last executing test programs: 5.760919283s ago: executing program 1 (id=7339): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 5.021155414s ago: executing program 3 (id=7346): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x4014) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@block_validity}]}, 0x1, 0x60e, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast2, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x2, 0x0, 0x22}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.765809608s ago: executing program 1 (id=7347): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfc, 0x20, 0x0, 0x3, 0x265ac, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0xa0, 0x32, 0x43a1bd76, 0x4, 0x20000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000680)="f173c71466b051f922f8dd680672bd3f7a1eaa", 0x13}, {&(0x7f00000009c0)="acfe649432c83af5761e803439dd84b8ec308859b0f24b7ce8694d71686447bd62b1d3d89c91a52b45bb32f7675dfc6c0491f609691c95ea8c323b8dec4b730a019b651f28481a8913b4e0b409f04b9c02adde707705067ef47019884d11fc68d9ee9c67d11d495e8d00a9783df522f8d61dff57064ac85c24eba67e4ecb64ae34bdeb28a462fbd2384748adc98b43578a591e53ad2628b2e1481d92928446e8b98e2593294ded4493b00562a14471", 0xaf}, {&(0x7f0000000a80)="080e795b845ab2d4bc5d80a97c87fc3f553883d808bd31abbca2d39c8cccff0311b5dd683c41e305d0aea0fe153295147ace064ba80ee3", 0x37}, {&(0x7f0000000ac0)="c5835aa65d8630e061f3913b318db9eb03bb38d1dc1407ab538a54032f4cff4a494b76b6016535fa5d827d48e028fb0f170062d5fec7ac5643314b444f0e70167d2e48c1734a05ba0a44771f899b922863aec0422aca34e179e5e642dc37befac85d5d", 0x63}], 0x4}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4.56412361s ago: executing program 3 (id=7350): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@block_validity}]}, 0x1, 0x60e, &(0x7f00000003c0)="$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") 4.534176051s ago: executing program 1 (id=7351): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r3 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r3, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 4.318923494s ago: executing program 2 (id=7356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f0000001000)=""/61, 0x3d) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) listen(r4, 0x10) recvfrom$unix(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x20008095) r5 = socket(0xf, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a0020000000c809001000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000002000)=""/4082) 4.067529288s ago: executing program 2 (id=7357): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r3 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r3, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.888934021s ago: executing program 3 (id=7358): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 3.535642176s ago: executing program 1 (id=7359): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x20ce, r0}, 0x38) 3.343990439s ago: executing program 0 (id=7361): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f70000000100000005"], 0x14}}, 0x4014) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x11, &(0x7f0000000000)={[{@noblock_validity}, {@nolazytime}, {@errors_remount}, {@mblk_io_submit}, {@block_validity}]}, 0x1, 0x60e, &(0x7f00000003c0)="$eJzs3c1vFOUfAPDvTF9pfz9biFHxIE2MgURpaQFDjIn0Tgi+/AOVFkIolLQ1sUhCSfRovHgw8eRB/C+UxJvx4NWDF0+GhBjDQQyRNbOdKdvt7vZ1d0v380mWzjOzneeZpd8+zzz9zkwAHWsk+yeNOBwRN5KIoYpt3ZFvHFl538O/bl3MXkmUSu//mcSt28ly5b6S/Otg/s3/DkXySxpxqGt9vQtLN69Ozc7OzOflscVrN8YWlm4ev3Jt6vLM5ZnrE29OnDl96vSZ8RM7Or6eGuu+/fpxMv7db+eTOBtP8rZlx1X9vr4d1Zx9ZiNRWvGocn32uZ7Z4b73ir+Hip+Tp5LqFexZl/K4PRcRL8ZQdFX8bw7FZ++2tXFAU5WSKPoooOMkdeL/p8lGvxn6m9YeoFWKcUBxbl/rPHi9tMmjEqAVHkyuTEitxH5PRBTx370yNxj95Tm0gYfJmnmeJCJ2NjO3Iqvj5x/Pf5q9os48HNAcy3eKWe7q/j8px+Zw9JdLAw/TtfG/XCql+UggW//eNusfqSqLf2id5TsR8VLe//fGpuM/zWO3iP8Pt1m/+AcAAAAAAIDdc28yIt6olf+Xrub/9NbI/xmMiLO7UP/Gf/9L7+cLyS5UB1R4MBnxds3839Uc3+GuvPT/cj5AT3LpyuzMiYh4LiKORU9fVh6v2m9lhvDxzw99Va/+yvy/7JXVX+QC5nu63111Ie701OLUTo8biHhwJ+Llcv7vkXzN2vyfrP9PavT/WXzf2GQdh167e6Heto3jH2iW0jcRR2v2/0+H20nj+3OMlccDY8WoYL1XPvni+3r1i39on6z/H2gc/31J5f16Fra2/96IOLnUXaq3fbvj/97kg65i/5mPpxYX58cjepNz69dPbK3NsF8V8VDESxb/x15tPP+3Ov6viMMDEbG8yTpfeDL4e71t+n9onyz+pxv3/8Nr+/+tL0zcHf6hXv0XNtX/nyr36cfyNeb/oNL6+3FsNkDb0lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMalEfG/SNLR1eU0HR2NGIyI52MgnZ1bWHz90txH16ezbeXn/6fFk36HVspJ8fz/4YryRFX5ZEQcjIgvuw6Uy6MX52an233wAAAAAAAAAAAAAAAAAAAAsEcMlq/5L/VVX/+f+aOr3a0Dmq47/yreofN0b/s7S3272hCg5bYf/8AzLDvn30L89zSzLUAb1I//R49LZS1tDtBCxv/QubYZ//5cAPuA/h861Sbn9Pqb3Q6gHTbs/5PWtAMAAAAAANgVB4/c+zWJiOW3DpRfmd58m2R/2N/SdjcAaBs5vNC5uufa3QKgXZzjA08zfP+pebF//ex/ucEAAAAAAAAAAAAA0CpHD7v+HzpV4+v/5fbDftbg+v9awe92AbCP1H/0h74f9jvn+MBGvb3r/wEAAAAAAAAAAABgD+i/eXVqdnZmfmHp2Vt4Z280Y2sLy1N7ohlbWCjdjmj8nifNqb0nIvbKhzC/kLWmVXUVt+Bo4yG3+fcSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw6r8AAAD//+CcIkw=") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast2, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x2, 0x0, 0x22}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.977385894s ago: executing program 3 (id=7362): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r3 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r3, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 2.946344125s ago: executing program 2 (id=7363): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") 2.879765486s ago: executing program 4 (id=7364): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2cbf000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.741433618s ago: executing program 4 (id=7365): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b0300"/50], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffedd}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x2004c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.63738576s ago: executing program 4 (id=7366): r0 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000001000)=""/61, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0x10) 2.584751441s ago: executing program 4 (id=7367): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) 2.562226591s ago: executing program 4 (id=7368): perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffe, 0x1946}, 0xc264, 0x0, 0x0, 0x5, 0x7fff, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x10004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x801946}, 0x400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x2e544078631dff64}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x40000040) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001740)=ANY=[@ANYBLOB="60010000100013070000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0200000008001f0003000000"], 0x160}}, 0x0) 2.497296492s ago: executing program 1 (id=7369): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000400", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") r4 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) preadv2(r4, 0x0, 0x0, 0x80, 0x0, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') 2.407368983s ago: executing program 4 (id=7370): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x24b, &(0x7f0000000940)="$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") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0xd) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>-0\t\t\t') prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.388231214s ago: executing program 2 (id=7371): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x12, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x12, 0x0, @opaque="4fc4e31687611a3cbc14"}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000800000022000007000000000000000000000000001a7f8bd6d14d26e4fe73cb4f53751d9bba98d17f4e7a91ae559834d3d6470f33a441ee87b5be539b926421988a5c527f27d78a8f8655452678f7ce0f1ba0d99c306aad"], 0x0, 0x2d}, 0x28) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x24}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x1, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0) process_madvise(r3, &(0x7f00000024c0), 0x0, 0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.337194255s ago: executing program 0 (id=7372): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x12, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x12, 0x0, @opaque="4fc4e31687611a3cbc14"}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000800000022000007000000000000000000000000001a7f8bd6d14d26e4fe73cb4f53751d9bba98d17f4e7a91ae559834d3d6470f33a441ee87b5be539b926421988a5c527f27d78a8f8655452678f7ce0f1ba0d99c306aad"], 0x0, 0x2d}, 0x28) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000280)) timer_create(0x1, 0x0, 0x0) r2 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f00000001c0)="0b6381d862db47dd685b665e800207b3c41e3ebe6f62cf04a4558ea421d62d1ceae4310f3a951869e8632526227815a8d21bedb9f2583a081eb2830eb40a15602ef84789eae40188fe9ed4f662084b5907589c12b21faa61fbd1e781d582679c3e23691e5fee27c14bf6c77b1bd5", 0x6e}, {&(0x7f0000001200)="8d93aff3fe76d7ec6367aa196c537fa685e122628d5512f2a190afd5c8cf125754cfe926dfec443b73636d9eaeb9319cd8fa7c4c1073942ae0c2872f0449072527e86f8e4a8c7851f172c6d8aa659ae13fe41d5c2aea937a69f26edcdbb6c763d63c5d027a5e1329561a010515006a92d86514310b6eba77d85c7b6350a57ce017b94b2d6fdbb6ec0ea7d4fbc08e1fd191e26871726283a9f6f8939714691a9008fcf8e9d0b02ce298a51d1b9098cd1229f2e3cf94336ea519c971363b7e7f9cc3431dc5166f0a3e6d140a37920ec51b759a7ec3af6402e940cc5e2d1e472edc17a440b171c8baf7673923044e98d9a8097c42aae71c935ff94dc26ebccc9043d1f196cffd70c54f065fbfa226fc34ce6b7a5ae4979e2169d225be12289ae4745e6e8139da83e2a6dab3ba6c42eed016f3303682c8e4cb9b485014851578dfb8c0c964f15565a6bfbd0d4d039a0d4461213e34180f87acdf7bbb5194ce2d7d99f868cb6c8fb3c94c2e5353eeaa36f718f245c487e32c6d1c1f6717661b45c8df2c204d52d47ad5766fd18cda3750ee30234649ab4b83a4af4f6a3291cb7a89f01a4dab0ac3a71ba4ca16f389e3a655ff948657df5c012a5d4af929678f08c3545827e9d375562a5c8186924bc4486373433308dbfd2445c3fbbcac8e2291d8172b6f6ce397b2803528b2c19e5e8c52925eef071cf94e30165dc5b9260c015cf8e7c8eba479ecc1e8ed9e6e989cd8b77574e12b2be8675929742c8238b7cecf50bc256cb21fa0bdd3ece1dac82888c9dcbce859653b6281817bd116c2b89cf629b205e2552c29df9d83c92696edb1b60322de28531917b19c873829238031b1d2f5d031338fe6730f4726d4bee84dd3027b1bca58c2a2a66bdcde291bbdbd8d4ce7dc6ca4742768e07f8d06c6204de1a1d9a86d5dc568a4b639f70191243e75161893d49438c3d595211542dcf6665cc8d538a9d6f45622859638f2ce3faa092b3bf289d13e6f2b80774bfe3f67fa9a9cba6d59f4422fcd03b8fceae2f040287b2d8e6078b6b411536ad0b86c1c42636afa94e0de451b5c772dbb49d607791d5b8f56d9d7cc2531c9bb7be149bed91386eaca9880d8e792dbb25fd4aa171c757ab891a6419bf2a5c73d7f6314477dea44ea3be81c172189fe9f4a0ef9105665e080fc99ca2ef55ae9bb9fd5645a914500a5f5b0ca72c088d9ea4637e2627df488f4b8ae25c3de66b7fc46db4f1fb5001d4c4fb4c9d2b04f46350538fd59ccc23271fc55a4dca548811f964a6b0a8ed3817c1e5e34883fc3b03193131b3eff05a16a3e9ac2c26b2862c386fa9b9f69a096544dace31be4a3515173aa110a74ff5531a0a53989bda351d8ea269c0437c3fc7100796cfdac8b4be78fb21a8430d9c7bc08bf2d6f17a63cd445d72133df714cc1773aabfb5b6360be9c6283e7a5337eb7a59ea38661bf268d20452c7c5c78b1e1e63635d9f6827bc2e5e37151812e6caed39e0dd60243136244aa98f37b90b9adc06ca466e0b5a183ea0d86a61f9516b3561e80cf9856b2b061e96c8563e9c3d0881993195e0bb7af74c5e266b7892cc9919929b633a9757759ded4bb19f2686a1fe4968d1d08dbe37e7f921eee05bd42b902d3698f843c270fce608522a97e1aca6290075e27c4523559020700b786875f738b5e68dc4779572a00ccf50227809291b3d97408af9aeda97bcd503b966685803bca8ff4ea772632935edd767b70fcf967dc2f297f2f0105e45a9283abd8dda4ed94658d0bd8ee55d26765d1b36f2a66849614cddf33d5d6fb60a8f589e0960b736fd1f08576007958ea446e08b6617c92faa8e6565e7fee85d78688b3a36bb875a40477fac7c1254b6bec1de9d907c8e03da405fc104c279ad91cf7bd480e382359773320723c5729c909898faa9435649b2b0f836df937f1e6a3be7819a95fe5b84a28c73391be83bc793d74f761117211480e5bd54c04f6f03194aafa11617f8833e4455a4792c7100833f0f82bd619f4f28e24863508deb7eb032a7bb49590856148e263289ab4944c005d7b3729e54ce641c78db1398d7dc17ef6e02eb85592402b04f6753cc930cd6d88e61b4e52ec1ad529efaf238b5f210fe878c5a1d60c25b14816796d10722e1400c937122c2d5716be9fec0993d16d073bf109ed29f0be7691662e717664003f49d68c7a2757122242f8211284ccea999fa95c9b06509ef9bf40851cf3bc9a82f9b41dd7b62130505e8979dba97b44b4daf1983538f8e3e1da41e86d5a7a4a69b83583ba347ebcd7f1bdd4bf3fcffd8741354838bbc55b519da3b326b44e5e55a05f50de39dc3ac6eaad16021004eae5ec47966ee875555c70a07fe5f77280ea416b67b6c75f3ed4683067ce38e6a51ee64616aca5b24ba43e8570a28e41a0aed3b29447aeef9119f756280a006b1e79c9ee1561e019f65cb9216c85f5a7702ae816c5c445729a1c0f8276085ab7358bb041e8efb8e27056fd38be0fa9ae09a02ab3da55a83434e9037e6f7c741129b49b5f3cc370950a9e9015c9ecd689d49588ce83bdc69df86e107e10a93ec6a097a6cf57c744b64cfc99682bb470614365099ba3c37736791d29c04669778640455ad7580b6c1cae3c294cde4b430f4df82404571dcc4cc6c315b018e3cd036fd3494f41f629056f424ef2372daa833d053ea2b1da3364abb2b01d9238fd3ad612f90b18c5833e53348dacd2616dfd21d4bff31077ac8d7b526dbdc71abe13693e334fa48a0f3f935f46a4879198427035c97b7c7b48d0c1ce1238bd6188310019c87c117a00f917584d8815acc67aa992712b0088732928523106256276263b1a24f978444d7957df7657153d1863eb2583db1702e3aa7094dd33419cc694b1331cdf486bda0a7d164c2b192411c1128630d288220f57d6d22c414f566a9707ca76b687d84f07c8fd6486bad9d90c34287dc11ea9b35f8c75ec498bb71492712cddce3c79d09ce7c134a32e57dba59a400e92e98539c3326ddb1556721db11789ea2ef1800e8bc3572944218e48cd42b9aad5c9684e3c27b13b6f04bbfa941ddcaf9a3db82bd15e6bf2353986f597bccfc616e3cfe6b48eb2be07877cddb2b1fcc65829496f906e5593552a2194087d2273b60ad809cc17851d1b64c76096cab26a11b43740a3225f72c55e71afe786a079185a4b573bbf0206638a25b0b16095da0799e9fdc98599f2b1eb1dd4f6107c868cb03fa48c4dbf10de264e23be82d16c9a87bdb52f4eaf1a4dd6d0de674385e5b026f75a6c23746d7536198f2f3bdc754534693c06b390f398c744fddac1efe13b7acd4be923d780da8e15910f97e46a66b0d68c24b589aeaa5935651d329cdfb824e5ae0485ea40a41fa2680559359f4b555a1a4462c282a5022cfbf2469f576debb81d07f9d4d539ed5f55e864e888019d0e1f9a39c1196624751d3dfa2678525eb5eea4ef872b399fb10c35dd17a71f224feb95f0b7ff9c52cb8c2aaad5001e75f59535538305ac39f72404dcc671b5ac33de780e657854480e4a9d9b09541cece89bec55d27c04fd5cab85f980ac91dede89ab6f4daed9c5f822d2861f89eb7e4676781bf356b9cba9313e3443cc2a16bf7f38eb94649770be9094f34b4de815cf8d76fd61e7d7ae5f01df800c02f72b26f072c570fd8221fc9438c1ac0776cea7926458e59619fb3d6a39f5e6e95980c846a2c99a2e9517a7797c351ac082689480fdb893bcef4720ca17514e7b2723feef2b1bd21659c830647a8c8a08286e65b1f1168f04d2fb6cc402bdbc55df463abfe6045d5a9013c76c8a11e2aaa6ab506dab0f260aa51d39088f69d8f5b4cb2f51d566232a59907a56a676eba991a45b131e02cccc560f707ca3b39403f19f8480588c7dc7263b81c566bd879b3a1dfb70062949d57d1042a3687a4aa392d517baf9574808b68af2f46855bf978f60c492175e2e543655a2aad3ce4c77b234eed6e5ceaf4880db60b2ae60a8fad703208b96bd09afc85fd0545b465e5d021f5573b0d56f2646495d46887ff9245c428261b074cbd488a7d2aef4ce9cb4a15fcb7018fd4b968137d0347bb67c72999924549462d97854e33b66fb4ea1b4473f1dc3cfacd3e093c026870d9c36ffa11f7e6b13a088484d7358609f5602d03c92aa6b65810a27cc17f94785f29ef8d0ac9123e2bd8438e9a6a4d7036f7b485b7d38752334bdd164db82563b2b4990199a7a33d7c0a6c84afcf980afdc1637ffebbfa076e18571ce820b63c2420b01eeaabd8b792c62b7b586916a2a4f458938483c95aac743affaf32d809d8ef39d0247c3bca9808382a7679728d180fcdfb9df4c5982ce5dcba701e1cd54a9cf6aeda8c9232a69d45b8178ff648f74d15da60be2989afb365df8d7aa6ef0649b7b4aeabb41c982527424a2f5e33f092c8b023acb2dd1fd23a49980caa53414578733e7d6448c0b5404622b680e68bf82a68959185d4028c671e81374cf5a479b8ac917cd94c13193ab8ff2c20508199e2d2ac80ff030839e0a69490790224b5d789ee4250ec44a1724220a82323d6cdcf87898f333ec7cec1a4f911f200c1e2ffdb1f0fe352eb6f1ad1984a59aa789a671b41889a54fa9d6ff907b60730c3ae43fa5649db1b605e6576d3b460e207f98ea482969a390d787f3cb7df21b7b0cfaec3489b5e7a5d0d2e9cd33fbbdea7584a76931999822cdabdd1221bd3e9ebd2a8d8315f26a5c4e9bb4da187d8581e9acc109722822b0a831fb97033e662116100b7ba17be8c2e3d1b36e3b7a12e83b072d5062a4b499118b08fe17975d38ffa0bbecc7cde38c005159fa3c2a9e74808c09bb21bdbb133b54d5e0c2dd166e11b95aaaaae4af1b49d88fd0b968cf16b9a49eaa1f8b7d6a3058daf4ed384b85023efb70ad2abf65fb5826b23cf8fc5ebefffed869553d0c0fe1995bf33ffde8b9df76929dec8796c6f541fd8bf71b6eaed3773ccfb4cee10197856d3f0bb237de89489032839c45d7f12373e8dbffca0e0a21d14fcf0333c12cb36e6683cc00bf776997d94c4c611410709a6f54f68bf75556696dfed91c62a236c4508a36e833069e42e3657058c995f5da0ca16d1ab4f4297943b5684ce1bf6936e57b40c88ceb9b6bc6fda24f135fe682286e68b6679f4954b73725b00693cba69cbb18a1dbd80a75131e4e351c94326f964068dd35de599b38214fb2e9cbf85adc097f4743eb7ab18545e824e797d54ddf276c8b3f6e60658c437eaa51a7d0667a275833b134ef8865615400bca47d7ce9d07854b18d41363cdbfcbd88a0f1a77de12c11b64533e6aeaee149601443c4c301a7bd6b6069cfaafa2daf5c37de54715b51620a389c8f0a6375ff75ac26772f4514ccd60cb4119f23b320e3e25b6d7a79fd4b2787a806f65e944d4be54fbdf199c039ddb7f0018a0d39c94d2f5f01b9906114bbf4064668a22c8f0e10bbbb69ea31c08ea5bab6cb89b4192fc925703a7faea7fff3998d16f56c6d32392ca57df39bbf607733c5d46a8d7ad6062a647444e975b054d4d3099fdcf683ef61fea159a68e2583423b0eac411be1faa7542dd4de2607c2626f8da37d9d4d9ea510d7618a68f404f5ecdaa8f59055e22fd88b4649839c4be902e07505627c04150be18c10943bdf85512d1afa668bc5a39514470978f46d7908031f67fc0ee29a2ed21b56ad9dbf0154a46ac11c9d36f406a2da6fb977c50a13b359157688ec0897bd40710a06a9e3bc1a87cea5574fa114b07aca160ad17c623b5f89af780a95986677d8bb4b265f", 