last executing test programs: 1m31.348212729s ago: executing program 0 (id=5997): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 1m31.33264423s ago: executing program 0 (id=5998): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x314, 0x0, 0x43a1bd76, 0x7, 0x9, 0x206, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) 1m30.660035022s ago: executing program 0 (id=6002): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x125c}}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0x9, 0x4a9}, {0xe, 0x40}, {0x3, 0x5}, {0x7, 0x1}, {0xc}, {0x2, 0x5}, {0xc, 0x1}, {0x6, 0x1}, {0xc, 0x5eea0ecb}]}]}, {0x0, [0x0, 0xe, 0x30]}}, &(0x7f00000000c0)=""/167, 0x71, 0xa7, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000290, &(0x7f0000000300)=ANY=[@ANYBLOB="6b46d2bd584c4b1c809a9a212adab1633220b946b22b44cacd444ed361826cef070627716b8e0fe553abde38e5ae5b8fe71f8ceb3a1b627b1484cf95d16367a80e8cd7f29271a9"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0xfffffffffffffffe, 0xc3000, 0xa, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0xffff, 0x4, 0x10, 0x0, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) 1m30.579236304s ago: executing program 0 (id=6008): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x20c0c1, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010861a2d7540000102030109026000030101280a0904000000010100000a24010e000a00020102090d010000010200000904010101010200000905010900"], 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x7) syz_usb_connect(0x5, 0x12f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40880, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000007b00)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000791201000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 1m29.782880451s ago: executing program 0 (id=6020): semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 1m29.47716159s ago: executing program 0 (id=6023): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x5, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) socket$nl_generic(0x10, 0x3, 0x10) 1m29.346765645s ago: executing program 32 (id=6023): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) socket(0x400000000010, 0x5, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000000)) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) socket$nl_generic(0x10, 0x3, 0x10) 55.067249589s ago: executing program 1 (id=6354): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000c40)={0x2000000a}) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 53.752764922s ago: executing program 1 (id=6366): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0x2}, {0xe, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3, 0x1, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84d00100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 53.128233412s ago: executing program 1 (id=6373): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xff, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x0, 0xf, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getroute={0x1c, 0x1a, 0x201, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000082}, 0x804) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getuid() r4 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r4, 0x0) lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@prjquota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x800004}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(:%)*&\x00'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'barrier'}}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nolazyuime\xa6\xec\xcc\xec\xc0_\xc0G\x99.\xb7\xc4\xf3\xd2\x1bi\xbd\x83i\x91\xd9\xde\xc9: \xaa\xealB'}}, {@uid_eq={'uid', 0x3d, r5}}, {@audit}, {@euid_eq={'euid', 0x3d, r5}}]}, 0xfc, 0x58a, &(0x7f0000000440)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) getuid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfc, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}}, 0x0) getresgid(&(0x7f0000002f40), &(0x7f0000002f80), &(0x7f0000002fc0)) socket$inet_smc(0x2b, 0x1, 0x0) getresgid(&(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)) lstat(&(0x7f0000003540)='./file1\x00', &(0x7f0000003580)) openat$nci(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, 0x0, 0x13e5d5262c75f670) 53.027829055s ago: executing program 1 (id=6377): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 52.942012638s ago: executing program 1 (id=6379): socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x9, 0x7d, 0x5, 0xcd, 0x4, 0x10000, 0x5, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) 51.764150027s ago: executing program 1 (id=6394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000002d00), 0x200080, 0x0) epoll_pwait2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0xf78a895d03b0bec1, {0x4e20, 0x3}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r7], 