8, 0x0) (async) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffc, 0xfd, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="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", 0x0, 0x80, 0x12, 0x6, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94) 452.964336ms ago: executing program 5 (id=973): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) timer_create(0x3, 0x0, &(0x7f0000000540)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000001400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unshare(0x64000600) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0xffffffffffffff26) 426.498317ms ago: executing program 3 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1, 0x10000}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') (async) r2 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x20, 0x1412, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c0}, 0x8810) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r3 = socket$kcm(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001f80)={'team0\x00', 0x0}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0xfffe, 0x2, 0x8000, 0x2, 0x0, 0x0, 0x6, r4}, {0xa, 0x1, 0x0, 0xfffffffffffd, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4, 0x33}, 0xa, @in6=@local, 0x3507, 0x1, 0x0, 0x0, 0xff, 0x400, 0xfffffffe}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001e00)={'veth1_macvtap\x00', {0x2, 0x4e22, @local}}) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x185481, 0xa0) renameat2(r6, &(0x7f0000001840)='./file0\x00', r1, &(0x7f0000001880)='./file0\x00', 0x1) (async) sendmsg$inet6(r2, &(0x7f00000032c0)={&(0x7f0000000080)={0xa, 0x4e25, 0x2, @local, 0x1ff}, 0x1c, &(0x7f0000003080)=[{&(0x7f0000000440)="2f190bbad343e436831e3ef8913c670941346a9ed21088f4d5c3b1dd99d030a5077161775850d3e560be1fc090607a6fa0d12c6c5b315a92d902ed420e5bdc7766e51d71383ab3781fe9fbdaf6a1bce446224e0d6f8ab10eed804a66de08db91061b41de31d24edddc5c6bc9d2652613f42885b3cf0f17d74497627d6856a39ad25b9e342a345d9ba816f32f26daddb5eaf9527a4aa4c414a87992c6ec5b135de712e5470173c1488169dba2a901e7244ca63a", 0xb3}, {&(0x7f0000000500)="7899222250d7f980e4b4f5d07bfeaf35911fbe7bacd985dc9cf3ba9a3f0b6c78a0a25df6a633f5755dfcb89d5db4c166458ffb8b37b43b58289a91b4293b14d416690e96bfcfee876f5b499ecd50307d29", 0x51}, {&(0x7f0000000580)="85130d39ac356b7b7335396f32b1a993ee9a7e9ae10f1bff0a7c4d97b68503e6a56a3ec6b8d2ed52f6e0aa24869f88e7d3ef824f9bd72110986e943c4183ee89cd20e232b27e3bd88c6b666d1fe82c", 0x4f}, {&(0x7f0000000600)="8c21ad47768738d95f3ffff03e386b0b8c83c6f8be65e0ec260c89f7cea45585e205d6c5f9a94af8eed591d40c6a7a4e5f57d9c50dccb5047f7c2a0d4d8f00d475bf9ec46a789aa5632a433966052131e5c9dfa1a20a0bb0813c16db68ab11497237796f6e493231ba9e9a648c4c83769e0330d66d2c5c68363a5940ad1ae915aebead2c1f07cb1542973580f6211d0317d32c011e57c7f7780fb82cd590222e6bd32281c5dec22f8a0882184e386bed68c4923182e96490eaa91385b40f3f82a2a1c76e9982dcff591e3c", 0xcb}, {&(0x7f0000001900)="da94802b7a464649a67e321de6d4b71e5b42211279be65842989a7513c100a8ae93b0948dcb445e3317b3440acf233751e5907c2e5e19747925faf4ba4a3076b6a0908f32aee7ce1260aeae734d5b3f01504dbbc28cd6a20dd383cf9f1eab5ee65e5e65c7576962616a62949686bd6faad89aa3ccf40aa2b3ded3e32f549f7496af77531a4e4e6b886092f153830b9b06cff3ac15ae5bde3e83d82d019f238d474e4af994b6d98f4fc0140d276dffceecaebcc419d03320b60879d94d60157a04910ef8b739826718115b906acdefa89e80a5f2b301413", 0xd7}, {&(0x7f0000001a00)="6b39583995b032cb2f52f86f28ff49cc8002a1a53b9f0f646e4d798801fee813c57bc9d10060e9c55f3f958208d98e4978f9c19a8f350acf0ade2732e4a3fd67e478ade15fefd2979b4aac0b728fc03d5dbeba4ba6ca5ad8c279a32653123361f85e750541b9892c93b3f8515c0b7ccccfe2fd4d37f505e8a4e90346ee865d74a2a06d37bb595a54cb948f161f6000875dc3997ad189dee735823497872f95aae36acd56f5a41a90bb5cba0b183697a45b5e1b22bb7015f61823791b6c1f92e5492f05766825bcf882", 0xc9}, {&(0x7f0000001b00)="4a9ed00f490bc7e8978d5a57ea855e4417e3ecebd7d2a6824a", 0x19}, {&(0x7f0000001b40)="43a606abcfe810e003c7a223905875bfd08d50de10c017e540fd4012e41bbbcdd33eccd21e1fb42005", 0x29}, {&(0x7f0000001b80)="e4a7faa503a9c267b85a30046b1b672df1be15ae689f24e6b45e661e4e1ebc76ecea7598840c6cb489d4eed0e1ad7ab8bcad3822a337df468aab9b76779da48271811d3d6bbdcb72ea34be4a45e0d6098312b8c29d54aa260fb7a21d0a0be42915813b2bcd5a2192d4390bd5eb0c7b8c25118a86141f2f498f9505909188742556169c7c674552f59b49e9a8d999d3a404bac4e72f1137797ab8aac9eb8f5d00cc14fd2153a13d5252ab9647ef0001228d267a1dea4311f5fc92297ccd7e04b9", 0xc0}, {&(0x7f0000002080)="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", 0x1000}], 0xa, &(0x7f0000003140)=ANY=[@ANYBLOB="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"], 0x148}, 0x4) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001dc0)={'wg2\x00'}) preadv(r1, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/104, 0x68}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x3, 0x5, 0x3ff) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r0}, 0x38) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r0}, 0xc) 325.107633ms ago: executing program 3 (id=975): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./cgroup\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x514, &(0x7f0000001340)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x4, 0xf01, 0x3, 0x5b5, 0x6, 0x9, 0x200, 0x4000007, 0xfffffffd}) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0xdc560000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000972000/0x2000)=nil, 0x2000, 0x200000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x1, 0x246, 0x2915, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xffffffff, 0x7fff, 0x9b}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0xf404, &(0x7f00000002c0)=ANY=[], 0x1, 0x2cd, &(0x7f0000000a80)="$eJzs3M9qG1cUx/FfJdWSZWypUAottL20m3YjbHXRZSuKDaWCgmuZtovCuB4lQhPJzAgHhRBrE7LNc5gsswskeQFvQjbZZ2cCgWy8CJngGcke2bIlJ/pn/P2AuUdz7uFeS2NzZkCz//f9G9WylytbDcVSRjGppQMpexi1fdIeY0E8o6iWfpx78+Lrv/75949Csbi8asxKYe2nvDFm4dvHN28/+O5pY2794cKjpPay/+2/zr/cm9n7cv/d2vWKZyqeqdUbxjIb9XrD2nBss1nxqkaSY1uebSo1z3a78mWnvrXVNFZtcz695dqeZ6xa01TtpmnUTcNtGuuaVamZXC5n5tO6wmJSYoBppd3VVatwZtqPD3VTGLnZXgddt9DqnSztjmFPAABgypzf/4e9/tn9f3E9HC/S/3/Rp//PGSPR/49Iq+tVn/4fl9XP0bPfdQtWuv33243+HwAAAAAAAAAAAAAAAAAAAACAy+DA9zO+72cOx/ah4HVSUkqS385PeJsYkejn70d++nz+v0xouxiyyBf3UpJzb7u0XQrHMF8oqyJHthaV0dvgfGgL45Xfi8uLJpDVE2enXb+zXYor2anvyPaq/+azpbDedNd/qnR0/bwy+rz3+vme9TP64ftIfU4ZPftfdTnaDM7r4/o7S8b89mfxRP1sMO8MgzxcAwAAAACAqZEzR05dvwf5YEJKp/NhfeT+gO/7O+fdHzhxfZ3QV1xFAwAAAAAwFl7zVtVyHNv9gCAp6SPKhx/4vjT5bcQ1He9Gd/CrpCnYxriClKTwiOk1J9Gn/NVR+UCL+gPMSUg6DOJT8f70Dyb9nwkAAADAsB03/Rcoen53hDsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODqGfR5YJ35p1KdxDnlkeXiY/8FAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCnyPgAA//+Xvxtx") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', './cgroup', [{}, {0x20, '/dev/loop'}, {0x20, 'memory.events\x00'}, {}], 0xa, "027508000000000000000cfa"}, 0x33) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x61, 0x1, 0x0, 0xfb, 0x82, 0x0, 0x46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000880)}, 0x9302, 0x0, 0x3, 0x4, 0x80000000b4c, 0x2, 0x7, 0x0, 0x0, 0x0, 0x10000000000008}, r2, 0x1, r6, 0x3) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 269.634715ms ago: executing program 6 (id=976): r0 = syz_io_uring_setup(0x26b6, &(0x7f0000000200)={0x0, 0xf906, 0x100, 0x0, 0x308}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) mkdir(0x0, 0x18b) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000540)={[{@nouid32}]}, 0x1, 0x504, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x18, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)) futex(&(0x7f0000004000)=0x7, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x4, 0xb3020000) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x400) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x8001, &(0x7f0000000400)=0x0) io_submit(r1, 0x3, &(0x7f00000015c0)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x8e0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0]) symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 269.286006ms ago: executing program 5 (id=977): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x77, &(0x7f0000000300)=@generic={0x4, 0x2, 0x6f, "bb6a4984", "df1391aa899c841dc76c140e54c03e6464512d829fec36ca60fc08e4bb475967d1ade381ad2ec715394e5f1c6fdf948a213f6f137ffa1043d2e210fc5bfd5a71befbef0300a6d11e72b1080e9a83bae60f1139158bd745dfa227caf34f8eefa65bfc3e7d13fbdf709885151f6fb70e"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x2, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x6, 0x0, &(0x7f0000000180)=[0x7, 0x2, 0x80000000, 0xffffffffffffffff, 0x7, 0x80000001], 0x5}}, 0x30) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_elf64(r2, &(0x7f0000001280)=ANY=[], 0x4a2) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd1f, '\x00', r4, r3, 0x3, 0x5, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5457}}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@grpjquota, 0x2e}, {@nodiscard}, {@resuid}, {@grpquota}, {@grpid}], [{@subj_role={'subj_role', 0x3d, 'resuid'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tls'}}], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") 135.285742ms ago: executing program 1 (id=978): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000940)={[{@noblock_validity}, {@auto_da_alloc}, {@noacl}, {@noinit_itable}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x2}}, {@noquota}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0xfd, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000b40), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB='b *:333', @ANYRESHEX], 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/180, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x22) 127.809613ms ago: executing program 3 (id=979): perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xe}, 0x2092, 0xa3, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0xa, 0x47a) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x8000002) 44.344398ms ago: executing program 3 (id=980): r0 = socket$netlink(0x10, 0x3, 0xb) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5cf8, 0x0, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000d26300000000000000e9ff000000005dbbc81d2000000200"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000080000001811000054481b5796c699444becde54914cbaff442ebacd87d1464e86fee3e403bacd248857d5a24dc3b06cba12920bfea1b9c157eadbbcb48467e54952eb39881405d465f9fc96f77b44313bd937925e459a1e2316b9ca4174cd5f5096b1ef31197e7456f15fd138fc6b905466fb81e78ef8ca282d3d8b432cdf75451c76edf92afb93119da2e601c7b95a881a7c128d9e9388da96c05a0ae6da3c02cb28d43b15c9bd9810098e4e184670cab7a52f74cb90c1e0ebd8e1ea47855356b847ef00639f8eca", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000c08000000b70400000100000085000000030000009500000000000000959863f512381ea30f3b962b1fd2b407ea54a970784dee8b017bad39632ee7ebefae40647db2f1a263e6bc40d789f8d7214c83c2265a1ea55b0ce6fbcc101780189dc082548f6017d09a53fb6de857533c9b00f1e2a971c1870962683ecf965fd8b7f5ae91e7cdb1d896a6470fe604c4ed3261d4e094b33980993391a11a455243ccb5"], &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0x5, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56af, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x1, 0xa0002f5}) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x0) 43.561667ms ago: executing program 1 (id=981): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000600000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 12.093999ms ago: executing program 3 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 0s ago: executing program 6 (id=983): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x280050, &(0x7f0000000140)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x63, 0x61, 0x61, 0x65, 0x35, 0x34, 0x62], 0x2d, [0x35, 0x30, 0x36, 0x35], 0x2d, [0x32, 0x64, 0x32, 0x49ea4829f9871cf1], 0x2d, [0x62, 0x34, 0x52, 0x66], 0x2d, [0x33, 0x36, 0x33, 0x64, 0x37, 0x37, 0x61, 0x38]}}}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) writev(r5, &(0x7f0000002680)=[{&(0x7f0000000580)="e2ce112ea28e9847da3be2d1fee6e927eb0472825974a447e8e2b3e5750fd357a61a2d81b7f0bec5bb9a0a7c2e28c402c788ad8267e75f81c2646aeb6222b853838f6e6b", 0x44}], 0x1) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0xfffffbff, 0x3, 0x3}}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x1000}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r6, r6, 0x0, 0x2000009) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x2, 0x40000}, 0xfe0d) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', r1) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): 6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 83.902901][ T5386] Call Trace: [ 83.902907][ T5386] [ 83.902914][ T5386] __dump_stack+0x1d/0x30 [ 83.902938][ T5386] dump_stack_lvl+0x95/0xd0 [ 83.902961][ T5386] dump_stack+0x15/0x1b [ 83.903029][ T5386] should_fail_ex+0x263/0x280 [ 83.903110][ T5386] should_failslab+0x8c/0xb0 [ 83.903131][ T5386] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 83.903215][ T5386] ? __alloc_skb+0x2d6/0x690 [ 83.903233][ T5386] __alloc_skb+0x2d6/0x690 [ 83.903248][ T5386] ? __alloc_skb+0x200/0x690 [ 83.903264][ T5386] xfrm_send_policy_notify+0x197/0x1060 [ 83.903294][ T5386] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 83.903340][ T5386] km_policy_notify+0x62/0xb0 [ 83.903400][ T5386] xfrm_get_policy+0x540/0x690 [ 83.903458][ T5386] ? __nla_parse+0x40/0x60 [ 83.903474][ T5386] xfrm_user_rcv_msg+0x576/0x670 [ 83.903498][ T5386] ? __kfree_skb+0x109/0x150 [ 83.903549][ T5386] ? nlmon_xmit+0x4f/0x60 [ 83.903574][ T5386] ? consume_skb+0x4b/0x130 [ 83.903653][ T5386] netlink_rcv_skb+0x123/0x220 [ 83.903679][ T5386] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 83.903719][ T5386] xfrm_netlink_rcv+0x48/0x60 [ 83.903741][ T5386] netlink_unicast+0x5a8/0x680 [ 83.903768][ T5386] netlink_sendmsg+0x5c8/0x6f0 [ 83.903797][ T5386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.903822][ T5386] ____sys_sendmsg+0x563/0x5b0 [ 83.903899][ T5386] ___sys_sendmsg+0x195/0x1e0 [ 83.903929][ T5386] __x64_sys_sendmsg+0xd4/0x160 [ 83.903955][ T5386] x64_sys_call+0x194c/0x3020 [ 83.903985][ T5386] do_syscall_64+0x12c/0x3b0 [ 83.904018][ T5386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.904037][ T5386] RIP: 0033:0x7fc79871c819 [ 83.904053][ T5386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.904069][ T5386] RSP: 002b:00007fc79716f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.904091][ T5386] RAX: ffffffffffffffda RBX: 00007fc798995fa0 RCX: 00007fc79871c819 [ 83.904106][ T5386] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 83.904119][ T5386] RBP: 00007fc79716f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.904132][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.904145][ T5386] R13: 00007fc798996038 R14: 00007fc798995fa0 R15: 00007fff4b8a6b28 [ 83.904164][ T5386] [ 83.914555][ T1258] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.160861][ T1258] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 84.178420][ T1258] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 84.189815][ T1258] loop3: lost filesystem error report for type 5 error -117 [ 84.274579][ T5399] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 84.332761][ T5399] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 84.343282][ T5399] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.531: Corrupt directory, running e2fsck is recommended [ 84.378696][ T5399] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 84.398035][ T5399] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.531: corrupted in-inode xattr: e_name out of bounds [ 84.495953][ T5399] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.497903][ T5399] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.531: couldn't read orphan inode 15 (err -117) [ 84.507184][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 84.507221][ C0] EXT4-fs (loop3): initial error at time 1776678335: ext4_iget_extra_inode:5128: inode 15 [ 84.507256][ C0] EXT4-fs (loop3): last error at time 1776678335: ext4_iget_extra_inode:5128: inode 15 [ 84.922348][ T5399] loop3: lost filesystem error report for type 5 error -117 [ 84.923607][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.953576][ T5417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.543'. [ 84.965063][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 84.994963][ T5417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.543'. [ 85.004218][ T5419] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.024161][ T5419] IPv6: Can't replace route, no match found [ 85.120430][ T28] audit: type=1400 audit(1776678336.356:629): avc: denied { mounton } for pid=5424 comm="syz.0.546" path="/127/file0" dev="cgroup" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 85.165159][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.547'. [ 85.180988][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.258206][ T28] audit: type=1400 audit(1776678336.436:630): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.294687][ T5433] program syz.2.