0x1000}, {&(0x7f0000002200)="6ba32fe44142fcef827a1853498dee11a3ffbf8f2cebf8d4ff0fe73231d5fa36832e27937efac61c211049d735ed3a68ce8c0b53", 0x34}, {&(0x7f0000002240)="3a49bcb121c5e95d1a282e9ae5a893284af45a37c90f0c1221cba28a47a09ab96bcfe1ca06be41d1e3bc3e98bab4b188d842da94c3c525a07e040ab1d7d4b3f69aee931b303ca625f6ef5f", 0x4b}, {&(0x7f00000023c0)="8b8c172917539070bcea7df808f03c645746f4fcb023e59fa13906250cf647aab1c7fa2dec6d455599707c5017fabe343ad57d243f574e08b22a53d151c7073c763852629a99187187998c8ea9b47283d42d0e66ae28d82a97563204661d595382bf1573233ff532491d6e888b4ad5cc8ae529ce7ba44c08b93d381c124f6ab2127a92888e017e0c0ec13c7dccb872a90443a4aceeda8222f4871bc100379de49e464a360a4884c23c396f36f9db4e0bad40dbe8f71cfee8d511ee88b26e67c0b787498671435a27bc48f1687314eaa2992de983", 0xd4}], 0x5, 0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.015812149s ago: executing program 3 (id=7373): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.98555302s ago: executing program 0 (id=7374): r0 = perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x8, 0x5, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x20000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x7}, 0x4ae17f5d69317442, 0x7, 0x6, 0x8, 0xe, 0x7f, 0x5a59, 0x0, 0x2, 0x0, 0x3800000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8, 0x4}, 0x11eea, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0xfffffffe, 0x0, 0x40100020}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a4}, 0x94) 1.96753869s ago: executing program 2 (id=7375): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2cbf000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.869408082s ago: executing program 2 (id=7376): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f000000000000f6ffffff00000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00"/158], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.832642852s ago: executing program 1 (id=7377): syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) listen(r1, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x20008095) socket(0xf, 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) 1.832071492s ago: executing program 3 (id=7378): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f00000003c0)=ANY=[]) r1 = openat$tun(0xffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 1.109090423s ago: executing program 0 (id=7379): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x20ce, r0}, 0x38) 126.189748ms ago: executing program 0 (id=7380): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x4014) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) 0s ago: executing program 0 (id=7381): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x48, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0100", 0x12, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x12, 0x0, @opaque="4fc4e31687611a3cbc14"}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000800000022000007000000000000000000000000001a7f8bd6d14d26e4fe73cb4f53751d9bba98d17f4e7a91ae559834d3d6470f33a441ee87b5be539b926421988a5c527f27d78a8f8655452678f7ce0f1ba0d99c306aad"], 0x0, 0x2d}, 0x28) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x24}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000000280)) timer_create(0x1, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) socket$kcm(0x21, 0x7, 0x2) process_madvise(r2, &(0x7f00000024c0)=[{&(0x7f00000001c0)="0b6381d862db47dd685b665e800207b3c41e3ebe6f62cf04a4558ea421d62d1ceae4310f3a951869e8632526227815a8d21bedb9f2583a081eb2830eb40a15602ef84789eae40188fe9ed4f662084b5907589c12b21faa61fbd1e781d582679c3e23691e5fee27c14bf6c77b1bd5", 0x6e}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="6ba32fe44142fcef827a1853498dee11a3ffbf8f2cebf8d4ff0fe73231d5fa36832e27937efac61c211049d735ed3a68ce8c0b53", 0x34}, {&(0x7f0000002240)="3a49bcb121c5e95d1a282e9ae5a893284af45a37c90f0c1221cba28a47a09ab96bcfe1ca06be41d1e3bc3e98bab4b188d842da94c3c525a07e040ab1d7d4b3f69aee931b303ca625f6ef5f", 0x4b}, {&(0x7f00000023c0)="8b8c172917539070bcea7df808f03c645746f4fcb023e59fa13906250cf647aab1c7fa2dec6d455599707c5017fabe343ad57d243f574e08b22a53d151c7073c763852629a99187187998c8ea9b47283d42d0e66ae28d82a97563204661d595382bf1573233ff532491d6e888b4ad5cc8ae529ce7ba44c08b93d381c124f6ab2127a92888e017e0c0ec13c7dccb872a90443a4aceeda8222f4871bc100379de49e464a360a4884c23c396f36f9db4e0bad40dbe8f71cfee8d511ee88b26e67c0b787498671435a27bc48f1687314eaa2992de983", 0xd4}], 0x5, 0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) kernel console output (not intermixed with test programs): NLM_F_REPLACE [ 473.308853][T25770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25770 comm=syz.3.6687 [ 473.337855][T25770] netlink: 'syz.3.6687': attribute type 10 has an invalid length. [ 473.479450][T25781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.543695][T25788] loop0: detected capacity change from 0 to 1024 [ 473.551225][T25788] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.576006][T25788] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 473.587716][T25788] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 473.597693][T25788] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 473.608600][T25788] EXT4-fs (loop0): journal inode is deleted [ 473.647141][T25788] loop0: detected capacity change from 0 to 512 [ 473.658557][T25788] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.6692: corrupted in-inode xattr: invalid ea_ino [ 473.687495][T25788] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.687709][T25788] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6692: couldn't read orphan inode 15 (err -117) [ 473.696922][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 473.696938][ C0] EXT4-fs (loop0): initial error at time 1782609668: ext4_iget_extra_inode:5180: inode 15 [ 473.696974][ C0] EXT4-fs (loop0): last error at time 1782609668: ext4_iget_extra_inode:5180: inode 15 [ 473.737059][T25788] loop0: lost filesystem error report for type 5 error -117 [ 473.737714][T25788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.251814][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.432693][T25803] sit0: left promiscuous mode [ 474.544079][T25804] sit0: entered promiscuous mode [ 474.767934][T25811] option changes via remount are deprecated (pid=25810 comm=syz.4.6702) [ 475.293540][T25817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6705'. [ 476.076895][ T28] audit: type=1400 audit(1782609671.275:578): avc: denied { write } for pid=25917 comm="syz.1.6707" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 476.121508][T25922] random: crng reseeded on system resumption [ 476.128532][ T28] audit: type=1400 audit(1782609671.285:579): avc: denied { open } for pid=25917 comm="syz.1.6707" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 476.168682][ T28] audit: type=1400 audit(1782609671.315:580): avc: denied { ioctl } for pid=25917 comm="syz.1.6707" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x453f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 476.215144][ T28] audit: type=1400 audit(1782609671.325:581): avc: denied { write } for pid=25917 comm="syz.1.6707" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.246575][ T28] audit: type=1400 audit(1782609671.325:582): avc: denied { open } for pid=25917 comm="syz.1.6707" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 478.640400][T25960] random: crng reseeded on system resumption [ 478.736100][T25964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.752865][T25963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.181859][T25981] loop1: detected capacity change from 0 to 512 [ 479.223122][T25981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.250927][T25981] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.272006][ T28] audit: type=1400 audit(1782609674.475:583): avc: denied { write } for pid=25973 comm="syz.1.6724" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.316271][ T28] audit: type=1400 audit(1782609674.475:584): avc: denied { remove_name } for pid=25973 comm="syz.1.6724" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.505782][T25988] random: crng reseeded on system resumption [ 479.970488][T25991] loop2: detected capacity change from 0 to 512 [ 479.997994][T25998] sit0: left promiscuous mode [ 480.048439][T25991] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6728: corrupted in-inode xattr: invalid ea_ino [ 480.089725][T25991] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 480.090939][T25991] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6728: couldn't read orphan inode 15 (err -117) [ 480.100488][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 480.100652][ C0] EXT4-fs (loop2): initial error at time 1782609675: ext4_iget_extra_inode:5180: inode 15 [ 480.100879][ C0] EXT4-fs (loop2): last error at time 1782609675: ext4_iget_extra_inode:5180: inode 15 [ 480.157235][T25991] loop2: lost filesystem error report for type 5 error -117 [ 480.168611][T25991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.205220][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.218302][T26006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.300708][T26004] sit0: entered promiscuous mode [ 480.333527][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.380288][T26008] syzkaller0: entered promiscuous mode [ 480.399615][T26008] syzkaller0: entered allmulticast mode [ 480.673316][T26026] loop1: detected capacity change from 0 to 512 [ 480.739713][T26026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.752688][T26026] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.728371][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.740777][T26044] random: crng reseeded on system resumption [ 481.823626][T26052] option changes via remount are deprecated (pid=26051 comm=syz.4.6751) [ 481.971884][T26061] sit0: left promiscuous mode [ 482.034714][T26062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.102411][T26065] sit0: entered promiscuous mode [ 482.891945][T26095] option changes via remount are deprecated (pid=26094 comm=syz.1.6767) [ 483.138274][T26090] loop3: detected capacity change from 0 to 1024 [ 483.162927][T26090] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.189472][T26090] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 483.207276][T26090] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 483.218173][T26090] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 483.238904][T26090] EXT4-fs (loop3): journal inode is deleted [ 483.357857][T26131] loop3: detected capacity change from 0 to 512 [ 483.378229][T26131] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6765: corrupted in-inode xattr: invalid ea_ino [ 483.396190][T26131] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 483.396346][T26131] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6765: couldn't read orphan inode 15 (err -117) [ 483.405554][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 483.405576][ C1] EXT4-fs (loop3): initial error at time 1782609678: ext4_iget_extra_inode:5180: inode 15 [ 483.405604][ C1] EXT4-fs (loop3): last error at time 1782609678: ext4_iget_extra_inode:5180: inode 15 [ 483.453131][T26131] loop3: lost filesystem error report for type 5 error -117 [ 483.453807][T26131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.678412][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.246187][T26197] loop0: detected capacity change from 0 to 512 [ 484.263183][T26197] EXT4-fs: Ignoring removed orlov option [ 484.683515][T26197] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 484.698037][T26197] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 484.740350][T26197] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.6774: invalid indirect mapped block 32768 (level 2) [ 484.754868][T26197] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 484.760227][T26197] EXT4-fs (loop0): 1 orphan inode deleted [ 484.771563][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 484.771673][ C1] EXT4-fs (loop0): initial error at time 1782609679: ext4_free_branches:1023: inode 16 [ 484.771894][ C1] EXT4-fs (loop0): last error at time 1782609679: ext4_free_branches:1023: inode 16 [ 484.813934][T26197] EXT4-fs (loop0): 1 truncate cleaned up [ 484.836206][T26197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.128467][T26202] netlink: 'syz.4.6775': attribute type 10 has an invalid length. [ 485.267851][T26212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.369555][T26217] random: crng reseeded on system resumption [ 485.399771][T26219] option changes via remount are deprecated (pid=26218 comm=syz.2.6782) [ 486.994178][T26136] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 488.504169][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.719572][T26235] loop2: detected capacity change from 0 to 512 [ 488.732169][T26235] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6788: corrupted in-inode xattr: invalid ea_ino [ 488.756204][T26235] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 488.757925][T26235] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6788: couldn't read orphan inode 15 (err -117) [ 488.767387][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 488.767407][ C0] EXT4-fs (loop2): initial error at time 1782609683: ext4_iget_extra_inode:5180: inode 15 [ 488.767437][ C0] EXT4-fs (loop2): last error at time 1782609683: ext4_iget_extra_inode:5180: inode 15 [ 488.817028][T26236] sit0: entered allmulticast mode [ 488.853542][T26235] loop2: lost filesystem error report for type 5 error -117 [ 488.857350][T26235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.071620][T26239] sit0: entered promiscuous mode [ 489.303893][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.345470][ T28] audit: type=1400 audit(1782609684.555:585): avc: denied { setopt } for pid=26249 comm="syz.4.