last executing test programs: 47.728015811s ago: executing program 3 (id=712): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39de5b) close(r0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x80000003}, 0x0, 0x1224, 0x9, 0x0, 0x8, 0x20005, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000100), 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xc}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000280), &(0x7f0000000380)=@udp, 0x1}, 0x20) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x320, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x178, 0x178, 0x178, 0x178, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0xff, 0x0, 'veth1_to_hsr\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x12a, 0x178, 0x1a0, 0x0, {0x0, 0x7a010000}}, @common=@inet=@SET3={0x0, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x4}, {0x1, 0x1, 0x3}, 0x8, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'bridge_slave_0\x00', 'netpci0\x00', {}, {0xff}, 0x1, 0x0, 0x51}, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}, {0x2}]}}]}, @common=@unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) sendmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) (async) recvmmsg(r9, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 47.207646297s ago: executing program 3 (id=716): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0xfffd, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) close(0x3) 47.176647567s ago: executing program 3 (id=718): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0xc46, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$lock(r3, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0xfffffffffffffca5}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x8}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0xf8}}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="080001"], 0x90}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000400)={0x1ff, 0xffffffffffffffff, 0x2, {0x40000000002, 0x258}, 0x1f}, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r5, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x1, 0x1, 0x1000}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") syz_open_procfs(0x0, &(0x7f0000000200)='net/ptype\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="03000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setresgid(0xee00, 0x0, 0xffffffffffffffff) 46.256899448s ago: executing program 3 (id=724): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x12]}, 0x8, 0x180800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x6}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000002c0)={r2, 0xd80}, &(0x7f0000000340)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @mcast1}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1002, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r8 = creat(&(0x7f0000000280)='./bus\x00', 0x182) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000300)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000300)=r9, 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) pread64(r4, &(0x7f00000000c0)=""/70, 0x46, 0x401) 45.427776287s ago: executing program 3 (id=730): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) sendmmsg$unix(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x8844}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e9211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x79, 0x2, 0x6, "723ab609c6a05b2339f3036ccdcd3bb9", "1a4c8b6b7548e0e9c7001f48f64a8ec24145fa7c735c7ab0344a8bb5ef8cc10a0553d34e6869e409a2507d903a2e1e02dc6eced075904602889779bb4a2b5b67a97a320fac2cab7ea9740d92d12585becfae7c1e75818f7acbb76f1696295328bda9b153"}, 0x79, 0x1) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e26, 0x1, @mcast1, 0x7daa}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r9, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r9, &(0x7f0000000180)='./file0\x00') writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) 44.397415419s ago: executing program 3 (id=735): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500ed9b000000001000000000", @ANYRES32=0x0], 0x44}}, 0x0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000200)=0x1) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) r6 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1, 0x1, 0x5, 0x3, 0x0, 0x76, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x2108, 0x4, 0x1, 0x8, 0x0, 0x1000, 0xe, 0x0, 0xccbc, 0x0, 0x6}, r4, 0x3, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x10, 0x7d, 0x20f}) syz_io_uring_setup(0x31c6, &(0x7f0000000140)={0x0, 0xd73c, 0x200, 0x8000000}, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(0xffffffffffffffff, 0x2, 0x0) lseek(r8, 0x1000000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0xfff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x453, 0x400, 0x70bd29, 0x25dfdbfb, "c3c818fd8760182419f8649feceff39112b49ad95af2f6284832f47413ac9a8bf9d166", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0x24004000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 44.24982957s ago: executing program 32 (id=735): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500ed9b000000001000000000", @ANYRES32=0x0], 0x44}}, 0x0) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000200)=0x1) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) r6 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x1, 0x1, 0x5, 0x3, 0x0, 0x76, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x2108, 0x4, 0x1, 0x8, 0x0, 0x1000, 0xe, 0x0, 0xccbc, 0x0, 0x6}, r4, 0x3, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000240)={0x10, 0x7d, 0x20f}) syz_io_uring_setup(0x31c6, &(0x7f0000000140)={0x0, 0xd73c, 0x200, 0x8000000}, &(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(0xffffffffffffffff, 0x2, 0x0) lseek(r8, 0x1000000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0xfff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x453, 0x400, 0x70bd29, 0x25dfdbfb, "c3c818fd8760182419f8649feceff39112b49ad95af2f6284832f47413ac9a8bf9d166", ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4006}, 0x24004000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 40.324078285s ago: executing program 4 (id=756): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x1040, 0x0, 0x10000, 0x0, 0x2, 0x106, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x1, 0xff88, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1001, 0x20da, 0x8, 0xd, 0x20005, 0x8a6, 0x0, 0xffffbffc, 0x0, 0x400000020000006}, 0x0, 0xffffdffffffffffe, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x4050) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 39.056872399s ago: executing program 4 (id=758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0xe4ff, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 38.669633303s ago: executing program 4 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000680)={0x0, 0xbd, 0x40000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008001140000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="640500007ba3fd27c924f9e419e0f5d3ce8114bdbad88064f9d50d2a305286cf28dbba73bf799e9797256bed0c8eb780329adb2011380410a479ac8150be46afe900a85fde2d6419d7dc4d1f72ba183c1e6d7dd7ec6c193d90f728fb0df4d9c2", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x564}, 0x1, 0x0, 0x0, 0x6850}, 0x40000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x442, 0x8c) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x9, 0x0, 0xfd, 0x0, 0x9, 0x16048, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x8, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) close(0x3) capget(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x8, 0x13, 0x7}) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nodiscard}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") quotactl_fd$Q_GETINFO(r5, 0x0, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001cfcd18cd4437cefabd47830a88277d2f44ed918ba34697e02a0053b6c4db55d432f6e8cf4044290916cb2a1e897bacb63cb26b987edd5208bc3da202c226389fb0ca9ae05b51ca84d7e1291222606ff804e145"], 0x3c}, 0x1, 0x0, 0x0, 0x272a200870cba85b}, 0xc052) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES32=r3], 0x228}, 0x1, 0x0, 0x0, 0x20000010}, 0x444) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x200006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r7, 0x6000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.706849504s ago: executing program 4 (id=771): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@acl}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x2c020400) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r3 = io_uring_setup(0x4feb, &(0x7f0000000040)={0x0, 0xa6a3, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r5, 0x6000000, 0x63db, 0x7000000) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa600, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x6, 0x8000, 0xffff, 0x0, 0x1, 0x1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00010a00"], 0x14}}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) socket$inet6_udp(0xa, 0x2, 0x0) 36.216051561s ago: executing program 4 (id=780): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x10104, 0x10001, 0xda, 0x5, 0xc31bc7e, 0xffff, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x100c1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket(0x22, 0x803, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xb}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 35.665926027s ago: executing program 4 (id=785): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 35.627383127s ago: executing program 33 (id=785): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 9.784105959s ago: executing program 2 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240"], 0xa0}}, 0x0) r1 = mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r3, 0x8, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 8.84351891s ago: executing program 2 (id=956): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x88, 0x66, 0x0, &(0x7f00000004c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x369551a40a46af53}}, './file0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f00000001c0), 0x0, 0x81, 0x0, 0x1, r1}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x3, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x0, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x80, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x200, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88ce359bdb10043d, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x8001, 0x5, 0x80, 0x4, 0xad, 0x8}) 7.676858593s ago: executing program 5 (id=967): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mountstats\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1, 0x4f, 0xfffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) 7.00610348s ago: executing program 1 (id=968): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0xffa4) 6.628394515s ago: executing program 1 (id=969): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x108e08, 0x1224, 0xffffffff, 0x6, 0x8, 0xf1, 0x9, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x301000, 0x0) syz_io_uring_setup(0x17a7, &(0x7f00000003c0)={0x0, 0xc94d, 0x800, 0x0, 0x30e}, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[], 0x0) 5.826780174s ago: executing program 5 (id=971): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x1040, 0x0, 0x10000, 0x0, 0x2, 0x106, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x1, 0xff88, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1001, 0x20da, 0x8, 0xd, 0x20005, 0x8a6, 0x0, 0xffffbffc, 0x0, 0x400000020000006}, 0x0, 0xffffdffffffffffe, 0xffffffffffffffff, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.826168274s ago: executing program 6 (id=972): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x1040, 0x0, 0x10000, 0x0, 0x2, 0x106, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x894) socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000340)={0x1, 0xff88, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1001, 0x20da, 0x8, 0xd, 0x20005, 0x8a6, 0x0, 0xffffbffc, 0x0, 0x400000020000006}, 0x0, 0xffffdffffffffffe, 0xffffffffffffffff, 0xb) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x4050) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.799700274s ago: executing program 0 (id=973): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x88, 0x66, 0x0, &(0x7f00000004c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x369551a40a46af53}}, './file0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f00000001c0), 0x0, 0x81, 0x0, 0x1, r1}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x3, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x0, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x80, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x200, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88ce359bdb10043d, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x8001, 0x5, 0x80, 0x4, 0xad, 0x8}) 5.715980345s ago: executing program 1 (id=974): r0 = socket$inet6(0xa, 0x4, 0xfffffffc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r5, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x46}], 0x1, 0x5, 0x101, 0x1) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010200bd7000fcdbdf25020000000500060008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4040880) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x7, 0xdf, 0xf34, {{0xd, 0x4, 0x1, 0x1e, 0x34, 0x66, 0x0, 0x8, 0x0, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x1f, 0x95, [@rand_addr=0x64010501, @multicast1, @multicast1, @rand_addr=0x64010101, @broadcast, @broadcast, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x8, &(0x7f0000000980)=ANY=[], &(0x7f0000000480)='GPL\x00', 0xcb3e, 0x0, 0x0, 0x41100, 0x5, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x1, 0x34, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r5, r5, r5], &(0x7f00000007c0)=[{0x3, 0x5, 0x3, 0x2}, {0x3, 0x4, 0xf, 0x1}, {0x2, 0x5, 0xb, 0x9}, {0x3, 0x3, 0x9, 0xc}, {0x4, 0x4, 0x9, 0x2}], 0x10, 0xc}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x2f}, 0xfffffff4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1833000004000000000000000000006f37a56a675efe8e6400"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r9, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0x9}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000080)={r12, 0x9, 0x7fff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000900)={r12, 0x7ff}, &(0x7f0000000940)=0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 4.566334698s ago: executing program 1 (id=975): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x2, 0x0, 0x10ffe, 0x0, 0x8000000000000000, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1235fcce9feb01001800000000000000180000001800000003000000070000000000000a01000000070000000000000b050000"], &(0x7f00000007c0)=""/202, 0x33, 0xca, 0x1, 0x4}, 0x28) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x200000, 0x0) r5 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r5, 0x0, 0xbf5, 0x2000402) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0xd, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, [@alu={0x7, 0x0, 0x1, 0x7, 0xb, 0x80, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x1, 0x6, 0xa, 0x8, 0x50}]}, &(0x7f0000000300)='GPL\x00', 0x101, 0xfd, &(0x7f0000000440)=""/253, 0x1e00, 0x0, '\x00', r2, @lirc_mode2, r3, 0x8, &(0x7f0000000900)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xa, 0xfff, 0xba}, 0x10, 0x0, r4, 0x6, &(0x7f00000009c0)=[0x1, r5], &(0x7f0000000a00)=[{0x5, 0x4}, {0x5, 0x2, 0xf, 0xc}, {0x0, 0x3, 0x8, 0x5}, {0x2, 0x5, 0x10, 0xe}, {0x1, 0x4, 0x9, 0xd}, {0x0, 0x5, 0xf, 0x2}], 0x10, 0x3c}, 0x94) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, 0x0, 0x0, 0x8, 0xfffffffb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000b40)={@tipc=@id={0x1e, 0x3, 0x2, {0x4e23}}, {&(0x7f0000000600)=""/142, 0x8e}, &(0x7f00000006c0), 0x35}, 0xa0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0xffffffffffffff93}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.562126698s ago: executing program 2 (id=976): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x80000, 0x7, 0x4, 0x6, 0x8001, 0x8002}, r0, 0xff6fc00000000002, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09004c748df4c489a14700000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143142, 0xaf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0xa80, &(0x7f0000000280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7:'], 0xb8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000054) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4.531897898s ago: executing program 5 (id=977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x820d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xffffe000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x35, 0xff, 0xd, 0x8, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x4, 0xff, 0x1}, 0xe) sendto$inet(r3, &(0x7f0000000140)="b8524f5d08cf", 0x6, 0x4000, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) listen(r0, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xfeff}}, 0x6, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000028f, 