0x15) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000000)={r3, 0xf}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x20) 37.431700893s ago: executing program 3 (id=6574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000008000"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xefc, 0x0, 0x0, 0x0, 0x401}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @tail_call, @alu={0x0, 0x0, 0x7, 0x5, 0xb, 0x18, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3c}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd040}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x7f, &(0x7f0000000ac0)=""/127, 0x41100, 0x45, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x2, 0xfc, 0x5}, 0x10, 0x2172e, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, r1], 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcd}, [@jmp={0x5, 0x0, 0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000540)=""/153, 0x41000, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xc, 0x3, 0x4de1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r0, r1, r0, r0, r1, r0, 0x1, r0, r0, r1], &(0x7f00000006c0)=[{0x5, 0x4, 0x7, 0xb}, {0x4, 0xc, 0x8, 0x7}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@cgroup, 0x1d, 0x1, 0x8, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r5, 0x40085500, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@fallback=r0, r2, 0x4, 0x2014, r3, @value=r1, @void, @void, @void, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.355887425s ago: executing program 3 (id=6575): r0 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xe4ffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000070a010100000006000000000a004001090001"], 0x38}, 0x1, 0x0, 0x0, 0x4040804}, 0x404c8d4) 37.284454647s ago: executing program 3 (id=6576): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x7, 0x0, 0x4}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 37.243495389s ago: executing program 3 (id=6577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) 37.2232053s ago: executing program 3 (id=6578): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x0, 0x7, 0x0, 0x4042a4a4, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) getpid() prctl$PR_SET_SPECULATION_CTRL(0x48, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000100000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e0000000000000800024000000007090001"], 0xbc}}, 0x8000) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) 37.144129942s ago: executing program 3 (id=6579): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000084) 35.498326985s ago: executing program 33 (id=6394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000002d00), 0x200080, 0x0) epoll_pwait2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0xf78a895d03b0bec1, {0x4e20, 0x3}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r7], 0x15) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000000)={r3, 0xf}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x20) 21.101904154s ago: executing program 34 (id=6579): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x24000084) 5.031416647s ago: executing program 5 (id=6870): syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xd, r1, 0x0, 0x0, 0xfffffffffffffffd}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.756605015s ago: executing program 4 (id=6875): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) shutdown(r5, 0x1) prctl$PR_CAPBSET_READ(0x17, 0x24) recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/99, 0x63}], 0x2}}, {{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/208, 0xd0}], 0x5, &(0x7f0000000a00)=""/67, 0x43}, 0x6}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/124, 0x7c}, {&(0x7f0000001b80)=""/192, 0xc0}, {&(0x7f0000001c40)=""/79, 0x4f}, {&(0x7f0000001cc0)=""/61, 0x3d}], 0x4}, 0x7}, {{&(0x7f0000001d40)=@alg, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/108, 0x6c}, {&(0x7f0000001e80)=""/138, 0x8a}, {&(0x7f0000001f40)=""/252, 0xfc}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)}, {&(0x7f0000002100)}, {&(0x7f00000026c0)=""/249, 0xf9}, {&(0x7f0000002240)=""/56, 0x38}, {&(0x7f0000002280)=""/228, 0xe4}], 0x9, &(0x7f0000002600)=""/141, 0x8d}, 0x1}], 0x4, 0x4001a621, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x4, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x9, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002380)=ANY=[@ANYBLOB="020300030c0000002cbd7000fbdbdf2502000900080000001c00000000000000030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000902aba955a5cb22f787d3db8d8307abde68f1125a201513b347b4a148a88c7be24662e296bbf5717627a8e3fd957a39c72c8fc860a3046cb6a7336d3248e54f3ffca5c1fde2ed83e3bee401e4eda495f7aefedc6c9e984bae4b0b33fce1677585b8ceb52748dc96e5a42f89502aaff3ecabdcfb3fecd831c92b9912790493d1d1af7898288413131affe7dedc681d69bcdc22a4de6f4b535"], 