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.574810][ T5451] program syz.3.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.669036][ T28] audit: type=1400 audit(1776678336.906:631): avc: denied { watch watch_reads } for pid=5454 comm="syz.2.561" path="/100/file0" dev="tmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.869296][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 85.956730][ T5461] sctp: [Deprecated]: syz.1.563 (pid 5461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.956730][ T5461] Use struct sctp_sack_info instead [ 86.748562][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.755751][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.840647][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.855129][ T5490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.902033][ T1258] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.925527][ T1258] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.946704][ T1258] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.961443][ T1258] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.025356][ T4061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.078219][ T5497] set_capacity_and_notify: 3 callbacks suppressed [ 87.078234][ T5497] loop4: detected capacity change from 0 to 8192 [ 87.460430][ T4061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.845344][ T3460] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.867117][ T5511] netlink: 277 bytes leftover after parsing attributes in process `syz.3.581'. [ 88.063003][ T5511] FAULT_INJECTION: forcing a failure. [ 88.063003][ T5511] name failslab, interval 1, probability 0, space 0, times 0 [ 88.101375][ T5511] CPU: 0 UID: 0 PID: 5511 Comm: syz.3.581 Not tainted syzkaller #0 PREEMPT(full) [ 88.101472][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 88.101483][ T5511] Call Trace: [ 88.101538][ T5511] [ 88.101547][ T5511] __dump_stack+0x1d/0x30 [ 88.101577][ T5511] dump_stack_lvl+0x95/0xd0 [ 88.101647][ T5511] dump_stack+0x15/0x1b [ 88.101729][ T5511] should_fail_ex+0x263/0x280 [ 88.101763][ T5511] should_failslab+0x8c/0xb0 [ 88.101785][ T5511] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 88.101806][ T5511] ? __alloc_skb+0x2d6/0x690 [ 88.101897][ T5511] __alloc_skb+0x2d6/0x690 [ 88.101913][ T5511] ? __alloc_skb+0x200/0x690 [ 88.101928][ T5511] xfrm_send_policy_notify+0x197/0x1060 [ 88.101954][ T5511] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 88.101982][ T5511] km_policy_notify+0x62/0xb0 [ 88.102036][ T5511] xfrm_get_policy+0x540/0x690 [ 88.102069][ T5511] ? __nla_parse+0x40/0x60 [ 88.102089][ T5511] xfrm_user_rcv_msg+0x576/0x670 [ 88.102171][ T5511] ? __kfree_skb+0x109/0x150 [ 88.102210][ T5511] ? nlmon_xmit+0x4f/0x60 [ 88.102236][ T5511] ? consume_skb+0x4b/0x130 [ 88.102263][ T5511] netlink_rcv_skb+0x123/0x220 [ 88.102356][ T5511] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 88.102471][ T5511] xfrm_netlink_rcv+0x48/0x60 [ 88.102561][ T5511] netlink_unicast+0x5a8/0x680 [ 88.102583][ T5511] netlink_sendmsg+0x5c8/0x6f0 [ 88.102609][ T5511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.102637][ T5511] ____sys_sendmsg+0x563/0x5b0 [ 88.102739][ T5511] ___sys_sendmsg+0x195/0x1e0 [ 88.102773][ T5511] __x64_sys_sendmsg+0xd4/0x160 [ 88.102797][ T5511] x64_sys_call+0x194c/0x3020 [ 88.102821][ T5511] do_syscall_64+0x12c/0x3b0 [ 88.102866][ T5511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.102889][ T5511] RIP: 0033:0x7f6d7a25c819 [ 88.102906][ T5511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.102962][ T5511] RSP: 002b:00007f6d78caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.102980][ T5511] RAX: ffffffffffffffda RBX: 00007f6d7a4d5fa0 RCX: 00007f6d7a25c819 [ 88.103016][ T5511] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 88.103031][ T5511] RBP: 00007f6d78caf090 R08: 0000000000000000 R09: 0000000000000000 [ 88.103045][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.103108][ T5511] R13: 00007f6d7a4d6038 R14: 00007f6d7a4d5fa0 R15: 00007ffe996ea758 [ 88.103128][ T5511] [ 88.841919][ T1258] bridge_slave_1: left allmulticast mode [ 88.852712][ T1258] bridge_slave_1: left promiscuous mode [ 88.860208][ T1258] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.875440][ T1258] bridge_slave_0: left allmulticast mode [ 88.886365][ T1258] bridge_slave_0: left promiscuous mode [ 88.899528][ T1258] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.923717][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 89.011633][ T1258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.197391][ T5527] loop2: detected capacity change from 0 to 512 [ 89.238623][ T1258] bond_slave_0: left allmulticast mode [ 89.250096][ T1258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.270593][ T28] audit: type=1400 audit(1776678340.506:632): avc: denied { create } for pid=5522 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 89.314382][ T1258] bond_slave_1: left allmulticast mode [ 89.326393][ T5527] EXT4-fs (loop2): inodes count not valid: 4 vs 32 [ 89.329429][ T1258] bond0 (unregistering): Released all slaves [ 89.339132][ T28] audit: type=1400 audit(1776678340.506:633): avc: denied { write } for pid=5522 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 89.373378][ T28] audit: type=1400 audit(1776678340.506:634): avc: denied { nlmsg_write } for pid=5522 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 89.379781][ T1258] bond1 (unregistering): Released all slaves [ 89.402190][ T28] audit: type=1400 audit(1776678340.566:635): avc: denied { create } for pid=5522 comm="syz.3.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.445623][ T1258] bond2 (unregistering): Released all slaves [ 89.457654][ T1258] bond3 (unregistering): Released all slaves [ 89.549720][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 89.627195][ T5548] loop2: detected capacity change from 0 to 1024 [ 89.658523][ T5548] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 89.739136][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.025655][ T1258] IPVS: stopping backup sync thread 3622 ... [ 90.114591][ T5552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.590'. [ 90.222946][ T4044] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 90.281915][ T1258] hsr_slave_0: left promiscuous mode [ 90.314963][ T1258] hsr_slave_1: left promiscuous mode [ 90.324148][ T5571] loop2: detected capacity change from 0 to 512 [ 90.338846][ T1258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.370059][ T1258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.380287][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.393866][ T5571] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.405252][ T1258] pim6reg2 (unregistering): left allmulticast mode [ 90.413764][ T5571] futex_wake_op: syz.2.593 tries to shift op by 32; fix this program [ 90.457796][ T1258] team0 (unregistering): Port device team_slave_1 removed [ 90.465440][ T5571] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.593: iget: bad i_size value: 2533274857506816 [ 90.481539][ T1258] team0 (unregistering): Port device team_slave_0 removed [ 90.576473][ T5576] dvmrp2: entered allmulticast mode [ 90.621078][ T3046] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.915651][ T5512] chnl_net:caif_netlink_parms(): no params data found [ 90.926597][ T3046] 8021q: adding VLAN 0 to HW filter on device eth2 [ 90.988784][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.003068][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.018723][ T5512] bridge_slave_0: entered allmulticast mode [ 91.031781][ T5512] bridge_slave_0: entered promiscuous mode [ 91.045653][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.052769][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.052953][ T5512] bridge_slave_1: entered allmulticast mode [ 91.053462][ T5512] bridge_slave_1: entered promiscuous mode [ 91.068733][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.099874][ T4068] kernel read not supported for file /357/net/sockstat (pid: 4068 comm: kworker/0:19) [ 91.106632][ T5623] loop2: detected capacity change from 0 to 512 [ 91.109306][ T5512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.111753][ T5512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.157107][ T5623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.182392][ T5630] loop3: detected capacity change from 0 to 512 [ 91.189965][ T5512] team0: Port device team_slave_0 added [ 91.237079][ T5630] EXT4-fs (loop3): inodes count not valid: 63 vs 32 [ 91.247727][ T5623] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.248123][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 91.261249][ T5635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5635 comm=syz.4.599 [ 91.286696][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 91.299641][ T5512] team0: Port device team_slave_1 added [ 91.302205][ T5623] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.596: iget: bad i_size value: 2533274857506816 [ 91.328300][ T5623] EXT4-fs (loop2): Remounting filesystem read-only [ 91.365402][ T28] audit: type=1400 audit(1776678342.606:636): avc: denied { bind } for pid=5622 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.384654][ T28] audit: type=1400 audit(1776678342.616:637): avc: denied { name_bind } for pid=5622 comm="syz.2.596" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 91.405819][ T5634] wireguard0: entered promiscuous mode [ 91.406719][ T28] audit: type=1400 audit(1776678342.616:638): avc: denied { node_bind } for pid=5622 comm="syz.2.596" saddr=172.20.20.170 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 91.415285][ T5634] wireguard0: entered allmulticast mode [ 91.491654][ T3046] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.512371][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.526931][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.530675][ T5647] xt_hl: Unknown TTL match mode: 255 [ 91.572021][ T5512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.609843][ T5649] vlan3: entered allmulticast mode [ 91.614788][ T5651] loop3: detected capacity change from 0 to 512 [ 91.618165][ T5649] bond0: entered allmulticast mode [ 91.629250][ T5649] bond_slave_0: entered allmulticast mode [ 91.639393][ T5649] bond_slave_1: entered allmulticast mode [ 91.654159][ T5651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.654829][ T28] audit: type=1400 audit(1776678342.886:639): avc: denied { rmdir } for pid=3321 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.670163][ T5651] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.694159][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.706702][ T5651] futex_wake_op: syz.3.606 tries to shift op by 32; fix this program [ 91.715483][ T5651] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.606: iget: bad i_size value: 2533274857506816 [ 91.724991][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.754931][ T5512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.786789][ T5656] FAULT_INJECTION: forcing a failure. [ 91.786789][ T5656] name failslab, interval 1, probability 0, space 0, times 0 [ 91.802327][ T5656] CPU: 1 UID: 0 PID: 5656 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 91.802354][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.802366][ T5656] Call Trace: [ 91.802371][ T5656] [ 91.802379][ T5656] __dump_stack+0x1d/0x30 [ 91.802419][ T5656] dump_stack_lvl+0x95/0xd0 [ 91.802444][ T5656] dump_stack+0x15/0x1b [ 91.802535][ T5656] should_fail_ex+0x263/0x280 [ 91.802563][ T5656] should_failslab+0x8c/0xb0 [ 91.802583][ T5656] kmem_cache_alloc_noprof+0x66/0x3f0 [ 91.802616][ T5656] ? alloc_empty_file+0x70/0x1e0 [ 91.802675][ T5656] alloc_empty_file+0x70/0x1e0 [ 91.802699][ T5656] alloc_file_pseudo+0xf6/0x190 [ 91.802797][ T5656] __shmem_file_setup+0x226/0x260 [ 91.802821][ T5656] shmem_file_setup+0x3b/0x50 [ 91.802856][ T5656] memfd_alloc_file+0x4e/0x300 [ 91.802904][ T5656] __se_sys_memfd_create+0x2e1/0x3b0 [ 91.802975][ T5656] __x64_sys_memfd_create+0x31/0x40 [ 91.803002][ T5656] x64_sys_call+0x1f22/0x3020 [ 91.803026][ T5656] do_syscall_64+0x12c/0x3b0 [ 91.803044][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.803128][ T5656] RIP: 0033:0x7fc79871c819 [ 91.803143][ T5656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.803165][ T5656] RSP: 002b:00007fc79716ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 91.803185][ T5656] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007fc79871c819 [ 91.803241][ T5656] RDX: 00007fc79716eee0 RSI: 0000000000000000 RDI: 00007fc7987b2e71 [ 91.803254][ T5656] RBP: 0000200000001e00 R08: 00000000ffffffff R09: 0000000000000000 [ 91.803266][ T5656] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000280 [ 91.803278][ T5656] R13: 00007fc79716eee0 R14: 00007fc79716eea0 