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 489.365945][T26248] sit0: left promiscuous mode [ 489.370852][ T28] audit: type=1400 audit(1782609684.575:586): avc: denied { read } for pid=26249 comm="syz.4.6793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 489.398769][T26253] loop2: detected capacity change from 0 to 512 [ 489.432699][T26253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.446284][T26253] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.461952][T26242] loop3: detected capacity change from 0 to 1024 [ 489.469230][T26253] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 489.469447][T26253] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.6794: corrupted inode contents [ 489.469815][ T28] audit: type=1400 audit(1782609684.675:587): avc: denied { write } for pid=26251 comm="syz.2.6794" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.469857][ T28] audit: type=1400 audit(1782609684.675:588): avc: denied { add_name } for pid=26251 comm="syz.2.6794" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.469895][T26253] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.6794: mark_inode_dirty error [ 489.470078][T26253] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.6794: corrupted inode contents [ 489.470319][T26253] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6794: mark_inode_dirty error [ 489.470560][T26253] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.6794: corrupted inode contents [ 489.470712][T26253] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.6794: mark_inode_dirty error [ 489.470866][T26253] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.6794: corrupted inode contents [ 489.470994][T26253] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.6794: mark_inode_dirty error [ 489.471155][T26253] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 489.492945][T26259] loop1: detected capacity change from 0 to 512 [ 489.507423][T26242] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.543035][ T28] audit: type=1400 audit(1782609684.735:589): avc: denied { write } for pid=26251 comm="syz.2.6794" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.569642][T26242] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 489.626321][ T28] audit: type=1400 audit(1782609684.735:590): avc: denied { write } for pid=26251 comm="syz.2.6794" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.701847][T26242] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 489.713819][T26242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 489.726926][T26259] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.6795: corrupted in-inode xattr: invalid ea_ino [ 489.743990][T26242] EXT4-fs (loop3): journal inode is deleted [ 489.752230][T26259] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 489.752435][T26259] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6795: couldn't read orphan inode 15 (err -117) [ 489.761716][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 489.761740][ C0] EXT4-fs (loop1): initial error at time 1782609684: ext4_iget_extra_inode:5180: inode 15 [ 489.761768][ C0] EXT4-fs (loop1): last error at time 1782609684: ext4_iget_extra_inode:5180: inode 15 [ 489.802313][T26259] loop1: lost filesystem error report for type 5 error -117 [ 489.803016][T26259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.903040][T26265] loop3: detected capacity change from 0 to 512 [ 489.912853][T26265] ext4: Unknown parameter 'noqu' [ 489.963666][T26268] random: crng reseeded on system resumption [ 489.992057][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.072567][T26254] sit0: entered promiscuous mode [ 490.111917][T26271] random: crng reseeded on system resumption [ 490.205032][T26264] loop4: detected capacity change from 0 to 1024 [ 490.282733][T26264] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.286698][T26273] loop3: detected capacity change from 0 to 512 [ 490.316264][T26264] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 490.337676][T26264] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 490.351811][T26264] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 490.378647][T26264] EXT4-fs (loop4): journal inode is deleted [ 490.381504][T26273] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6799: corrupted in-inode xattr: invalid ea_ino [ 490.415028][T26273] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.424121][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 490.425796][T26273] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6799: couldn't read orphan inode 15 (err -117) [ 490.433416][ C1] EXT4-fs (loop3): initial error at time 1782609685: ext4_iget_extra_inode:5180: inode 15 [ 490.433468][ C1] EXT4-fs (loop3): last error at time 1782609685: ext4_iget_extra_inode:5180: inode 15 [ 490.479994][T26273] loop3: lost filesystem error report for type 5 error -117 [ 490.499167][T26286] netlink: 'syz.1.6803': attribute type 10 has an invalid length. [ 490.515626][T26273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.553936][T26266] loop4: detected capacity change from 0 to 512 [ 490.567979][T26266] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6796: corrupted in-inode xattr: invalid ea_ino [ 490.586904][T26266] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 490.587106][T26266] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6796: couldn't read orphan inode 15 (err -117) [ 490.596306][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 490.596320][ C1] EXT4-fs (loop4): initial error at time 1782609685: ext4_iget_extra_inode:5180: inode 15 [ 490.596342][ C1] EXT4-fs (loop4): last error at time 1782609685: ext4_iget_extra_inode:5180: inode 15 [ 490.634527][T26266] loop4: lost filesystem error report for type 5 error -117 [ 490.635133][T26266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.079112][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.093484][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.145606][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.203068][T26307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.302086][T26311] random: crng reseeded on system resumption [ 491.422489][T26304] loop0: detected capacity change from 0 to 1024 [ 491.435449][T26304] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.449680][T26304] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 491.472177][T26304] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 491.495983][T26304] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 491.558853][T26304] EXT4-fs (loop0): journal inode is deleted [ 491.568837][T26328] sit0: left promiscuous mode [ 491.667555][T26330] loop0: detected capacity change from 0 to 512 [ 491.678247][T26330] ext4: Unknown parameter 'noqu#' [ 491.779068][T26329] sit0: entered promiscuous mode [ 492.307938][T26390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.747830][T26445] loop1: detected capacity change from 0 to 512 [ 492.820859][T26445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.844894][T26445] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.553012][T26463] netlink: 'syz.3.6824': attribute type 10 has an invalid length. [ 494.562418][T26462] loop4: detected capacity change from 0 to 128 [ 494.602787][T26462] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.619535][T26462] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.856162][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.948945][T26474] loop2: detected capacity change from 0 to 1024 [ 494.955863][T26474] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.022404][T26474] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 495.039550][T26474] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 495.089536][T26474] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 495.104931][T26474] EXT4-fs (loop2): journal inode is deleted [ 495.162203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.225505][T26474] loop2: detected capacity change from 0 to 512 [ 495.241687][T26474] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6827: corrupted in-inode xattr: invalid ea_ino [ 495.255276][T26474] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 495.256677][T26474] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6827: couldn't read orphan inode 15 (err -117) [ 495.265861][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 495.265875][ C0] EXT4-fs (loop2): initial error at time 1782609690: ext4_iget_extra_inode:5180: inode 15 [ 495.265896][ C0] EXT4-fs (loop2): last error at time 1782609690: ext4_iget_extra_inode:5180: inode 15 [ 495.303924][T26474] loop2: lost filesystem error report for type 5 error -117 [ 495.304991][T26474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.319213][T26480] loop0: detected capacity change from 0 to 512 [ 495.451964][T26480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.548424][T26480] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.669512][ T28] audit: type=1400 audit(1782609690.865:591): avc: denied { write } for pid=26472 comm="syz.0.6829" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.855381][T23953] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 495.874242][T23953] CPU: 0 UID: 0 PID: 23953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 495.874329][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.874342][T23953] Call Trace: [ 495.874347][T23953] [ 495.874354][T23953] __dump_stack+0x1d/0x30 [ 495.874378][T23953] dump_stack_lvl+0x95/0xd0 [ 495.874430][T23953] dump_stack+0x15/0x1b [ 495.874449][T23953] dump_header+0x80/0x240 [ 495.874470][T23953] oom_kill_process+0x295/0x350 [ 495.874582][T23953] out_of_memory+0x981/0xbc0 [ 495.874614][T23953] try_charge_memcg+0x621/0xa00 [ 495.874662][T23953] charge_memcg+0x6d/0x120 [ 495.874755][T23953] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 495.874788][T23953] swap_cache_alloc_folio+0x47b/0x5e0 [ 495.874829][T23953] swap_cluster_readahead+0x2b1/0x460 [ 495.874884][T23953] swapin_readahead+0xd8/0x8a0 [ 495.874948][T23953] ? tick_program_event+0x79/0xc0 [ 495.874987][T23953] ? _raw_spin_unlock+0x9/0x30 [ 495.875067][T23953] ? __rcu_read_unlock+0x4e/0x70 [ 495.875139][T23953] ? swap_cache_get_folio+0x1f7/0x200 [ 495.875172][T23953] do_swap_page+0x2a2/0x1ec0 [ 495.875206][T23953] ? __schedule+0x799/0xd10 [ 495.875232][T23953] ? __rcu_read_lock+0x36/0x50 [ 495.875269][T23953] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 495.875303][T23953] handle_mm_fault+0xb3c/0x2da0 [ 495.875352][T23953] do_user_addr_fault+0x634/0x1060 [ 495.875468][T23953] ? trace_page_fault_user+0x1f/0xa0 [ 495.875506][T23953] exc_page_fault+0x62/0xa0 [ 495.875537][T23953] asm_exc_page_fault+0x26/0x30 [ 495.875597][T23953] RIP: 0033:0x7f5b1f767fd7 [ 495.875617][T23953] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 495.875645][T23953] RSP: 002b:00007ffd3f63e720 EFLAGS: 00010202 [ 495.875661][T23953] RAX: 0000000000000000 RBX: 0000555572a67500 RCX: 00007f5b1f767fd7 [ 495.875673][T23953] RDX: 00007ffd3f63e760 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.875685][T23953] RBP: 00007ffd3f63e7cc R08: 0000000000000000 R09: 0000000000000000 [ 495.875697][T23953] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 495.875742][T23953] R13: 00000000000927c0 R14: 0000000000078f49 R15: 00007ffd3f63e820 [ 495.875785][T23953] [ 495.875883][T23953] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 496.114347][T23953] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 496.135780][T23953] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 496.155565][T23953] Memory cgroup stats for /syz4: [ 496.155739][T23953] cache 4096 [ 496.178433][T23953] rss 0 [ 496.186335][T23953] shmem 0 [ 496.196041][T23953] mapped_file 0 [ 496.205126][T23953] dirty 0 [ 496.213678][T23953] writeback 0 [ 496.224481][T23953] workingset_refault_anon 29 [ 496.249513][T23953] workingset_refault_file 543 [ 496.261679][T23953] swap 274432 [ 496.274947][T23953] swapcached 999424 [ 496.286609][T23953] pgpgin 258529 [ 496.299465][T23953] pgpgout 258528 [ 496.314210][T23953] pgfault 322987 [ 496.321104][T23953] pgmajfault 18 [ 496.335580][T23953] inactive_anon 0 [ 496.342521][T23953] active_anon 0 [ 496.351869][T23953] inactive_file 0 [ 496.367681][T23953] active_file 4096 [ 496.374536][T23953] unevictable 0 [ 496.382146][T23953] hierarchical_memory_limit 314572800 [ 496.400032][T23953] hierarchical_memsw_limit 9223372036854771712 [ 496.413587][T23953] total_cache 4096 [ 496.424688][T23953] total_rss 0 [ 496.432345][T23953] total_shmem 0 [ 496.444079][T23953] total_mapped_file 0 [ 496.452975][T23953] total_dirty 0 [ 496.458260][T23953] total_writeback 0 [ 496.463566][T23953] total_workingset_refault_anon 29 [ 496.474155][T23953] total_workingset_refault_file 543 [ 496.480815][T23953] total_swap 274432 [ 496.496391][T23953] total_swapcached 999424 [ 496.500781][T23953] total_pgpgin 258529 [ 496.504940][T23953] total_pgpgout 258528 [ 496.509088][T23953] total_pgfault 322987 [ 496.520651][T23953] total_pgmajfault 18 [ 496.524864][T23953] total_inactive_anon 0 [ 496.532146][T23953] total_active_anon 0 [ 496.543641][T23953] total_inactive_file 0 [ 496.547937][T23953] total_active_file 4096 [ 496.553800][T23953] total_unevictable 0 [ 496.564133][T23953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6823,pid=26456,uid=0 [ 496.590678][T23953] Memory cgroup out of memory: Killed process 26456 (syz.4.6823) total-vm:96348kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 496.666648][T26462] syz.4.6823 (26462) used greatest stack depth: 9024 bytes left [ 498.262335][T23953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.291384][T26598] random: crng reseeded on system resumption [ 498.299670][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.758803][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.917824][T26617] sit0: left promiscuous mode [ 499.129897][ T28] audit: type=1400 audit(1782609694.335:592): avc: denied { read } for pid=26621 comm="syz.0.6843" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 499.156968][ T28] audit: type=1400 audit(1782609694.335:593): avc: denied { open } for pid=26621 comm="syz.0.6843" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 499.206186][ T28] audit: type=1400 audit(1782609694.365:594): avc: denied { listen } for pid=26621 comm="syz.0.6843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 499.245767][T26622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.250203][ T28] audit: type=1400 audit(1782609694.365:595): avc: denied { read } for pid=26621 comm="syz.0.6843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 499.280278][T26625] loop1: detected capacity change from 0 to 1024 [ 499.299856][T26625] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.320012][T26625] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 499.330205][T26625] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 499.348215][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'. [ 499.358877][T26625] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 499.379832][T26628] loop4: detected capacity change from 0 to 512 [ 499.379877][T26625] EXT4-fs (loop1): journal inode is deleted [ 499.417111][T26628] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6844: corrupted in-inode xattr: invalid ea_ino [ 499.445986][T26628] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.449732][T26628] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6844: couldn't read orphan inode 15 (err -117) [ 499.458284][T26633] random: crng reseeded on system resumption [ 499.458952][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 499.459023][ C0] EXT4-fs (loop4): initial error at time 1782609694: ext4_iget_extra_inode:5180: inode 15 [ 499.459103][ C0] EXT4-fs (loop4): last error at time 1782609694: ext4_iget_extra_inode:5180: inode 15 [ 499.461725][T26628] loop4: lost filesystem error report for type 5 error -117 [ 499.517288][T26625] loop1: detected capacity change from 0 to 512 [ 499.536127][T26628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.569044][T26638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.586974][T26625] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.6841: corrupted in-inode xattr: invalid ea_ino [ 499.604752][T26625] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.604935][T26625] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6841: couldn't read orphan inode 15 (err -117) [ 499.614162][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 499.614180][ C0] EXT4-fs (loop1): initial error at time 1782609694: ext4_iget_extra_inode:5180: inode 15 [ 499.614220][ C0] EXT4-fs (loop1): last error at time 1782609694: ext4_iget_extra_inode:5180: inode 15 [ 499.660243][T26641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.662784][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.683389][T26625] loop1: lost filesystem error report for type 5 error -117 [ 499.683985][T26625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.911587][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.999271][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6858'. [ 500.008773][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6858'. [ 500.030055][T26664] loop4: detected capacity change from 0 to 512 [ 500.057108][T26664] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6857: corrupted in-inode xattr: invalid ea_ino [ 500.080030][T26664] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.081642][T26664] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6857: couldn't read orphan inode 15 (err -117) [ 500.090843][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 500.090858][ C0] EXT4-fs (loop4): initial error at time 1782609695: ext4_iget_extra_inode:5180: inode 15 [ 500.090885][ C0] EXT4-fs (loop4): last error at time 1782609695: ext4_iget_extra_inode:5180: inode 15 [ 500.145514][T26670] sit0: left promiscuous mode [ 500.156310][T26664] loop4: lost filesystem error report for type 5 error -117 [ 500.171585][T26662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.229897][T26664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.231519][T26670] sit0: entered promiscuous mode [ 500.307985][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.620247][ T8104] bridge_slave_1: left allmulticast mode [ 500.637075][ T8104] bridge_slave_1: left promiscuous mode [ 500.644997][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.676950][ T8104] bridge_slave_0: left allmulticast mode [ 500.692913][ T8104] bridge_slave_0: left promiscuous mode [ 500.704503][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.789598][T26697] random: crng