0x60}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r7, 0xa, 0x28000000}, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf64, 0x1f480, 0x0, 0xb2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r8, 0x8ae, 0x6931, 0x17, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x9d6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x80000000) 4.168133955s ago: executing program 7 (id=6880): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0x2}, {0xe, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3, 0x1, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="84d00100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 4.101932557s ago: executing program 4 (id=6881): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="352d755e0009a28467c517d953179c65ef4f5bb3599c3684d81b179088", @ANYRES8, @ANYRES16, @ANYRES16], 0x190) socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x996, &(0x7f0000000040)={0x0, 0xc89b, 0x800, 0x0, 0x20002f7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00'], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000001004000000000000000ec7c097e2b450e8a5e1680b8645b3de917a5659de4174d29c32e2446239ec274ce8f90f95ced1299057016651f6036fe4e4fa8c106344a7d6d92ae5375b065feaf132856c9d966d2ab6712053fada96eaf83f9a6a7cc61c34463d5b2b6b3ed823b3bc0ad10ee84980ada9f773c0b856fb8f8b6b2cced37d08b16e63bed0f274d490236547a7dcc33dcda4273f336d96047668b22083e8ea18ad97b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186000000100000000000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x12800, &(0x7f0000000180)=ANY=[]) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0xc880) ioctl$BLKSECTGET(r5, 0x1267, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x26200) syz_usb_disconnect(r7) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) 3.70376789s ago: executing program 7 (id=6884): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x280, 0x98, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x1, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmmsg(r5, &(0x7f0000001b40), 0x0, 0x8010) 3.228981615s ago: executing program 4 (id=6886): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() rt_sigprocmask(0x0, &(0x7f0000000280)={[0x6]}, &(0x7f00000002c0), 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073797a310000000008000100000000008da547d6485ed2a0ae20ad7ae8fe35934a58f6e2011634323048687a6b70c80989e2ad3a533fff10da164c672665706cd055181a0235a790a2231c9cd713"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2404c850) 3.032028682s ago: executing program 5 (id=6887): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x800004, 0x1000}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7ffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000a00)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfff, @loopback, 0xf}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r2, 0x9dff7ffc}}, 0x4d) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000004c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000400), r2, 0x3}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c80)={0x20, 0x1e, 0x21, 0x70bd27, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x12}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x1, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x2}) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000000000000000c000000000000000", @ANYRES32=r8, @ANYBLOB="56060900000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x3c}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000540)=@ipv6_newroute={0x18c, 0x18, 0x2, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x80, 0xff, 0x3, 0x0, 0x8, 0x1400}, [@RTA_PREF={0x5, 0x14, 0x10}, @RTA_MULTIPATH={0xc, 0x9, {0xf801, 0x10, 0x1}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xf485ec2023d6b836}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0x7, 0x2, ':\'\x00'}}}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_METRICS={0xf3, 0x8, 0x0, 0x1, "3965867ca1a3799965d6038a8bd1832fe6e168b357886497e87b7988958dc7e9f58752c3c7e9616adc3c46c16fcc501702137de61a743d48d943ab07033da898162c09403565a9965aaff12b86ec4a5e92b5866b31a3ef0a515e1cb9b342dfa58d885695b30ef4e04dd23a9f4b556df0a6917a8e6e244c0ac8ecccea1c8af1214fecd50ec39629e153710c070f9fccc4370d3a4882dcd8cb3503d04a5c50f0d8d20e3ffc2548dcf100adef7c7ab995b9a5ee622547835b53b9ecb801c5d9b8aed2214ead1b8496580b7eefcfc60ee9c6785640b81a95447b8410e0cd56a729183899148abeecb417f213678c6238c7"}, @RTA_METRICS={0x40, 0x8, 0x0, 0x1, "bc9d7dd0d6ba793f3777dd81f44457b7b3f33b2d0623a1920c161cbc2bcadf0d3d595af53925ba214ba00c571d963c6802ec3f8d36b7ef28184832cc"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYBLOB="540000001000010400"/20], 0x54}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, 0x0, 0x1004) 2.694926632s ago: executing program 7 (id=6888): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040), 0xfd, 0x4bc, &(0x7f00000001c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)=""/12, 0xc}, 0x1ff}], 0x1, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.378243733s ago: executing program 5 (id=6890): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) unshare(0x26020480) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) 2.303718635s ago: executing program 5 (id=6892): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x13, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000800)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000900)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, 0x10, {0x2, 0x4e22, @broadcast}, 'batadv_slave_0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d01090050000f801400bf00fe8000000000000000000000000000bb08009200cf118d2cb7493d0855eb96a32f7e87655524cf861fcbecf7bdd82f5d39c053f7b8835032709679a08aaff4b4c2dceaf315"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.076148862s ago: executing program 7 (id=6893): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00000016aaaaaaaaaa160080c200000e88a8000081000002"], 0x78) 1.810993781s ago: executing program 5 (id=6894): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="495327bd70000000000067"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b48, &(0x7f0000000040)) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x7, 0x800) r3 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xa938, 0x2, 0xfffffffe, 0x181}) pause() r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) pwritev(r4, 0x0, 0x0, 0x0, 0x4000000) close_range(r3, r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048001}, 0x4040000) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 1.281851098s ago: executing program 2 (id=6895): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x4, 0x3, 0x3, 0x0, 0x2, 0x7ffffffe, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000121401002bbd70007cdbdf1cd28d099fb08c8000080003000000000008000100010000000800150003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4c814}, 0x884) 1.212072871s ago: executing program 7 (id=6896): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="352d755e0009a28467c517d953179c65ef4f5bb3599c3684d81b179088", @ANYRES8, @ANYRES16, @ANYRES16], 0x190) socket$netlink(0x10, 0x3, 0x0) io_uring_setup(0x996, &(0x7f0000000040)={0x0, 0xc89b, 0x800, 0x0, 0x20002f7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00'], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000001004000000000000000ec7c097e2b450e8a5e1680b8645b3de917a5659de4174d29c32e2446239ec274ce8f90f95ced1299057016651f6036fe4e4fa8c106344a7d6d92ae5375b065feaf132856c9d966d2ab6712053fada96eaf83f9a6a7cc61c34463d5b2b6b3ed823b3bc0ad10ee84980ada9f773c0b856fb8f8b6b2cced37d08b16e63bed0f274d490236547a7dcc33dcda4273f336d96047668b22083e8ea18ad97b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186000000100000000000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x12800, &(0x7f0000000180)=ANY=[]) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0xc880) ioctl$BLKSECTGET(r5, 0x1267, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x26200) syz_usb_disconnect(r7) syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) 1.000241647s ago: executing program 4 (id=6897): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0xc8, 0x2, 0x8, 0x0, 0xfc, 0xa}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) 999.210767ms ago: executing program 2 (id=6898): gettid() sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ppoll(&(0x7f0000000d40), 0x200000000000010f, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffbf, 0xffffffffffffffff, 0x1) shmget(0x2, 0x4000, 0x1, &(0x7f0000c2e000/0x4000)=nil) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000040601010007090008000000e500000005000100070000000500010000004000000000000000000000000000e724d2031339"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) getsockname(r3, 0x0, &(0x7f00000000c0)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000b, &(0x7f0000102000/0x4000)=nil, 0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r4 