R15: 0000200000001d40 [ 91.803297][ T5656] [ 92.024710][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.037555][ T5512] hsr_slave_0: entered promiscuous mode [ 92.046487][ T5512] hsr_slave_1: entered promiscuous mode [ 92.063497][ T5512] debugfs: 'hsr0' already exists in 'hsr' [ 92.074969][ T5512] Cannot create hsr debugfs directory [ 92.199895][ T5681] syzkaller0: entered promiscuous mode [ 92.206772][ T5681] syzkaller0: entered allmulticast mode [ 92.223225][ T5646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.264402][ T5685] loop3: detected capacity change from 0 to 1024 [ 92.364330][ T3046] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.388433][ T5685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 92.514454][ T5685] System zones: 0-1, 3-36 [ 92.556967][ T5685] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.613: bad orphan inode 134217728 [ 92.575357][ T5685] loop3: lost filesystem error report for type 5 error -117 [ 92.579261][ T5685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.692019][ T5512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.763735][ T5512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.851878][ T5512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.941748][ T5512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.972352][ T3460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.989709][ T5706] loop4: detected capacity change from 0 to 512 [ 92.999252][ T5512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.031850][ T5706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.047019][ T5512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.062973][ T5512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.076371][ T5706] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.110591][ T5512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.124668][ T3460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.148028][ T28] audit: type=1400 audit(1776678344.386:640): avc: denied { create } for pid=5705 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.206850][ T28] audit: type=1400 audit(1776678344.416:641): avc: denied { append } for pid=5705 comm="syz.4.618" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.245618][ T3460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.256813][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.335582][ T3460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.349257][ T5719] loop3: detected capacity change from 0 to 512 [ 93.384295][ T5719] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.619: bg 0: block 393: padding at end of block bitmap is not set [ 93.444788][ T5719] loop3: lost filesystem error report for type 5 error -117 [ 93.445111][ T5719] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.461223][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 93.461237][ C1] EXT4-fs (loop3): initial error at time 1776678344: ext4_validate_block_bitmap:441 [ 93.461265][ C1] EXT4-fs (loop3): last error at time 1776678344: ext4_validate_block_bitmap:441 [ 93.494859][ T5512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.562263][ T5512] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.588675][ T3460] bridge_slave_1: left allmulticast mode [ 93.599986][ T3460] bridge_slave_1: left promiscuous mode [ 93.611475][ T5719] loop3: lost filesystem error report for type 5 error -117 [ 93.611814][ T5719] EXT4-fs (loop3): 2 truncates cleaned up [ 93.630478][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.648694][ T3460] bridge_slave_0: left allmulticast mode [ 93.656051][ T3460] bridge_slave_0: left promiscuous mode [ 93.663747][ T5719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.682708][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.702111][ T5719] netlink: 'syz.3.619': attribute type 5 has an invalid length. [ 93.713566][ T3460] bond3: left allmulticast mode [ 93.721889][ T3460] bond3: left promiscuous mode [ 93.740466][ T3460] bridge1: port 1(bond3) entered disabled state [ 93.763340][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.864980][ T5739] FAULT_INJECTION: forcing a failure. [ 93.864980][ T5739] name failslab, interval 1, probability 0, space 0, times 0 [ 93.880653][ T5738] loop4: detected capacity change from 0 to 512 [ 93.888383][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 93.888407][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.888419][ T5739] Call Trace: [ 93.888427][ T5739] [ 93.888435][ T5739] __dump_stack+0x1d/0x30 [ 93.888496][ T5739] dump_stack_lvl+0x95/0xd0 [ 93.888517][ T5739] dump_stack+0x15/0x1b [ 93.888537][ T5739] should_fail_ex+0x263/0x280 [ 93.888604][ T5739] should_failslab+0x8c/0xb0 [ 93.888623][ T5739] kmem_cache_alloc_noprof+0x66/0x3f0 [ 93.888643][ T5739] ? security_file_alloc+0x32/0xf0 [ 93.888680][ T5739] security_file_alloc+0x32/0xf0 [ 93.888701][ T5739] init_file+0x5b/0x1b0 [ 93.888727][ T5739] alloc_empty_file+0x85/0x1e0 [ 93.888752][ T5739] alloc_file_pseudo+0xf6/0x190 [ 93.888916][ T5739] __shmem_file_setup+0x226/0x260 [ 93.889060][ T5739] shmem_file_setup+0x3b/0x50 [ 93.889158][ T5739] memfd_alloc_file+0x4e/0x300 [ 93.889190][ T5739] __se_sys_memfd_create+0x2e1/0x3b0 [ 93.889263][ T5739] __x64_sys_memfd_create+0x31/0x40 [ 93.889309][ T5739] x64_sys_call+0x1f22/0x3020 [ 93.889337][ T5739] do_syscall_64+0x12c/0x3b0 [ 93.889359][ T5739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.889435][ T5739] RIP: 0033:0x7fc79871c819 [ 93.889453][ T5739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.889472][ T5739] RSP: 002b:00007fc79716ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 93.889522][ T5739] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007fc79871c819 [ 93.889537][ T5739] RDX: 00007fc79716eee0 RSI: 0000000000000000 RDI: 00007fc7987b2e71 [ 93.889552][ T5739] RBP: 0000200000001e00 R08: 00000000ffffffff R09: 0000000000000000 [ 93.889567][ T5739] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000280 [ 93.889615][ T5739] R13: 00007fc79716eee0 R14: 00007fc79716eea0 R15: 0000200000001d40 [ 93.889634][ T5739] [ 93.890381][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.954114][ T5738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.002651][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 94.009408][ T5738] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.126741][ T5738] futex_wake_op: syz.4.620 tries to shift op by 32; fix this program [ 94.135189][ T5738] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.620: iget: bad i_size value: 2533274857506816 [ 94.198792][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.208584][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.218157][ T3460] bond0 (unregistering): Released all slaves [ 94.226185][ T3460] bond1 (unregistering): Released all slaves [ 94.235512][ T3460] bond2 (unregistering): Released all slaves [ 94.244608][ T3460] bond3 (unregistering): Released all slaves [ 94.253975][ T3460] bond4 (unregistering): Released all slaves [ 94.261051][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.271833][ T3460] bond5 (unregistering): Released all slaves [ 94.286185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.293359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.325661][ T5762] loop4: detected capacity change from 0 to 512 [ 94.330010][ T3046] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.357157][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.364253][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.520473][ T3460] hsr_slave_0: left promiscuous mode [ 94.526330][ T3460] hsr_slave_1: left promiscuous mode [ 94.533351][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.552627][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.560436][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.569462][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.590420][ T3460] veth1_macvtap: left promiscuous mode [ 94.597343][ T3460] veth0_macvtap: left promiscuous mode [ 94.605801][ T3460] veth1_vlan: left promiscuous mode [ 94.616994][ T3460] veth0_vlan: left promiscuous mode [ 94.804084][ T3046] 8021q: adding VLAN 0 to HW filter on device eth8 [ 94.871015][ T5693] chnl_net:caif_netlink_parms(): no params data found [ 94.910570][ T5512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.975341][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.986531][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.994149][ T5693] bridge_slave_0: entered allmulticast mode [ 95.018710][ T5693] bridge_slave_0: entered promiscuous mode [ 95.025968][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.033464][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.040618][ T5693] bridge_slave_1: entered allmulticast mode [ 95.047428][ T5693] bridge_slave_1: entered promiscuous mode [ 95.058273][ T3460] IPVS: stop unused estimator thread 0... [ 95.072503][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.087706][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.125188][ T5817] loop1: detected capacity change from 0 to 1024 [ 95.132089][ T5693] team0: Port device team_slave_0 added [ 95.140961][ T5693] team0: Port device team_slave_1 added [ 95.144403][ T5817] EXT4-fs: quotafile must be on filesystem root [ 95.209600][ T5817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.631'. [ 95.218825][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.230025][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.260591][ T5830] FAULT_INJECTION: forcing a failure. [ 95.260591][ T5830] name failslab, interval 1, probability 0, space 0, times 0 [ 95.280430][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz.3.633 Not tainted syzkaller #0 PREEMPT(full) [ 95.280453][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.280464][ T5830] Call Trace: [ 95.280470][ T5830] [ 95.280476][ T5830] __dump_stack+0x1d/0x30 [ 95.280499][ T5830] dump_stack_lvl+0x95/0xd0 [ 95.280519][ T5830] dump_stack+0x15/0x1b [ 95.280540][ T5830] should_fail_ex+0x263/0x280 [ 95.280570][ T5830] should_failslab+0x8c/0xb0 [ 95.280590][ T5830] kmem_cache_alloc_noprof+0x66/0x3f0 [ 95.280610][ T5830] ? vm_area_alloc+0x2c/0xb0 [ 95.280633][ T5830] vm_area_alloc+0x2c/0xb0 [ 95.280653][ T5830] mmap_region+0x1172/0x20d0 [ 95.280726][ T5830] do_mmap+0x9b2/0xbd0 [ 95.280758][ T5830] ? selinux_mmap_file+0x5d/0x70 [ 95.280786][ T5830] vm_mmap_pgoff+0x183/0x2d0 [ 95.280810][ T5830] ksys_mmap_pgoff+0xc1/0x310 [ 95.280838][ T5830] ? __x64_sys_mmap+0x49/0x70 [ 95.280858][ T5830] x64_sys_call+0x14df/0x3020 [ 95.280886][ T5830] do_syscall_64+0x12c/0x3b0 [ 95.280906][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.280928][ T5830] RIP: 0033:0x7f6d7a25c582 [ 95.280945][ T5830] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 95.280962][ T5830] RSP: 002b:00007f6d78caedf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.280984][ T5830] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d7a25c582 [ 95.280998][ T5830] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 95.281011][ T5830] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 95.281025][ T5830] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 95.281038][ T5830] R13: 00007f6d78caeee0 R14: 00007f6d78caeea0 R15: 0000200000001d40 [ 95.281057][ T5830] [ 95.463394][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.463802][ T28] audit: type=1400 audit(1776678346.576:642): avc: denied { setopt } for pid=5831 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.502194][ T28] audit: type=1400 audit(1776678346.736:643): avc: denied { ioctl } for pid=5814 comm="syz.1.631" path="socket:[13462]" dev="sockfs" ino=13462 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.544506][ T3046] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.570198][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.577579][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.605272][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.647287][ T5693] hsr_slave_0: entered promiscuous mode [ 95.653546][ T5693] hsr_slave_1: entered promiscuous mode [ 95.659354][ T5693] debugfs: 'hsr0' already exists in 'hsr' [ 95.680679][ T5693] Cannot create hsr debugfs directory [ 95.763380][ T5512] veth0_vlan: entered promiscuous mode [ 95.792233][ T5512] veth1_vlan: entered promiscuous mode [ 95.863536][ T5512] veth0_macvtap: entered promiscuous mode [ 95.884565][ T5512] veth1_macvtap: entered promiscuous mode [ 95.929877][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.965813][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.987421][ T5693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 96.007537][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.030062][ T4523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.053707][ T5693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.066272][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.076773][ T4523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.087948][ T3046] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.097992][ T5693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.110176][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.126745][ T5693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 96.135712][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.156515][ T4523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.175487][ T4523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.240980][ T28] audit: type=1400 audit(1776678347.466:644): avc: denied { mounton } for pid=5512 comm="syz-executor" path="/root/syzkaller.c8Ctmj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 96.338717][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 96.350580][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.400334][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.433076][ T5693] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.443141][ T5887] loop5: detected capacity change from 0 to 512 [ 96.486337][ T5887] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 96.496535][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.503602][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.533969][ T5887] FAT-fs (loop5): Filesystem has been set read-only [ 96.571990][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.579145][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.640110][ T5896] netlink: 277 bytes leftover after parsing attributes in process `syz.1.642'. [ 96.653793][ T5894] loop3: detected capacity change from 0 to 1024 [ 96.682021][ T5894] EXT4-fs: Ignoring removed bh option [ 96.715946][ T5894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.734912][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.804889][ T28] audit: type=1400 audit(1776678348.046:645): avc: denied { nlmsg_read } for pid=5893 comm="syz.3.