reseeded on system resumption [ 500.879877][T26699] random: crng reseeded on system resumption [ 500.896673][ T8104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.926525][ T8104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.969637][ T8104] bond0 (unregistering): Released all slaves [ 501.345772][ T8104] hsr_slave_0: left promiscuous mode [ 501.365888][ T8104] hsr_slave_1: left promiscuous mode [ 501.377301][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.397587][T26730] option changes via remount are deprecated (pid=26729 comm=syz.3.6886) [ 501.406626][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.428706][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.437021][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.456017][ T8104] veth1_macvtap: left promiscuous mode [ 501.462161][ T8104] veth0_macvtap: left promiscuous mode [ 501.472309][ T8104] veth1_vlan: left promiscuous mode [ 501.489404][ T28] audit: type=1400 audit(1782609696.695:596): avc: denied { name_bind } for pid=26743 comm="syz.3.6892" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 501.494198][T26745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26745 comm=syz.1.6890 [ 501.514188][ T8104] veth0_vlan: left promiscuous mode [ 501.526914][T26744] sctp: [Deprecated]: syz.3.6892 (pid 26744) Use of int in maxseg socket option. [ 501.526914][T26744] Use struct sctp_assoc_value instead [ 501.602280][T26750] netlink: 'syz.1.6890': attribute type 10 has an invalid length. [ 501.628061][ T8104] team0 (unregistering): Port device team_slave_1 removed [ 501.638978][ T8104] team0 (unregistering): Port device team_slave_0 removed [ 501.674551][T26736] sit0: left promiscuous mode [ 501.730872][T26746] sit0: entered promiscuous mode [ 501.979420][ T28] audit: type=1400 audit(1782609697.185:597): avc: denied { write } for pid=26779 comm="syz.3.6904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 502.088999][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6904'. [ 502.127804][ T8104] bridge_slave_1: left allmulticast mode [ 502.142662][ T8104] bridge_slave_1: left promiscuous mode [ 502.154419][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.170398][ T8104] bridge_slave_0: left allmulticast mode [ 502.178155][ T8104] bridge_slave_0: left promiscuous mode [ 502.179647][T26783] loop2: detected capacity change from 0 to 1024 [ 502.191074][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.216265][T26783] EXT4-fs: Ignoring removed mblk_io_submit option [ 502.229526][T26788] loop3: detected capacity change from 0 to 128 [ 502.241085][T26785] loop0: detected capacity change from 0 to 512 [ 502.289988][T26783] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 502.304807][T26785] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.6907: corrupted in-inode xattr: invalid ea_ino [ 502.325210][T26783] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 502.339258][T26785] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.341601][T26785] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6907: couldn't read orphan inode 15 (err -117) [ 502.343688][T26788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.351678][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 502.351761][ C0] EXT4-fs (loop0): initial error at time 1782609697: ext4_iget_extra_inode:5180: inode 15 [ 502.351900][ C0] EXT4-fs (loop0): last error at time 1782609697: ext4_iget_extra_inode:5180: inode 15 [ 502.354456][T26783] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 502.376169][T26785] loop0: lost filesystem error report for type 5 error -117 [ 502.382274][T26783] EXT4-fs (loop2): journal inode is deleted [ 502.396320][T26788] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.437192][T26785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.467745][ T8104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.504270][ T8104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.524958][ T8104] bond0 (unregistering): Released all slaves [ 502.558371][T26796] loop2: detected capacity change from 0 to 512 [ 502.573982][T26796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6906: corrupted in-inode xattr: invalid ea_ino [ 502.594287][T26796] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.594604][T26796] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6906: couldn't read orphan inode 15 (err -117) [ 502.615794][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 502.615814][ C1] EXT4-fs (loop2): initial error at time 1782609697: ext4_iget_extra_inode:5180: inode 15 [ 502.615861][ C1] EXT4-fs (loop2): last error at time 1782609697: ext4_iget_extra_inode:5180: inode 15 [ 502.647432][ T8104] hsr_slave_0: left promiscuous mode [ 502.680018][ T8104] hsr_slave_1: left promiscuous mode [ 502.695388][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.709956][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.719396][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.726637][T26796] loop2: lost filesystem error report for type 5 error -117 [ 502.727412][T26796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.747653][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.756286][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.790245][ T8104] veth1_macvtap: left promiscuous mode [ 502.803406][ T8104] veth0_macvtap: left promiscuous mode [ 502.809029][ T8104] veth1_vlan: left promiscuous mode [ 502.814693][ T8104] veth0_vlan: left promiscuous mode [ 502.841362][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.082765][ T8104] team0 (unregistering): Port device team_slave_1 removed [ 503.101185][T26814] random: crng reseeded on system resumption [ 503.112891][ T8104] team0 (unregistering): Port device team_slave_0 removed [ 503.364552][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 503.661442][T26852] random: crng reseeded on system resumption [ 504.002199][T26884] random: crng reseeded on system resumption [ 504.030834][T26887] loop3: detected capacity change from 0 to 512 [ 504.050535][T26887] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6946: corrupted in-inode xattr: invalid ea_ino [ 504.066342][T26887] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.066543][T26887] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6946: couldn't read orphan inode 15 (err -117) [ 504.075740][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 504.075755][ C0] EXT4-fs (loop3): initial error at time 1782609699: ext4_iget_extra_inode:5180: inode 15 [ 504.075786][ C0] EXT4-fs (loop3): last error at time 1782609699: ext4_iget_extra_inode:5180: inode 15 [ 504.128602][T26887] loop3: lost filesystem error report for type 5 error -117 [ 504.130768][T26887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.210251][T26894] option changes via remount are deprecated (pid=26893 comm=syz.2.6952) [ 504.287972][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.340334][T26914] netlink: 'syz.3.6961': attribute type 10 has an invalid length. [ 504.361418][T26914] team0: Device ipvlan1 failed to register rx_handler [ 504.410217][T26918] random: crng reseeded on system resumption [ 504.482668][T26924] netlink: 'syz.2.6966': attribute type 10 has an invalid length. [ 504.740699][T26945] loop1: detected capacity change from 0 to 1024 [ 504.771325][T26945] EXT4-fs: Ignoring removed mblk_io_submit option [ 504.804862][T26945] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 504.805213][T26930] loop0: detected capacity change from 0 to 512 [ 504.842899][T26934] loop4: detected capacity change from 0 to 512 [ 504.847041][T26945] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 504.872355][T26945] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 504.895154][T26937] loop3: detected capacity change from 0 to 512 [ 504.910383][T26930] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.6968: corrupted in-inode xattr: invalid ea_ino [ 504.932443][T26945] EXT4-fs (loop1): journal inode is deleted [ 504.940561][T26930] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.941691][T26934] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6971: corrupted in-inode xattr: invalid ea_ino [ 504.943017][T26930] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6968: couldn't read orphan inode 15 (err -117) [ 504.951073][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 504.951274][ C1] EXT4-fs (loop0): initial error at time 1782609700: ext4_iget_extra_inode:5180: inode 15 [ 504.951364][ C1] EXT4-fs (loop0): last error at time 1782609700: ext4_iget_extra_inode:5180: inode 15 [ 504.964847][T26937] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.6972: corrupted in-inode xattr: invalid ea_ino [ 504.964920][T26937] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.965525][T26937] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6972: couldn't read orphan inode 15 (err -117) [ 504.965574][T26937] loop3: lost filesystem error report for type 5 error -117 [ 504.984198][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 504.984226][ C0] EXT4-fs (loop3): initial error at time 1782609700: ext4_iget_extra_inode:5180: inode 15 [ 504.984295][ C0] EXT4-fs (loop3): last error at time 1782609700: ext4_orphan_get:1404 [ 505.027540][T26937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.029575][T26934] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.073768][T26930] loop0: lost filesystem error report for type 5 error -117 [ 505.091804][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.113820][T26945] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.6976: corrupted in-inode xattr: invalid ea_ino [ 505.114118][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 505.127792][T26945] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.133675][ C0] EXT4-fs (loop4): initial error at time 1782609700: ext4_iget_extra_inode:5180 [ 505.133984][T26945] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.6976: couldn't read orphan inode 15 (err -117) [ 505.134119][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 505.142827][ C0] : inode 15 [ 505.151860][ C1] EXT4-fs (loop1): initial error at time 1782609700: ext4_iget_extra_inode:5180 [ 505.163729][ C0] EXT4-fs (loop4): last error at time 1782609700: ext4_iget_extra_inode:5180 [ 505.170154][ C1] : inode 15 [ 505.173357][ C0] : inode 15 [ 505.182392][ C1] EXT4-fs (loop1): last error at time 1782609700: ext4_iget_extra_inode:5180 [ 505.193776][T26934] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6971: couldn't read orphan inode 15 (err -117) [ 505.194403][ C1] : inode 15 [ 505.224853][T26945] loop1: lost filesystem error report for type 5 error -117 [ 505.225700][T26945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.227113][T26930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.236388][T26934] loop4: lost filesystem error report for type 5 error -117 [ 505.268618][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.272517][T26934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.302168][T26955] netlink: 'syz.3.6978': attribute type 10 has an invalid length. [ 505.345563][T26955] team0: Device ipvlan1 failed to register rx_handler [ 505.410020][T26956] set_capacity_and_notify: 1 callbacks suppressed [ 505.410133][T26956] loop2: detected capacity change from 0 to 1024 [ 505.428758][T26956] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.440190][T26956] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 505.455458][T26956] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 505.465967][T26956] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 505.479901][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.481230][T26956] EXT4-fs (loop2): journal inode is deleted [ 505.541528][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.665891][T26976] loop2: detected capacity change from 0 to 512 [ 505.698521][T26980] loop0: detected capacity change from 0 to 1024 [ 505.710794][T26980] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.718156][T26980] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 505.737406][T26980] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 505.747310][T26980] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 505.758549][T26980] EXT4-fs (loop0): journal inode is deleted [ 505.772718][T26976] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.6979: corrupted in-inode xattr: invalid ea_ino [ 505.777118][T26980] loop0: detected capacity change from 0 to 512 [ 505.797411][T26980] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.6990: corrupted in-inode xattr: invalid ea_ino [ 505.811446][T26980] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.811594][T26980] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6990: couldn't read orphan inode 15 (err -117) [ 505.813105][T26983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26983 comm=syz.3.6991 [ 505.821242][T26980] loop0: lost filesystem error report for type 5 error -117 [ 505.824923][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 505.861038][ C0] EXT4-fs (loop0): initial error at time 1782609701: ext4_iget_extra_inode:5180: inode 15 [ 505.865355][T26980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.871318][ C0] EXT4-fs (loop0): last error at time 1782609701: ext4_orphan_get:1404 [ 505.884952][T26976] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.919981][T26983] netlink: 'syz.3.6991': attribute type 10 has an invalid length. [ 505.929366][T26976] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.6979: couldn't read orphan inode 15 (err -117) [ 505.929399][T26976] loop2: lost filesystem error report for type 5 error -117 [ 505.937276][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 505.937299][ C1] EXT4-fs (loop2): initial error at time 1782609701: ext4_iget_extra_inode:5180: inode 15 [ 505.937332][ C1] EXT4-fs (loop2): last error at time 1782609701: ext4_iget_extra_inode:5180: inode 15 [ 505.993203][T26976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.029061][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.042437][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6992'. [ 506.140046][T26995] netlink: 'syz.0.6994': attribute type 10 has an invalid length. [ 506.162372][T26995] team0: Device ipvlan1 failed to register rx_handler [ 506.186170][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.506659][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7003'. [ 506.536904][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7000'. [ 506.617221][T27029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27029 comm=syz.4.7010 [ 506.685452][T27029] netlink: 'syz.4.7010': attribute type 10 has an invalid length. [ 506.695858][T27037] netlink: 'syz.3.7013': attribute type 10 has an invalid length. [ 506.710832][T27037] team0: Device ipvlan1 failed to register rx_handler [ 506.772168][T27041] random: crng reseeded on system resumption [ 506.932493][T27049] random: crng reseeded on system resumption [ 507.096170][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'. [ 507.114859][T27067] netlink: 'syz.4.7027': attribute type 10 has an invalid length. [ 507.125727][T27067] team0: Device ipvlan1 failed to register rx_handler [ 507.267006][T27076] loop4: detected capacity change from 0 to 512 [ 507.287715][T27076] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.7031: corrupted in-inode xattr: invalid ea_ino [ 507.301498][T27076] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.302004][T27076] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7031: couldn't read orphan inode 15 (err -117) [ 507.311316][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 507.311355][ C1] EXT4-fs (loop4): initial error at time 1782609702: ext4_iget_extra_inode:5180: inode 15 [ 507.311414][ C1] EXT4-fs (loop4): last error at time 1782609702: ext4_iget_extra_inode:5180: inode 15 [ 507.350618][T27076] loop4: lost filesystem error report for type 5 error -117 [ 507.360254][T27076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.457769][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.462471][T27081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.489196][T27084] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7034'. [ 507.523283][T27083] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7034'. [ 507.603512][T27095] option changes via remount are deprecated (pid=27094 comm=syz.0.7038) [ 507.800021][T27093] loop4: detected capacity change from 0 to 1024 [ 507.813764][T27093] EXT4-fs: Ignoring removed mblk_io_submit option [ 507.836300][T27093] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 