0x10120, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)="87e09faeb4620869e33cf058a1d8baa409ea300e092261bc4ca7ed44467fd81ec921e6e4b63c52b255692707001b6f64", 0x30}, {&(0x7f0000000340)="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", 0x660}], 0x2}}], 0x1, 0x4) 4.451705349s ago: executing program 0 (id=978): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000040), 0x0, 0x3ff) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x9c6}, 0x40, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) accept4(r2, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0xff, 0x9, 0x9, 0x0, 0x4, 0x24000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x56, 0xe75}, 0x10444, 0x4, 0x4a3b, 0x4, 0xa61, 0x8f9, 0x9, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2003, r0, 0xa) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, r3, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x8891, &(0x7f0000e68000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000240)="6bb41d3f", 0x4, 0xc0400c0, 0x0, 0x0) sendto(r4, &(0x7f0000001e00)="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", 0xca9, 0x2000c010, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x3a, 0xce, 0x0, 0x0) 4.39814513s ago: executing program 6 (id=979): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a00000200000000007ad34f"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000003780)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000800)=""/56, 0x38}, {&(0x7f0000000f00)=""/143, 0x8f}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000840)=""/4, 0x4}], 0x7}}], 0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a31000000000800"], 0x64}}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff0000000000000200000908000340000000100900010073797a30000000000c00064000000000007ff20214000000020a010100000000000000000000000a1400000011000126e0d7639b709985dc1381eaee3bb78baea293e8f52d67040c6f69cf61dd4df84eb57742a04a07ef0e0b089b8a00ae3944747614e3350eb650cb03389d85e013156b8d7639d2f8af18fa1216b3ccbf718f6dacdcaaf1f34b425e260d90eaead962cd9bae9c0365373d242cff01f524a75ff223f7a6372382f0390f60f7c19a1cbf096bd5410ea816d4f0"], 0x70}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00679a3600ff07730768432ae4b63db4ab10007e", @ANYRES32=r1, @ANYRES32, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{0x4, 0x9, 0x2, 0x8000}, {0x401, 0x5, 0x6, 0x2828fa07}, {0x6, 0x3}, {0xe, 0xf0, 0x0, 0x79}, {0xffff, 0x7f, 0x0, 0x7}, {0x6, 0x5, 0x8, 0x2}, {0x0, 0xff, 0x7f}, {0x1, 0x2, 0x3, 0x101}, {0x6, 0x93, 0x2, 0x6}, {0x6, 0xc7, 0x26}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000004c0)={r5, 0x1, r3, 0xa}) ptrace(0x8, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094", 0x29}], 0x1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000080282832000000000000000000000808000340000000010800034000002b3108000240000000040800034000000000110001006175746f5f64615f616c6c6f6300000008000340000000000800034000000001"], 0x58}, 0x1, 0x0, 0x0, 0x40800c1}, 0x40000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$evdev(&(0x7f00000001c0), 0x7f, 0x561001) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) msgctl$IPC_RMID(0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000940)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0654e8062a", 0x6}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000da2d8e6d000000000000000007000000890b040a0101027f000000001c000000000000000000000008"], 0x40}, 0x1004c050) 4.092244903s ago: executing program 2 (id=980): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010026bd700000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) close(0xffffffffffffffff) sysinfo(&(0x7f0000000280)=""/208) 3.750208057s ago: executing program 6 (id=981): mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet(0x2, 0xa, 0xfffff7fd) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x7) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000001500)=""/229, &(0x7f0000000000)=0xe5) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34020000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000014000200776731000000000000000000000000000c020880080200801400040002004e237f000001000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220800030002000000c4010980"], 0x234}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000017000000"], 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) unshare(0x22020600) r10 = socket(0x28, 0x801, 0x0) fcntl$setstatus(r10, 0x4, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000040)) 3.386403071s ago: executing program 0 (id=982): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d0008002abd7000ebffffff07000000", @ANYRES32=0x0, @ANYBLOB="040000800500018088000000"], 0x24}], 0x1}, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, r7, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x10}, 0x9, 0xcc24, 0xfffffffffffff0cb, 0x2, 0x0, 0x0, 0x42}) setresuid(r4, r5, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) writev(r3, &(0x7f0000000540)=[{&(0x7f00000002c0)="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", 0xfc}, {&(0x7f0000000440)="76a759ce24484df0e38bfa4bf44a9dbdf9315d7f364516a818518244813c86f5eca5510baeb45412152f7f1ce199690fcb9ca0b658d43ba01d01d78ebcb971d25658892746e90751abfe9679950659496dd3356a22f46267275af815809c38e8750b26e9001e4353b396233fcaeb43211e411707e9aff4c9b2d7f0bd7c962be2ab128f9c6140392cee138e45ba49ad73043b368337a64cc4321bca8224dd64b01d22a18d09f34a26f4956738afb174d993ad2d49c4529bcb51e2b0302d6b7e3c0074c5b1692bbd2e7985ac9f", 0xcc}], 0x2) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000001c0)) sendmmsg$unix(r8, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d5c532a2d64ba06c804fff010000de86c1b89ddd0000000000", @ANYRES64=0x0], 0x20) 3.383670051s ago: executing program 5 (id=983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (fail_nth: 3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 3.132344894s ago: executing program 6 (id=984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x108e08, 0x1224, 0xffffffff, 0x6, 0x8, 0xf1, 0x9, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x301000, 0x0) syz_io_uring_setup(0x17a7, &(0x7f00000003c0)={0x0, 0xc94d, 0x800, 0x0, 0x30e}, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[], 0x0) 3.123243384s ago: executing program 1 (id=985): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="c0b8d3f4cff8794f3de0d973795ff1572dee786f0ab5fd03b86e5d258ecef5d9c2295a8102658f93a001e1acec31f472acef03cd057291fb056dc7e27862fd57a9d7e3f60819d8332b928f9be8d72612ef20f9b998364d68fdf39bb28f87bdf969a4a886627560487df1beb9c4dbc9b169e142bed82b7a0033525c12e85ccfef5fcb3a1fc0a495a264bbe17de88712e71dec4b2e9e84b5492d3ebd5ece1c5942e3db057b7d", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES64=r1], 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0xfe, 0x0, 0x0, 0x5, 0xb6483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x80001}, 0x877, 0x0, 0xffffffff, 0x2, 0x10000000002, 0x80000011, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x2, 0x7, @local, 0xfc47}, 0x1c) shutdown(r3, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fee6df2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(0x0, 0x0) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xffffffffffffff29) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x995a, 0x4e24, 0xa4, 0xa, 0x180, 0x0, 0x11, r10, r11}, {0xe, 0x7, 0x0, 0xfffffffffffffffa, 0x2, 0x7ff, 0x2, 0x461}, {0x7, 0x2, 0x5000, 0xc}, 0x5, 0x6e6bb4, 0x2, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0x3502, 0x3, 0x2, 0x10, 0xb, 0x1dc, 0xff}}, 0xe8) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x4000010, r8, 0xfdda2000) r12 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=r5, @ANYRESOCT=0x0], 0x48}}, 0x0) 2.771294828s ago: executing program 5 (id=986): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x88, 0x66, 0x0, &(0x7f00000004c0)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x369551a40a46af53}}, './file0\x00'}) r2 = socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x1, r4, &(0x7f00000001c0), 0x0, 0x81, 0x0, 0x1, r1}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x3, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x0, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x80, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x200, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88ce359bdb10043d, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0x8001, 0x5, 0x80, 0x4, 0xad, 0x8}) 2.57510183s ago: executing program 6 (id=987): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x1040, 0x0, 0x10000, 0x0, 0x2, 0x106, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x894) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x1, 0xff88, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1001, 0x20da, 0x8, 0xd, 0x20005, 0x8a6, 0x0, 0xffffbffc, 0x0, 0x400000020000006}, 0x0, 0xffffdffffffffffe, 0xffffffffffffffff, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.55830236s ago: executing program 0 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x20, 0x8700, 0x2, 0x4000000, {{0xf, 0x4, 0x3, 0x18, 0x3c, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0x9e, 0x1, 0xa, [{@loopback, 0x2}, {@empty, 0x101}, {@dev={0xac, 0x14, 0x14, 0xf}}]}, @rr={0x7, 0xb, 0x3a, [@broadcast, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x70, r1}) r2 = memfd_secret(0x80000) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x60) write$nbd(r2, &(0x7f0000000240)={0x67446698, 0x0, 0x3, 0x2, 0x2, "302ce946b5aa01650328c3fd0f892c395eed746ea18b67f5dcbc9fb8ea"}, 0x2d) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={0x0}}, 0x4010) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000001}, 0x1) socketpair(0x21, 0x5, 0xd21, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f00000006c0), 0x4) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000940)={0x0}, 0x0) syz_clone3(&(0x7f0000000a00)={0x81000080, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840), {0x13}, &(0x7f0000000880)=""/6, 0x6, 0x0, &(0x7f00000009c0)=[0x0, r7], 0x2, {r2}}, 0x58) (fail_nth: 11) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r8) preadv2(r5, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/50, 0x32}], 0x2, 0x5, 0x9b3, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r3) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000c80)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x401, 0x6, 0x5, 0xf, 0x6}, {0x8, 0xf, 0x1, 0x90, 0x7, 0x40}], ['\x00', '\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) 2.048377776s ago: executing program 0 (id=989): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'veth0\x00'}, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x80}, 0x1040, 0x0, 0x10000, 0x0, 0x2, 0x106, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) perf_event_open(&(0x7f0000000340)={0x1, 0xff88, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1001, 0x20da, 0x8, 0xd, 0x20005, 0x8a6, 0x0, 0xffffbffc, 0x0, 0x400000020000006}, 0x0, 0xffffdffffffffffe, 0xffffffffffffffff, 0xb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x4050) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.76648214s ago: executing program 2 (id=990): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000840)={[{@nodioread_nolock}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x503, &(0x7f0000000300)="$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") keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x127be540ec899dba) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x100, 0x4d) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x70, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @local, {[@hopopts={0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x3}}]}], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "413755404a1c6bfb3d30a214874baaae67771f2e1e623637", "dfc18fe44a362e10ecb6fccb8be3289398e7756a6e5dc5430ef4658a138b1482"}}}}}}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) unshare(0x60000600) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe8, 0x0, 0x8aa, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000, 0x5, 0x6}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff3}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) readv(r4, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/214, 0xd6}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000ac0)=""/102, 0x66}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/176, 0xb0}], 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file1\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) 1.446506223s ago: executing program 1 (id=991): openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c1}, 0x4) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000480), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) gettimeofday(&(0x7f00000000c0), 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 774.120001ms ago: executing program 0 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000e90000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240"], 0xa0}}, 0x0) r1 = mq_open(0x0, 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r3, 0x8, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000080000000000000000000035590000e30000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 509.814334ms ago: executing program 6 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000906010200000000c9a0fd516d46671f0900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x90000004}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x0, 0x0, 0xa, 0xfff0, 0x800}, 0x20) 343.405885ms ago: executing program 2 (id=994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x820d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0xffffe000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x35, 0xff, 0xd, 0x8, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x4, 0xff, 0x1}, 0xe) sendto$inet(r3, &(0x7f0000000140)="b8524f5d08cf", 0x6, 0x4000, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) listen(r0, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xfeff}}, 0x6, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40000000000028f, 0x10120, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)="87e09faeb4620869e33cf058a1d8baa409ea300e092261bc4ca7ed44467fd81ec921e6e4b63c52b255692707001b6f64", 0x30}, {&(0x7f0000000340)="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", 0x660}], 0x2}}], 0x1, 0x4) 0s ago: executing program 5 (id=995): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106630, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES64, @ANYRES64=r0], 0x1, 0x2c3, &(0x7f0000000180)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x81, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2ce, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffdfffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) link(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000fc0000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000021fe000000000000009201000000000010a39b000000000000edcb0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) kernel console output (not intermixed with test programs): 148.886066][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.077566][ T6073] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 149.125048][ T6073] loop3: detected capacity change from 0 to 2048 [ 149.238652][ T3581] Bluetooth: hci0: command 0x1003 tx timeout [ 149.266138][ T5426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.285731][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.450460][ T6081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 149.908743][ T6093] netlink: 52 bytes leftover after parsing attributes in process `syz.2.731'. [ 149.930918][ T6093] bond0: entered promiscuous mode [ 149.938035][ T5082] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.948068][ T6093] batadv0: entered promiscuous mode [ 149.953825][ T6093] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 149.965590][ T6093] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 149.983954][ T6093] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 149.992849][ T6093] bond0: left promiscuous mode [ 150.048772][ T6093] batadv0: left promiscuous mode [ 150.060652][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'. [ 150.181465][ T6097] deleting an unspecified loop device is not supported. [ 150.246833][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.282843][ T6097] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.316268][ T6097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.417110][ T6097] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 150.773722][ T5410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.909779][ T5410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.262809][ T5410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.665887][ T5410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.049370][ T5410]  (unregistering): Released all slaves [ 152.067932][ T5410] bond0 (unregistering): Released all slaves [ 152.161127][ T5410] hsr_slave_0: left promiscuous mode [ 152.172223][ T5410] hsr_slave_1: left promiscuous mode [ 152.207484][ T5410] veth1_macvtap: left promiscuous mode [ 152.222061][ T5410] veth0_macvtap: left promiscuous mode [ 152.248790][ T5410] veth1_vlan: left promiscuous mode [ 152.269905][ T5410] veth0_vlan: left promiscuous mode [ 152.522783][ T6150] x_tables: unsorted underflow at hook 3 [ 152.610316][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.638981][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 152.639000][ T28] audit: type=1400 audit(2000000598.482:966): avc: denied { write } for pid=6154 comm="syz.1.