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.826216][ T5894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.641'. [ 96.881217][ T28] audit: type=1400 audit(1776678348.076:646): avc: denied { read } for pid=5906 comm="syz.1.643" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.925312][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.964024][ T28] audit: type=1400 audit(1776678348.076:647): avc: denied { open } for pid=5906 comm="syz.1.643" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 96.987518][ T28] audit: type=1400 audit(1776678348.076:648): avc: denied { ioctl } for pid=5906 comm="syz.1.643" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 97.016385][ T5918] loop3: detected capacity change from 0 to 512 [ 97.022831][ T28] audit: type=1400 audit(1776678348.076:649): avc: denied { create } for pid=5906 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.041565][ T5921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5921 comm=syz.4.646 [ 97.042260][ T28] audit: type=1400 audit(1776678348.086:650): avc: denied { getopt } for pid=5906 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.076714][ T5918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.096877][ T5918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.113157][ T5918] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.177002][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.204395][ T5942] loop4: detected capacity change from 0 to 512 [ 97.244393][ T5693] veth0_vlan: entered promiscuous mode [ 97.250550][ T5942] EXT4-fs: Ignoring removed nobh option [ 97.267407][ T5693] veth1_vlan: entered promiscuous mode [ 97.278070][ T28] audit: type=1400 audit(1776678348.516:651): avc: denied { wake_alarm } for pid=5948 comm="syz.5.651" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.317206][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.650: corrupted inode contents [ 97.320705][ T5956] netlink: 277 bytes leftover after parsing attributes in process `syz.3.652'. [ 97.345500][ T5693] veth0_macvtap: entered promiscuous mode [ 97.353134][ T5942] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.353392][ T5942] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #3: comm syz.4.650: mark_inode_dirty error [ 97.362669][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 97.380074][ C0] EXT4-fs (loop4): initial error at time 1776678348: ext4_do_update_inode:5690: inode 3 [ 97.380455][ T5693] veth1_macvtap: entered promiscuous mode [ 97.389827][ C0] EXT4-fs (loop4): last error at time 1776678348: ext4_do_update_inode:5690: inode 3 [ 97.415028][ T5942] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.420463][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.443694][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.650: corrupted inode contents [ 97.459963][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.468917][ T5942] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.469159][ T5942] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.650: mark_inode_dirty error [ 97.491515][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.493770][ T5942] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 97.502166][ T5942] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.650: Failed to acquire dquot type 0 [ 97.504084][ T5960] Process accounting resumed [ 97.522515][ T5942] loop4: lost filesystem error report for type 5 error -117 [ 97.523732][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.650: corrupted inode contents [ 97.528296][ T5969] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28180 sclass=netlink_xfrm_socket pid=5969 comm=syz.3.653 [ 97.534692][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.548358][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.577960][ T5942] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.650: mark_inode_dirty error [ 97.610372][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.624877][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.625125][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.650: corrupted inode contents [ 97.648090][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.658959][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.659325][ T5942] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.650: mark_inode_dirty error [ 97.691385][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.693005][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.650: corrupted inode contents [ 97.738497][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.741042][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.757529][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.766598][ T5942] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 97.776438][ T5942] loop4: lost filesystem error report for type 5 error -117 [ 97.776603][ T5942] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.650: corrupted inode contents [ 97.796413][ T5942] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 97.796590][ T5942] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.650: mark_inode_dirty error [ 97.819864][ T5942] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 97.841447][ T5942] loop4: lost filesystem error report for type 5 error -117 [ 97.842916][ T5942] EXT4-fs (loop4): 1 truncate cleaned up [ 97.860286][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.869742][ T5942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.885127][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.897268][ T5942] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.950157][ T5942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.974090][ T4523] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.984533][ T4523] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.017825][ T3460] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.032370][ T3460] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.050182][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.650'. [ 98.109178][ T5992] loop6: detected capacity change from 0 to 512 [ 98.150152][ T5942] syz.4.650 (5942) used greatest stack depth: 8760 bytes left [ 98.160509][ T5988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5988 comm=syz.5.660 [ 98.274724][ T5988] syzkaller0: refused to change device tx_queue_len [ 98.310402][ T5997] netlink: 277 bytes leftover after parsing attributes in process `syz.4.663'. [ 98.536363][ T6018] netlink: 40 bytes leftover after parsing attributes in process `syz.5.666'. [ 98.579968][ T6018] loop5: detected capacity change from 0 to 1024 [ 98.587444][ T6018] EXT4-fs: Ignoring removed bh option [ 98.595061][ T6018] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.617020][ T6018] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 98.635532][ T6018] System zones: 0-1, 3-12 [ 98.654862][ T6023] loop3: detected capacity change from 0 to 512 [ 98.669171][ T6018] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.666: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.692678][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 98.699609][ C1] EXT4-fs (loop5): initial error at time 1776678349: ext4_map_blocks:833: inode 3: block 1 [ 98.710538][ C1] EXT4-fs (loop5): last error at time 1776678349: ext4_map_blocks:833: inode 3: block 1 [ 98.723188][ T6018] EXT4-fs (loop5): Remounting filesystem read-only [ 98.735641][ T6018] EXT4-fs (loop5): 1 orphan inode deleted [ 98.754236][ T6018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.824562][ T5512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.872394][ T6031] loop5: detected capacity change from 0 to 1024 [ 98.889559][ T6031] EXT4-fs: Invalid want_extra_isize 697 [ 98.921257][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.677'. [ 98.943242][ T6034] netlink: 'syz.3.677': attribute type 28 has an invalid length. [ 98.964495][ T6034] netlink: 'syz.3.677': attribute type 29 has an invalid length. [ 98.982827][ T6034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.677'. [ 99.184688][ T6040] loop6: detected capacity change from 0 to 512 [ 99.207756][ T6040] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.225819][ T6040] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 99.236229][ T6040] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.679: Corrupt directory, running e2fsck is recommended [ 99.251773][ T6040] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 99.262941][ T6040] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.679: corrupted in-inode xattr: e_name out of bounds [ 99.288531][ T6040] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.679: couldn't read orphan inode 15 (err -117) [ 99.300386][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 99.300404][ C1] EXT4-fs (loop6): initial error at time 1776678350: ext4_iget_extra_inode:5128: inode 15 [ 99.300443][ C1] EXT4-fs (loop6): last error at time 1776678350: ext4_iget_extra_inode:5128: inode 15 [ 99.333288][ T6040] loop6: lost filesystem error report for type 5 error -117 [ 99.334133][ T6040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.357813][ T6046] veth3: entered allmulticast mode [ 99.394822][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.448109][ T6054] loop6: detected capacity change from 0 to 512 [ 99.575211][ T6054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.589033][ T6054] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.600811][ T6054] futex_wake_op: syz.6.683 tries to shift op by 32; fix this program [ 99.609217][ T6054] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.683: iget: bad i_size value: 2533274857506816 [ 99.705357][ T6073] loop1: detected capacity change from 0 to 512 [ 99.713727][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.835087][ T6058] loop3: detected capacity change from 0 to 512 [ 99.931323][ T6088] loop6: detected capacity change from 0 to 256 [ 99.954465][ T6088] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.978081][ T6082] loop5: detected capacity change from 0 to 512 [ 100.006513][ T6082] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.685: corrupted xattr block 95: invalid header [ 100.022661][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 100.029724][ C0] EXT4-fs (loop5): initial error at time 1776678351: ext4_expand_extra_isize_ea:2810: inode 11 [ 100.040624][ C0] EXT4-fs (loop5): last error at time 1776678351: ext4_expand_extra_isize_ea:2810: inode 11 [ 100.052646][ T6082] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.685: bg 0: block 7: invalid block bitmap [ 100.072133][ T6082] loop5: lost filesystem error report for type 5 error -117 [ 100.115197][ T6082] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 100.145849][ T6092] FAULT_INJECTION: forcing a failure. [ 100.145849][ T6092] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 100.159538][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: syz.4.695 Not tainted syzkaller #0 PREEMPT(full) [ 100.159613][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.159627][ T6092] Call Trace: [ 100.159634][ T6092] [ 100.159643][ T6092] __dump_stack+0x1d/0x30 [ 100.159671][ T6092] dump_stack_lvl+0x95/0xd0 [ 100.159757][ T6092] dump_stack+0x15/0x1b [ 100.159800][ T6092] should_fail_ex+0x263/0x280 [ 100.159828][ T6092] should_fail_alloc_page+0xf2/0x100 [ 100.159848][ T6092] __alloc_frozen_pages_noprof+0x108/0x350 [ 100.159996][ T6092] alloc_pages_mpol+0xb3/0x260 [ 100.160025][ T6092] alloc_pages_noprof+0x8f/0x140 [ 100.160048][ T6092] pte_alloc_one+0x1c/0xc0 [ 100.160067][ T6092] __pte_alloc+0x32/0x2a0 [ 100.160228][ T6092] handle_mm_fault+0x239e/0x2e70 [ 100.160257][ T6092] ? vma_start_read+0x1c7/0x2c0 [ 100.160353][ T6092] do_user_addr_fault+0x62f/0x1050 [ 100.160388][ T6092] ? ksys_mmap_pgoff+0xc1/0x310 [ 100.160472][ T6092] ? __x64_sys_mmap+0x49/0x70 [ 100.160494][ T6092] ? trace_page_fault_user+0x1f/0xa0 [ 100.160525][ T6092] exc_page_fault+0x62/0xa0 [ 100.160599][ T6092] asm_exc_page_fault+0x26/0x30 [ 100.160617][ T6092] RIP: 0033:0x7f015fb63b8e [ 100.160631][ T6092] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 100.160649][ T6092] RSP: 002b:00007f015e706470 EFLAGS: 00010246 [ 100.160668][ T6092] RAX: 0000000000000001 RBX: 00007f015e706530 RCX: 0000000000000101 [ 100.160750][ T6092] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 00007f015e7065d0 [ 100.160762][ T6092] RBP: 0000000000000102 R08: 00007f01562e7000 R09: 0000000000000000 [ 100.160775][ T6092] R10: 0000000000000000 R11: 00007f015e706540 R12: 0000000000000001 [ 100.160788][ T6092] R13: 00007f015fd62600 R14: 0000000000000000 R15: 00007f015e7065d0 [ 100.160851][ T6092] [ 100.160992][ T6092] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 100.229766][ T6082] loop5: lost filesystem error report for type 5 error -117 [ 100.366290][ T6082] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.685: corrupted xattr block 95: invalid header [ 100.371929][ T6092] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.375200][ T6082] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 100.410919][ T6082] EXT4-fs (loop5): 1 orphan inode deleted [ 100.414142][ T6092] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 100.422911][ T6082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.451869][ T6092] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.695: Corrupt directory, running e2fsck is recommended [ 100.503977][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 100.503993][ T28] audit: type=1400 audit(1776678351.746:661): avc: denied { getopt } for pid=6100 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.542127][ T6092] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 100.559027][ T6092] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.695: corrupted in-inode xattr: e_name out of bounds [ 100.643200][ T6092] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.695: couldn't read orphan inode 15 (err -117) [ 100.655048][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 100.655067][ C1] EXT4-fs (loop4): initial error at time 2000000000: ext4_iget_extra_inode:5128: inode 15 [ 100.655096][ C1] EXT4-fs (loop4): last error at time 2000000000: ext4_iget_extra_inode:5128: inode 15 [ 100.763651][ T28] audit: type=1400 audit(2000000000.159:662): avc: denied { setopt } for pid=6129 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.782650][ T6092] loop4: lost filesystem error report for type 5 error -117 [ 100.784944][ T6092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.822622][ T28] audit: type=1400 audit(2000000000.219:663): avc: denied { getopt } for pid=6120 comm="syz.6.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.855458][ T6136] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57865!