507.846672][T27093] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 507.857202][T27093] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 507.878826][T27093] EXT4-fs (loop4): journal inode is deleted [ 508.021207][T27105] loop1: detected capacity change from 0 to 512 [ 508.036686][T27114] loop4: detected capacity change from 0 to 512 [ 508.072970][T27114] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.7039: corrupted in-inode xattr: invalid ea_ino [ 508.089836][T27105] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.7045: corrupted in-inode xattr: invalid ea_ino [ 508.110623][T27105] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.111109][T27114] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 508.113604][T27105] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7045: couldn't read orphan inode 15 (err -117) [ 508.120437][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 508.120588][ C1] EXT4-fs (loop1): initial error at time 1782609703: ext4_iget_extra_inode:5180: inode 15 [ 508.120728][ C1] EXT4-fs (loop1): last error at time 1782609703: ext4_iget_extra_inode:5180: inode 15 [ 508.171515][T27114] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7039: couldn't read orphan inode 15 (err -117) [ 508.183427][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 508.183441][ C1] EXT4-fs (loop4): initial error at time 1782609703: ext4_iget_extra_inode:5180: inode 15 [ 508.183464][ C1] EXT4-fs (loop4): last error at time 1782609703: ext4_iget_extra_inode:5180: inode 15 [ 508.210231][T27105] loop1: lost filesystem error report for type 5 error -117 [ 508.212895][T27114] loop4: lost filesystem error report for type 5 error -117 [ 508.219378][T27105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.222245][T27114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.316561][T27115] sit0: entered promiscuous mode [ 508.317388][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.400266][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.452559][T27131] option changes via remount are deprecated (pid=27129 comm=syz.4.7053) [ 510.161575][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7060'. [ 510.236741][T27156] random: crng reseeded on system resumption [ 510.323462][T27160] random: crng reseeded on system resumption [ 510.691739][T27174] option changes via remount are deprecated (pid=27172 comm=syz.4.7072) [ 510.917303][T27179] loop0: detected capacity change from 0 to 512 [ 510.931508][T27179] EXT4-fs: Ignoring removed orlov option [ 510.947110][T27179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 510.959294][ T28] audit: type=1400 audit(1782609705.965:598): avc: denied { allowed } for pid=27169 comm="syz.0.7071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 511.080164][T27179] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7071: invalid indirect mapped block 32768 (level 2) [ 511.096444][T27179] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.101584][T27179] EXT4-fs (loop0): 1 orphan inode deleted [ 511.111536][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 511.111675][ C0] EXT4-fs (loop0): initial error at time 1782609706: ext4_free_branches:1023: inode 16 [ 511.111837][ C0] EXT4-fs (loop0): last error at time 1782609706: ext4_free_branches:1023: inode 16 [ 511.145425][T27179] EXT4-fs (loop0): 1 truncate cleaned up [ 511.163956][T27179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.705209][T27192] loop2: detected capacity change from 0 to 512 [ 511.769679][T27192] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7078: corrupted in-inode xattr: invalid ea_ino [ 511.798582][T27192] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 511.799105][T27192] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7078: couldn't read orphan inode 15 (err -117) [ 511.809114][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 511.809144][ C0] EXT4-fs (loop2): initial error at time 1782609707: ext4_iget_extra_inode:5180: inode 15 [ 511.809244][ C0] EXT4-fs (loop2): last error at time 1782609707: ext4_iget_extra_inode:5180: inode 15 [ 511.901418][T27192] loop2: lost filesystem error report for type 5 error -117 [ 511.911204][T27192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.753805][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.797128][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.887900][T27205] sit0: left promiscuous mode [ 513.022435][T27221] sit0: entered promiscuous mode [ 513.259873][T27254] loop1: detected capacity change from 0 to 1024 [ 513.266954][T27254] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.285090][T27254] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 513.296520][T27254] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 513.306531][T27254] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 513.318052][T27254] EXT4-fs (loop1): journal inode is deleted [ 513.430468][T27254] loop1: detected capacity change from 0 to 512 [ 513.474223][T27254] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.7091: corrupted in-inode xattr: invalid ea_ino [ 513.487894][T27254] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.488107][T27254] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7091: couldn't read orphan inode 15 (err -117) [ 513.497366][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 513.497389][ C1] EXT4-fs (loop1): initial error at time 1782609708: ext4_iget_extra_inode:5180: inode 15 [ 513.497421][ C1] EXT4-fs (loop1): last error at time 1782609708: ext4_iget_extra_inode:5180: inode 15 [ 513.535948][T27254] loop1: lost filesystem error report for type 5 error -117 [ 513.536488][T27254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.654579][T27284] random: crng reseeded on system resumption [ 513.859812][T27308] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7093'. [ 514.000593][T27319] loop2: detected capacity change from 0 to 512 [ 514.018309][T27321] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7093'. [ 514.029718][T27319] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7096: corrupted in-inode xattr: invalid ea_ino [ 514.043779][T27319] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.043977][T27319] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7096: couldn't read orphan inode 15 (err -117) [ 514.044087][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 514.071512][ C1] EXT4-fs (loop2): initial error at time 1782609709: ext4_iget_extra_inode:5180: inode 15 [ 514.081486][ C1] EXT4-fs (loop2): last error at time 1782609709: ext4_iget_extra_inode:5180: inode 15 [ 514.091418][T27319] loop2: lost filesystem error report for type 5 error -117 [ 514.093149][T27319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.256123][T27325] sctp: [Deprecated]: syz.3.7097 (pid 27325) Use of int in maxseg socket option. [ 514.256123][T27325] Use struct sctp_assoc_value instead [ 514.283035][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.354763][T27327] sctp: [Deprecated]: syz.0.7099 (pid 27327) Use of int in maxseg socket option. [ 514.354763][T27327] Use struct sctp_assoc_value instead [ 514.373343][T27336] loop4: detected capacity change from 0 to 128 [ 514.396871][T27336] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.426209][T27336] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.492006][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.698310][T27352] random: crng reseeded on system resumption [ 515.559488][T27409] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7110'. [ 515.575935][T23953] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 515.598127][T23953] CPU: 0 UID: 0 PID: 23953 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 515.598179][T23953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 515.598191][T23953] Call Trace: [ 515.598197][T23953] [ 515.598204][T23953] __dump_stack+0x1d/0x30 [ 515.598227][T23953] dump_stack_lvl+0x95/0xd0 [ 515.598315][T23953] dump_stack+0x15/0x1b [ 515.598334][T23953] dump_header+0x80/0x240 [ 515.598436][T23953] oom_kill_process+0x295/0x350 [ 515.598474][T23953] out_of_memory+0x981/0xbc0 [ 515.598513][T23953] try_charge_memcg+0x621/0xa00 [ 515.598559][T23953] charge_memcg+0x6d/0x120 [ 515.598735][T23953] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 515.598807][T23953] swap_cache_alloc_folio+0x47b/0x5e0 [ 515.598874][T23953] swap_cluster_readahead+0x3d2/0x460 [ 515.598955][T23953] swapin_readahead+0xd8/0x8a0 [ 515.599059][T23953] ? percpu_counter_add_batch+0xb5/0x120 [ 515.599083][T23953] ? mm_trace_rss_stat+0x1d/0xc0 [ 515.599107][T23953] ? __rcu_read_unlock+0x33/0x70 [ 515.599180][T23953] ? filemap_map_pages+0xe1b/0xef0 [ 515.599204][T23953] ? __rcu_read_unlock+0x4e/0x70 [ 515.599235][T23953] ? swap_cache_get_folio+0x1f7/0x200 [ 515.599307][T23953] do_swap_page+0x2a2/0x1ec0 [ 515.599346][T23953] ? __css_rstat_updated+0xbb/0x280 [ 515.599389][T23953] ? __rcu_read_lock+0x36/0x50 [ 515.599412][T23953] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 515.599519][T23953] handle_mm_fault+0xb3c/0x2da0 [ 515.599560][T23953] do_user_addr_fault+0x634/0x1060 [ 515.599595][T23953] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 515.599673][T23953] ? trace_page_fault_user+0x1f/0xa0 [ 515.599702][T23953] exc_page_fault+0x62/0xa0 [ 515.599812][T23953] asm_exc_page_fault+0x26/0x30 [ 515.599833][T23953] RIP: 0033:0x7f5b1f67ae77 [ 515.599853][T23953] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 515.599876][T23953] RSP: 002b:00007ffd3f63e790 EFLAGS: 00010206 [ 515.599897][T23953] RAX: 0000001b2d724000 RBX: 000000000000013d RCX: 000000000007dbb8 [ 515.599921][T23953] RDX: 00000000051d2ee7 RSI: 00007ffd3f63e820 RDI: 000000000000000e [ 515.599938][T23953] RBP: 00007ffd3f63e7cc R08: 000000001382233e R09: 3fffffffffffffff [ 515.599956][T23953] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 515.599973][T23953] R13: 00000000000927c0 R14: 000000000007d9b7 R15: 00007ffd3f63e820 [ 515.600026][T23953] [ 515.845829][T23953] memory: usage 307200kB, limit 307200kB, failcnt 421 [ 515.853219][T23953] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 515.863769][T23953] kmem: usage 303824kB, limit 9007199254740988kB, failcnt 0 [ 515.871185][T23953] Memory cgroup stats for /syz4: [ 515.871471][T23953] cache 4096 [ 515.879804][T23953] rss 0 [ 515.882604][T23953] shmem 0 [ 515.885732][T23953] mapped_file 0 [ 515.889268][T23953] dirty 0 [ 515.892301][T23953] writeback 0 [ 515.895648][T23953] workingset_refault_anon 93 [ 515.900279][T23953] workingset_refault_file 1561 [ 515.905134][T23953] swap 262144 [ 515.917318][T23953] swapcached 1458176 [ 515.921860][T23953] pgpgin 262236 [ 515.928576][T23953] pgpgout 262235 [ 515.938735][T23953] pgfault 329007 [ 515.945507][T23953] pgmajfault 77 [ 515.951808][T23953] inactive_anon 0 [ 515.958474][T23953] active_anon 0 [ 515.971037][T23953] inactive_file 0 [ 515.979171][T23953] active_file 4096 [ 515.982966][T23953] unevictable 0 [ 515.992098][T27412] loop2: detected capacity change from 0 to 1024 [ 515.998840][T23953] hierarchical_memory_limit 314572800 [ 516.004877][T27412] EXT4-fs: Ignoring removed mblk_io_submit option [ 516.028219][T23953] hierarchical_memsw_limit 9223372036854771712 [ 516.035067][T23953] total_cache 4096 [ 516.038864][T23953] total_rss 0 [ 516.042175][T23953] total_shmem 0 [ 516.046060][T23953] total_mapped_file 0 [ 516.050167][T23953] total_dirty 0 [ 516.053848][T23953] total_writeback 0 [ 516.055821][T27412] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 516.060985][T23953] total_workingset_refault_anon 93 [ 516.072801][T23953] total_workingset_refault_file 1561 [ 516.078650][T23953] total_swap 262144 [ 516.082481][T23953] total_swapcached 1458176 [ 516.088208][T23953] total_pgpgin 262236 [ 516.092263][T23953] total_pgpgout 262235 [ 516.096628][T23953] total_pgfault 329007 [ 516.097510][T27412] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 516.113860][T27412] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 516.124046][T27413] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7110'. [ 516.135089][T23953] total_pgmajfault 77 [ 516.150991][T27412] EXT4-fs (loop2): journal inode is deleted [ 516.173344][T23953] total_inactive_anon 0 [ 516.178437][T23953] total_active_anon 0 [ 516.200843][T23953] total_inactive_file 0 [ 516.227706][T23953] total_active_file 4096 [ 516.246873][T23953] total_unevictable 0 [ 516.261046][T27412] loop2: detected capacity change from 0 to 512 [ 516.262879][T23953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7100,pid=27329,uid=0 [ 516.324746][T23953] Memory cgroup out of memory: Killed process 27329 (syz.4.7100) total-vm:96216kB, anon-rss:1232kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 516.363299][T27412] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7109: corrupted in-inode xattr: invalid ea_ino [ 516.370042][T27427] random: crng reseeded on system resumption [ 516.414140][T27412] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.415239][T27412] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7109: couldn't read orphan inode 15 (err -117) [ 516.424433][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 516.424460][ C0] EXT4-fs (loop2): initial error at time 1782609711: ext4_iget_extra_inode:5180: inode 15 [ 516.424515][ C0] EXT4-fs (loop2): last error at time 1782609711: ext4_iget_extra_inode:5180: inode 15 [ 516.462391][T27412] loop2: lost filesystem error report for type 5 error -117 [ 516.463666][T27412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.481445][T27425] loop3: detected capacity change from 0 to 1024 [ 516.521118][T23953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.538439][T27425] EXT4-fs: Ignoring removed mblk_io_submit option [ 516.545744][T27429] loop0: detected capacity change from 0 to 512 [ 516.589908][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.606701][T27425] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 516.645405][T27425] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 516.667215][T27429] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7116: corrupted in-inode xattr: invalid ea_ino [ 516.683379][T27425] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 516.695590][T27429] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.696066][T27429] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7116: couldn't read orphan inode 15 (err -117) [ 516.705517][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 516.705707][ C0] EXT4-fs (loop0): initial error at time 1782609711: ext4_iget_extra_inode:5180: inode 15 [ 516.705887][ C0] EXT4-fs (loop0): last error at time 1782609711: ext4_iget_extra_inode:5180: inode 15 [ 516.736266][T27425] EXT4-fs (loop3): journal inode is deleted [ 516.756141][T27429] loop0: lost filesystem error report for type 5 error -117 [ 516.762620][T27429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.939991][T27446] loop3: detected capacity change from 0 to 512 [ 516.974563][T27441] loop2: detected capacity change from 0 to 1024 [ 516.990178][T27446] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.7114: corrupted in-inode xattr: invalid ea_ino [ 517.012609][T27446] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.014172][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 517.030152][ C1] EXT4-fs (loop3): initial error at time 1782609712: ext4_iget_extra_inode:5180: inode 15 [ 517.041080][ C1] EXT4-fs (loop3): last error at time 1782609712: ext4_iget_extra_inode:5180: inode 15 [ 517.052269][T27441] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.060628][T27446] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7114: couldn't read orphan inode 15 (err -117) [ 517.073725][T27446] loop3: lost filesystem error report for type 5 error -117 [ 517.077825][T27446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.098022][T27441] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 517.108417][T27441] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 517.119054][T27441] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.139844][T27441] EXT4-fs (loop2): journal inode is deleted [ 517.234198][T27448] loop4: detected capacity change from 0 to 1024 [ 517.240912][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.247041][T27448] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.263537][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.285868][T27448] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 517.312934][T27451] loop2: detected capacity change from 0 to 512 [ 