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.671278][ T6155] loop1: detected capacity change from 0 to 512 [ 152.692885][ T6155] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 152.701996][ T6155] EXT4-fs (loop1): orphan cleanup on readonly fs [ 152.737809][ T6155] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 152.749047][ T6155] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.777613][ T6155] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 152.784829][ T6155] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.745: bg 0: block 15: invalid block bitmap [ 152.799750][ T6155] fserror_report: 2 callbacks suppressed [ 152.799768][ T6155] loop1: lost filesystem error report for type 5 error -117 [ 152.809551][ T6155] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 152.825762][ T6155] loop1: lost filesystem error report for type 5 error -117 [ 152.827133][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.841682][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 152.841708][ C1] EXT4-fs (loop1): initial error at time 2000000598: ext4_validate_block_bitmap:432 [ 152.841740][ C1] EXT4-fs (loop1): last error at time 2000000598: ext4_mb_clear_bb:6679 [ 152.868781][ T6155] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.745: data will be lost [ 152.880062][ T6155] EXT4-fs (loop1): 1 truncate cleaned up [ 152.886684][ T6155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.899419][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.906586][ T28] audit: type=1400 audit(2000000598.722:967): avc: denied { write } for pid=6158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.906678][ T6116] bridge_slave_0: entered allmulticast mode [ 152.938556][ T6116] bridge_slave_0: entered promiscuous mode [ 152.945535][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.955727][ T6179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.964638][ T6179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.978099][ T28] audit: type=1400 audit(2000000598.722:968): avc: denied { read write } for pid=6178 comm="syz.4.746" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.981111][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.001559][ T28] audit: type=1400 audit(2000000598.722:969): avc: denied { open } for pid=6178 comm="syz.4.746" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.001597][ T28] audit: type=1400 audit(2000000598.722:970): avc: denied { ioctl } for pid=6178 comm="syz.4.746" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.045222][ T6116] bridge_slave_1: entered allmulticast mode [ 153.067382][ T6182] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.745: iget: bad i_size value: 360287970189639690 [ 153.078606][ T6116] bridge_slave_1: entered promiscuous mode [ 153.089120][ T28] audit: type=1400 audit(2000000598.862:971): avc: denied { write } for pid=6180 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.113997][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 153.143588][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.154206][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.174022][ T6116] team0: Port device team_slave_0 added [ 153.180588][ T6116] team0: Port device team_slave_1 added [ 153.206412][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.213493][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.239906][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.251566][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.260615][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.290126][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.321737][ T6116] hsr_slave_0: entered promiscuous mode [ 153.328049][ T6116] hsr_slave_1: entered promiscuous mode [ 153.347383][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.394765][ T6200] tmpfs: Bad value for 'mpol' [ 153.431404][ T28] audit: type=1400 audit(2000000599.272:972): avc: denied { write } for pid=6185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.454542][ T6200] loop1: detected capacity change from 0 to 1024 [ 153.470882][ T6200] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.482453][ T6200] JBD2: no valid journal superblock found [ 153.488660][ T6200] EXT4-fs (loop1): Could not load journal inode [ 153.509742][ T6206] loop2: detected capacity change from 0 to 512 [ 153.520551][ T28] audit: type=1400 audit(2000000599.332:973): avc: denied { write } for pid=6205 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.572815][ T6206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.593415][ T6200] loop1: detected capacity change from 0 to 512 [ 153.616690][ T6200] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.630709][ T6200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.640310][ T6200] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.749: Allocating blocks 41-42 which overlap fs metadata [ 153.655254][ T6200] loop1: lost filesystem error report for type 5 error -117 [ 153.655803][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 153.669837][ C1] EXT4-fs (loop1): initial error at time 2000000599: ext4_mb_mark_diskspace_used:4222 [ 153.679622][ C1] EXT4-fs (loop1): last error at time 2000000599: ext4_mb_mark_diskspace_used:4222 [ 153.689905][ T6200] Quota error (device loop1): write_blk: dquota write failed [ 153.690183][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 153.698324][ T6200] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.749: Failed to acquire dquot type 0 [ 153.715923][ T6200] loop1: lost filesystem error report for type 5 error -117 [ 153.718796][ T6200] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 153.753596][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.749: corrupted inode contents [ 153.766574][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.770366][ T6200] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.749: mark_inode_dirty error [ 153.783178][ T6116] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.800452][ T6206] Cannot find add_set index 0 as target [ 153.813444][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 153.821541][ T6116] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.830468][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.838584][ T6116] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.843418][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.848280][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.865161][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.749: corrupted inode contents [ 153.878284][ T6116] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.885378][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.885708][ T6200] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.749: mark_inode_dirty error [ 153.908813][ T6116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.918181][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.918773][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.749: corrupted inode contents [ 153.974514][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 153.976161][ T6200] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 154.021644][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.031340][ T6200] loop1: lost filesystem error report for type 5 error -117 [ 154.031749][ T6200] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.749: corrupted inode contents [ 154.056856][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.069560][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.076720][ T5414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.102099][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.109538][ T5414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.118033][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 154.118534][ T6200] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.749: mark_inode_dirty error [ 154.170080][ T6200] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 154.170559][ T6200] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 154.211861][ T6200] loop1: lost filesystem error report for type 5 error -117 [ 154.212470][ T6200] EXT4-fs (loop1): 1 truncate cleaned up [ 154.259277][ T6200] EXT4-fs (loop1): pa ffff888107a03310: logic 1, phys. 41, len 23 [ 154.267515][ T6200] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 154.311727][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.352056][ T6200] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.372077][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.384298][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.431429][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 154.599764][ T6200] loop1: detected capacity change from 0 to 1024 [ 154.652051][ T6200] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 154.664665][ T6200] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.749: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1, max 0(0), depth 0(0) [ 154.683406][ T6200] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 154.684068][ T6200] EXT4-fs (loop1): get root inode failed [ 154.693361][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 154.693408][ C0] EXT4-fs (loop1): initial error at time 2000000600: ext4_ext_check_inode:521: inode 2 [ 154.693572][ C0] EXT4-fs (loop1): last error at time 2000000600: ext4_ext_check_inode:521: inode 2 [ 154.726864][ T6200] EXT4-fs (loop1): mount failed [ 154.735373][ T6116] veth0_vlan: entered promiscuous mode [ 154.746381][ T6116] veth1_vlan: entered promiscuous mode [ 154.769755][ T6116] veth0_macvtap: entered promiscuous mode [ 154.778756][ T6116] veth1_macvtap: entered promiscuous mode [ 154.792486][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.810014][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.825591][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.843924][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.849611][ T6276] loop4: detected capacity change from 0 to 512 [ 154.856741][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 154.868405][ T5418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.884516][ T5418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.899109][ T6276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.903153][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 155.172934][ T6285] Cannot find add_set index 0 as target [ 156.080947][ T3830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.336494][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 156.373128][ T6303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.761'. [ 156.473254][ T6306] 9p: Bad value for 'rfdno' [ 156.490011][ T6306] syz.0.762 (6306): attempted to duplicate a private mapping with mremap. This is not supported. [ 156.506315][ T6308] loop4: detected capacity change from 0 to 512 [ 156.519609][ T6308] ------------[ cut here ]------------ [ 156.525333][ T6308] EA inode 11 i_nlink=0 [ 156.525358][ T6308] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.763/6308 [ 156.540381][ T6308] Modules linked in: [ 156.544589][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.4.763 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.555419][ T6308] Tainted: [W]=WARN [ 156.559262][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.569404][ T6308] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 156.586280][ T6308] Code: 14 5e 98 ff 4c 8d 2d 6d 6a 5c 05 49 8d 7e 40 e8 64 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 98 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 9c d7 03 66 66 66 66 66 66 2e [ 156.610974][ T6308] RSP: 0018:ffffc900001e35a8 EFLAGS: 00010246 [ 156.617926][ T6308] RAX: ffff8881042c0af8 RBX: ffff88811a41da38 RCX: ffffffff81c0cab8 [ 156.626699][ T6308] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3510 [ 156.635186][ T6308] RBP: 000000000000000b R08: 000188811a41d9eb R09: 0000000000000000 [ 156.644054][ T6308] R10: ffffc900001e34d8 R11: 0001c900001e34d8 R12: ffff88811a41d9e8 [ 156.653017][ T6308] R13: ffffffff871d3510 R14: ffff88811a41d9a0 R15: 0000000000000001 [ 156.661685][ T6308] FS: 00007fe00a9bf6c0(0000) GS:ffff8882ae8fe000(0000) knlGS:0000000000000000 [ 156.672016][ T6308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.678736][ T6308] CR2: 00007fcc164b0000 CR3: 000000011a960000 CR4: 00000000003506f0 [ 156.686753][ T6308] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.694904][ T6308] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 156.702951][ T6308] Call Trace: [ 156.706276][ T6308] [ 156.709242][ T6308] ext4_xattr_set_entry+0x77c/0x1010 [ 156.714611][ T6308] ext4_xattr_ibody_set+0x184/0x3c0 [ 156.719879][ T6308] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 156.725845][ T6308] __ext4_expand_extra_isize+0x246/0x280 [ 156.731580][ T6308] __ext4_mark_inode_dirty+0x29b/0x3d0 [ 156.737141][ T6308] ext4_evict_inode+0x8ba/0xe30 [ 156.742059][ T6308] ? __pfx_ext4_evict_inode+0x10/0x10 [ 156.747560][ T6308] evict+0x2af/0x510 [ 156.751685][ T6308] ? __dquot_initialize+0x146/0x7c0 [ 156.757011][ T6308] iput+0x41a/0x580 [ 156.760975][ T6308] ext4_process_orphan+0x1a9/0x1c0 [ 156.766215][ T6308] ext4_orphan_cleanup+0x69c/0x9f0 [ 156.771501][ T6308] ext4_fill_super+0x3408/0x37c0 [ 156.782226][ T6308] ? set_blocksize+0x14c/0x270 [ 156.787616][ T6308] ? setup_bdev_super+0x30e/0x370 [ 156.793686][ T6308] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.799747][ T6308] get_tree_bdev_flags+0x291/0x300 [ 156.805516][ T6308] ? __pfx_ext4_fill_super+0x10/0x10 [ 156.811512][ T6308] get_tree_bdev+0x1f/0x30 [ 156.816506][ T6308] ext4_get_tree+0x1c/0x30 [ 156.821535][ T6308] vfs_get_tree+0x57/0x1d0 [ 156.827938][ T6308] do_new_mount+0x288/0x8d0 [ 156.832597][ T6308] path_mount+0x4d0/0xbc0 [ 156.837050][ T6308] __se_sys_mount+0x28c/0x2e0 [ 156.841844][ T6308] __x64_sys_mount+0x67/0x80 [ 156.846508][ T6308] x64_sys_call+0x2d61/0x3020 [ 156.851313][ T6308] do_syscall_64+0x12c/0x3b0 [ 156.856016][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.862072][ T6308] RIP: 0033:0x7fe00bf6e04a [ 156.866539][ T6308] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.886263][ T6308] RSP: 002b:00007fe00a9bee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.894910][ T6308] RAX: ffffffffffffffda RBX: 00007fe00a9beee0 RCX: 00007fe00bf6e04a [ 156.902974][ T6308] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fe00a9beea0 [ 156.911625][ T6308] RBP: 0000200000000180 R08: 00007fe00a9beee0 R09: 0000000000000000 [ 156.919611][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 156.927620][ T6308] R13: 00007fe00a9beea0 R14: 000000000000047a R15: 0000200000000080 [ 156.939154][ T6308] [ 156.942667][ T6308] ---[ end trace 0000000000000000 ]--- [ 156.951762][ T6308] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.763: bit already cleared for inode 11 [ 156.965005][ T6308] loop4: lost filesystem error report for type 5 error -117 [ 156.976222][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.992693][ C0] EXT4-fs (loop4): initial error at time 2000000602: ext4_free_inode:354 [ 157.003102][ C0] EXT4-fs (loop4): last error at time 2000000602: ext4_free_inode:354 [ 157.037738][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 157.054079][ T6308] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 157.064590][ T6308] loop4: lost filesystem error report for type 5 error -117 [ 157.064846][ T6308] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 157.080959][ T6308] loop4: lost filesystem error report for type 5 error -117 [ 157.081207][ T6308] EXT4-fs (loop4): 1 orphan inode deleted [ 157.094718][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.183807][ T6318] loop2: detected capacity change from 0 to 8192 [ 157.303427][ T6330] tmpfs: Bad value for 'mpol' [ 157.323773][ T6330] loop5: detected capacity change from 0 to 1024 [ 157.331720][ T6330] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 157.343968][ T6330] JBD2: no valid journal superblock found [ 157.349745][ T6330] EXT4-fs (loop5): Could not load journal inode [ 157.428488][ T3830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.449357][ T6331] loop5: detected capacity change from 0 to 512 [ 157.470752][ T6335] loop4: detected capacity change from 0 to 1024 [ 157.505191][ T6331] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.526965][ T6335] EXT4-fs: inline encryption not supported [ 157.558269][ T6331] EXT4-fs (loop5): orphan cleanup on readonly fs [ 157.577317][ T6331] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.769: Allocating blocks 41-42 which overlap fs metadata [ 157.594112][ T6335] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 157.624831][ T6331] loop5: lost filesystem error report for type 5 error -117 [ 157.625162][ T6331] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.769: Failed to acquire dquot type 0 [ 157.632653][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 157.632679][ C1] EXT4-fs (loop5): initial error at time 2000000603: ext4_mb_mark_diskspace_used:4222 [ 157.632711][ C1] EXT4-fs (loop5): last error at time 2000000603: ext4_mb_mark_diskspace_used:4222 [ 157.671925][ T6331] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 157.688028][ T6331] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.769: corrupted inode contents [ 157.700653][ T6331] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 157.700829][ T6331] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.769: mark_inode_dirty error [ 157.724203][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.745417][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 157.745434][ T28] audit: type=1400 audit(2000000603.592:1129): avc: denied { write } for pid=6334 comm="syz.4.771" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.784686][ T6331] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 157.784834][ T6331] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.769: corrupted inode contents [ 157.826081][ T6331] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.769: mark_inode_dirty error [ 157.848497][ T6331] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.769: corrupted inode contents [ 157.862338][ T28] audit: type=1400 audit(2000000603.712:1130): avc: denied { write } for pid=6334 comm="syz.4.771" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.894017][ T6331] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 157.911931][ T6331] fserror_report: 1 callbacks suppressed [ 157.911957][ T6331] loop5: lost filesystem error report for type 5 error -117 [ 157.927511][ T6331] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.769: corrupted inode contents [ 158.000229][ T6331] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.769: mark_inode_dirty error [ 158.021643][ T6331] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 158.041795][ T6331] loop5: lost filesystem error report for type 5 error -117 [ 158.042256][ T6331] EXT4-fs (loop5): 1 truncate cleaned up [ 158.058063][ T6331] EXT4-fs (loop5): pa ffff888107a03310: logic 1, phys. 41, len 23 [ 158.066053][ T6331] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 158.077276][ T6331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.529005][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.742385][ T6356] 9p: Bad value for 'rfdno' [ 158.754375][ T6356] loop2: detected capacity change from 0 to 256 [ 158.811285][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 158.820549][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 158.880110][ T28] audit: type=1400 audit(2000000604.722:1131): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.909318][ T6365] Driver unsupported XDP return value 0 on prog (id 178) dev N/A, expect packet loss! [ 158.945600][ T28] audit: type=1400 audit(2000000604.722:1132): avc: denied { write } for pid=3830 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.985875][ T28] audit: type=1400 audit(2000000604.722:1133): avc: denied { write } for pid=3830 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.009525][ T28] audit: type=1400 audit(2000000604.722:1134): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.032230][ T28] audit: type=1400 audit(2000000604.722:1135): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.058510][ T6370] loop1: detected capacity change from 0 to 512 [ 159.066311][ T28] audit: type=1400 audit(2000000604.722:1136): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.089736][ T28] audit: type=1400 audit(2000000604.722:1137): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.110629][ T6370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.115141][ T6375] FAULT_INJECTION: forcing a failure. [ 159.115141][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 159.141656][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.2.782 Tainted: G W syzkaller #0 PREEMPT(full) [ 159.141693][ T6375] Tainted: [W]=WARN [ 159.141700][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.141751][ T6375] Call Trace: [ 159.141758][ T6375] [ 159.141766][ T6375] __dump_stack+0x1d/0x30 [ 159.141796][ T6375] dump_stack_lvl+0x95/0xd0 [ 159.141819][ T6375] dump_stack+0x15/0x1b [ 159.141906][ T6375] should_fail_ex+0x263/0x280 [ 159.141939][ T6375] should_failslab+0x8c/0xb0 [ 159.141990][ T6375] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 159.142092][ T6375] ? kzalloc_noprof+0x52/0xa0 [ 159.142116][ T6375] ? ip6_rthdr_dup+0x37/0x50 [ 159.142141][ T6375] kmemdup_noprof+0x2b/0x70 [ 159.142249][ T6375] ip6_rthdr_dup+0x37/0x50 [ 159.142273][ T6375] ip6_setup_cork+0x603/0x680 [ 159.142337][ T6375] ip6_append_data+0x11f/0x1d0 [ 159.142359][ T6375] ? __pfx_raw6_getfrag+0x10/0x10 [ 159.142398][ T6375] rawv6_sendmsg+0x108b/0x1230 [ 159.142448][ T6375] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 159.142544][ T6375] ? __pfx_inet_sendmsg+0x10/0x10 [ 159.142573][ T6375] inet_sendmsg+0xc5/0xd0 [ 159.142600][ T6375] sock_write_iter+0x2c7/0x320 [ 159.142639][ T6375] do_iter_readv_writev+0x4fd/0x5a0 [ 159.142805][ T6375] vfs_writev+0x2e1/0x900 [ 159.142897][ T6375] do_writev+0xe9/0x210 [ 159.142919][ T6375] __x64_sys_writev+0x45/0x50 [ 159.142980][ T6375] x64_sys_call+0x1c0c/0x3020 [ 159.143008][ T6375] do_syscall_64+0x12c/0x3b0 [ 159.143038][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.143103][ T6375] RIP: 0033:0x7f3614aecdd9 [ 159.143121][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.143143][ T6375] RSP: 002b:00007f361353f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 159.143171][ T6375] RAX: ffffffffffffffda RBX: 00007f3614d65fa0 RCX: 00007f3614aecdd9 [ 159.143192][ T6375] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 159.143207][ T6375] RBP: 00007f361353f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.143221][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.143241][ T6375] R13: 00007f3614d66038 R14: 00007f3614d65fa0 R15: 00007fff45622338 [ 159.143264][ T6375] [ 159.388021][ T28] audit: type=1400 audit(2000000604.722:1138): avc: denied { write } for pid=3830 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.398687][ T6373] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 159.427327][ T6343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.491553][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.783'. [ 159.505218][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 159.527792][ T6383] xt_l2tp: invalid flags combination: 0 [ 159.534143][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.640671][ T6383] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.666557][ T6383] bond0: (slave lo): Error: Device can not be enslaved while up [ 159.675398][ T6394] FAULT_INJECTION: forcing a failure. [ 159.675398][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.694493][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.5.789 Tainted: G W syzkaller #0 PREEMPT(full) [ 159.694531][ T6394] Tainted: [W]=WARN [ 159.694540][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.694557][ T6394] Call Trace: [ 159.694600][ T6394] [ 159.694611][ T6394] __dump_stack+0x1d/0x30 [ 159.694644][ T6394] dump_stack_lvl+0x95/0xd0 [ 159.694674][ T6394] dump_stack+0x15/0x1b [ 159.694783][ T6394] should_fail_ex+0x263/0x280 [ 159.694871][ T6394] should_fail+0xb/0x20 [ 159.694962][ T6394] should_fail_usercopy+0x1a/0x20 [ 159.695014][ T6394] _copy_from_user+0x1c/0xb0 [ 159.695058][ T6394] ___sys_recvmsg+0xaa/0x3b0 [ 159.695164][ T6394] do_recvmmsg+0x1ef/0x560 [ 159.695210][ T6394] ? fput+0x8f/0xc0 [ 159.695237][ T6394] __x64_sys_recvmmsg+0xe5/0x170 [ 159.695264][ T6394] x64_sys_call+0x80f/0x3020 [ 159.695292][ T6394] do_syscall_64+0x12c/0x3b0 [ 159.695379][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.695507][ T6394] RIP: 0033:0x7fc00336cdd9 [ 159.695526][ T6394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.695545][ T6394] RSP: 002b:00007fc001dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.695566][ T6394] RAX: ffffffffffffffda RBX: 00007fc0035e5fa0 RCX: 00007fc00336cdd9 [ 159.695580][ T6394] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000004 [ 159.695597][ T6394] RBP: 00007fc001dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 159.695692][ T6394] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 159.695710][ T6394] R13: 00007fc0035e6038 R14: 00007fc0035e5fa0 R15: 00007fff1031f2a8 [ 159.695737][ T6394] [ 159.914018][ T6401] loop5: detected capacity change from 0 to 512 [ 159.958771][ T6401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.154448][ T36] bridge_slave_1: left allmulticast mode [ 160.160210][ T36] bridge_slave_1: left promiscuous mode [ 160.166324][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.175471][ T36] bridge_slave_0: left allmulticast mode [ 160.181747][ T36] bridge_slave_0: left promiscuous mode [ 160.187717][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.267589][ T6415] Cannot find add_set index 0 as target [ 160.409399][ T6419] FAULT_INJECTION: forcing a failure. [ 160.409399][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.443626][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.466111][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.2.794 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.466150][ T6419] Tainted: [W]=WARN [ 160.466201][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.466218][ T6419] Call Trace: [ 160.466228][ T6419] [ 160.466238][ T6419] __dump_stack+0x1d/0x30 [ 160.466279][ T6419] dump_stack_lvl+0x95/0xd0 [ 160.466324][ T6419] dump_stack+0x15/0x1b [ 160.466344][ T6419] should_fail_ex+0x263/0x280 [ 160.466373][ T6419] should_fail+0xb/0x20 [ 160.466398][ T6419] should_fail_usercopy+0x1a/0x20 [ 160.466450][ T6419] _copy_from_user+0x1c/0xb0 [ 160.466487][ T6419] ___sys_sendmsg+0xc1/0x1e0 [ 160.466529][ T6419] __x64_sys_sendmsg+0xd4/0x160 [ 160.466626][ T6419] x64_sys_call+0x194c/0x3020 [ 160.466652][ T6419] do_syscall_64+0x12c/0x3b0 [ 160.466734][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.466760][ T6419] RIP: 0033:0x7f3614aecdd9 [ 160.466775][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.466799][ T6419] RSP: 002b:00007f361353f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.466854][ T6419] RAX: ffffffffffffffda RBX: 00007f3614d65fa0 RCX: 00007f3614aecdd9 [ 160.466868][ T6419] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 160.466881][ T6419] RBP: 00007f361353f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.466894][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.466906][ T6419] R13: 00007f3614d66038 R14: 00007f3614d65fa0 R15: 00007fff45622338 [ 160.466930][ T6419] [ 160.686419][ T6422] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 160.706604][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.800168][ T36] bond0 (unregistering): Released all slaves [ 160.807650][ T6424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 160.835709][ T36] bond1 (unregistering): (slave lo): Releasing backup interface [ 160.857740][ T36] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 160.889488][ T36] bond1 (unregistering): Released all slaves [ 160.901912][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.921543][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 160.985158][ T6430] veth0_macvtap: left promiscuous mode [ 161.005993][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'. [ 161.037934][ T6441] veth0_macvtap: left promiscuous mode [ 161.082838][ T36] hsr_slave_0: left promiscuous mode [ 161.097922][ T36] hsr_slave_1: left promiscuous mode [ 161.103769][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.114085][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.162403][ T6455] FAULT_INJECTION: forcing a failure. [ 161.162403][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 161.175139][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.0.803 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.175180][ T6455] Tainted: [W]=WARN [ 161.175190][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.175262][ T6455] Call Trace: [ 161.175269][ T6455] [ 161.175277][ T6455] __dump_stack+0x1d/0x30 [ 161.175307][ T6455] dump_stack_lvl+0x95/0xd0 [ 161.175333][ T6455] dump_stack+0x15/0x1b [ 161.175358][ T6455] should_fail_ex+0x263/0x280 [ 161.175464][ T6455] should_failslab+0x8c/0xb0 [ 161.175505][ T6455] kmem_cache_alloc_noprof+0x66/0x3f0 [ 161.175540][ T6455] ? __inet_hash_connect+0x8a8/0x14a0 [ 161.175611][ T6455] __inet_hash_connect+0x8a8/0x14a0 [ 161.175650][ T6455] ? __pfx___inet6_check_established+0x10/0x10 [ 161.175737][ T6455] inet6_hash_connect+0xba/0xd0 [ 161.175773][ T6455] tcp_v6_connect+0xa33/0xcd0 [ 161.175801][ T6455] ? mptcp_token_new_connect+0x321/0x400 [ 161.175868][ T6455] mptcp_connect+0x5d8/0x900 [ 161.175907][ T6455] __inet_stream_connect+0x169/0x7f0 [ 161.175978][ T6455] ? tcp_sendmsg_fastopen+0x172/0x520 [ 161.176005][ T6455] ? should_failslab+0x8c/0xb0 [ 161.176042][ T6455] ? __kmalloc_cache_noprof+0x18a/0x400 [ 161.176107][ T6455] tcp_sendmsg_fastopen+0x43a/0x520 [ 161.176138][ T6455] mptcp_sendmsg_fastopen+0x122/0x320 [ 161.176249][ T6455] mptcp_sendmsg+0xe96/0x1100 [ 161.176330][ T6455] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 161.176370][ T6455] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 161.176401][ T6455] inet6_sendmsg+0xc5/0xd0 [ 161.176455][ T6455] ? __pfx_inet6_sendmsg+0x10/0x10 [ 161.176490][ T6455] ____sys_sendmsg+0x3c1/0x5b0 [ 161.176527][ T6455] ___sys_sendmsg+0x195/0x1e0 [ 161.176623][ T6455] __x64_sys_sendmsg+0xd4/0x160 [ 161.176652][ T6455] x64_sys_call+0x194c/0x3020 [ 161.176679][ T6455] do_syscall_64+0x12c/0x3b0 [ 161.176706][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.176762][ T6455] RIP: 0033:0x7f1c444bcdd9 [ 161.176844][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.176870][ T6455] RSP: 002b:00007f1c42f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.176896][ T6455] RAX: ffffffffffffffda RBX: 00007f1c44735fa0 RCX: 00007f1c444bcdd9 [ 161.176914][ T6455] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 161.176928][ T6455] RBP: 00007f1c42f17090 R08: 0000000000000000 R09: 0000000000000000 [ 161.176953][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.176966][ T6455] R13: 00007f1c44736038 R14: 00007f1c44735fa0 R15: 00007fff264bffd8 [ 161.177048][ T6455] [ 161.497714][ T6460] loop5: detected capacity change from 0 to 128 [ 161.509715][ T36] team0 (unregistering): Port device team_slave_1 removed [ 161.525991][ T36] team0 (unregistering): Port device team_slave_0 removed [ 161.616572][ T6460] 9p: Bad value for 'rfdno' [ 161.622956][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 161.846832][ T36] IPVS: stop unused estimator thread 0... [ 161.881380][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.886983][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 161.888799][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.904602][ T6386] bridge_slave_0: entered allmulticast mode [ 161.911304][ T6386] bridge_slave_0: entered promiscuous mode [ 161.918513][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.925658][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.933275][ T6386] bridge_slave_1: entered allmulticast mode [ 161.939941][ T6386] bridge_slave_1: entered promiscuous mode [ 161.968614][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.048684][ T6486] hsr_slave_1 (unregistering): left promiscuous mode [ 162.077137][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.106504][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 162.134787][ T6386] team0: Port device team_slave_0 added [ 162.141677][ T6386] team0: Port device team_slave_1 added [ 162.181552][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.192941][ T6501] FAULT_INJECTION: forcing a failure. [ 162.192941][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 162.204151][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.226113][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.0.812 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.226236][ T6501] Tainted: [W]=WARN [ 162.226337][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.226388][ T6501] Call Trace: [ 162.226444][ T6501] [ 162.226476][ T6501] __dump_stack+0x1d/0x30 [ 162.226571][ T6501] dump_stack_lvl+0x95/0xd0 [ 162.226698][ T6501] dump_stack+0x15/0x1b [ 162.226827][ T6501] should_fail_ex+0x263/0x280 [ 162.226935][ T6501] should_failslab+0x8c/0xb0 [ 162.227110][ T6501] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 162.227222][ T6501] ? __alloc_skb+0x2d6/0x690 [ 162.227382][ T6501] __alloc_skb+0x2d6/0x690 [ 162.227491][ T6501] ? __alloc_skb+0x200/0x690 [ 162.227601][ T6501] netlink_alloc_large_skb+0xbf/0xf0 [ 162.227730][ T6501] netlink_sendmsg+0x40c/0x6f0 [ 162.227884][ T6501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.228126][ T6501] ____sys_sendmsg+0x563/0x5b0 [ 162.228194][ T6501] ___sys_sendmsg+0x195/0x1e0 [ 162.228380][ T6501] __x64_sys_sendmsg+0xd4/0x160 [ 162.228476][ T6501] x64_sys_call+0x194c/0x3020 [ 162.228630][ T6501] do_syscall_64+0x12c/0x3b0 [ 162.228727][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.228804][ T6501] RIP: 0033:0x7f1c444bcdd9 [ 162.228864][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.228930][ T6501] RSP: 002b:00007f1c42f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.228997][ T6501] RAX: ffffffffffffffda RBX: 00007f1c44735fa0 RCX: 00007f1c444bcdd9 [ 162.229122][ T6501] RDX: 0000000000000000 RSI: 0000200000001ec0 RDI: 0000000000000004 [ 162.229169][ T6501] RBP: 00007f1c42f17090 R08: 0000000000000000 R09: 0000000000000000 [ 162.229258][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.229316][ T6501] R13: 00007f1c44736038 R14: 00007f1c44735fa0 R15: 00007fff264bffd8 [ 162.229409][ T6501] [ 162.426598][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.438114][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.445240][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.479090][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.562573][ T6506] netlink: 'syz.0.813': attribute type 13 has an invalid length. [ 162.595928][ T6506] netlink: 'syz.0.813': attribute type 17 has an invalid length. [ 162.603908][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.611329][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.705267][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.715211][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.758115][ T6460] netlink: 'syz.5.806': attribute type 4 has an invalid length. [ 162.801966][ T6506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.819585][ T6506] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.843212][ T6506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.853042][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 162.853056][ T28] audit: type=1400 audit(2000001120.696:1160): avc: denied { ioctl } for pid=6502 comm="syz.0.813" path="socket:[15458]" dev="sockfs" ino=15458 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.887761][ T6515] loop2: detected capacity change from 0 to 512 [ 162.901496][ T6517] loop5: detected capacity change from 0 to 512 [ 162.915305][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.922467][ T6506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.935141][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.942277][ T6506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.951063][ T6517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.968304][ T6515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.994754][ T6506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.005290][ T6506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.020576][ T6506] veth1_vlan: left promiscuous mode [ 163.026970][ T6506] veth0_vlan: left promiscuous mode [ 163.033269][ T6506] veth0_vlan: entered promiscuous mode [ 163.042820][ T6506] veth1_vlan: entered promiscuous mode [ 163.057726][ T6506] veth1_macvtap: left promiscuous mode [ 163.076406][ T6506] veth0_macvtap: left promiscuous mode [ 163.083251][ T6506] veth0_macvtap: entered promiscuous mode [ 163.102533][ T6506] veth1_macvtap: entered promiscuous mode [ 163.111501][ T6506] geneve1: left promiscuous mode [ 163.118523][ T6506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.137832][ T6506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.159505][ T6506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.177712][ T6506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.201784][ T6506] geneve1: entered promiscuous mode [ 163.283955][ T6386] hsr_slave_0: entered promiscuous mode [ 163.290201][ T6386] hsr_slave_1: entered promiscuous mode [ 163.296406][ T6386] debugfs: 'hsr0' already exists in 'hsr' [ 163.654873][ T6527] Cannot find add_set index 0 as target [ 163.662249][ T6539] Cannot find add_set index 0 as target [ 163.670515][ T6386] Cannot create hsr debugfs directory [ 163.717647][ T28] audit: type=1400 audit(2000001121.556:1161): avc: denied { write } for pid=6530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.771943][ T28] audit: type=1400 audit(2000001121.586:1162): avc: denied { write } for pid=6543 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.802741][ T28] audit: type=1400 audit(2000001121.606:1163): avc: denied { egress } for pid=36 comm="kworker/u8:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 163.830713][ T28] audit: type=1400 audit(2000001121.606:1164): avc: denied { sendto } for pid=36 comm="kworker/u8:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 163.866034][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 164.035159][ T6386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.042476][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.074145][ T6556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.820'. [ 164.074722][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.099231][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.111594][ T6553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.120401][ T6556] loop5: detected capacity change from 0 to 1764 [ 164.122905][ T6553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.216615][ T28] audit: type=1400 audit(2000001378.062:1165): avc: denied { write } for pid=6555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.245324][ T6386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.274204][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.282124][ T6386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.301674][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.323380][ T28] audit: type=1400 audit(2000001378.162:1166): avc: denied { write } for pid=6570 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.365671][ T6553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.376204][ T6553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.393933][ T6386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.406819][ T28] audit: type=1400 audit(2000001378.242:1167): avc: denied { setopt } for pid=6575 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.431261][ T6386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.446709][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 164.458898][ T6553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.469536][ T6553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.529881][ T6553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.540398][ T6553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.581937][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.602034][ T6386] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.617510][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.624790][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.656250][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.663459][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.687271][ T6386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.697659][ T6386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.839042][ T6603] FAULT_INJECTION: forcing a failure. [ 164.839042][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 164.866434][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.825 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.866476][ T6603] Tainted: [W]=WARN [ 164.866484][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.866562][ T6603] Call Trace: [ 164.866569][ T6603] [ 164.866577][ T6603] __dump_stack+0x1d/0x30 [ 164.866602][ T6603] dump_stack_lvl+0x95/0xd0 [ 164.866707][ T6603] dump_stack+0x15/0x1b [ 164.866728][ T6603] should_fail_ex+0x263/0x280 [ 164.866799][ T6603] ? sctp_association_new+0x71/0x1190 [ 164.866918][ T6603] should_failslab+0x8c/0xb0 [ 164.866961][ T6603] __kmalloc_cache_noprof+0x5f/0x400 [ 164.867052][ T6603] sctp_association_new+0x71/0x1190 [ 164.867105][ T6603] ? sctp_has_association+0x7a/0xa0 [ 164.867170][ T6603] ? sctp_v4_scope+0x140/0x150 [ 164.867204][ T6603] sctp_connect_new_asoc+0x1a8/0x3a0 [ 164.867262][ T6603] sctp_sendmsg+0xfff/0x1d60 [ 164.867303][ T6603] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 164.867344][ T6603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 164.867405][ T6603] inet_sendmsg+0xc5/0xd0 [ 164.867438][ T6603] ? __pfx_inet_sendmsg+0x10/0x10 [ 164.867471][ T6603] ____sys_sendmsg+0x519/0x5b0 [ 164.867521][ T6603] ___sys_sendmsg+0x195/0x1e0 [ 164.867637][ T6603] __x64_sys_sendmsg+0xd4/0x160 [ 164.867665][ T6603] x64_sys_call+0x194c/0x3020 [ 164.867698][ T6603] do_syscall_64+0x12c/0x3b0 [ 164.867780][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.867803][ T6603] RIP: 0033:0x7fb01cbecdd9 [ 164.867824][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.867850][ T6603] RSP: 002b:00007fb01b63f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.867932][ T6603] RAX: ffffffffffffffda RBX: 00007fb01ce65fa0 RCX: 00007fb01cbecdd9 [ 164.868011][ T6603] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 164.868030][ T6603] RBP: 00007fb01b63f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.868048][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.868065][ T6603] R13: 00007fb01ce66038 R14: 00007fb01ce65fa0 R15: 00007fff73ab5928 [ 164.868096][ T6603] [ 165.213295][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.275111][ T28] audit: type=1400 audit(2000001379.012:1168): avc: denied { getopt } for pid=6575 comm="syz.5.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.411599][ T6386] veth0_vlan: entered promiscuous mode [ 165.421391][ T6386] veth1_vlan: entered promiscuous mode [ 165.441004][ T6386] veth0_macvtap: entered promiscuous mode [ 165.449903][ T6386] veth1_macvtap: entered promiscuous mode [ 165.462114][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.475145][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.508183][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.517131][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.538087][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.557422][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.594619][ T28] audit: type=1400 audit(2000001379.432:1169): avc: denied { bind } for pid=6629 comm="syz.6.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.614964][ T6628] loop1: detected capacity change from 0 to 4096 [ 165.652575][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.374562][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.381854][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.389589][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.6.832'. [ 166.416325][ T6654] loop6: detected capacity change from 0 to 1764 [ 166.532526][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.581838][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.616005][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.733465][ T5418] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.742494][ T5418] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.751568][ T5418] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.760775][ T5418] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.989653][ T5414] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.081724][ T6689] loop5: detected capacity change from 0 to 1024 [ 167.115466][ T5414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.128024][ T6689] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.139135][ T6689] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 167.149120][ T6689] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.838: inode #1: comm syz.5.838: iget: illegal inode # [ 167.163937][ T6689] loop5: lost filesystem error report for type 5 error -117 [ 167.165792][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 167.179613][ C1] EXT4-fs (loop5): initial error at time 2000001381: ext4_get_journal_inode:5896 [ 167.188788][ C1] EXT4-fs (loop5): last error at time 2000001381: ext4_get_journal_inode:5896 [ 167.211461][ T6689] EXT4-fs (loop5): no journal found [ 167.218227][ T6689] EXT4-fs (loop5): can't get journal size [ 167.247293][ T5414] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.272410][ T6689] EXT4-fs (loop5): failed to initialize system zone (-22) [ 167.281487][ T6689] EXT4-fs (loop5): mount failed [ 167.354120][ T6697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=6697 comm=syz.0.841 [ 167.382605][ T5414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.492542][ T5414] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.562976][ T6697] netlink: 36 bytes leftover after parsing attributes in process `syz.0.841'. [ 167.618770][ T5414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.729184][ T5414] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.764963][ T6704] loop6: detected capacity change from 0 to 512 [ 167.845413][ T6709] FAULT_INJECTION: forcing a failure. [ 167.845413][ T6709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.876338][ T5414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.932131][ T6704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.956031][ T6709] CPU: 0 UID: 0 PID: 6709 Comm: syz.1.844 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.956072][ T6709] Tainted: [W]=WARN [ 167.956079][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.956091][ T6709] Call Trace: [ 167.956099][ T6709] [ 167.956161][ T6709] __dump_stack+0x1d/0x30 [ 167.956193][ T6709] dump_stack_lvl+0x95/0xd0 [ 167.956221][ T6709] dump_stack+0x15/0x1b [ 167.956292][ T6709] should_fail_ex+0x263/0x280 [ 167.956331][ T6709] should_fail+0xb/0x20 [ 167.956365][ T6709] should_fail_usercopy+0x1a/0x20 [ 167.956469][ T6709] _copy_from_user+0x1c/0xb0 [ 167.956512][ T6709] memdup_user_nul+0x5f/0xe0 [ 167.956548][ T6709] sel_commit_bools_write+0xd2/0x270 [ 167.956615][ T6709] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 167.956648][ T6709] vfs_write+0x269/0x9f0 [ 167.956677][ T6709] ? __rcu_read_unlock+0x4e/0x70 [ 167.956698][ T6709] ? __fget_files+0x184/0x1c0 [ 167.956779][ T6709] ? mutex_lock+0x57/0x90 [ 167.956820][ T6709] ksys_write+0xdc/0x1a0 [ 167.956860][ T6709] __x64_sys_write+0x40/0x50 [ 167.956889][ T6709] x64_sys_call+0x27e1/0x3020 [ 167.956916][ T6709] do_syscall_64+0x12c/0x3b0 [ 167.957020][ T6709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.957043][ T6709] RIP: 0033:0x7fb01cbecdd9 [ 167.957075][ T6709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.957096][ T6709] RSP: 002b:00007fb01b63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.957123][ T6709] RAX: ffffffffffffffda RBX: 00007fb01ce65fa0 RCX: 00007fb01cbecdd9 [ 167.957143][ T6709] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000003 [ 167.957230][ T6709] RBP: 00007fb01b63f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.957247][ T6709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.957289][ T6709] R13: 00007fb01ce66038 R14: 00007fb01ce65fa0 R15: 00007fff73ab5928 [ 167.957317][ T6709] [ 169.014299][ T6722] Cannot find add_set index 0 as target [ 169.093469][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.846'. [ 169.363680][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 169.363700][ T28] audit: type=1400 audit(2000001383.202:1177): avc: denied { write } for pid=6691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.429654][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.446027][ T28] audit: type=1400 audit(2000001383.282:1178): avc: denied { watch } for pid=6736 comm="syz.0.850" path="/167" dev="tmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.473282][ T6723] loop1: detected capacity change from 0 to 1764 [ 169.480227][ T28] audit: type=1400 audit(2000001383.322:1179): avc: denied { write } for pid=6735 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.599515][ T6744] tmpfs: Bad value for 'mpol' [ 169.738341][ T6744] loop6: detected capacity change from 0 to 1024 [ 169.754834][ T6744] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 169.775809][ T6744] JBD2: no valid journal superblock found [ 169.775828][ T6744] EXT4-fs (loop6): Could not load journal inode [ 169.801928][ T6744] loop6: detected capacity change from 0 to 512 [ 169.812853][ T6744] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.825135][ T6744] EXT4-fs (loop6): orphan cleanup on readonly fs [ 169.846192][ T6744] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.851: Allocating blocks 41-42 which overlap fs metadata [ 169.862322][ T6744] loop6: lost filesystem error report for type 5 error -117 [ 169.866236][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 169.882354][ C0] EXT4-fs (loop6): initial error at time 2000001383: ext4_mb_mark_diskspace_used:4222 [ 169.889485][ T28] audit: type=1400 audit(2000001383.732:1180): avc: denied { write } for pid=6747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.893276][ C0] EXT4-fs (loop6): last error at time 2000001383: ext4_mb_mark_diskspace_used:4222 [ 169.926253][ T6744] Quota error (device loop6): write_blk: dquota write failed [ 169.934385][ T6744] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 169.947067][ T6744] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.851: Failed to acquire dquot type 0 [ 169.958418][ T6744] loop6: lost filesystem error report