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x84, &(0x7f00000004c0)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@sysvgroups}, {@mblk_io_submit}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvTLdAEGlF/AGiVtHY+IPSgsrBi0YTD5qY6AGPtS0EKdTQmgghshqDR0PinRhP/guePBnjycSrXo0hIUpM+HFxzezM0N3tbqVl2+2PzydZ+t7Oe/Pelzdv+2YeSwCb1lD2RxKxIyJ+i4iBPNtcYCj/cePa+Ymb185PJFGrvftXUi93/dr5ibJoWe+eIjOcRqRfJEUjzWbPnjs5Pj09dabIj8yd+mhk9uy5F06cGj8+dXzq9NiRI4cPjb780tiLXYkz69P1vZ/O7Nvz5vuX3p44eumDbU3HG+PolqEs8L9rda3Hnu52Yz32b20+zqTS695wp/oiIhuu/vr8H4i+mB+8gXjj8552DlhR2Wf2H61v9t9OVWvABpbEsqrF8qoBa0cU9+3Z/W/5WuUlSE9dfTW/AcrivlG88iOVSIu/oP4VbH8oIo5Wb13OXtHyHKLW5rkBAMDd+iFb/zy/cP2XrQkfbCiXFHtDgxFxX0Tsioj7I2J3RDxQlH0oIh5eYvutW0ML15/plWWGdkey9d8rxd5W8/ovLYsM9hW5e+vx9yfHTkxPHYyInRExHP1bs/xou5OXp3j91686td+4/jtazftRrgWLk1ypbG2ocOHb/GeXFqVXP4vYW2kXf1LfCUiiVsvGfk9E7F3aqXeWiRPPfrevU6Hm+G9dXhj/Irqwz1T7JuKZfPyr0RJ/KVl8f3JkW0xPHRwpr4qFfv7l4jud2r+r+LsgG//tzdd/S4mBf5LG/drZpbdx8fcvO95TVv43/pbrPyImx+fGtyTv1festxTvfTI+N3dmNGJL8lY93/T+2HzdMl+Wz+If3t9+/u8q6mTxPxIR2UX8aEQ8FhGPF2P3REQ8GRH7F4n/p9ee+rDTsbUw/pNtP/9uX/+DzeO/9ETfyR+/79T+ovHXP0Gy8T9czw4XdbLxz1PbOsbVuTtlneVezQAAALD+pBGxI5L0wO10mh44kP97+d2xPZ2emZ177tjMx6cn8+8IDEZ/Wj7pGmh4HjqaVIsz5vmx4llxefxQ8dz46/KxwsTM9GQP4wbyed5u/mf+7Ot174AV5/tasHm1zv+0R/0AVt+d/v53PwAbz3LX/9YJsP65/4fNq938v9CSt/aHjcnvf9i82s//raveD2D1LZz/yc35/x4I2Mis/2FTupvv9a9UorLIt/cl1koi0hVroromAlzHiUoXZnePP5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65L8AAAD//2IA+HU=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x8, 0x40, 0x1, 0x800d05, 0x7}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e2, &(0x7f0000001580)="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") 947.893589ms ago: executing program 4 (id=6899): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46bc13, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x2) syz_emit_ethernet(0x52, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000100)={[{@grpjquota}, {@abort}, {@nolazytime}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") openat$full(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0xe01, 0x70bd2d, 0x25dfdbfc, {{}, {0x0, 0x4000}}}, 0x1c}}, 0x24048800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0x27848c70) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) madvise(&(0x7f00004b3000/0x3000)=nil, 0x3000, 0x14) arch_prctl$ARCH_GET_CPUID(0x1011) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x2390024, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000000080)=ANY=[], 0x9, 0x0, &(0x7f0000000000)) 578.410641ms ago: executing program 2 (id=6900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x7, &(0x7f0000000080)=[{0xfffd, 0x5, 0x4, 0x4}, {0x0, 0x15, 0x80, 0x80}, {0xdc, 0x7, 0x91, 0x6}, {0x5, 0x8, 0x9, 0x8001}, {0x3, 0xa, 0x69, 0x8}, {0xff, 0xb9, 0x29, 0x3b3af198}, {0x2d, 0x3, 0x9, 0x5}]}) mlockall(0x6) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 577.980061ms ago: executing program 2 (id=6901): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7, 0x9}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xa, 0xbd, 0x5fe6, 0x2, 0xf9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x20) write$binfmt_script(r0, &(0x7f0000000340), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x3}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000001a00)=""/4090, 0xffa}], 0x1, 0x60, 0x4}}], 0x48, 0x48004}, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) fchdir(r8) unshare(0x26020480) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x4, 0xffffffff, 0x0}) 577.435931ms ago: executing program 6 (id=6902): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000440), 0x0, 0x40088d5) r1 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mknod$loop(&(0x7f0000000400)='./file1\x00', 0xffff8000, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001d80)={'ip_vti0\x00', &(0x7f0000001d00)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0xfffffffb, 0x1, {{0xc, 0x4, 0x0, 0x35, 0x30, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @remote, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x7, 0x9, "daeb7731c6e0c8"}, {0x0, 0xa, "77dc4399c09597b3"}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmmsg$inet(r3, &(0x7f00000023c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="63b4993402b8fe0d2b63abebbff25e5c1f441621dba87fc1fd7c21359b1fc1d8b6d6db5478fd37d0d7e1185aa80cbc3830646e80a2b87ddcd90b78fe31c8515a16266c55a2155ac736539463d0e79d30299a935e1dd2db1b2abf0b6f0b099ba048debde5fed7d77f74b020b8b96c7b765e8136c5b661a1d21c8f14235b9c8d9b81b365e5891ef610a77884b026a974bf82ee5ca95867cb800c4386e327978b9c98fea80fb79e6136b1cdfe4507963181e726088b6de063359193adc5cfdb9acd56e0aeb2c9a91e1804490726161b32e5747aa068c13a4814977f50b2a05a19c7534ac64314d81b655b88", 0xea}, {&(0x7f0000000480)="cf0f4a5405ab8f7d159ac92dca067154f0ecae1271c8cbeb0f4175156f1c4309e1442bc9076f7035ef460535b14a58a638e1c6afb2b1fab9581b426f87d917dc210c94ba58150bdccb56934b0dba3c7bd9e217a3ba29270e75887a678e12f9d99c5b39600e0aba55a9ae5c88ec7ff4aeb102522f8d4d1af21972f34ecd8dfa76b1f536c236cc9e1e91afe67b53fd7332baf0cbdcb45f0b60", 0x98}, {&(0x7f0000000540)="5bb256238fe6ed7e26d1f8a4e7b2f317753146f6671f5660218513b2745908ebbd31f91712699208f708ca6ac5f7f0e513c81c21c4c1782cc26192cdb6dbf145ed2bed3a3906a8bfe37dc378c0e6c50bcfa002a8967b2dbd7ccfca337f0e7217340b284f1ac4e85ca5", 0x69}], 0x3, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0x30}}, {{&(0x7f0000000680)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001c80), 