517.321461][T27452] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7123'. [ 517.337574][T27448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 517.368727][T27451] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.7120: corrupted in-inode xattr: invalid ea_ino [ 517.382723][T27448] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.455656][T27448] EXT4-fs (loop4): journal inode is deleted [ 517.462276][T27451] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.463901][T27451] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7120: couldn't read orphan inode 15 (err -117) [ 517.473177][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 517.473192][ C0] EXT4-fs (loop2): initial error at time 1782609712: ext4_iget_extra_inode:5180: inode 15 [ 517.473222][ C0] EXT4-fs (loop2): last error at time 1782609712: ext4_iget_extra_inode:5180: inode 15 [ 517.514182][T27451] loop2: lost filesystem error report for type 5 error -117 [ 517.514745][T27451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.579146][T27462] option changes via remount are deprecated (pid=27461 comm=syz.3.7125) [ 517.715466][T27471] loop4: detected capacity change from 0 to 512 [ 517.723765][T27471] ext4: Unknown parameter 'noqu' [ 519.887873][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.053019][T27584] random: crng reseeded on system resumption [ 520.053199][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7131'. [ 520.168702][T27586] loop0: detected capacity change from 0 to 512 [ 520.199584][T27586] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7134: corrupted in-inode xattr: invalid ea_ino [ 520.216513][T27586] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 520.220655][T27586] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7134: couldn't read orphan inode 15 (err -117) [ 520.230015][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 520.230046][ C1] EXT4-fs (loop0): initial error at time 1782609715: ext4_iget_extra_inode:5180: inode 15 [ 520.230345][ C1] EXT4-fs (loop0): last error at time 1782609715: ext4_iget_extra_inode:5180: inode 15 [ 520.263570][T27598] random: crng reseeded on system resumption [ 520.267752][T27586] loop0: lost filesystem error report for type 5 error -117 [ 520.282920][T27586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.371323][T27593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.713934][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.738555][T27640] option changes via remount are deprecated (pid=27639 comm=syz.4.7143) [ 520.811362][T27637] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.832876][T27637] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.845905][T27652] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7146'. [ 521.215894][T27670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'. [ 523.714659][T27637] syz.3.7142 (27637) used greatest stack depth: 8896 bytes left [ 523.943630][T27750] netlink: 'syz.4.7152': attribute type 10 has an invalid length. [ 523.971109][T27750] team0: Device ipvlan1 failed to register rx_handler [ 523.979143][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.141568][T27756] random: crng reseeded on system resumption [ 524.741608][T27772] set_capacity_and_notify: 1 callbacks suppressed [ 524.741630][T27772] loop0: detected capacity change from 0 to 1024 [ 524.793094][T27772] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.804016][T27772] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 524.816902][T27772] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 524.828455][T27772] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 524.847243][T27772] EXT4-fs (loop0): journal inode is deleted [ 524.970673][T27784] loop0: detected capacity change from 0 to 512 [ 524.989563][T27784] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7161: corrupted in-inode xattr: invalid ea_ino [ 525.014187][T27784] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.015607][T27784] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7161: couldn't read orphan inode 15 (err -117) [ 525.024851][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 525.024873][ C1] EXT4-fs (loop0): initial error at time 1782609720: ext4_iget_extra_inode:5180: inode 15 [ 525.024921][ C1] EXT4-fs (loop0): last error at time 1782609720: ext4_iget_extra_inode:5180: inode 15 [ 525.062815][T27784] loop0: lost filesystem error report for type 5 error -117 [ 525.063419][T27784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.421204][T27790] loop1: detected capacity change from 0 to 1024 [ 525.449542][T27790] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.460183][T27790] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 525.470515][T27790] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 525.481198][T27790] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 525.496338][T27790] EXT4-fs (loop1): journal inode is deleted [ 525.596393][T27791] loop1: detected capacity change from 0 to 512 [ 525.623369][T27791] ext4: Unknown parameter 'noqu[' [ 527.607309][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.650805][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7169'. [ 527.961349][T27824] random: crng reseeded on system resumption [ 528.053066][T27823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7179'. [ 528.078677][T27831] loop1: detected capacity change from 0 to 128 [ 528.101476][T27831] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 528.118382][T27831] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.174735][T27836] loop4: detected capacity change from 0 to 512 [ 528.205219][T27836] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.7180: corrupted in-inode xattr: invalid ea_ino [ 528.233575][T27836] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 528.234192][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 528.250273][ C1] EXT4-fs (loop4): initial error at time 1782609723: ext4_iget_extra_inode:5180: inode 15 [ 528.260712][ C1] EXT4-fs (loop4): last error at time 1782609723: ext4_iget_extra_inode:5180: inode 15 [ 528.271550][T27836] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7180: couldn't read orphan inode 15 (err -117) [ 528.283567][T27836] loop4: lost filesystem error report for type 5 error -117 [ 528.284696][T27836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.309330][T27841] loop3: detected capacity change from 0 to 512 [ 528.325080][T27841] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.7182: corrupted in-inode xattr: invalid ea_ino [ 528.339181][T27841] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 528.339755][T27841] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7182: couldn't read orphan inode 15 (err -117) [ 528.349053][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 528.349074][ C1] EXT4-fs (loop3): initial error at time 1782609723: ext4_iget_extra_inode:5180: inode 15 [ 528.349113][ C1] EXT4-fs (loop3): last error at time 1782609723: ext4_iget_extra_inode:5180: inode 15 [ 528.387215][T27841] loop3: lost filesystem error report for type 5 error -117 [ 528.388023][T27841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.433044][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.494699][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.637944][T27857] random: crng reseeded on system resumption [ 528.701126][T27844] loop0: detected capacity change from 0 to 1024 [ 528.724184][T27844] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.771972][T27870] loop2: detected capacity change from 0 to 1024 [ 528.781316][T27844] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 528.797840][T27844] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 528.811597][T27870] EXT4-fs: Ignoring removed mblk_io_submit option [ 528.820783][T27844] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 528.863950][T27870] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 528.874169][T27870] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 528.889339][T27844] EXT4-fs (loop0): journal inode is deleted [ 528.897574][T27870] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 528.917014][T27831] syz.1.7181 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 528.938696][T27870] EXT4-fs (loop2): journal inode is deleted [ 529.038150][T27831] CPU: 1 UID: 0 PID: 27831 Comm: syz.1.7181 Not tainted syzkaller #0 PREEMPT(lazy) [ 529.038211][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.038226][T27831] Call Trace: [ 529.038233][T27831] [ 529.038240][T27831] __dump_stack+0x1d/0x30 [ 529.038264][T27831] dump_stack_lvl+0x95/0xd0 [ 529.038284][T27831] dump_stack+0x15/0x1b [ 529.038384][T27831] dump_header+0x80/0x240 [ 529.038405][T27831] oom_kill_process+0x295/0x350 [ 529.038443][T27831] out_of_memory+0x981/0xbc0 [ 529.038522][T27831] try_charge_memcg+0x621/0xa00 [ 529.038563][T27831] __memcg_kmem_charge_page+0x199/0x3a0 [ 529.038662][T27831] __alloc_frozen_pages_noprof+0x18a/0x350 [ 529.038746][T27831] alloc_pages_mpol+0xa9/0x1d0 [ 529.038780][T27831] alloc_pages_noprof+0x8f/0x140 [ 529.038813][T27831] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 529.038856][T27831] __kvmalloc_node_noprof+0x3a0/0x590 [ 529.038889][T27831] ? futex_hash_allocate+0x192/0x920 [ 529.038917][T27831] ? futex_hash_allocate+0x192/0x920 [ 529.038966][T27831] ? futex_hash_allocate+0x192/0x920 [ 529.038988][T27831] futex_hash_allocate+0x192/0x920 [ 529.039014][T27831] ? cap_task_prctl+0x13f/0x6b0 [ 529.039058][T27831] futex_hash_prctl+0xd8/0xf0 [ 529.039088][T27831] __se_sys_prctl+0x4f4/0x13b0 [ 529.039125][T27831] __x64_sys_prctl+0x67/0x80 [ 529.039212][T27831] x64_sys_call+0x2533/0x3020 [ 529.039292][T27831] do_syscall_64+0x136/0x3c0 [ 529.039331][T27831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.039358][T27831] RIP: 0033:0x7f9c2135ce59 [ 529.039383][T27831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.039405][T27831] RSP: 002b:00007f9c1fdb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 529.039428][T27831] RAX: ffffffffffffffda RBX: 00007f9c215d5fa0 RCX: 00007f9c2135ce59 [ 529.039442][T27831] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 529.039458][T27831] RBP: 00007f9c213f2e6f R08: 0000000000000000 R09: 0000000000000000 [ 529.039473][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.039485][T27831] R13: 00007f9c215d6038 R14: 00007f9c215d5fa0 R15: 00007fff22edcb38 [ 529.039521][T27831] [ 529.113709][T27831] memory: usage 233616kB, limit 307200kB, failcnt 296 [ 529.295514][T27831] memory+swap: usage 114256kB, limit 9007199254740988kB, failcnt 0 [ 529.310117][T27831] kmem: usage 108444kB, limit 9007199254740988kB, failcnt 0 [ 529.340147][T27884] loop0: detected capacity change from 0 to 512 [ 529.355473][T27831] Memory cgroup stats for /syz1: [ 529.355736][T27831] cache 528384 [ 529.364353][T27831] rss 4096 [ 529.367479][T27831] shmem 0 [ 529.370484][T27831] mapped_file 65536 [ 529.374526][T27831] dirty 0 [ 529.377529][T27831] writeback 0 [ 529.380867][T27831] workingset_refault_anon 70 [ 529.385724][T27831] workingset_refault_file 603 [ 529.420006][T27831] swap 253952 [ 529.423522][T27831] swapcached 3301376 [ 529.537874][T27831] pgpgin 246462 [ 529.541481][T27831] pgpgout 246331 [ 529.553708][T27831] pgfault 412786 [ 529.570766][T27884] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.7184: corrupted in-inode xattr: invalid ea_ino [ 529.570807][T27831] pgmajfault 36 [ 529.587965][T27831] inactive_anon 0 [ 529.591670][T27831] active_anon 8192 [ 529.595643][T27831] inactive_file 0 [ 529.599319][T27831] active_file 528384 [ 529.603227][T27831] unevictable 0 [ 529.611498][T27831] hierarchical_memory_limit 314572800 [ 529.617338][T27831] hierarchical_memsw_limit 9223372036854771712 [ 529.623570][T27831] total_cache 528384 [ 529.627496][T27831] total_rss 4096 [ 529.631164][T27831] total_shmem 0 [ 529.634670][T27831] total_mapped_file 65536 [ 529.639071][T27831] total_dirty 0 [ 529.642567][T27831] total_writeback 0 [ 529.646404][T27831] total_workingset_refault_anon 70 [ 529.651545][T27831] total_workingset_refault_file 603 [ 529.656787][T27831] total_swap 253952 [ 529.660609][T27831] total_swapcached 3301376 [ 529.665060][T27831] total_pgpgin 246462 [ 529.669106][T27831] total_pgpgout 246331 [ 529.673245][T27831] total_pgfault 412788 [ 529.677415][T27831] total_pgmajfault 36 [ 529.681412][T27831] total_inactive_anon 0 [ 529.685601][T27831] total_active_anon 8192 [ 529.689848][T27831] total_inactive_file 0 [ 529.694017][T27831] total_active_file 528384 [ 529.698491][T27831] total_unevictable 0 [ 529.702631][T27831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7181,pid=27830,uid=0 [ 529.718025][T27884] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.724068][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 529.739698][ C0] EXT4-fs (loop0): initial error at time 1782609724: ext4_iget_extra_inode:5180: inode 15 [ 529.749660][ C0] EXT4-fs (loop0): last error at time 1782609724: ext4_iget_extra_inode:5180: inode 15 [ 529.764101][T27884] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.7184: couldn't read orphan inode 15 (err -117) [ 529.781062][T27831] Memory cgroup out of memory: Killed process 27830 (syz.1.7181) total-vm:96216kB, anon-rss:1232kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 529.834078][T27884] loop0: lost filesystem error report for type 5 error -117 [ 529.834658][T27884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.926947][T27921] set_capacity_and_notify: 1 callbacks suppressed [ 529.926994][T27921] loop3: detected capacity change from 0 to 512 [ 529.944572][T27921] EXT4-fs: Ignoring removed orlov option [ 529.953652][T27921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 529.979264][T27921] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.7193: invalid indirect mapped block 32768 (level 2) [ 529.993173][T27921] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 529.994145][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 530.011355][ C1] EXT4-fs (loop3): initial error at time 1782609725: ext4_free_branches:1023: inode 16 [ 530.021716][ C1] EXT4-fs (loop3): last error at time 1782609725: ext4_free_branches:1023: inode 16 [ 530.036068][T27921] EXT4-fs (loop3): 1 orphan inode deleted [ 530.042174][T27921] EXT4-fs (loop3): 1 truncate cleaned up [ 530.061545][T27921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.104829][T23155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.137555][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.220432][T27934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27934 comm=syz.2.7198 [ 530.251051][T27934] netlink: 'syz.2.7198': attribute type 10 has an invalid length. [ 530.331757][T27936] random: crng reseeded on system resumption [ 530.463369][T27948] random: crng reseeded on system resumption [ 530.559292][T27950] random: crng reseeded on system resumption [ 530.618525][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.641062][T27944] loop0: detected capacity change from 0 to 512 [ 530.660433][T27944] EXT4-fs: Ignoring removed orlov option [ 530.679883][T27944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 530.719435][T27944] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7200: invalid indirect mapped block 32768 (level 2) [ 530.726146][T27957] random: crng reseeded on system resumption [ 530.736816][T27944] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 530.744254][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 530.760556][T27954] random: crng reseeded on system resumption [ 530.762873][ C0] EXT4-fs (loop0): initial error at time 1782609725: ext4_free_branches:1023: inode 16 [ 530.781882][ C0] EXT4-fs (loop0): last error at time 1782609725: ext4_free_branches:1023: inode 16 [ 530.799689][T27944] EXT4-fs (loop0): 1 orphan inode deleted [ 530.805600][T27944] EXT4-fs (loop0): 1 truncate cleaned up [ 530.826236][T27944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.885478][T27963] loop1: detected capacity change from 0 to 1024 [ 530.892246][T27963] EXT4-fs: Ignoring removed mblk_io_submit option [ 530.901828][T27963] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 530.911728][T27963] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 530.926588][T27963] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 530.938907][T27963] EXT4-fs (loop1): journal inode is deleted [ 531.000350][T27971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=27971 comm=syz.3.7214 [ 531.016627][ T8105] bridge_slave_1: left allmulticast mode [ 531.023836][ T8105] bridge_slave_1: left promiscuous mode [ 