for type 5 error -117 [ 169.966941][ T28] audit: type=1400 audit(2000001383.812:1181): avc: denied { write } for pid=6765 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.997245][ T6744] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 170.011946][ T6744] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.851: corrupted inode contents [ 170.025473][ T6744] fserror_report: 5 callbacks suppressed [ 170.025493][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.031611][ T6744] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.851: mark_inode_dirty error [ 170.052042][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.053367][ T6744] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.851: corrupted inode contents [ 170.077166][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.079362][ T6744] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.851: mark_inode_dirty error [ 170.100635][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.101113][ T6744] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.851: corrupted inode contents [ 170.122908][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.123363][ T6744] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 170.141886][ T6744] loop6: lost filesystem error report for type 5 error -117 [ 170.142406][ T6744] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.851: corrupted inode contents [ 170.162688][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.163084][ T6744] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.851: mark_inode_dirty error [ 170.183693][ T6744] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 170.183889][ T6744] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 170.202082][ T6744] loop6: lost filesystem error report for type 5 error -117 [ 170.202530][ T6744] EXT4-fs (loop6): 1 truncate cleaned up [ 170.216393][ T6744] EXT4-fs (loop6): pa ffff888107a03310: logic 1, phys. 41, len 23 [ 170.224422][ T6744] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 170.238219][ T6744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.253929][ T6744] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.272958][ T28] audit: type=1400 audit(2000001384.112:1182): avc: denied { write } for pid=6770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.331957][ T28] audit: type=1400 audit(2000001384.172:1183): avc: denied { write } for pid=6781 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.390313][ T6744] loop6: detected capacity change from 0 to 1024 [ 170.397602][ T6744] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 170.408330][ T6744] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.851: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1, max 0(0), depth 0(0) [ 170.425325][ T6744] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 170.425517][ T6744] EXT4-fs (loop6): get root inode failed [ 170.441321][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 170.441374][ C1] EXT4-fs (loop6): initial error at time 2000001384: ext4_ext_check_inode:521: inode 2 [ 170.441456][ C1] EXT4-fs (loop6): last error at time 2000001384: ext4_ext_check_inode:521: inode 2 [ 170.473560][ T6744] EXT4-fs (loop6): mount failed [ 170.540567][ T6789] loop6: detected capacity change from 0 to 512 [ 170.599697][ T6789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.666366][ T6798] loop1: detected capacity change from 0 to 512 [ 171.005369][ T6804] Cannot find add_set index 0 as target [ 171.015221][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.710642][ T6815] Cannot find add_set index 0 as target [ 171.999424][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'. [ 172.182891][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.192846][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.267970][ T6832] loop1: detected capacity change from 0 to 512 [ 172.292533][ T6832] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 172.307360][ T6834] tmpfs: Bad value for 'mpol' [ 172.326808][ T6832] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 172.411920][ T6832] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 172.432928][ T6834] loop2: detected capacity change from 0 to 1024 [ 172.580570][ T6834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 172.597618][ T6834] JBD2: no valid journal superblock found [ 172.613061][ T6834] EXT4-fs (loop2): Could not load journal inode [ 172.688436][ T6834] loop2: detected capacity change from 0 to 512 [ 172.715969][ T6834] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.733887][ T6834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.741538][ T6834] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.867: Allocating blocks 41-42 which overlap fs metadata [ 172.755188][ T6834] loop2: lost filesystem error report for type 5 error -117 [ 172.755425][ T6834] Quota error (device loop2): write_blk: dquota write failed [ 172.770247][ T6834] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.867: Failed to acquire dquot type 0 [ 172.781768][ T6834] loop2: lost filesystem error report for type 5 error -117 [ 172.782135][ T6834] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 172.812468][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.867: corrupted inode contents [ 172.824518][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 172.824570][ C1] EXT4-fs (loop2): initial error at time 2000001386: ext4_mb_mark_diskspace_used:4222 [ 172.824650][ C1] EXT4-fs (loop2): last error at time 2000001386: mb_free_blocks:2049: inode 12: block 14 [ 172.860777][ T6834] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.861104][ T6834] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.867: mark_inode_dirty error [ 172.886278][ T6834] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 172.886650][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.867: corrupted inode contents [ 172.907692][ T6834] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.867: mark_inode_dirty error [ 172.920307][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.867: corrupted inode contents [ 172.934753][ T6834] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 172.944047][ T6834] loop2: lost filesystem error report for type 5 error -117 [ 172.948870][ T6834] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.867: corrupted inode contents [ 172.974820][ T6834] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.867: mark_inode_dirty error [ 172.988402][ T6834] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 172.999625][ T6834] loop2: lost filesystem error report for type 5 error -117 [ 173.001197][ T6834] EXT4-fs (loop2): 1 truncate cleaned up [ 173.016431][ T6834] EXT4-fs (loop2): pa ffff888107a03310: logic 1, phys. 41, len 23 [ 173.024490][ T6834] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 173.038169][ T6834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.053037][ T6834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.266096][ T6834] loop2: detected capacity change from 0 to 1024 [ 173.303664][ T6834] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 173.330107][ T6834] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.867: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1, max 0(0), depth 0(0) [ 173.366861][ T6834] EXT4-fs (loop2): get root inode failed [ 173.372606][ T6834] EXT4-fs (loop2): mount failed [ 173.415952][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 173.422471][ C0] EXT4-fs (loop2): initial error at time 2000001643: ext4_ext_check_inode:521: inode 2 [ 173.432202][ C0] EXT4-fs (loop2): last error at time 2000001643: ext4_ext_check_inode:521: inode 2 [ 174.414307][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.879'. [ 174.506327][ T6963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.174691][ T6972] Cannot find add_set index 0 as target [ 175.466108][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 175.484169][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.502983][ T6980] set_capacity_and_notify: 1 callbacks suppressed [ 175.502997][ T6980] loop2: detected capacity change from 0 to 2048 [ 175.528579][ T6980] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 64 [ 175.576726][ T6991] tmpfs: Bad value for 'mpol' [ 175.602837][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 175.602853][ T28] audit: type=1400 audit(2000001901.451:1185): avc: denied { bind } for pid=6978 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.642424][ T28] audit: type=1400 audit(2000001901.451:1186): avc: denied { name_bind } for pid=6978 comm="syz.2.882" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 175.663202][ T28] audit: type=1400 audit(2000001901.451:1187): avc: denied { node_bind } for pid=6978 comm="syz.2.882" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 175.689022][ T6991] loop1: detected capacity change from 0 to 1024 [ 175.705479][ T28] audit: type=1400 audit(2000001901.551:1188): avc: denied { write } for pid=6973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.777998][ T28] audit: type=1400 audit(2000001901.631:1189): avc: denied { write } for pid=7002 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.805007][ T6991] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 175.837342][ T6991] JBD2: no valid journal superblock found [ 175.843138][ T6991] EXT4-fs (loop1): Could not load journal inode [ 175.891030][ T6991] loop1: detected capacity change from 0 to 512 [ 175.908452][ T6991] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.918395][ T6991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.933978][ T6991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.884: Allocating blocks 41-42 which overlap fs metadata [ 175.948607][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 175.953244][ T6991] Quota error (device loop1): write_blk: dquota write failed [ 175.960911][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 175.960976][ C0] EXT4-fs (loop1): initial error at time 2000001901: ext4_mb_mark_diskspace_used:4222 [ 175.961059][ C0] EXT4-fs (loop1): last error at time 2000001901: ext4_mb_mark_diskspace_used:4222 [ 175.997150][ T6991] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 176.008974][ T6991] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.884: Failed to acquire dquot type 0 [ 176.020532][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 176.034105][ T6991] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 176.057064][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.884: corrupted inode contents [ 176.069257][ T6991] fserror_report: 6 callbacks suppressed [ 176.069283][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.076209][ T6991] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.884: mark_inode_dirty error [ 176.106125][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.107269][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.884: corrupted inode contents [ 176.130319][ T7023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7023 comm=syz.5.888 [ 176.151663][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.153197][ T28] audit: type=1400 audit(2000001902.001:1190): avc: denied { write } for pid=7009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.188527][ T6991] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.884: mark_inode_dirty error [ 176.190211][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.888'. [ 176.202541][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.209543][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.884: corrupted inode contents [ 176.226978][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'. [ 176.240132][ T7029] netlink: 'syz.2.890': attribute type 8 has an invalid length. [ 176.248073][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'. [ 176.260266][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.260468][ T6991] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 176.278485][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 176.278674][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.884: corrupted inode contents [ 176.297809][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.298508][ T6991] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.884: mark_inode_dirty error [ 176.320793][ T7032] netlink: 'syz.6.889': attribute type 33 has an invalid length. [ 176.328781][ T7033] loop2: detected capacity change from 0 to 512 [ 176.330742][ T28] audit: type=1400 audit(2000001902.141:1191): avc: denied { write } for pid=7031 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.358271][ T7033] EXT4-fs: Ignoring removed bh option [ 176.360162][ T7032] netlink: 152 bytes leftover after parsing attributes in process `syz.6.889'. [ 176.373060][ T6991] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 176.375188][ T6991] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 176.394677][ T7033] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.401174][ T6991] loop1: lost filesystem error report for type 5 error -117 [ 176.402001][ T6991] EXT4-fs (loop1): 1 truncate cleaned up [ 176.415592][ T6991] EXT4-fs (loop1): pa ffff888107a03310: logic 1, phys. 41, len 23 [ 176.423444][ T6991] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 176.433921][ T7033] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 176.444391][ T7033] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 176.452846][ T7033] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.460352][ T7033] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 176.470052][ T7033] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.890: Failed to acquire dquot type 1 [ 176.481259][ T7033] loop2: lost filesystem error report for type 5 error -5 [ 176.494141][ T7033] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.890: Invalid block bitmap block 0 in block_group 0 [ 176.502121][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 176.502271][ C0] EXT4-fs (loop2): last error at time 2000001902: ext4_acquire_dquot:7034 [ 176.552781][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.553408][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.575523][ T7033] loop2: lost filesystem error report for type 5 error -117 [ 176.576357][ T7033] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.890: Invalid block bitmap block 0 in block_group 0 [ 176.606093][ T7043] netlink: 'syz.0.892': attribute type 8 has an invalid length. [ 176.614067][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.643300][ T7033] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.890: Invalid block bitmap block 0 in block_group 0 [ 176.657499][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.666745][ T7033] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.890: Failed to acquire dquot type 1 [ 176.693700][ T7033] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.890: Failed to acquire dquot type 1 [ 176.720234][ T7033] EXT4-fs (loop2): 1 orphan inode deleted [ 176.851137][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.891564][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.470418][ T7096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7096 comm=syz.0.901 [ 178.906693][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 178.982279][ T7098] loop2: detected capacity change from 0 to 512 [ 179.124029][ T7098] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.144869][ T7098] EXT4-fs (loop2): 1 orphan inode deleted [ 179.165998][ T7098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.179291][ T7098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.255443][ T7109] tmpfs: Bad value for 'mpol' [ 179.335009][ T7111] tmpfs: Bad value for 'mpol' [ 179.423492][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.908'. [ 179.432589][ T7118] netlink: 'syz.6.908': attribute type 8 has an invalid length. [ 179.440262][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.908'. [ 179.457611][ T7111] loop5: detected capacity change from 0 to 1024 [ 179.472476][ T7111] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 179.490890][ T7119] loop6: detected capacity change from 0 to 512 [ 179.497524][ T7119] EXT4-fs: Ignoring removed bh option [ 179.503025][ T7119] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.520424][ T7111] JBD2: no valid journal superblock found [ 179.526373][ T7111] EXT4-fs (loop5): Could not load journal inode [ 179.557839][ T7119] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 179.570935][ T7111] loop5: detected capacity change from 0 to 512 [ 179.577829][ T7119] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 179.599958][ T7119] EXT4-fs (loop6): orphan cleanup on readonly fs [ 179.608867][ T7111] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.633360][ T7111] EXT4-fs (loop5): orphan cleanup on readonly fs [ 179.662879][ T7111] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.905: Allocating blocks 41-42 which overlap fs metadata [ 179.676502][ T7111] fserror_report: 4 callbacks suppressed [ 179.676522][ T7111] loop5: lost filesystem error report for type 5 error -117 [ 179.715857][ T7119] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.908: Failed to