=33349) [ 100.872659][ T6136] EXT4-fs (loop1): group descriptors corrupted! [ 100.912642][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.966702][ T6130] xt_hashlimit: invalid interval [ 101.487926][ T6155] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 101.605712][ T6155] bond5: entered promiscuous mode [ 101.635830][ T6155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 102.003587][ T6162] netlink: 'syz.3.708': attribute type 21 has an invalid length. [ 102.034251][ T6162] __nla_validate_parse: 1 callbacks suppressed [ 102.034274][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 102.082650][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 102.168102][ T28] audit: type=1400 audit(2000000001.569:664): avc: denied { listen } for pid=6134 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.203701][ T6136] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 102.417468][ T6136] bond4: entered promiscuous mode [ 102.457283][ T6136] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.531653][ T28] audit: type=1400 audit(2000000001.929:665): avc: denied { setopt } for pid=6168 comm="syz.6.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.687019][ T6194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.732762][ T6194] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.778822][ T6194] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.789878][ T6194] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 102.816685][ T6194] EXT4-fs (loop3): 1 truncate cleaned up [ 102.856060][ T6194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.894774][ T6194] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.713: lblock 0 mapped to illegal pblock 4 (length 1) [ 102.940583][ T6194] EXT4-fs (loop3): Remounting filesystem read-only [ 102.956281][ T6194] netlink: 277 bytes leftover after parsing attributes in process `syz.3.713'. [ 103.007972][ T6182] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 103.099349][ T6213] FAULT_INJECTION: forcing a failure. [ 103.099349][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 103.122195][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.4.715 Not tainted syzkaller #0 PREEMPT(full) [ 103.122299][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.122311][ T6213] Call Trace: [ 103.122317][ T6213] [ 103.122325][ T6213] __dump_stack+0x1d/0x30 [ 103.122393][ T6213] dump_stack_lvl+0x95/0xd0 [ 103.122417][ T6213] dump_stack+0x15/0x1b [ 103.122441][ T6213] should_fail_ex+0x263/0x280 [ 103.122509][ T6213] should_failslab+0x8c/0xb0 [ 103.122570][ T6213] kmem_cache_alloc_noprof+0x66/0x3f0 [ 103.122590][ T6213] ? __anon_vma_prepare+0x70/0x2f0 [ 103.122613][ T6213] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 103.122656][ T6213] __anon_vma_prepare+0x70/0x2f0 [ 103.122681][ T6213] do_wp_page+0x1910/0x2040 [ 103.122788][ T6213] ? _raw_spin_lock+0x52/0xa0 [ 103.122813][ T6213] ? __rcu_read_lock+0x36/0x50 [ 103.122867][ T6213] handle_mm_fault+0x8b9/0x2e70 [ 103.122975][ T6213] ? vma_start_read+0x1c7/0x2c0 [ 103.123003][ T6213] do_user_addr_fault+0x62f/0x1050 [ 103.123037][ T6213] ? ksys_mmap_pgoff+0xc1/0x310 [ 103.123122][ T6213] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 103.123153][ T6213] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 103.123202][ T6213] ? trace_page_fault_user+0x1f/0xa0 [ 103.123360][ T6213] exc_page_fault+0x62/0xa0 [ 103.123419][ T6213] asm_exc_page_fault+0x26/0x30 [ 103.123565][ T6213] RIP: 0033:0x7f015fb63ae3 [ 103.123580][ T6213] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 103.123599][ T6213] RSP: 002b:00007f015e706470 EFLAGS: 00010202 [ 103.123617][ T6213] RAX: 0000000000000400 RBX: 00007f015e706530 RCX: 00007f01562e7000 [ 103.123633][ T6213] RDX: 00007f015e7066d0 RSI: 0000000000000019 RDI: 00007f015e7065d0 [ 103.123705][ T6213] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 103.123717][ T6213] R10: 00000000000000ba R11: 00007f015e706530 R12: 0000000000000001 [ 103.123729][ T6213] R13: 00007f015fd62600 R14: 0000000000000020 R15: 00007f015e7065d0 [ 103.123747][ T6213] [ 103.337739][ T6212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.392847][ T6213] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 103.403847][ T6217] set_capacity_and_notify: 3 callbacks suppressed [ 103.403864][ T6217] loop1: detected capacity change from 0 to 128 [ 103.428349][ T6213] loop4: detected capacity change from 0 to 512 [ 103.480325][ T6213] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.522722][ T6213] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 103.533006][ T6213] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.715: Corrupt directory, running e2fsck is recommended [ 103.547841][ T6213] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 103.556275][ T6213] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.715: corrupted in-inode xattr: e_name out of bounds [ 103.570203][ T6213] fserror_report: 6 callbacks suppressed [ 103.570224][ T6213] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.571292][ T28] audit: type=1400 audit(2000000002.979:666): avc: denied { write } for pid=6216 comm="syz.1.717" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 103.582641][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 103.614532][ C0] EXT4-fs (loop4): initial error at time 2000000002: ext4_iget_extra_inode:5128: inode 15 [ 103.624467][ C0] EXT4-fs (loop4): last error at time 2000000002: ext4_iget_extra_inode:5128: inode 15 [ 103.634614][ T6213] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.715: couldn't read orphan inode 15 (err -117) [ 103.646484][ T6213] loop4: lost filesystem error report for type 5 error -117 [ 103.647144][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.689453][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.701277][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.760388][ T6237] loop3: detected capacity change from 0 to 512 [ 103.770912][ T6240] loop4: detected capacity change from 0 to 4096 [ 103.798141][ T6240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.990954][ T6249] loop1: detected capacity change from 0 to 512 [ 104.008631][ T6249] EXT4-fs: journaled quota format not specified [ 104.022332][ T28] audit: type=1400 audit(2000000003.420:667): avc: denied { read append } for pid=6250 comm="syz.3.724" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.078890][ T28] audit: type=1400 audit(2000000003.420:668): avc: denied { open } for pid=6250 comm="syz.3.724" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.106670][ T28] audit: type=1400 audit(2000000003.480:669): avc: denied { listen } for pid=6248 comm="syz.1.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.130817][ T28] audit: type=1400 audit(2000000003.530:670): avc: denied { ioctl } for pid=6250 comm="syz.3.724" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 104.146282][ T6256] rdma_rxe: rxe_newlink: failed to add lo [ 104.238236][ T6254] netlink: 'syz.3.724': attribute type 8 has an invalid length. [ 104.362548][ T6271] netlink: 'syz.6.727': attribute type 8 has an invalid length. [ 104.465867][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.729'. [ 104.476899][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.519420][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.729'. [ 104.734040][ T6346] loop6: detected capacity change from 0 to 512 [ 104.754093][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.826961][ T6360] loop4: detected capacity change from 0 to 512 [ 104.902299][ T6360] loop4: detected capacity change from 0 to 2048 [ 104.933758][ T6360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.955591][ T6367] FAULT_INJECTION: forcing a failure. [ 104.955591][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 104.982055][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.3.733 Not tainted syzkaller #0 PREEMPT(full) [ 104.982086][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.982097][ T6367] Call Trace: [ 104.982104][ T6367] [ 104.982111][ T6367] __dump_stack+0x1d/0x30 [ 104.982181][ T6367] dump_stack_lvl+0x95/0xd0 [ 104.982203][ T6367] dump_stack+0x15/0x1b [ 104.982258][ T6367] should_fail_ex+0x263/0x280 [ 104.982287][ T6367] should_failslab+0x8c/0xb0 [ 104.982378][ T6367] kmem_cache_alloc_noprof+0x66/0x3f0 [ 104.982413][ T6367] ? __anon_vma_prepare+0xcd/0x2f0 [ 104.982441][ T6367] __anon_vma_prepare+0xcd/0x2f0 [ 104.982464][ T6367] do_wp_page+0x1910/0x2040 [ 104.982554][ T6367] ? _raw_spin_lock+0x52/0xa0 [ 104.982573][ T6367] ? __rcu_read_lock+0x36/0x50 [ 104.982601][ T6367] handle_mm_fault+0x8b9/0x2e70 [ 104.982696][ T6367] ? vma_start_read+0x1c7/0x2c0 [ 104.982720][ T6367] do_user_addr_fault+0x62f/0x1050 [ 104.982750][ T6367] ? ksys_mmap_pgoff+0xc1/0x310 [ 104.982787][ T6367] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 104.982817][ T6367] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 104.982905][ T6367] ? trace_page_fault_user+0x1f/0xa0 [ 104.983004][ T6367] exc_page_fault+0x62/0xa0 [ 104.983030][ T6367] asm_exc_page_fault+0x26/0x30 [ 104.983049][ T6367] RIP: 0033:0x7f6d7a113ae3 [ 104.983074][ T6367] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 104.983092][ T6367] RSP: 002b:00007f6d78cae470 EFLAGS: 00010202 [ 104.983153][ T6367] RAX: 0000000000000400 RBX: 00007f6d78cae530 RCX: 00007f6d7088f000 [ 104.983166][ T6367] RDX: 00007f6d78cae6d0 RSI: 0000000000000019 RDI: 00007f6d78cae5d0 [ 104.983180][ T6367] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 104.983193][ T6367] R10: 00000000000000ba R11: 00007f6d78cae530 R12: 0000000000000001 [ 104.983257][ T6367] R13: 00007f6d7a312600 R14: 0000000000000020 R15: 00007f6d78cae5d0 [ 104.983275][ T6367] [ 104.983287][ T6367] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 105.189186][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.191225][ T6367] loop3: detected capacity change from 0 to 512 [ 105.215693][ T5512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.230965][ T6367] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.256923][ T6370] loop1: detected capacity change from 0 to 512 [ 105.264736][ T6367] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.275264][ T6367] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.733: Corrupt directory, running e2fsck is recommended [ 105.290510][ T6370] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.736: inode has both inline data and extents flags [ 105.292408][ T6375] vlan2: entered allmulticast mode [ 105.308916][ T6375] bond0: entered allmulticast mode [ 105.309446][ T6367] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 105.314092][ T6375] bond_slave_0: entered allmulticast mode [ 105.314107][ T6375] bond_slave_1: entered allmulticast mode [ 105.319401][ T6370] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.334521][ T6367] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.733: corrupted in-inode xattr: e_name out of bounds [ 105.343760][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.343784][ C1] EXT4-fs (loop1): initial error at time 2000000004: ext4_orphan_get:1397: inode 15 [ 105.343816][ C1] EXT4-fs (loop1): last error at time 2000000004: ext4_orphan_get:1397: inode 15 [ 105.382902][ T6367] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.391699][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 105.405161][ T6370] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.736: couldn't read orphan inode 15 (err -117) [ 105.407309][ C1] EXT4-fs (loop3): initial error at time 2000000004: ext4_iget_extra_inode:5128: inode 15 [ 105.428964][ C1] EXT4-fs (loop3): last error at time 2000000004: ext4_iget_extra_inode:5128: inode 15 [ 105.430951][ T6367] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.733: couldn't read orphan inode 15 (err -117) [ 105.450997][ T6370] loop1: lost filesystem error report for type 5 error -117 [ 105.469087][ T6380] netlink: 'syz.5.738': attribute type 21 has an invalid length. [ 105.473568][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.489147][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.738'. [ 105.509705][ T6367] loop3: lost filesystem error report for type 5 error -117 [ 105.524497][ T6383] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.525146][ T6367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.565350][ T6383] EXT4-fs (loop4): 1 truncate cleaned up [ 105.592214][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.646331][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.767624][ T6408] netlink: 'syz.5.746': attribute type 1 has an invalid length. [ 105.801894][ T6408] vlan3: entered allmulticast mode [ 105.821682][ T6408] hsr_slave_1: entered allmulticast mode [ 105.846042][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 105.846056][ T28] audit: type=1400 audit(2000000005.251:808): avc: denied { bind } for pid=6407 comm="syz.5.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.850753][ T6413] netlink: 277 bytes leftover after parsing attributes in process `syz.3.748'. [ 105.965551][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.029452][ T6426] FAULT_INJECTION: forcing a failure. [ 106.029452][ T6426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.048217][ T6424] netlink: 'syz.1.752': attribute type 21 has an invalid length. [ 106.057417][ T28] audit: type=1400 audit(2000000005.461:809): avc: denied { write } for pid=6427 comm="syz.5.754" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.063451][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 106.082397][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.3.753 Not tainted syzkaller #0 PREEMPT(full) [ 106.082427][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.082441][ T6426] Call Trace: [ 106.082448][ T6426] [ 106.082457][ T6426] __dump_stack+0x1d/0x30 [ 106.082608][ T6426] dump_stack_lvl+0x95/0xd0 [ 106.082631][ T6426] dump_stack+0x15/0x1b [ 106.082655][ T6426] should_fail_ex+0x263/0x280 [ 106.082694][ T6426] should_fail_alloc_page+0xf2/0x100 [ 106.082718][ T6426] __alloc_frozen_pages_noprof+0x108/0x350 [ 106.082824][ T6426] alloc_pages_mpol+0xb3/0x260 [ 106.082854][ T6426] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 106.082907][ T6426] do_wp_page+0x70e/0x2040 [ 106.082938][ T6426] ? _raw_spin_lock+0x52/0xa0 [ 106.083018][ T6426] ? __rcu_read_lock+0x36/0x50 [ 106.083073][ T6426] handle_mm_fault+0x8b9/0x2e70 [ 106.083140][ T6426] ? vma_start_read+0x1c7/0x2c0 [ 106.083183][ T6426] do_user_addr_fault+0x62f/0x1050 [ 106.083259][ T6426] ? ksys_mmap_pgoff+0xc1/0x310 [ 106.083283][ T6426] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 106.083307][ T6426] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 106.083397][ T6426] ? trace_page_fault_user+0x1f/0xa0 [ 106.083510][ T6426] exc_page_fault+0x62/0xa0 [ 106.083538][ T6426] asm_exc_page_fault+0x26/0x30 [ 106.083559][ T6426] RIP: 0033:0x7f6d7a113ae3 [ 106.083576][ T6426] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 106.083643][ T6426] RSP: 002b:00007f6d78cae470 EFLAGS: 00010202 [ 106.083661][ T6426] RAX: 0000000000000400 RBX: 00007f6d78cae530 RCX: 00007f6d7088f000 [ 106.083675][ T6426] RDX: 00007f6d78cae6d0 RSI: 0000000000000019 RDI: 00007f6d78cae5d0 [ 106.083689][ T6426] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a4 [ 106.083706][ T6426] R10: 