531.032714][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.041782][ T8105] bridge_slave_0: left allmulticast mode [ 531.052699][ T8105] bridge_slave_0: left promiscuous mode [ 531.060271][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.068347][T27975] netlink: 'syz.3.7214': attribute type 10 has an invalid length. [ 531.070556][T27974] loop4: detected capacity change from 0 to 128 [ 531.113427][T27974] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.127713][T27974] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.142767][ T8105] bond7 (unregistering): (slave vlan3): Releasing active interface [ 531.157064][ T8105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.167833][ T8105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.190310][ T8105] bond0 (unregistering): Released all slaves [ 531.204340][ T8105] bond1 (unregistering): (slave veth3): Releasing active interface [ 531.213284][ T8105] bond1 (unregistering): Released all slaves [ 531.220415][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.234842][ T8105] bond2 (unregistering): (slave veth5): Releasing active interface [ 531.266086][ T8105] bond2 (unregistering): Released all slaves [ 531.291995][ T8105] bond3 (unregistering): (slave veth7): Releasing active interface [ 531.302983][ T8105] bond3 (unregistering): Released all slaves [ 531.316285][ T8105] bond4 (unregistering): (slave veth9): Releasing active interface [ 531.329687][ T8105] bond4 (unregistering): Released all slaves [ 531.350639][ T8105] bond5 (unregistering): Released all slaves [ 531.364691][ T8105] bond6 (unregistering): (slave veth11): Releasing active interface [ 531.375512][ T8105] bond6 (unregistering): Released all slaves [ 531.403815][ T8105] bond7 (unregistering): (slave veth13): Releasing active interface [ 531.423533][ T8105] bond7 (unregistering): Released all slaves [ 531.449372][T27966] sit0: left promiscuous mode [ 531.608874][ T8105] tipc: Left network mode [ 531.622329][ T8105] hsr_slave_0: left promiscuous mode [ 531.628802][ T8105] hsr_slave_1: left promiscuous mode [ 531.634948][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.642608][ T8105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.708041][T27988] loop3: detected capacity change from 0 to 1024 [ 531.715670][T27988] EXT4-fs: Ignoring removed mblk_io_submit option [ 531.727556][T27988] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 531.744435][T27988] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 531.762719][T27988] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 531.785715][T27989] random: crng reseeded on system resumption [ 531.792691][T27988] EXT4-fs (loop3): journal inode is deleted [ 531.919930][ T8105] team0 (unregistering): Port device team_slave_1 removed [ 531.935930][ T8105] team0 (unregistering): Port device team_slave_0 removed [ 532.067355][T27998] random: crng reseeded on system resumption [ 532.068051][T28002] loop1: detected capacity change from 0 to 1024 [ 532.119702][T28002] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.144669][T28002] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 532.154719][T28002] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 532.164634][T28002] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 532.176838][T28002] EXT4-fs (loop1): journal inode is deleted [ 532.197812][T23953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 532.233480][T28007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=28007 comm=syz.3.7228 [ 532.263532][T28007] netlink: 'syz.3.7228': attribute type 10 has an invalid length. [ 532.288272][T28009] loop4: detected capacity change from 0 to 128 [ 532.320693][T28009] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.333889][T28009] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.464547][T23953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 532.566338][T28024] random: crng reseeded on system resumption [ 532.569100][T28018] loop3: detected capacity change from 0 to 1024 [ 532.589061][T28018] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.611527][T28018] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 532.622388][T28018] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 532.632987][T28018] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 532.650247][T28018] EXT4-fs (loop3): journal inode is deleted [ 532.923700][T28026] loop1: detected capacity change from 0 to 1024 [ 532.947408][T28026] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.954357][T28048] loop3: detected capacity change from 0 to 128 [ 532.968145][T28026] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 533.000638][T28026] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 533.018145][T28026] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 533.057396][T28026] EXT4-fs (loop1): journal inode is deleted [ 533.057651][T28048] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 533.078907][T28048] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.129135][T28071] EXT4-fs: Ignoring removed mblk_io_submit option [ 533.160144][T28071] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 533.195839][T28071] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 533.205808][T28071] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 533.225721][T28071] EXT4-fs (loop2): journal inode is deleted [ 533.266514][T28029] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.7235: corrupted in-inode xattr: invalid ea_ino [ 533.352600][T28029] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 533.353698][T28029] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7235: couldn't read orphan inode 15 (err -117) [ 533.362933][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 533.362960][ C1] EXT4-fs (loop1): initial error at time 1782609728: ext4_iget_extra_inode:5180: inode 15 [ 533.363007][ C1] EXT4-fs (loop1): last error at time 1782609728: ext4_iget_extra_inode:5180: inode 15 [ 533.462254][T28029] loop1: lost filesystem error report for type 5 error -117 [ 533.462943][T28029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.774271][T28119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7245'. [ 533.784892][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.909340][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 533.917431][T28125] random: crng reseeded on system resumption [ 534.117796][T28133] random: crng reseeded on system resumption [ 534.179837][T28128] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.200951][T28128] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 534.217218][T28128] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 534.253281][T28128] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 534.333081][T28128] EXT4-fs (loop4): journal inode is deleted [ 534.342594][T28141] random: crng reseeded on system resumption [ 534.510864][T28148] random: crng reseeded on system resumption [ 534.559948][T28162] netlink: 'syz.2.7258': attribute type 10 has an invalid length. [ 534.583050][T28162] team0: Device ipvlan1 failed to register rx_handler [ 534.752860][T28143] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.762674][T28182] random: crng reseeded on system resumption [ 534.790379][T28143] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 534.806367][T28143] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 534.830123][T28143] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 534.877282][T28143] EXT4-fs (loop1): journal inode is deleted [ 535.108384][T28224] random: crng reseeded on system resumption [ 535.264356][T28253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7268'. [ 535.358272][T28256] random: crng reseeded on system resumption [ 535.494332][T28258] random: crng reseeded on system resumption [ 536.004039][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7272'. [ 536.014499][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 536.176782][T28292] random: crng reseeded on system resumption [ 536.407807][T28272] set_capacity_and_notify: 4 callbacks suppressed [ 536.407923][T28272] loop4: detected capacity change from 0 to 1024 [ 536.427172][T28286] loop3: detected capacity change from 0 to 1024 [ 536.442402][T28286] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.452648][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7283'. [ 536.606885][T28314] loop1: detected capacity change from 0 to 512 [ 536.622981][T28314] EXT4-fs: Ignoring removed orlov option [ 536.640454][T28272] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.649421][T28314] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 536.677850][T28286] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 536.721597][T28314] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.7282: invalid indirect mapped block 32768 (level 2) [ 536.736146][T28314] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 536.749497][T28314] EXT4-fs (loop1): 1 orphan inode deleted [ 536.760487][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 536.760537][ C0] EXT4-fs (loop1): initial error at time 1782609731: ext4_free_branches:1023: inode 16 [ 536.760896][ C0] EXT4-fs (loop1): last error at time 1782609731: ext4_free_branches:1023: inode 16 [ 536.795866][T28314] EXT4-fs (loop1): 1 truncate cleaned up [ 536.818755][T28314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.862744][T28286] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 536.883653][T28272] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 536.931960][T28286] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 536.977109][T28272] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 537.151910][T28272] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 537.166992][T28286] EXT4-fs (loop3): journal inode is deleted [ 537.215578][T28317] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 537.283657][T28272] EXT4-fs (loop4): journal inode is deleted [ 537.302944][T28320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.542862][T28357] random: crng reseeded on system resumption [ 537.595995][T28360] loop3: detected capacity change from 0 to 512 [ 537.607440][T28360] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.7280: corrupted in-inode xattr: invalid ea_ino [ 537.620847][T28360] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 537.621089][T28360] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7280: couldn't read orphan inode 15 (err -117) [ 537.630266][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 537.630314][ C1] EXT4-fs (loop3): initial error at time 1782609732: ext4_iget_extra_inode:5180: inode 15 [ 537.630338][ C1] EXT4-fs (loop3): last error at time 1782609732: ext4_iget_extra_inode:5180: inode 15 [ 537.693784][T28360] loop3: lost filesystem error report for type 5 error -117 [ 537.697147][T28360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.113610][T28371] loop4: detected capacity change from 0 to 512 [ 538.122803][T28371] EXT4-fs: Ignoring removed orlov option [ 538.132108][T28371] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 538.174545][T28371] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.7292: invalid indirect mapped block 32768 (level 2) [ 538.191603][T28371] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 538.201160][T28371] EXT4-fs (loop4): 1 orphan inode deleted [ 538.212502][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 538.212832][ C0] EXT4-fs (loop4): initial error at time 1782609733: ext4_free_branches:1023: inode 16 [ 538.213113][ C0] EXT4-fs (loop4): last error at time 1782609733: ext4_free_branches:1023: inode 16 [ 538.247188][T28371] EXT4-fs (loop4): 1 truncate cleaned up [ 538.260880][T28371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.310334][T23155] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.667644][T21044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.908044][T28391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7298'. [ 539.807770][T28395] loop2: detected capacity change from 0 to 512 [ 539.814613][T28395] EXT4-fs: Ignoring removed orlov option [ 539.908147][T28395] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 539.964371][T28395] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.7297: invalid indirect mapped block 32768 (level 2) [ 539.978988][T28395] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 539.982928][T28395] EXT4-fs (loop2): 1 orphan inode deleted [ 539.992315][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 539.992452][ C1] EXT4-fs (loop2): initial error at time 1782609735: ext4_free_branches:1023: inode 16 [ 539.993247][ C1] EXT4-fs (loop2): last error at time 1782609735: ext4_free_branches:1023: inode 16 [ 540.029457][T28395] EXT4-fs (loop2): 1 truncate cleaned up [ 540.043752][T28395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.500969][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.511091][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.649670][T28435] random: crng reseeded on system resumption [ 540.712613][T28446] sit0: entered promiscuous mode [ 540.799756][T28448] loop2: detected capacity change from 0 to 128 [ 540.858007][T28451] loop3: detected capacity change from 0 to 128 [ 540.959243][T28448] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.008548][T28451] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.042847][T28448] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.045043][T28456] loop4: detected capacity change from 0 to 1024 [ 541.056889][T28451] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.069708][T28456] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.112079][ T28] audit: type=1400 audit(1782609736.315:599): avc: denied { write } for pid=28447 comm="syz.2.7307" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.135657][T28456] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 541.167196][T28456] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 541.172713][ T28] audit: type=1400 audit(1782609736.355:600): avc: denied { write } for pid=28450 comm="syz.3.7308" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 541.219884][T28456] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 541.322345][T28456] EXT4-fs (loop4): journal inode is deleted [ 541.332752][T28464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.684129][T28487] loop1: detected capacity change from 0 to 128 [ 541.787090][T21629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.792440][T28487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 541.869156][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.907839][T28487] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.985531][ T28] audit: type=1400 audit(1782609737.185:601): avc: denied { write } for pid=28485 comm="syz.1.7319" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.062684][T28510] loop3: detected capacity change from 0 to 128 [ 542.063859][T28504] random: crng reseeded on system resumption [ 542.162295][T28510] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 542.279177][T28510] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.375711][ T28] audit: type=1400 audit(1782609737.575:602): avc: denied { write } for pid=28509 comm="syz.3.7322" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.533017][T23155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 542.855890][T28556] loop0: detected capacity change from 0 to 512 [ 542.890841][T28556] EXT4-fs: Ignoring removed orlov option [ 542.950043][T28556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 542.989009][T28556] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7323: invalid indirect mapped block 32768 (level 2) [ 543.004034][T28556] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 543.014701][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 543.033084][ C1] EXT4-fs (loop0): initial error at time 1782609738: ext4_free_branches:1023: inode 16 [ 543.044933][ C1] EXT4-fs (loop0): last error at time 1782609738: ext4_free_branches:1023: inode 16 [ 543.058772][T28556] EXT4-fs (loop0): 1 orphan inode deleted [ 543.066217][T28556] EXT4-fs (loop0): 1 truncate cleaned up [ 543.092421][T28556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.441996][T28502] loop4: detected capacity change from 0 to 1024 [ 543.450640][T28559] loop2: detected capacity change from 0 to 128 [ 543.513016][T28502] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.569077][T28502] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 543.588923][T28559] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 543.626612][T28502] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 