0x0, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010100, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xb1, 0x0, 0xa, [0xffffec75]}, @end, @generic={0x7, 0xc, "61863defbbe0c936a3e5"}, @noop, @end, @timestamp={0x44, 0x14, 0x8e, 0x0, 0x7, [0x6, 0x5, 0x3ff, 0x6]}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xe0}}, {{&(0x7f0000001ec0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002240), 0x0, &(0x7f0000002640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010101}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xf2, 0x3, 0x7, [{@multicast2, 0x81}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x43, 0x2, [{0x6, 0xd, "bb3aa1300ebf596584552d"}, {0x0, 0x5, '\awT'}, {0x0, 0x8, "806eb89c1f05"}, {0x5, 0xd, "83cdb35ab18a7ab1df6a69"}, {0x2, 0x7, "71478edb53"}, {0x6, 0x4, '\r|'}, {0x7, 0x6, "76eec33f"}, {0x7, 0x5, "c7f1c8"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2c}}], 0x108}}], 0x3, 0x40090) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 469.298885ms ago: executing program 6 (id=6903): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(r2, 0x66020000) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000009000000850800007a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xfd, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xce73, 0x6}, 0x400, 0x10001, 0xda, 0x4, 0x6, 0x20006, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288, 0x4000000000}, 0x186a7, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, r2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYRESDEC=r4, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) r5 = socket$kcm(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r6, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x200001e4, &(0x7f00000000c0)=[{0x800, 0x7, 0x0, 0x7ffc1ffb}]}) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffff8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 439.694046ms ago: executing program 6 (id=6904): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x154) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x840020, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 364.272338ms ago: executing program 5 (id=6905): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = dup3(r3, r4, 0x0) shutdown(r5, 0x1) prctl$PR_CAPBSET_READ(0x17, 0x24) recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/99, 0x63}], 0x2}}, {{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/208, 0xd0}], 0x5, &(0x7f0000000a00)=""/67, 0x43}, 0x6}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/124, 0x7c}, {&(0x7f0000001b80)=""/192, 0xc0}, {&(0x7f0000001c40)=""/79, 0x4f}, {&(0x7f0000001cc0)=""/61, 0x3d}], 0x4}, 0x7}, {{&(0x7f0000001d40)=@alg, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/108, 0x6c}, {&(0x7f0000001e80)=""/138, 0x8a}, {&(0x7f0000001f40)=""/252, 0xfc}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)}, {&(0x7f0000002100)}, {&(0x7f00000026c0)=""/249, 0xf9}, {&(0x7f0000002240)=""/56, 0x38}, {&(0x7f0000002280)=""/228, 0xe4}], 0x9, &(0x7f0000002600)=""/141, 0x8d}, 0x1}], 0x4, 0x4001a621, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x4, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x9, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002380)=ANY=[@ANYBLOB="020300030c0000002cbd7000fbdbdf2502000900080000001c00000000000000030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000902aba955a5cb22f787d3db8d8307abde68f1125a201513b347b4a148a88c7be24662e296bbf5717627a8e3fd957a39c72c8fc860a3046cb6a7336d3248e54f3ffca5c1fde2ed83e3bee401e4eda495f7aefedc6c9e984bae4b0b33fce1677585b8ceb52748dc96e5a42f89502aaff3ecabdcfb3fecd831c92b9912790493d1d1af7898288413131affe7dedc681d69bcdc22a4de6f4b535"], 0x60}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r7, 0xa, 0x28000000}, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf64, 0x1f480, 0x0, 0xb2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r8, 0x8ae, 0x6931, 0x17, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x9d6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xb) syz_pidfd_open(0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x80000000) 338.462149ms ago: executing program 2 (id=6906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00000016aaaaaaaaaa160080c200000e88a8000081000002"], 0x78) 238.583082ms ago: executing program 6 (id=6907): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x3, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000140)="30f3e5996f26e6ef501e68a259ef4429d0adb4133d994a49448718d3e5933b0655529ee67117183a592c3c63f1fc0971406a2db45412c33b2d8edc7e11cf3ab8c13f75ddb724c2984acc3186b00684f40bc216b9431b3038d88d931129a3f37c8d21368e86aa195b2e50cac78a46f3d0216cc7af3200414b7390c72bb213d11a3fff8d318f1f391e2358d97722f1444f8826") connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = mq_open(&(0x7f0000000400)='syzkaller\x00', 0x40, 