00000000000000ba R11: 00007f6d78cae530 R12: 0000000000000001 [ 106.083726][ T6426] R13: 00007f6d7a312600 R14: 0000000000000020 R15: 00007f6d78cae5d0 [ 106.083744][ T6426] [ 106.083767][ T6426] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.312475][ T6426] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 106.347110][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.369136][ T6426] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 106.418779][ T6441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.451234][ T6426] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.753: Corrupt directory, running e2fsck is recommended [ 106.475286][ T6441] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.507221][ T6426] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 106.531887][ T6441] futex_wake_op: syz.5.757 tries to shift op by 32; fix this program [ 106.540308][ T6441] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.757: iget: bad i_size value: 2533274857506816 [ 106.553109][ T6426] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.753: corrupted in-inode xattr: e_name out of bounds [ 106.617230][ T6426] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.617460][ T6426] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.753: couldn't read orphan inode 15 (err -117) [ 106.626700][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 106.626721][ C0] EXT4-fs (loop3): initial error at time 2000000006: ext4_iget_extra_inode:5128: inode 15 [ 106.626754][ C0] EXT4-fs (loop3): last error at time 2000000006: ext4_iget_extra_inode:5128: inode 15 [ 106.666654][ T6426] loop3: lost filesystem error report for type 5 error -117 [ 106.675775][ T6426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.749313][ T6464] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8212 sclass=netlink_xfrm_socket pid=6464 comm=syz.6.762 [ 106.768581][ T5512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.878213][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.969120][ T28] audit: type=1326 audit(2000000006.371:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f360d4b9511 code=0x7ffc0000 [ 107.047584][ T6482] lo speed is unknown, defaulting to 1000 [ 107.084791][ T6482] lo speed is unknown, defaulting to 1000 [ 107.118413][ T28] audit: type=1326 audit(2000000006.401:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d4fc819 code=0x7ffc0000 [ 107.146760][ T6482] lo speed is unknown, defaulting to 1000 [ 107.247166][ T28] audit: type=1326 audit(2000000006.401:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f360d4fd609 code=0x7ffc0000 [ 107.397657][ T28] audit: type=1326 audit(2000000006.401:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f360d4fc819 code=0x7ffc0000 [ 107.561225][ T28] audit: type=1326 audit(2000000006.401:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f360d4b957b code=0x7ffc0000 [ 107.586235][ T6505] vlan2: entered allmulticast mode [ 107.596849][ T28] audit: type=1326 audit(2000000006.401:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f360d4b8c6c code=0x7ffc0000 [ 107.680646][ T6505] bond0: entered allmulticast mode [ 107.696941][ T6482] infiniband lyz2: set down [ 107.704673][ T6505] bond_slave_0: entered allmulticast mode [ 107.724917][ T6482] infiniband lyz2: added lo [ 107.738785][ T6505] bond_slave_1: entered allmulticast mode [ 107.767693][ T6482] lyz2: rxe_create_qp: returned err = -2 [ 107.792078][ T4050] lo speed is unknown, defaulting to 1000 [ 107.800860][ T6510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6510 comm=syz.4.772 [ 107.875809][ T6482] infiniband lyz2: Couldn't create ib_mad QP1 [ 107.943350][ T6513] SELinux: syz.4.772 (6513) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 107.953802][ T28] audit: type=1326 audit(2000000006.401:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f360d4fc819 code=0x7ffc0000 [ 107.964717][ T6482] infiniband lyz2: Couldn't open port 1 [ 107.985861][ T28] audit: type=1326 audit(2000000006.421:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6478 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f360d4b8cce code=0x7ffc0000 [ 107.995902][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6507 comm=syz.4.772 [ 108.039441][ T6507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6507 comm=syz.4.772 [ 108.064116][ T6482] RDS/IB: lyz2: added [ 108.075952][ T6482] smc: adding ib device lyz2 with port count 1 [ 108.086390][ T6482] smc: ib device lyz2 port 1 has no pnetid [ 108.093061][ T3427] lo speed is unknown, defaulting to 1000 [ 108.103585][ T6482] lo speed is unknown, defaulting to 1000 [ 108.142264][ T6517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.158337][ T6482] lo speed is unknown, defaulting to 1000 [ 108.179290][ T6517] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.180930][ T6533] FAULT_INJECTION: forcing a failure. [ 108.180930][ T6533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.224584][ T6482] lo speed is unknown, defaulting to 1000 [ 108.236840][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.1.775 Not tainted syzkaller #0 PREEMPT(full) [ 108.236942][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.236964][ T6533] Call Trace: [ 108.236971][ T6533] [ 108.236978][ T6533] __dump_stack+0x1d/0x30 [ 108.237049][ T6533] dump_stack_lvl+0x95/0xd0 [ 108.237098][ T6533] dump_stack+0x15/0x1b [ 108.237120][ T6533] should_fail_ex+0x263/0x280 [ 108.237149][ T6533] should_fail_alloc_page+0xf2/0x100 [ 108.237174][ T6533] __alloc_frozen_pages_noprof+0x108/0x350 [ 108.237255][ T6533] alloc_pages_mpol+0xb3/0x260 [ 108.237283][ T6533] ? css_rstat_updated+0xbb/0x280 [ 108.237309][ T6533] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 108.237388][ T6533] handle_mm_fault+0x103e/0x2e70 [ 108.237416][ T6533] ? vma_start_read+0x1c7/0x2c0 [ 108.237533][ T6533] do_user_addr_fault+0x62f/0x1050 [ 108.237594][ T6533] ? ksys_mmap_pgoff+0xc1/0x310 [ 108.237616][ T6533] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 108.237670][ T6533] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 108.237698][ T6533] ? trace_page_fault_user+0x1f/0xa0 [ 108.237754][ T6533] exc_page_fault+0x62/0xa0 [ 108.237783][ T6533] asm_exc_page_fault+0x26/0x30 [ 108.237828][ T6533] RIP: 0033:0x7fc7985d3b98 [ 108.237845][ T6533] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 108.237903][ T6533] RSP: 002b:00007fc79716e470 EFLAGS: 00010286 [ 108.237922][ T6533] RAX: 0000000000001000 RBX: 00007fc79716e530 RCX: 0000000000000001 [ 108.237935][ T6533] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 00007fc79716e5d0 [ 108.237947][ T6533] RBP: 00000000000000d4 R08: 00007fc78ed4f000 R09: 00000000000000ff [ 108.238029][ T6533] R10: 0000000000000000 R11: 00007fc79716e540 R12: 0000000000000001 [ 108.238041][ T6533] R13: 00007fc7987d2600 R14: 0000000000000000 R15: 00007fc79716e5d0 [ 108.238060][ T6533] [ 108.238106][ T6533] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 108.317520][ T6533] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.317571][ T6533] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 108.317587][ T6533] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.775: Corrupt directory, running e2fsck is recommended [ 108.318483][ T6533] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 108.318521][ T6533] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.775: corrupted in-inode xattr: e_name out of bounds [ 108.318657][ T6533] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.318779][ T6533] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.775: couldn't read orphan inode 15 (err -117) [ 108.318804][ T6533] loop1: lost filesystem error report for type 5 error -117 [ 108.322751][ T6533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.359613][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.372651][ T6482] lo speed is unknown, defaulting to 1000 [ 108.413256][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.413320][ T6553] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.491073][ T6482] lo speed is unknown, defaulting to 1000 [ 108.665505][ T6559] netlink: 277 bytes leftover after parsing attributes in process `syz.1.777'. [ 108.825185][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.115996][ T6566] set_capacity_and_notify: 7 callbacks suppressed [ 109.116019][ T6566] loop5: detected capacity change from 0 to 736 [ 109.193014][ T6600] loop6: detected capacity change from 0 to 512 [ 109.223090][ T6600] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.235674][ T6600] EXT4-fs (loop6): 1 truncate cleaned up [ 109.236727][ T6600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.606226][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.706508][ T6620] netlink: 'syz.3.784': attribute type 11 has an invalid length. [ 109.732979][ T6620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.784'. [ 109.768585][ T6628] Failed to initialize the IGMP autojoin socket (err -2) [ 109.808332][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.982530][ T6635] loop3: detected capacity change from 0 to 512 [ 110.678836][ T6639] loop1: detected capacity change from 0 to 512 [ 110.691934][ T6635] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 110.704776][ T6635] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 110.716935][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.123268][ T6635] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.787: Corrupt directory, running e2fsck is recommended [ 111.680636][ T6635] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 111.698644][ T6635] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.787: corrupted in-inode xattr: e_name out of bounds [ 111.720488][ T6635] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.720706][ T6635] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.787: couldn't read orphan inode 15 (err -117) [ 111.729884][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 111.729905][ C0] EXT4-fs (loop3): initial error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 111.729938][ C0] EXT4-fs (loop3): last error at time 2000000011: ext4_iget_extra_inode:5128: inode 15 [ 112.112384][ T6635] loop3: lost filesystem error report for type 5 error -117 [ 112.112925][ T6635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.303603][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.371960][ T6660] bond1: option arp_validate: invalid value (6216) [ 112.383000][ T6660] bond1 (unregistering): Released all slaves [ 112.414382][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 112.414397][ T28] audit: type=1400 audit(2000000011.814:823): avc: denied { setopt } for pid=6659 comm="syz.5.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.507917][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.532861][ T6681] loop5: detected capacity change from 0 to 512 [ 112.559413][ T6681] msdos: Unknown parameter '00000000000000000000˙˙0xffffffffffffffff˙˙' [ 112.568278][ T6675] bpf: Bad value for 'gid' [ 112.572574][ T28] audit: type=1400 audit(2000000011.954:824): avc: denied { getopt } for pid=6674 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.627561][ T6690] netlink: 132 bytes leftover after parsing attributes in process `syz.5.797'. [ 112.646990][ T6690] loop5: detected capacity change from 0 to 512 [ 112.739644][ T6701] loop3: detected capacity change from 0 to 512 [ 112.766184][ T6701] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 112.772898][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.791740][ T6690] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.805745][ T28] audit: type=1400 audit(2000000012.214:825): avc: denied { read } for pid=6689 comm="syz.5.797" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.838556][ T28] audit: type=1400 audit(2000000012.214:826): avc: denied { setattr } for pid=6689 comm="syz.5.797" path="/27/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.977962][ T6704] syzkaller0: entered promiscuous mode [ 112.983467][ T6704] syzkaller0: entered allmulticast mode [ 113.001059][ T28] audit: type=1400 audit(2000000012.274:827): avc: denied { ioctl } for pid=6689 comm="syz.5.797" path="/27/file1/file1" dev="loop5" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.127646][ T6707] Failed to initialize the IGMP autojoin socket (err -2) [ 113.370013][ T6703] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #18: comm syz.5.797: corrupted inode contents [ 113.392411][ T6706] Failed to initialize the IGMP autojoin socket (err -2) [ 114.271421][ T6703] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 114.273147][ T6703] EXT4-fs (loop5): Remounting filesystem read-only [ 114.313105][ T6703] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 115.602649][ T6714] loop4: detected capacity change from 0 to 512 [ 115.697961][ T6714] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.829176][ T6714] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.853882][ T6714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.804: bg 0: block 248: padding at end of block bitmap is not set [ 115.869153][ T6714] loop4: lost filesystem error report for type 5 error -117 [ 115.881505][ T6714] Quota error (device loop4): write_blk: dquota write failed [ 115.889196][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 115.889278][ C1] EXT4-fs (loop4): last error at time 2000000015: ext4_validate_block_bitmap:441 [ 115.915335][ T6714] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 115.926012][ T6714] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.804: Failed to acquire dquot type 1 [ 115.938012][ T6714] loop4: lost filesystem error report for type 5 error -28 [ 115.947654][ T6714] EXT4-fs (loop4): 1 truncate cleaned up [ 115.969101][ T6714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 116.252773][ T6714] syz.4.804 (6714) used greatest stack depth: 7552 bytes left [ 116.414831][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 116.415438][ T5512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.474972][ T6729] loop5: detected capacity change from 0 to 512 [ 116.552382][ T6739] loop6: detected capacity change from 0 to 512 [ 116.616233][ T6739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.630386][ T6741] loop1: detected capacity change from 0 to 512 [ 116.632298][ T6729] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.652841][ T6729] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 116.658082][ T6739] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.663246][ T6729] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.809: Corrupt directory, running e2fsck is recommended [ 116.687092][ T6729] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 116.695324][ T6729] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.809: corrupted in-inode xattr: e_name out of bounds [ 116.720040][ T6729] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 