acquire dquot type 1 [ 179.734545][ T7119] loop6: lost filesystem error report for type 5 error -5 [ 179.762191][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 179.775879][ C1] EXT4-fs (loop5): initial error at time 2000002161: ext4_mb_mark_diskspace_used:4222 [ 179.785645][ C1] EXT4-fs (loop5): last error at time 2000002161: ext4_mb_mark_diskspace_used:4222 [ 179.795082][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 179.801652][ C1] EXT4-fs (loop6): last error at time 2000002161: ext4_acquire_dquot:7034 [ 179.811452][ T7119] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.908: Invalid block bitmap block 0 in block_group 0 [ 179.811746][ T7111] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.905: Failed to acquire dquot type 0 [ 179.824922][ T7119] loop6: lost filesystem error report for type 5 error -117 [ 179.836535][ T7111] loop5: lost filesystem error report for type 5 error -117 [ 179.844435][ T7111] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 179.866528][ T7119] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.908: Invalid block bitmap block 0 in block_group 0 [ 179.866565][ T7111] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.905: corrupted inode contents [ 179.879859][ T7119] loop6: lost filesystem error report for type 5 error -117 [ 179.891853][ T7111] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 179.906056][ T7111] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.905: mark_inode_dirty error [ 179.921370][ T7126] FAULT_INJECTION: forcing a failure. [ 179.921370][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.945712][ T7119] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.908: Invalid block bitmap block 0 in block_group 0 [ 179.961142][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.0.910 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.961252][ T7126] Tainted: [W]=WARN [ 179.961261][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.961276][ T7126] Call Trace: [ 179.961283][ T7126] [ 179.961292][ T7126] __dump_stack+0x1d/0x30 [ 179.961322][ T7126] dump_stack_lvl+0x95/0xd0 [ 179.961442][ T7126] dump_stack+0x15/0x1b [ 179.961467][ T7126] should_fail_ex+0x263/0x280 [ 179.961504][ T7126] should_fail+0xb/0x20 [ 179.961529][ T7126] should_fail_usercopy+0x1a/0x20 [ 179.961574][ T7126] _copy_from_user+0x1c/0xb0 [ 179.961615][ T7126] __sys_bpf+0x183/0x7e0 [ 179.961703][ T7126] __x64_sys_bpf+0x41/0x50 [ 179.961778][ T7126] x64_sys_call+0x10cb/0x3020 [ 179.961808][ T7126] do_syscall_64+0x12c/0x3b0 [ 179.961841][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.961864][ T7126] RIP: 0033:0x7f1c444bcdd9 [ 179.961881][ T7126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.962021][ T7126] RSP: 002b:00007f1c42ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.962048][ T7126] RAX: ffffffffffffffda RBX: 00007f1c44736180 RCX: 00007f1c444bcdd9 [ 179.962088][ T7126] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 179.962102][ T7126] RBP: 00007f1c42ed5090 R08: 0000000000000000 R09: 0000000000000000 [ 179.962115][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.962197][ T7126] R13: 00007f1c44736218 R14: 00007f1c44736180 R15: 00007fff264bffd8 [ 179.962219][ T7126] [ 180.143943][ T7119] loop6: lost filesystem error report for type 5 error -117 [ 180.147653][ T7111] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 180.166605][ T7119] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.908: Failed to acquire dquot type 1 [ 180.168133][ T7111] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.905: corrupted inode contents [ 180.175823][ T7119] loop6: lost filesystem error report for type 5 error -28 [ 180.205924][ T7111] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 180.213596][ T7111] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.905: mark_inode_dirty error [ 180.234357][ T7119] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.908: Failed to acquire dquot type 1 [ 180.245506][ T7119] loop6: lost filesystem error report for type 5 error -28 [ 180.245805][ T7111] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.905: corrupted inode contents [ 180.264942][ T7119] EXT4-fs (loop6): 1 orphan inode deleted [ 180.299749][ T7119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.313876][ T7111] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 180.342279][ T7111] loop5: lost filesystem error report for type 5 error -117 [ 180.342465][ T7111] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.905: corrupted inode contents [ 180.371678][ T7111] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.905: mark_inode_dirty error [ 180.394333][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.404003][ T7111] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 180.415651][ T7111] loop5: lost filesystem error report for type 5 error -117 [ 180.416274][ T7111] EXT4-fs (loop5): 1 truncate cleaned up [ 180.432039][ T7111] EXT4-fs (loop5): pa ffff888107a03230: logic 1, phys. 41, len 23 [ 180.440118][ T7111] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 180.511324][ T7111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.531438][ T7137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7137 comm=syz.1.914 [ 180.548214][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 180.614018][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.378498][ T7154] tmpfs: Bad value for 'mpol' [ 181.388172][ T7156] tmpfs: Bad value for 'mpol' [ 181.422786][ T7154] loop1: detected capacity change from 0 to 1024 [ 181.448724][ T7154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 181.483983][ T7154] JBD2: no valid journal superblock found [ 181.505699][ T7154] EXT4-fs (loop1): Could not load journal inode [ 181.589786][ T7154] loop1: detected capacity change from 0 to 512 [ 181.627812][ T7154] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.665652][ T7154] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.689026][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.923'. [ 181.698251][ T7159] netlink: 'syz.5.923': attribute type 8 has an invalid length. [ 181.711323][ T7154] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.920: Allocating blocks 41-42 which overlap fs metadata [ 181.711380][ T7159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.923'. [ 181.736276][ T7162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 181.758120][ T7164] loop5: detected capacity change from 0 to 512 [ 181.764812][ T7164] EXT4-fs: Ignoring removed bh option [ 181.770268][ T7164] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.777041][ T7154] __quota_error: 28 callbacks suppressed [ 181.777054][ T7154] Quota error (device loop1): write_blk: dquota write failed [ 181.790115][ T7154] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 181.800402][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 181.800449][ C0] EXT4-fs (loop1): initial error at time 2000002163: ext4_mb_mark_diskspace_used:4222 [ 181.800532][ C0] EXT4-fs (loop1): last error at time 2000002163: ext4_mb_mark_diskspace_used:4222 [ 181.831625][ T7164] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 181.842402][ T7154] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.920: Failed to acquire dquot type 0 [ 181.853727][ T7164] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 181.861786][ T7164] EXT4-fs (loop5): orphan cleanup on readonly fs [ 181.868329][ T7154] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 181.883438][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.920: corrupted inode contents [ 181.883670][ T7164] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 181.905269][ T7164] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 181.915063][ T7164] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.923: Failed to acquire dquot type 1 [ 181.935778][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 181.942296][ C1] EXT4-fs (loop5): last error at time 2000002163: ext4_acquire_dquot:7034 [ 181.965063][ T7154] fserror_report: 4 callbacks suppressed [ 181.965161][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 181.984446][ T7164] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.923: Invalid block bitmap block 0 in block_group 0 [ 182.007247][ T7154] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.920: mark_inode_dirty error [ 182.018576][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.039901][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.920: corrupted inode contents [ 182.052110][ T7164] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.923: Invalid block bitmap block 0 in block_group 0 [ 182.061640][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.074544][ T7154] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.920: mark_inode_dirty error [ 182.079043][ T7164] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.923: Invalid block bitmap block 0 in block_group 0 [ 182.083698][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.118497][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.920: corrupted inode contents [ 182.139664][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.141434][ T7154] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 182.159320][ T7164] Quota error (device loop5): write_blk: dquota write failed [ 182.163227][ T7154] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.920: corrupted inode contents [ 182.177390][ T7164] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 182.185158][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.188521][ T7154] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.920: mark_inode_dirty error [ 182.198047][ T7164] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.923: Failed to acquire dquot type 1 [ 182.207667][ T7164] Quota error (device loop5): write_blk: dquota write failed [ 182.210395][ T7154] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.225987][ T7164] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 182.230883][ T7154] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 182.241294][ T7164] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.923: Failed to acquire dquot type 1 [ 182.267805][ T7154] EXT4-fs (loop1): 1 truncate cleaned up [ 182.268219][ T7164] EXT4-fs (loop5): 1 orphan inode deleted [ 182.282735][ T7154] EXT4-fs (loop1): pa ffff888107a03230: logic 1, phys. 41, len 23 [ 182.283734][ T7164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.291647][ T7154] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 182.314364][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.340625][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.363512][ T7179] FAULT_INJECTION: forcing a failure. [ 182.363512][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 182.377084][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.5.927 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.377191][ T7179] Tainted: [W]=WARN [ 182.377201][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.377217][ T7179] Call Trace: [ 182.377226][ T7179] [ 182.377235][ T7179] __dump_stack+0x1d/0x30 [ 182.377265][ T7179] dump_stack_lvl+0x95/0xd0 [ 182.377317][ T7179] dump_stack+0x15/0x1b [ 182.377407][ T7179] should_fail_ex+0x263/0x280 [ 182.377446][ T7179] should_failslab+0x8c/0xb0 [ 182.377532][ T7179] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 182.377659][ T7179] ? __alloc_skb+0x2d6/0x690 [ 182.377694][ T7179] ? __rtnl_unlock+0x95/0xb0 [ 182.377714][ T7179] __alloc_skb+0x2d6/0x690 [ 182.377778][ T7179] ? __alloc_skb+0x200/0x690 [ 182.377823][ T7179] netlink_ack+0xfd/0x500 [ 182.377897][ T7179] netlink_rcv_skb+0x192/0x220 [ 182.377926][ T7179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.378000][ T7179] rtnetlink_rcv+0x1c/0x30 [ 182.378033][ T7179] netlink_unicast+0x5a8/0x680 [ 182.378069][ T7179] netlink_sendmsg+0x5c8/0x6f0 [ 182.378113][ T7179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.378148][ T7179] ____sys_sendmsg+0x563/0x5b0 [ 182.378248][ T7179] ___sys_sendmsg+0x195/0x1e0 [ 182.378295][ T7179] __x64_sys_sendmsg+0xd4/0x160 [ 182.378383][ T7179] x64_sys_call+0x194c/0x3020 [ 182.378471][ T7179] do_syscall_64+0x12c/0x3b0 [ 182.378501][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.378532][ T7179] RIP: 0033:0x7fc00336cdd9 [ 182.378554][ T7179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.378578][ T7179] RSP: 002b:00007fc001dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.378616][ T7179] RAX: ffffffffffffffda RBX: 00007fc0035e5fa0 RCX: 00007fc00336cdd9 [ 182.378635][ T7179] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 182.378653][ T7179] RBP: 00007fc001dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 182.378670][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.378763][ T7179] R13: 00007fc0035e6038 R14: 00007fc0035e5fa0 R15: 00007fff1031f2a8 [ 182.378857][ T7179] [ 182.379765][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.492511][ T7182] loop5: detected capacity change from 0 to 512 [ 183.708139][ T7208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7208 comm=syz.5.937 [ 183.708192][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 183.774769][ T7211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.938'. [ 183.774811][ T7211] netlink: 'syz.2.938': attribute type 8 has an invalid length. [ 183.774852][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.938'. [ 183.902345][ T7212] loop2: detected capacity change from 0 to 512 [ 183.909333][ T7212] EXT4-fs: Ignoring removed bh option [ 183.914780][ T7212] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.931150][ T7212] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 183.953276][ T7212] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 183.961387][ T7212] EXT4-fs (loop2): orphan cleanup on readonly fs [ 183.962267][ T7215] tmpfs: Bad value for 'mpol' [ 183.968680][ T7212] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 183.992413][ T7212] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 184.005182][ T7212] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.938: Failed to acquire dquot type 1 [ 184.023632][ T7212] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.938: Invalid block bitmap block 0 in block_group 0 [ 184.046223][ T7215] loop1: detected capacity change from 0 to 1024 [ 184.052982][ T3581] Bluetooth: hci0: sending frame failed (-49) [ 184.059217][ T5426] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 184.068780][ T7215] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.079181][ T7212] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.938: Invalid block bitmap block 0 in block_group 0 [ 184.093750][ T7215] JBD2: no valid journal superblock found [ 184.099568][ T7215] EXT4-fs (loop1): Could not load journal inode [ 184.106428][ T7212] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.938: Invalid block bitmap block 0 in block_group 0 [ 184.124929][ T7212] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.938: Failed to acquire dquot type 1 [ 184.138813][ T7212] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.938: Failed to acquire dquot type 1 [ 184.150214][ C0] EXT4-fs (loop2): error count since last fsck: 5 [ 184.150404][ C0] EXT4-fs (loop2): last error at time 2000002165: ext4_acquire_dquot:7034 [ 184.196771][ T7212] EXT4-fs (loop2): 1 orphan inode deleted [ 184.204043][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.235123][ T7215] loop1: detected capacity change from 0 to 512 [ 184.246154][ T7212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.274644][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.939: iget: bad i_size value: 38620345925642 [ 184.287304][ T7215] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.287553][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.939: couldn't read orphan inode 15 (err -117) [ 184.309176][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.319904][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.351797][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 184.365262][ T7225] loop2: detected capacity change from 0 to 512 [ 184.381990][ T7225] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 184.403939][ T7225] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 184.418141][ T3392] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 184.436344][ T7227] loop1: detected capacity change from 0 to 512 [ 184.444972][ T7225] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 184.446162][ T3392] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.495821][ T7227] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.943: inode has both inline data and extents flags [ 184.545299][ T7227] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.545779][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 184.561416][ C1] EXT4-fs (loop1): initial error at time 2000002166: ext4_orphan_get:1397: inode 15 [ 184.570873][ C1] EXT4-fs (loop1): last error at time 2000002166: ext4_orphan_get:1397: inode 15 [ 184.589876][ T7227] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.943: couldn't read orphan inode 15 (err -117) [ 184.605088][ T7227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.835223][ T7227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.899370][ T7227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.342638][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.949'. [ 185.400676][ T7251] loop2: detected capacity change from 0 to 1764 [ 185.557028][ T7227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.629188][ T7227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.733930][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.749129][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.759472][ T7258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7258 comm=syz.0.951 [ 185.769413][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.773688][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 185.790167][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.828674][ T7263] tmpfs: Bad value for 'mpol' [ 185.834129][ T7261] tmpfs: Bad value for 'mpol' [ 185.854687][ T7263] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 185.865365][ T7263] JBD2: no valid journal superblock found [ 185.871137][ T7263] EXT4-fs (loop6): Could not load journal inode [ 185.913017][ T7263] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.923590][ T7263] EXT4-fs (loop6): orphan cleanup on readonly fs [ 185.942887][ T7263] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.953: Allocating blocks 41-42 which overlap fs metadata [ 185.957047][ T7263] fserror_report: 18 callbacks suppressed [ 185.957090][ T7263] loop6: lost filesystem error report for type 5 error -117 [ 185.965624][ T7263] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.953: Failed to acquire dquot type 0 [ 185.965806][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 185.965854][ C1] EXT4-fs (loop6): initial error at time 2000002167: ext4_mb_mark_diskspace_used:4222 [ 185.965923][ C1] EXT4-fs (loop6): last error at time 2000002167: ext4_mb_mark_diskspace_used:4222 [ 186.027331][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 186.090816][ T7263] loop6: lost filesystem error report for type 5 error -117 [ 186.093097][ T7263] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 186.120418][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 186.134783][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.141728][ T7263] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.953: corrupted inode contents [ 186.163598][ T7263] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 186.165145][ T7263] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.953: mark_inode_dirty error [ 186.196909][ T7263] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.953: corrupted inode contents [ 186.259316][ T7263] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.953: mark_inode_dirty error [ 186.271120][ T7263] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.953: corrupted inode contents [ 186.283032][ T7263] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 186.291676][ T7263] loop6: lost filesystem error report for type 5 error -117 [ 186.316161][ T3581] Bluetooth: hci0: command 0x1003 tx timeout [ 186.325400][ T7263] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.953: corrupted inode contents [ 186.341937][ T5426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.376560][ T7263] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.953: mark_inode_dirty error [ 186.388755][ T7263] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 186.398316][ T7263] loop6: lost filesystem error report for type 5 error -117 [ 186.398529][ T7263] EXT4-fs (loop6): 1 truncate cleaned up [ 186.411855][ T7263] EXT4-fs (loop6): pa ffff888107a034d0: logic 1, phys. 41, len 23 [ 186.419801][ T7263] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 186.430736][ T7263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.469100][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.550707][ T7286] set_capacity_and_notify: 2 callbacks suppressed [ 186.550723][ T7286] loop6: detected capacity change from 0 to 512 [ 186.613046][ T7286] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.628314][ T7286] EXT4-fs (loop6): mount failed [ 186.648652][ T7286] loop6: detected capacity change from 0 to 512 [ 186.713170][ T7286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.766048][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.918527][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=7301 comm=syz.0.964 [ 186.941181][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 187.082108][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 187.082127][ T28] audit: type=1400 audit(2000002168.928:1277): avc: denied { create } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.109884][ T28] audit: type=1400 audit(2000002168.958:1278): avc: denied { bind } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.129651][ T28] audit: type=1400 audit(2000002168.958:1279): avc: denied { listen } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.150041][ T28] audit: type=1400 audit(2000002168.958:1280): avc: denied { connect } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.171443][ T28] audit: type=1400 audit(2000002168.958:1281): avc: denied { read } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.204409][ T28] audit: type=1400 audit(2000002169.018:1282): avc: denied { accept } for pid=7306 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.238797][ T28] audit: type=1400 audit(2000002169.088:1283): avc: denied { name_bind } for pid=7306 comm="syz.1.966" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 187.266304][ T28] audit: type=1400 audit(2000002169.088:1284): avc: denied { node_bind } for pid=7306 comm="syz.1.966" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 188.410046][ T5426] Bluetooth: hci1: command 0x1003 tx timeout [ 188.426171][ T3581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 189.117909][ T7318] tmpfs: Bad value for 'mpol' [ 189.147393][ T28] audit: type=1400 audit(2000002170.998:1285): avc: denied { sys_module } for pid=7315 comm="syz.1.969" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 189.318600][ T7324] loop5: detected capacity change from 0 to 512 [ 189.332152][ T7326] loop6: detected capacity change from 0 to 512 [ 189.347628][ T7324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.390474][ T28] audit: type=1400 audit(2000002171.188:1286): avc: denied { create } for pid=7331 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.493243][ T7326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.619209][ T7337] Cannot find add_set index 0 as target [ 190.597992][ T6116] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.612492][ T7343] loop2: detected capacity change from 0 to 512 [ 190.642937][ T7343] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.976: corrupted in-inode xattr: invalid ea_ino [ 190.729893][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.754048][ T7343] fserror_report: 6 callbacks suppressed [ 190.754063][ T7343] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.760675][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 190.788362][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.6.979'. [ 190.797379][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 190.797401][ C1] EXT4-fs (loop2): initial error at time 2000002172: ext4_iget_extra_inode:5128: inode 15 [ 190.797432][ C1] EXT4-fs (loop2): last error at time 2000002172: ext4_iget_extra_inode:5128: inode 15 [ 190.827906][ T7343] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.976: couldn't read orphan inode 15 (err -117) [ 190.845842][ T7343] loop2: lost filesystem error report for type 5 error -117 [ 190.848504][ T7343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.871528][ T7350] geneve1: entered promiscuous mode [ 190.885485][ T7354] loop6: detected capacity change from 0 to 1024 [ 190.900188][ T7354] EXT4-fs: test_dummy_encryption option not supported [ 190.995134][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.924602][ T7372] FAULT_INJECTION: forcing a failure. [ 191.924602][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 191.999444][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.5.983 Tainted: G W syzkaller #0 PREEMPT(full) [ 191.999490][ T7372] Tainted: [W]=WARN [ 191.999498][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.999559][ T7372] Call Trace: [ 191.999567][ T7372] [ 191.999576][ T7372] __dump_stack+0x1d/0x30 [ 191.999605][ T7372] dump_stack_lvl+0x95/0xd0 [ 191.999628][ T7372] dump_stack+0x15/0x1b [ 191.999654][ T7372] should_fail_ex+0x263/0x280 [ 191.999733][ T7372] ? sctp_association_new+0x71/0x1190 [ 191.999824][ T7372] should_failslab+0x8c/0xb0 [ 191.999868][ T7372] __kmalloc_cache_noprof+0x5f/0x400 [ 191.999924][ T7372] sctp_association_new+0x71/0x1190 [ 191.999966][ T7372] ? sctp_has_association+0x7a/0xa0 [ 191.999988][ T7372] ? sctp_v4_scope+0x140/0x150 [ 192.000070][ T7372] sctp_connect_new_asoc+0x1a8/0x3a0 [ 192.000108][ T7372] sctp_sendmsg+0xfff/0x1d60 [ 192.000166][ T7372] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 192.000208][ T7372] ? __pfx_sctp_sendmsg+0x10/0x10 [ 192.000324][ T7372] inet_sendmsg+0xc5/0xd0 [ 192.000350][ T7372] ? __pfx_inet_sendmsg+0x10/0x10 [ 192.000378][ T7372] ____sys_sendmsg+0x519/0x5b0 [ 192.000413][ T7372] ___sys_sendmsg+0x195/0x1e0 [ 192.000459][ T7372] __x64_sys_sendmsg+0xd4/0x160 [ 192.000523][ T7372] x64_sys_call+0x194c/0x3020 [ 192.000548][ T7372] do_syscall_64+0x12c/0x3b0 [ 192.000650][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.000753][ T7372] RIP: 0033:0x7fc00336cdd9 [ 192.000768][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.000815][ T7372] RSP: 002b:00007fc001dbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.000839][ T7372] RAX: ffffffffffffffda RBX: 00007fc0035e5fa0 RCX: 00007fc00336cdd9 [ 192.000853][ T7372] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 192.000867][ T7372] RBP: 00007fc001dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 192.000918][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.000931][ T7372] R13: 00007fc0035e6038 R14: 00007fc0035e5fa0 R15: 00007fff1031f2a8 [ 192.000951][ T7372] [ 192.285791][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 192.285807][ T28] audit: type=1400 audit(2000002174.118:1305): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 192.358640][ T28] audit: type=1400 audit(2000002174.118:1306): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 192.486575][ T28] audit: type=1400 audit(2000002174.338:1307): avc: denied { create } for pid=7381 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.506141][ T28] audit: type=1400 audit(2000002174.358:1308): avc: denied { setopt } for pid=7381 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.580560][ T7386] FAULT_INJECTION: forcing a failure. [ 192.580560][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 192.603377][ T7388] loop6: detected capacity change from 0 to 512 [ 192.611389][ T28] audit: type=1400 audit(2000002174.428:1309): avc: denied { create } for pid=7385 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.639976][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.0.988 Tainted: G W syzkaller #0 PREEMPT(full) [ 192.640042][ T7386] Tainted: [W]=WARN [ 192.640048][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.640115][ T7386] Call Trace: [ 192.640124][ T7386] [ 192.640134][ T7386] __dump_stack+0x1d/0x30 [ 192.640173][ T7386] dump_stack_lvl+0x95/0xd0 [ 192.640201][ T7386] dump_stack+0x15/0x1b [ 192.640267][ T7386] should_fail_ex+0x263/0x280 [ 192.640319][ T7386] should_failslab+0x8c/0xb0 [ 192.640361][ T7386] kmem_cache_alloc_noprof+0x66/0x3f0 [ 192.640436][ T7386] ? copy_fs_struct+0x31/0x110 [ 192.640466][ T7386] copy_fs_struct+0x31/0x110 [ 192.640522][ T7386] copy_fs+0x57/0xf0 [ 192.640545][ T7386] copy_process+0xffa/0x2370 [ 192.640574][ T7386] kernel_clone+0x1a5/0x5e0 [ 192.640638][ T7386] __se_sys_clone3+0x1f5/0x230 [ 192.640684][ T7386] __x64_sys_clone3+0x31/0x40 [ 192.640734][ T7386] x64_sys_call+0x580/0x3020 [ 192.640763][ T7386] do_syscall_64+0x12c/0x3b0 [ 192.640845][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.640875][ T7386] RIP: 0033:0x7f1c444bcdd9 [ 192.640899][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.640926][ T7386] RSP: 002b:00007f1c42f16ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 192.640953][ T7386] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1c444bcdd9 [ 192.641011][ T7386] RDX: 00007f1c42f16f10 RSI: 0000000000000058 RDI: 00007f1c42f16f10 [ 192.641025][ T7386] RBP: 00007f1c42f17090 R08: 0000000000000000 R09: 0000000000000058 [ 192.641045][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.641062][ T7386] R13: 00007f1c44736038 R14: 00007f1c44735fa0 R15: 00007fff264bffd8 [ 192.641088][ T7386] [ 192.845783][ T28] audit: type=1400 audit(2000002174.478:1310): avc: denied { connect } for pid=7381 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.885809][ T28] audit: type=1400 audit(2000002174.478:1311): avc: denied { read } for pid=7381 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.929267][ T28] audit: type=1400 audit(2000002174.778:1312): avc: denied { ioctl } for pid=7385 comm="syz.0.988" path="socket:[18679]" dev="sockfs" ino=18679 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.989709][ T28] audit: type=1400 audit(2000002174.818:1313): avc: denied { write } for pid=7381 comm="syz.1.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.202157][ T7388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.422888][ T7401] loop2: detected capacity change from 0 to 512 [ 193.688988][ T7401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.303879][ T7403] Cannot find add_set index 0 as target [ 194.457000][ T5426] Bluetooth: hci0: command 0x1003 tx timeout [ 194.458747][ T3581] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.469028][ T7401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.469191][ T7401] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.517320][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 194.619824][ T6386] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.628956][ T28] audit: type=1400 audit(2000002176.468:1314): avc: denied { create } for pid=7406 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.656222][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'. [ 194.666686][ T7401] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.990: invalid fast symlink length 10 [ 194.682391][ T7413] ipvlan2: entered allmulticast mode [ 194.688109][ T7401] EXT4-fs (loop2): Remounting filesystem read-only [ 194.694857][ T7413] batadv_slave_1: entered allmulticast mode [ 194.710042][ T7413] batman_adv: batadv0: Adding interface: ipvlan2 [ 194.720473][ T7413] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.748118][ T7413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.759037][ T7413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.769183][ T7413] batman_adv: batadv0: Interface activated: ipvlan2 [ 194.783607][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.137760][ T7424] loop5: detected capacity change from 0 to 128 [ 195.144641][ T7424] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.157207][ T36] ================================================================== [ 195.165360][ T36] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 195.172665][ T36] [ 195.175078][ T36] write to 0xffff88811ab63148 of 4 bytes by task 365 on cpu 0: [ 195.182643][ T36] touch_atime+0x1d7/0x330 [ 195.187072][ T36] shmem_file_read_iter+0x3f4/0x4b0 [ 195.192290][ T36] lo_rw_aio+0x67d/0x730 [ 195.196593][ T36] loop_process_work+0x56c/0xac0 [ 195.201635][ T36] loop_rootcg_workfn+0x22/0x30 [ 195.206526][ T36] process_scheduled_works+0x4f0/0x9c0 [ 195.212001][ T36] worker_thread+0x58a/0x780 [ 195.216607][ T36] kthread+0x22a/0x280 [ 195.220691][ T36] ret_from_fork+0x146/0x330 [ 195.225299][ T36] ret_from_fork_asm+0x1a/0x30 [ 195.230075][ T36] [ 195.232449][ T36] read to 0xffff88811ab63148 of 4 bytes by task 36 on cpu 1: [ 195.239821][ T36] atime_needs_update+0x25f/0x3e0 [ 195.244860][ T36] touch_atime+0x4a/0x330 [ 195.249204][ T36] shmem_file_read_iter+0x3f4/0x4b0 [ 195.254466][ T36] lo_rw_aio+0x67d/0x730 [ 195.258765][ T36] loop_process_work+0x56c/0xac0 [ 195.263749][ T36] loop_workfn+0x31/0x40 [ 195.268012][ T36] process_scheduled_works+0x4f0/0x9c0 [ 195.273490][ T36] worker_thread+0x58a/0x780 [ 195.278096][ T36] kthread+0x22a/0x280 [ 195.282171][ T36] ret_from_fork+0x146/0x330 [ 195.286780][ T36] ret_from_fork_asm+0x1a/0x30 [ 195.291583][ T36] [ 195.293933][ T36] value changed: 0x3b39f69e -> 0x0088fbed [ 195.299656][ T36] [ 195.301981][ T36] Reported by Kernel Concurrency Sanitizer on: [ 195.308144][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.319006][ T36] Tainted: [W]=WARN [ 195.322812][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.332908][ T36] Workqueue: loop5 loop_workfn [ 195.337704][ T36] ================================================================== [ 195.353726][ T7424] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.407902][ T55] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)