543.661540][T28559] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.682447][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.694832][T28502] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 543.753794][ T28] audit: type=1400 audit(1782609738.945:603): avc: denied { write } for pid=28558 comm="syz.2.7326" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 543.770397][T28502] EXT4-fs (loop4): journal inode is deleted [ 543.921884][T28568] loop3: detected capacity change from 0 to 128 [ 544.019127][T28568] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 544.068719][T28568] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.308490][ T28] audit: type=1400 audit(1782609739.325:604): avc: denied { write } for pid=28567 comm="syz.3.7327" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 544.331658][T23586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.511231][T28577] sit0: left promiscuous mode [ 544.520468][T21629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 544.753916][T28587] random: crng reseeded on system resumption [ 544.801218][T28589] sit0: left promiscuous mode [ 544.908933][T28592] sit0: entered promiscuous mode [ 544.995898][T21044] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 545.013492][T21044] CPU: 0 UID: 0 PID: 21044 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 545.013518][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.013533][T21044] Call Trace: [ 545.013541][T21044] [ 545.013550][T21044] __dump_stack+0x1d/0x30 [ 545.013678][T21044] dump_stack_lvl+0x95/0xd0 [ 545.013699][T21044] dump_stack+0x15/0x1b [ 545.013726][T21044] dump_header+0x80/0x240 [ 545.013797][T21044] oom_kill_process+0x295/0x350 [ 545.013835][T21044] out_of_memory+0x981/0xbc0 [ 545.013869][T21044] try_charge_memcg+0x621/0xa00 [ 545.013910][T21044] charge_memcg+0x6d/0x120 [ 545.014053][T21044] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 545.014095][T21044] swap_cache_alloc_folio+0x47b/0x5e0 [ 545.014130][T21044] swap_cluster_readahead+0x3d2/0x460 [ 545.014174][T21044] swapin_readahead+0xd8/0x8a0 [ 545.014208][T21044] ? percpu_counter_add_batch+0xb5/0x120 [ 545.014242][T21044] ? mm_trace_rss_stat+0x1d/0xc0 [ 545.014271][T21044] ? __rcu_read_unlock+0x33/0x70 [ 545.014321][T21044] ? filemap_map_pages+0xe1b/0xef0 [ 545.014339][T21044] ? __rcu_read_unlock+0x4e/0x70 [ 545.014366][T21044] ? swap_cache_get_folio+0x1f7/0x200 [ 545.014478][T21044] do_swap_page+0x2a2/0x1ec0 [ 545.014515][T21044] ? __css_rstat_updated+0xbb/0x280 [ 545.014600][T21044] ? __rcu_read_lock+0x36/0x50 [ 545.014644][T21044] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 545.014679][T21044] handle_mm_fault+0xb3c/0x2da0 [ 545.014727][T21044] do_user_addr_fault+0x634/0x1060 [ 545.014820][T21044] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 545.014866][T21044] ? trace_page_fault_user+0x1f/0xa0 [ 545.014902][T21044] exc_page_fault+0x62/0xa0 [ 545.014971][T21044] asm_exc_page_fault+0x26/0x30 [ 545.015000][T21044] RIP: 0033:0x7fe43ff1ae77 [ 545.015028][T21044] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 545.015054][T21044] RSP: 002b:00007fff079e9c10 EFLAGS: 00010206 [ 545.015075][T21044] RAX: 0000001b2fa24000 RBX: 0000000000000304 RCX: 0000000000084d00 [ 545.015093][T21044] RDX: 000000000ee3487c RSI: 00007fff079e9ca0 RDI: 0000000000000017 [ 545.015169][T21044] RBP: 00007fff079e9c4c R08: 0000000038cae433 R09: 3fffffffffffffff [ 545.015189][T21044] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 545.015272][T21044] R13: 00000000000927c0 R14: 0000000000084ea9 R15: 00007fff079e9ca0 [ 545.015365][T21044] [ 545.292717][T21044] memory: usage 307200kB, limit 307200kB, failcnt 893 [ 545.334959][T28596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.354894][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7337'. [ 545.397582][T21044] memory+swap: usage 97104kB, limit 9007199254740988kB, failcnt 0 [ 545.426859][T21044] kmem: usage 61416kB, limit 9007199254740988kB, failcnt 0 [ 545.452517][T21044] Memory cgroup stats for /syz3: [ 545.452835][T21044] cache 1052672 [ 545.480562][T21044] rss 24576 [ 545.490074][T21044] shmem 0 [ 545.506988][T21044] mapped_file 36864 [ 545.514092][T21044] dirty 20480 [ 545.517495][T21044] writeback 0 [ 545.530168][T21044] workingset_refault_anon 111 [ 545.538564][T21044] workingset_refault_file 2348 [ 545.551056][T21044] swap 241664 [ 545.558856][T21044] swapcached 864256 [ 545.573702][T21044] pgpgin 268844 [ 545.581782][T21044] pgpgout 268581 [ 545.588859][T21044] pgfault 431454 [ 545.595560][T21044] pgmajfault 90 [ 545.603311][T21044] inactive_anon 0 [ 545.610495][T21044] active_anon 24576 [ 545.617970][T21044] inactive_file 0 [ 545.625802][T21044] active_file 1052672 [ 545.634578][T21044] unevictable 0 [ 545.638085][T28614] loop0: detected capacity change from 0 to 128 [ 545.641483][T21044] hierarchical_memory_limit 314572800 [ 545.658096][T21044] hierarchical_memsw_limit 9223372036854771712 [ 545.671938][T21044] total_cache 1052672 [ 545.680782][T21044] total_rss 24576 [ 545.693718][T21044] total_shmem 0 [ 545.702290][T28614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.723346][T21044] total_mapped_file 36864 [ 545.730689][T28614] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.744663][T21044] total_dirty 20480 [ 545.751255][T28606] loop4: detected capacity change from 0 to 1024 [ 545.758526][T21044] total_writeback 0 [ 545.766638][T21044] total_workingset_refault_anon 111 [ 545.785947][ T28] audit: type=1400 audit(1782609740.975:605): avc: denied { write } for pid=28613 comm="syz.0.7344" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.812021][T21044] total_workingset_refault_file 2348 [ 545.828477][T28606] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.838704][T21044] total_swap 241664 [ 545.842760][T21044] total_swapcached 864256 [ 545.846750][T28606] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 545.847178][T21044] total_pgpgin 268844 [ 545.847190][T21044] total_pgpgout 268581 [ 545.847200][T21044] total_pgfault 431454 [ 545.847210][T21044] total_pgmajfault 90 [ 545.847220][T21044] total_inactive_anon 0 [ 545.847230][T21044] total_active_anon 24576 [ 545.847240][T21044] total_inactive_file 0 [ 545.847307][T21044] total_active_file 1052672 [ 545.847339][T21044] total_unevictable 0 [ 545.847349][T21044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7327,pid=28567,uid=0 [ 545.847429][T21044] Memory cgroup out of memory: OOM victim 28567 (syz.3.7327) is already exiting. Skip killing the task [ 545.952991][T28606] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 545.954355][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 545.971959][T28606] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 545.991369][T28606] EXT4-fs (loop4): journal inode is deleted [ 546.127373][T28621] loop4: detected capacity change from 0 to 512 [ 546.144927][T28622] loop3: detected capacity change from 0 to 1024 [ 546.152822][T28622] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.170747][T28621] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.7340: corrupted in-inode xattr: invalid ea_ino [ 546.176889][T28622] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 546.214471][T28622] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 546.247684][T28622] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 546.266658][T28621] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 546.274136][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 546.289775][ C0] EXT4-fs (loop4): initial error at time 1782609741: ext4_iget_extra_inode:5180: inode 15 [ 546.299721][ C0] EXT4-fs (loop4): last error at time 1782609741: ext4_iget_extra_inode:5180: inode 15 [ 546.312996][T28621] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7340: couldn't read orphan inode 15 (err -117) [ 546.358643][T28622] EXT4-fs (loop3): journal inode is deleted [ 546.366652][T28621] loop4: lost filesystem error report for type 5 error -117 [ 546.367251][T28621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.452848][T28627] netlink: 'syz.2.7348': attribute type 10 has an invalid length. [ 546.475275][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.486259][T28627] team0: Device ipvlan1 failed to register rx_handler [ 546.497209][T28629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.717102][T23586] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.817432][T28634] set_capacity_and_notify: 1 callbacks suppressed [ 546.817528][T28634] loop3: detected capacity change from 0 to 1024 [ 546.840774][T28634] EXT4-fs: Ignoring removed mblk_io_submit option [ 546.843297][T28637] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.891885][T28634] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 546.907744][T28637] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.938759][T28634] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 546.960881][T28646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7356'. [ 546.962331][T28643] loop4: detected capacity change from 0 to 1024 [ 546.977543][T28634] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 546.989021][ T28] audit: type=1400 audit(1782609742.175:606): avc: denied { write } for pid=28635 comm="syz.1.7351" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 547.038165][T28634] EXT4-fs (loop3): journal inode is deleted [ 547.058126][T28643] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.112853][T28643] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 547.139608][T28643] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 547.146220][T28656] loop2: detected capacity change from 0 to 128 [ 547.169040][T28643] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 547.230275][T28643] EXT4-fs (loop4): journal inode is deleted [ 547.274118][T28656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 547.322123][T28656] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.421894][ T28] audit: type=1400 audit(1782609742.625:607): avc: denied { write } for pid=28655 comm="syz.2.7357" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 547.568870][T23155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 547.784171][T28643] loop4: detected capacity change from 0 to 512 [ 547.860914][T28643] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.7354: corrupted in-inode xattr: invalid ea_ino [ 547.877464][T28643] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.884073][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 547.895657][T28643] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7354: couldn't read orphan inode 15 (err -117) [ 547.899721][ C1] EXT4-fs (loop4): initial error at time 1782609743: ext4_iget_extra_inode:5180: inode 15 [ 547.899770][ C1] EXT4-fs (loop4): last error at time 1782609743: ext4_iget_extra_inode:5180: inode 15 [ 547.970110][T28643] loop4: lost filesystem error report for type 5 error -117 [ 548.064531][T28643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.166751][T21629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.207594][T28670] loop3: detected capacity change from 0 to 128 [ 548.241107][T23953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.307214][T28670] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.351421][T28667] loop0: detected capacity change from 0 to 1024 [ 548.386617][T28670] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.399780][T28672] loop2: detected capacity change from 0 to 128 [ 548.428718][T28667] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.483839][ T28] audit: type=1400 audit(1782609743.685:608): avc: denied { write } for pid=28669 comm="syz.3.7362" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 548.510215][T28667] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 548.554899][T28672] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.567912][T28667] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 548.569426][T28667] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 548.595715][T28672] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.625971][T28667] EXT4-fs (loop0): journal inode is deleted [ 548.717493][T21629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 548.742185][T28687] loop1: detected capacity change from 0 to 128 [ 548.794315][T28690] loop4: detected capacity change from 0 to 128 [ 548.895178][T28687] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.914720][T28692] random: crng reseeded on system resumption [ 548.937634][T28687] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.044962][T28690] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 549.067232][ T28] audit: type=1400 audit(1782609744.275:609): avc: denied { write } for pid=28685 comm="syz.1.7369" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.096386][T21044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.146374][T28690] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.184148][T28833] ================================================================== [ 551.192304][T28833] BUG: KCSAN: data-race in ktime_get_with_offset / timekeeping_update_from_shadow [ 551.201543][T28833] [ 551.203902][T28833] write to 0xffffffff893d04c8 of 304 bytes by interrupt on cpu 1: [ 551.211731][T28833] timekeeping_update_from_shadow+0x40d/0x440 [ 551.217823][T28833] __timekeeping_advance+0xa68/0xc10 [ 551.223173][T28833] update_wall_time+0x21/0x50 [ 551.227882][T28833] tick_do_update_jiffies64+0x169/0x1c0 [ 551.233448][T28833] tick_nohz_handler+0x88/0x380 [ 551.238323][T28833] __hrtimer_run_queues+0x1f8/0x510 [ 551.243547][T28833] hrtimer_interrupt+0x257/0x810 [ 551.248522][T28833] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 551.254447][T28833] sysvec_apic_timer_interrupt+0x6f/0x80 [ 551.260113][T28833] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.266114][T28833] __tsan_read4+0xd7/0x190 [ 551.270572][T28833] ipv6_addr_label+0xa0/0x260 [ 551.275275][T28833] ipv6_get_saddr_eval+0x368/0x800 [ 551.280436][T28833] __ipv6_dev_get_saddr+0x13a/0x270 [ 551.285661][T28833] ipv6_dev_get_saddr+0x1dd/0x470 [ 551.290722][T28833] icmp6_send+0xefb/0x1080 [ 551.295159][T28833] icmpv6_param_prob_reason+0x32/0x50 [ 551.300563][T28833] ip6_parse_tlv+0xf1f/0x1030 [ 551.305260][T28833] ipv6_parse_hopopts+0x1d9/0x320 [ 551.310307][T28833] ip6_rcv_core+0x8eb/0xac0 [ 551.314828][T28833] ipv6_list_rcv+0x11f/0x2a0 [ 551.319451][T28833] __netif_receive_skb_list_core+0x3c8/0x520 [ 551.325477][T28833] netif_receive_skb_list_internal+0x471/0x5e0 [ 551.331666][T28833] netif_receive_skb_list+0x33/0x1c0 [ 551.336989][T28833] bpf_test_run_xdp_live+0x1011/0x1330 [ 551.342479][T28833] bpf_prog_test_run_xdp+0x559/0x9e0 [ 551.347784][T28833] bpf_prog_test_run+0x208/0x340 [ 551.352748][T28833] __sys_bpf+0x8da/0xc30 [ 551.357020][T28833] __x64_sys_bpf+0x69/0x80 [ 551.361466][T28833] x64_sys_call+0x10cb/0x3020 [ 551.366163][T28833] do_syscall_64+0x136/0x3c0 [ 551.370780][T28833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.376708][T28833] [ 551.379058][T28833] read to 0xffffffff893d04e8 of 8 bytes by task 28833 on cpu 0: [ 551.386717][T28833] ktime_get_with_offset+0x150/0x260 [ 551.392024][T28833] random_pm_notification+0x89/0x1e0 [ 551.397343][T28833] blocking_notifier_call_chain_robust+0xa1/0x350 [ 551.403778][T28833] pm_notifier_call_chain_robust+0x2c/0x60 [ 551.409619][T28833] snapshot_open+0x123/0x280 [ 551.414228][T28833] misc_open+0x1df/0x220 [ 551.418496][T28833] chrdev_open+0x2eb/0x3a0 [ 551.422950][T28833] do_dentry_open+0x49f/0xa60 [ 551.427670][T28833] vfs_open+0x37/0x1e0 [ 551.431757][T28833] path_openat+0x1b39/0x2000 [ 551.436379][T28833] do_file_open+0x16c/0x290 [ 551.440946][T28833] do_sys_openat2+0xa0/0x130 [ 551.445569][T28833] __x64_sys_openat+0xf2/0x120 [ 551.450365][T28833] x64_sys_call+0x1e39/0x3020 [ 551.455069][T28833] do_syscall_64+0x136/0x3c0 [ 551.459703][T28833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.465640][T28833] [ 551.467984][T28833] value changed: 0x0016f3fad30565a2 -> 0x00178c915334c968 [ 551.475115][T28833] [ 551.477452][T28833] Reported by Kernel Concurrency Sanitizer on: [ 551.483707][T28833] CPU: 0 UID: 0 PID: 28833 Comm: syz.0.7381 Not tainted syzkaller #0 PREEMPT(lazy) [ 551.493110][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.503183][T28833] ================================================================== [ 551.553502][T28833] random: crng reseeded on system resumption [ 552.141683][T23155] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.273586][T23953] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.