116.726024][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 116.741620][ C1] EXT4-fs (loop5): initial error at time 2000000016: ext4_iget_extra_inode:5128: inode 15 [ 116.751550][ C1] EXT4-fs (loop5): last error at time 2000000016: ext4_iget_extra_inode:5128: inode 15 [ 116.775017][ T6749] vlan3: entered promiscuous mode [ 116.780256][ T6749] geneve1: entered promiscuous mode [ 116.785692][ T6749] vlan3: entered allmulticast mode [ 116.792485][ T6749] geneve1: entered allmulticast mode [ 116.799676][ T6729] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.809: couldn't read orphan inode 15 (err -117) [ 116.821680][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.830871][ T6729] loop5: lost filesystem error report for type 5 error -117 [ 116.831302][ T6729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.878497][ T5512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.051694][ T6760] netlink: 277 bytes leftover after parsing attributes in process `syz.6.818'. [ 117.082770][ T6763] loop6: detected capacity change from 0 to 512 [ 117.090496][ T6763] EXT4-fs: Ignoring removed orlov option [ 117.102354][ T6763] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.109005][ T6763] EXT4-fs: dax option not supported [ 117.199603][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.6.823'. [ 117.489582][ T6788] loop1: detected capacity change from 0 to 512 [ 117.509077][ T6788] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.533401][ T6788] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 117.552001][ T6788] Quota error (device loop1): write_blk: dquota write failed [ 117.559465][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 117.559500][ C0] EXT4-fs (loop1): initial error at time 2000000016: ext4_mb_generate_buddy:1317 [ 117.559521][ C0] EXT4-fs (loop1): last error at time 2000000016: ext4_mb_generate_buddy:1317 [ 117.584492][ T6788] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 117.593884][ T6788] Quota error (device loop1): write_blk: dquota write failed [ 117.601679][ T6788] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 117.611792][ T6788] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.828: Failed to acquire dquot type 1 [ 117.623239][ T6788] loop1: lost filesystem error report for type 5 error -28 [ 117.623525][ T6788] EXT4-fs (loop1): 1 truncate cleaned up [ 117.640347][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.664717][ T6788] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 117.693326][ T6788] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 117.751392][ T6803] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.776058][ T6803] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 118.199707][ T28] audit: type=1400 audit(2000000017.607:828): avc: denied { append } for pid=6808 comm="syz.6.833" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.308516][ T28] audit: type=1400 audit(2000000017.707:829): avc: denied { mounton } for pid=6808 comm="syz.6.833" path="/syzcgroup/net/syz6/devices.allow" dev="cgroup" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 118.574046][ T6817] loop4: detected capacity change from 0 to 512 [ 118.636630][ T6817] netlink: 'syz.4.836': attribute type 29 has an invalid length. [ 118.705089][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.756097][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.007495][ T6845] loop4: detected capacity change from 0 to 512 [ 119.059877][ T6845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.105349][ T6845] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.121563][ T6851] loop1: detected capacity change from 0 to 512 [ 119.158637][ T6845] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.845: corrupted inode contents [ 119.179712][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.211956][ T6845] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.845: mark_inode_dirty error [ 119.226698][ T6851] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.254996][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.255776][ T6851] futex_wake_op: syz.1.847 tries to shift op by 32; fix this program [ 119.263953][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.284844][ T6845] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.845: corrupted inode contents [ 119.299596][ T6851] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.847: iget: bad i_size value: 2533274857506816 [ 119.312237][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.323475][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.350721][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.364144][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.373503][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.375002][ T6845] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.845: mark_inode_dirty error [ 119.382846][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.849'. [ 119.415280][ T6860] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.845: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 119.415280][ T6860] [ 119.446625][ T6860] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.845: corrupted inode contents [ 119.460998][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.471959][ T6866] FAULT_INJECTION: forcing a failure. [ 119.471959][ T6866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.485629][ T6860] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.845: mark_inode_dirty error [ 119.496483][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.6.852 Not tainted syzkaller #0 PREEMPT(full) [ 119.496508][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.496567][ T6866] Call Trace: [ 119.496574][ T6866] [ 119.496583][ T6866] __dump_stack+0x1d/0x30 [ 119.496608][ T6866] dump_stack_lvl+0x95/0xd0 [ 119.496632][ T6866] dump_stack+0x15/0x1b [ 119.496701][ T6866] should_fail_ex+0x263/0x280 [ 119.496730][ T6866] should_fail_alloc_page+0xf2/0x100 [ 119.496755][ T6866] __alloc_frozen_pages_noprof+0x108/0x350 [ 119.496860][ T6866] alloc_pages_mpol+0xb3/0x260 [ 119.496885][ T6866] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 119.496911][ T6866] do_wp_page+0x70e/0x2040 [ 119.497014][ T6866] ? _raw_spin_lock+0x52/0xa0 [ 119.497033][ T6866] ? __rcu_read_lock+0x36/0x50 [ 119.497084][ T6866] handle_mm_fault+0x8b9/0x2e70 [ 119.497183][ T6866] ? vma_start_read+0x1c7/0x2c0 [ 119.497277][ T6866] do_user_addr_fault+0x62f/0x1050 [ 119.497360][ T6866] ? ksys_mmap_pgoff+0xc1/0x310 [ 119.497381][ T6866] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 119.497457][ T6866] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 119.497499][ T6866] ? trace_page_fault_user+0x1f/0xa0 [ 119.497528][ T6866] exc_page_fault+0x62/0xa0 [ 119.497568][ T6866] asm_exc_page_fault+0x26/0x30 [ 119.497590][ T6866] RIP: 0033:0x7f360d3b3b98 [ 119.497605][ T6866] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 119.497621][ T6866] RSP: 002b:00007f360bf4e470 EFLAGS: 00010202 [ 119.497636][ T6866] RAX: 0000000000005005 RBX: 00007f360bf4e530 RCX: 0000000000000013 [ 119.497649][ T6866] RDX: 00000000000017ff RSI: 0000000000000400 RDI: 00007f360bf4e5d0 [ 119.497689][ T6866] RBP: 0000000000000014 R08: 00007f3603b2f000 R09: 0000000000000004 [ 119.497701][ T6866] R10: 0000200000001e02 R11: 00000000000004ee R12: 0000000000000301 [ 119.497771][ T6866] R13: 00007f360d5b2600 R14: 0000000000000013 R15: 00007f360bf4e5d0 [ 119.497789][ T6866] [ 119.497811][ T6866] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 119.534853][ T6860] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 119.539119][ T6866] loop6: detected capacity change from 0 to 512 [ 119.543394][ T6868] bond6 (unregistering): Released all slaves [ 119.619316][ T6866] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.736256][ T6866] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 119.737126][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.749156][ T6866] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.852: Corrupt directory, running e2fsck is recommended [ 119.769709][ T6866] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 119.778832][ T6866] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.852: corrupted in-inode xattr: e_name out of bounds [ 119.798793][ T6879] Failed to initialize the IGMP autojoin socket (err -2) [ 119.804581][ T6866] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.806023][ T6866] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.852: couldn't read orphan inode 15 (err -117) [ 119.815259][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 119.815282][ C1] EXT4-fs (loop6): initial error at time 2000000019: ext4_iget_extra_inode:5128: inode 15 [ 119.815337][ C1] EXT4-fs (loop6): last error at time 2000000019: ext4_iget_extra_inode:5128: inode 15 [ 119.877087][ T28] audit: type=1400 audit(2000000019.288:830): avc: denied { setopt } for pid=6884 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.896595][ T6866] loop6: lost filesystem error report for type 5 error -117 [ 119.898571][ T6866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.921223][ T6885] EXT4-fs (loop4): 1 truncate cleaned up [ 119.928871][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.929170][ T6885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.979767][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.137893][ T6900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.160858][ T6900] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.323662][ T6900] futex_wake_op: syz.3.861 tries to shift op by 32; fix this program [ 120.353249][ T6900] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.861: iget: bad i_size value: 2533274857506816 [ 120.542623][ T28] audit: type=1400 audit(2000000019.948:831): avc: denied { map } for pid=6908 comm="syz.6.862" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.700076][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.892110][ T6919] set_capacity_and_notify: 2 callbacks suppressed [ 120.892126][ T6919] loop3: detected capacity change from 0 to 1024 [ 120.929032][ T6919] EXT4-fs: Ignoring removed nobh option [ 120.941275][ T6921] loop1: detected capacity change from 0 to 736 [ 120.953377][ T6919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.968909][ T28] audit: type=1326 audit(2000000020.378:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79871c819 code=0x7ffc0000 [ 121.010576][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.029332][ T28] audit: type=1326 audit(2000000020.408:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.1.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79871c819 code=0x7ffc0000 [ 121.066176][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.221355][ T6935] loop1: detected capacity change from 0 to 512 [ 121.234320][ T6937] loop3: detected capacity change from 0 to 512 [ 121.242941][ T6935] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 121.285857][ T6937] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 121.319808][ T6935] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 121.337688][ T6935] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.347958][ T6937] EXT4-fs (loop3): mount failed [ 121.377177][ T6935] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.871: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.405120][ T6935] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 121.405402][ T6935] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.871: couldn't read orphan inode 13 (err -117) [ 121.414627][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 121.414647][ C1] EXT4-fs (loop1): last error at time 2000000020: ext4_ext_check_inode:521: inode 13 [ 121.444560][ T6935] loop1: lost filesystem error report for type 5 error -117 [ 121.446216][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.554965][ T6951] loop3: detected capacity change from 0 to 2048 [ 121.586423][ T6951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.625495][ T6951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.732023][ T6965] loop5: detected capacity change from 0 to 512 [ 122.014245][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.024638][ T6983] netlink: 'syz.6.886': attribute type 10 has an invalid length. [ 122.042884][ T6989] loop1: detected capacity change from 0 to 128 [ 122.074249][ T6985] bridge_slave_0: left allmulticast mode [ 122.079967][ T6985] bridge_slave_0: left promiscuous mode [ 122.086136][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.120936][ T6985] bridge_slave_1: left allmulticast mode [ 122.133949][ T6985] bridge_slave_1: left promiscuous mode [ 122.150617][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.172084][ T6985] bond0: (slave bond_slave_0): Releasing backup interface [ 122.190131][ T6985] bond_slave_0: left allmulticast mode [ 122.201177][ T6985] bond0: (slave bond_slave_1): Releasing backup interface [ 122.209542][ T6995] __nla_validate_parse: 65 callbacks suppressed [ 122.209578][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 122.224857][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'. [ 122.238082][ T6985] bond_slave_1: left allmulticast mode [ 122.248069][ T6985] team0: Port device team_slave_0 removed [ 122.257853][ T6985] team0: Port device team_slave_1 removed [ 122.271940][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.281449][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.291049][ T6985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.298528][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.309415][ T6985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.325941][ T6983] batadv0: entered promiscuous mode [ 122.331327][ T6983] batadv0: entered allmulticast mode [ 122.338070][ T6983] bridge0: port 1(batadv0) entered blocking state [ 122.345297][ T6983] bridge0: port 1(batadv0) entered disabled state [ 122.354768][ T6983] bridge0: port 1(batadv0) entered blocking state [ 122.361307][ T6983] bridge0: port 1(batadv0) entered forwarding state [ 122.575311][ T7011] loop6: detected capacity change from 0 to 512 [ 122.630998][ T6313] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 122.640261][ T6313] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 122.686994][ T7009] loop1: detected capacity change from 0 to 8192 [ 123.294501][ T6990] Failed to initialize the IGMP autojoin socket (err -2) [ 123.310949][ T7009] loop1: p1 < > p2 p4 < p5 > [ 123.340342][ T7009] loop1: partition table partially beyond EOD, truncated [ 123.444729][ T7009] loop1: p1 start 134217728 is beyond EOD, truncated [ 123.493869][ T7009] loop1: p2 size 591360 extends beyond EOD, truncated [ 123.673600][ T7009] loop1: p5 size 591360 extends beyond EOD, truncated [ 123.746150][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 123.790848][ T7020] loop6: detected capacity change from 0 to 4096 [ 123.856742][ T7020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.944941][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 123.944958][ T28] audit: type=1400 audit(2000000023.360:956): avc: denied { read } for pid=7037 comm="syz.4.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.973302][ T7039] netlink: 'syz.3.899': attribute type 21 has an invalid length. [ 123.973895][ T7038] C: renamed from lo (while UP) [ 124.011638][ T7038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 124.018262][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.036135][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 124.181147][ T7061] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 124.191018][ T7061] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.210679][ T3427] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 124.406099][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.910'. [ 124.421162][ T7069] msdos: Unknown parameter 'E-' [ 124.426241][ T7065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.436814][ T3427] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.475294][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.492451][ T7068] ext4: Bad value for 'resgid' [ 124.512381][ T7065] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.522920][ T7068] ext4: Bad value for 'resgid' [ 124.656145][ T7080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.689483][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.912'. [ 124.692139][ T28] audit: type=1400 audit(2000000024.100:957): avc: denied { read write } for pid=7079 comm="syz.4.912" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.725151][ T28] audit: type=1400 audit(2000000024.100:958): avc: denied { open } for pid=7079 comm="syz.4.912" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.750544][ T28] audit: type=1400 audit(2000000024.100:959): avc: denied { bind } for pid=7082 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.081699][ T28] audit: type=1400 audit(2000000024.100:960): avc: denied { read } for pid=7082 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.216411][ T7091] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.916: invalid block [ 125.332038][ T7091] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 125.332412][ T7091] EXT4-fs (loop1): Remounting filesystem read-only [ 125.341827][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 125.341850][ C0] EXT4-fs (loop1): initial error at time 2000000024: ext4_get_branch:178: inode 13: block 1024 [ 125.341897][ C0] EXT4-fs (loop1): last error at time 2000000024: ext4_get_branch:178: inode 13: block 1024 [ 125.414407][ T28] audit: type=1400 audit(2000000024.480:961): avc: denied { append } for pid=7063 comm="syz.3.908" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.638599][ T7091] EXT4-fs (loop1): 1 truncate cleaned up [ 125.665773][ T7091] EXT4-fs (loop1): mounted filesystem 0000b300-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.858004][ T7111] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 125.940224][ T7116] set_capacity_and_notify: 6 callbacks suppressed [ 125.940241][ T7116] loop1: detected capacity change from 0 to 512 [ 125.963310][ T7117] loop6: detected capacity change from 0 to 512 [ 125.978655][ T7116] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.004719][ T7116] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 126.175318][ T7116] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 126.236489][ T7123] loop3: detected capacity change from 0 to 4096 [ 126.264614][ T7123] EXT4-fs: Ignoring removed bh option [ 126.369496][ T28] audit: type=1400 audit(2000000025.781:962): avc: denied { create } for pid=7127 comm="syz.5.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 126.442623][ T6325] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.034533][ T28] audit: type=1400 audit(2000000026.451:963): avc: denied { write } for pid=7143 comm="syz.1.930" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.061062][ T7142] loop6: detected capacity change from 0 to 512 [ 127.072987][ T7142] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 127.091441][ T7142] EXT4-fs (loop6): 1 truncate cleaned up [ 127.152593][ T28] audit: type=1400 audit(2000000026.571:964): avc: denied { getopt } for pid=7146 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.192245][ T28] audit: type=1400 audit(2000000026.591:965): avc: denied { mount } for pid=7146 comm="syz.3.932" name="/" dev="autofs" ino=17432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 127.195172][ T7149] loop1: detected capacity change from 0 to 512 [ 127.230868][ T7147] loop3: detected capacity change from 0 to 128 [ 127.251411][ T7147] vfat: Unknown parameter 'pagemap' [ 127.313039][ T7152] Failed to initialize the IGMP autojoin socket (err -2) [ 127.556411][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.934'. [ 127.706937][ T7169] loop3: detected capacity change from 0 to 512 [ 127.723086][ T7169] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.968896][ T7178] loop6: detected capacity change from 0 to 512 [ 128.061791][ T7163] loop1: detected capacity change from 0 to 512 [ 128.308085][ T7163] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.371640][ T7163] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 128.432401][ T7163] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.937: Corrupt directory, running e2fsck is recommended [ 128.470163][ T3580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.596705][ T7191] loop5: detected capacity change from 0 to 512 [ 128.598782][ T7163] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 128.628554][ T7163] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.937: corrupted in-inode xattr: e_name out of bounds [ 128.648681][ T7163] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.651487][ T7163] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.937: couldn't read orphan inode 15 (err -117) [ 128.661311][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 128.661410][ C1] EXT4-fs (loop1): initial error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 128.661743][ C1] EXT4-fs (loop1): last error at time 2000000028: ext4_iget_extra_inode:5128: inode 15 [ 128.709224][ T7163] loop1: lost filesystem error report for type 5 error -117 [ 128.743132][ T7197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.947'. [ 128.832516][ T7199] tipc: Started in network mode [ 128.859467][ T7199] tipc: Node identity 320c0a83413b, cluster identity 4711 [ 128.874997][ T7199] tipc: Enabled bearer , priority 0 [ 128.900527][ T7199] syzkaller0: entered promiscuous mode [ 128.927167][ T7199] syzkaller0: entered allmulticast mode [ 128.950881][ T7198] tipc: Resetting bearer [ 128.961000][ T7198] tipc: Disabling bearer [ 128.999599][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 128.999614][ T28] audit: type=1400 audit(2000000028.402:973): avc: denied { read } for pid=7213 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.083780][ T7219] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.136061][ T7219] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.954: corrupted inode contents [ 129.151719][ T7219] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #2: comm syz.3.954: mark_inode_dirty error [ 129.165684][ T7219] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.954: corrupted inode contents [ 129.179233][ T7219] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.954: mark_inode_dirty error [ 129.285328][ T7233] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.954: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 129.285328][ T7233] [ 129.315092][ T7233] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #2: comm syz.3.954: corrupted inode contents [ 129.327822][ T7233] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.954: mark_inode_dirty error [ 129.339596][ T7233] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 129.435073][ T7236] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 129.451965][ T7236] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 129.490124][ T7236] EXT4-fs (loop6): This should not happen!! Data will be lost [ 129.490124][ T7236] [ 129.562687][ T7236] EXT4-fs (loop6): Total free blocks count 0 [ 129.597328][ T7236] EXT4-fs (loop6): Free/Dirty block details [ 129.646091][ T28] audit: type=1400 audit(2000000029.053:974): avc: denied { mounton } for pid=7235 comm="syz.6.961" path="/69/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.669230][ T7236] EXT4-fs (loop6): free_blocks=66060288 [ 129.681241][ T7236] EXT4-fs (loop6): dirty_blocks=48 [ 129.686855][ T7236] EXT4-fs (loop6): Block reservation details [ 129.693327][ T7236] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 129.725514][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 129.737964][ T28] audit: type=1400 audit(2000000029.143:975): avc: denied { setopt } for pid=7249 comm="syz.3.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.758442][ T5693] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 129.771196][ T7250] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.785207][ T7250] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 129.816643][ T28] audit: type=1400 audit(2000000029.233:976): avc: denied { execute } for pid=7252 comm="syz.6.964" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 129.834474][ T7250] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.962: Corrupt directory, running e2fsck is recommended [ 129.845182][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.963'. [ 129.859341][ T7250] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 129.873444][ T7250] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.962: corrupted in-inode xattr: e_name out of bounds [ 129.887603][ T7250] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.887886][ T7250] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.962: couldn't read orphan inode 15 (err -117) [ 129.897071][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 129.897107][ C1] EXT4-fs (loop3): initial error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 129.897139][ C1] EXT4-fs (loop3): last error at time 2000000029: ext4_iget_extra_inode:5128: inode 15 [ 129.935636][ T7250] loop3: lost filesystem error report for type 5 error -117 [ 129.988639][ T7258] ALSA: seq fatal error: cannot create timer (-19) [ 130.018070][ T7263] bridge0: entered promiscuous mode [ 130.024877][ T7263] macsec1: entered promiscuous mode [ 130.113730][ T7276] Failed to initialize the IGMP autojoin socket (err -2) [ 130.265607][ T7285] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 130.325765][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.345371][ T7287] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.364846][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.383597][ T7287] futex_wake_op: syz.6.976 tries to shift op by 32; fix this program [ 130.398132][ T7289] ext2: Unknown parameter 'subj_role' [ 130.412101][ T7287] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.976: iget: bad i_size value: 2533274857506816 [ 130.412883][ T7294] ext3: Unknown parameter 'noacl' [ 130.473827][ T28] audit: type=1400 audit(2000000029.863:977): avc: denied { create } for pid=7297 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 130.505592][ T28] audit: type=1400 audit(2000000029.883:978): avc: denied { setopt } for pid=7297 comm="syz.3.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 130.539867][ T5693] EXT4-fs unmount: 17 callbacks suppressed [ 130.539879][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.557718][ T7303] EXT4-fs (loop3): inodes count not valid: 0 vs 32 [ 130.571079][ T7303] ================================================================== [ 130.579198][ T7303] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 130.588068][ T7303] [ 130.590396][ T7303] read-write to 0xffff88810048af78 of 8 bytes by task 3643 on cpu 0: [ 130.598465][ T7303] __filemap_add_folio+0x671/0x880 [ 130.603605][ T7303] filemap_add_folio+0x1d3/0x350 [ 130.608569][ T7303] page_cache_ra_unbounded+0x20e/0x420 [ 130.614052][ T7303] force_page_cache_ra+0x18d/0x1d0 [ 130.619195][ T7303] page_cache_sync_ra+0x10e/0x530 [ 130.624229][ T7303] filemap_get_pages+0x30a/0x1250 [ 130.629258][ T7303] filemap_read+0x231/0xa10 [ 130.633779][ T7303] blkdev_read_iter+0x22d/0x2e0 [ 130.638646][ T7303] vfs_read+0x6c0/0x7f0 [ 130.642811][ T7303] ksys_read+0xdc/0x1a0 [ 130.646976][ T7303] __x64_sys_read+0x40/0x50 [ 130.651515][ T7303] x64_sys_call+0x2886/0x3020 [ 130.656201][ T7303] do_syscall_64+0x12c/0x3b0 [ 130.660793][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.666680][ T7303] [ 130.668989][ T7303] read to 0xffff88810048af78 of 8 bytes by task 7303 on cpu 1: [ 130.676516][ T7303] filemap_write_and_wait_range+0x59/0x370 [ 130.682330][ T7303] sync_blockdev+0x35/0x50 [ 130.686740][ T7303] kill_block_super+0x3c/0x70 [ 130.691419][ T7303] ext4_kill_sb+0x63/0x80 [ 130.695739][ T7303] deactivate_locked_super+0x75/0x1c0 [ 130.701106][ T7303] get_tree_bdev_flags+0x2ad/0x300 [ 130.706225][ T7303] get_tree_bdev+0x1f/0x30 [ 130.710681][ T7303] ext4_get_tree+0x1c/0x30 [ 130.715088][ T7303] vfs_get_tree+0x57/0x1d0 [ 130.719510][ T7303] do_new_mount+0x288/0x8d0 [ 130.724002][ T7303] path_mount+0x4d0/0xbc0 [ 130.728320][ T7303] __se_sys_mount+0x28c/0x2e0 [ 130.732985][ T7303] __x64_sys_mount+0x67/0x80 [ 130.737565][ T7303] x64_sys_call+0x2d61/0x3020 [ 130.742240][ T7303] do_syscall_64+0x12c/0x3b0 [ 130.746818][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.752701][ T7303] [ 130.755012][ T7303] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 130.762101][ T7303] [ 130.764411][ T7303] Reported by Kernel Concurrency Sanitizer on: [ 130.770544][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 130.779729][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.789775][ T7303] ================================================================== [ 131.282935][ T7308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.315147][ T7308] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 131.330131][ T7308] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.351058][ T7308] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.351058][ T7308] [ 131.361344][ T7308] EXT4-fs (loop6): Total free blocks count 0 [ 131.368551][ T7308] EXT4-fs (loop6): Free/Dirty block details [ 131.379800][ T7308] EXT4-fs (loop6): free_blocks=66060288 [ 131.385492][ T7308] EXT4-fs (loop6): dirty_blocks=16 [ 131.409659][ T7308] EXT4-fs (loop6): Block reservation details [ 131.425255][ T7308] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 131.486908][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.6.983'. [ 131.495942][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.6.983'. [ 131.516107][ T7308] netlink: 'syz.6.983': attribute type 6 has an invalid length. [ 131.551492][ T5693] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 131.563143][ T5693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.