0x6, &(0x7f0000000440)={0x140000000000000, 0x6, 0x6, 0x4}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000004c0)={0xffff, 0x0, &(0x7f0000000480)=[r4]}, 0x1) 237.570312ms ago: executing program 2 (id=6908): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() rt_sigprocmask(0x0, &(0x7f0000000280)={[0x6]}, &(0x7f00000002c0), 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073797a310000000008000100000000008da547d6485ed2a0ae20ad7ae8fe35934a58f6e2011634323048687a6b70c80989e2ad3a533fff10da164c672665706cd055181a0235a790a2231c9cd713"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfea9}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2404c850) 178.637084ms ago: executing program 7 (id=6909): r0 = gettid() sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) ppoll(&(0x7f0000000d40), 0x200000000000010f, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x2, 0x4000, 0x1, &(0x7f0000c2e000/0x4000)=nil) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000040601010007090008000000e500000005000100070000000500010000004000000000000000000000000000e724d2031339"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=0xfffffffd, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000980)={{{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e22, 0xffdd, 0x2, 0x20, 0xeea9624617365ac9, 0x0, r5, 0xee01}, {0x2, 0x334, 0xffff, 0x9, 0x4, 0x360, 0xb, 0x7}, {0x1, 0x9, 0x1, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4d5, 0x2b}, 0x8, @in=@remote, 0x0, 0x2, 0x3, 0x4, 0x1, 0x4, 0xd}}, 0xe8) sendmsg$nl_route_sched(r6, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@delqdisc={0xa0, 0x25, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xfff3}, {0xa, 0x6}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffff}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x24, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0xb, 0x0, 0x400, 0x1c, 0x14, 0x12, 0x6}}]}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000010}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r5, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff"], 0x70}}, 0x0) getsockname(r3, 0x0, &(0x7f00000000c0)) get_mempolicy(0x0, 0x0, 0x8000000000b, &(0x7f0000102000/0x4000)=nil, 0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x80) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@sysvgroups}, {@mblk_io_submit}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x8, 0x40, 0x1, 0x800d05, 0x7}) migrate_pages(r0, 0x8000000000000001, &(0x7f0000000040)=0x9, &(0x7f0000000080)) 162.316995ms ago: executing program 4 (id=6910): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000a}) epoll_wait(r2, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 156.58µs ago: executing program 6 (id=6911): socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=6912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000ff"], 0x5c}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1, 0x0, 0x8327, 0x8cf4, 0x3, 0x1}) kernel console output (not intermixed with test programs): ): ext4_validate_block_bitmap:441: comm syz.1.6341: bg 0: block 248: padding at end of block bitmap is not set [ 933.022556][T25531] loop1: lost filesystem error report for type 5 error -117 [ 933.022796][T25531] Quota error (device loop1): write_blk: dquota write failed [ 933.030187][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 933.030206][ C0] EXT4-fs (loop1): last error at time 1780242236: ext4_validate_block_bitmap:441 [ 933.037378][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.040031][T25531] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 933.100578][T25523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 933.127269][T25523] System zones: 0-1, 3-8 [ 933.132502][T25531] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.6341: Failed to acquire dquot type 1 [ 933.152277][T25523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 933.165381][T25531] loop1: lost filesystem error report for type 5 error -28 [ 933.166973][T25531] EXT4-fs (loop1): 1 truncate cleaned up [ 933.181388][T25523] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.224382][T25531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 933.237586][ T28] audit: type=1400 audit(1780242236.954:14754): avc: denied { write } for pid=25522 comm="syz.2.6339" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 933.321970][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 933.434676][T25546] xt_hashlimit: max too large, truncated to 1048576 [ 933.442167][T25546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 934.295417][T24111] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 934.331754][T25549] xt_hashlimit: max too large, truncated to 1048576 [ 934.338872][T25549] ipt_REJECT: TCP_RESET invalid for non-tcp [ 934.397824][T25554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6346'. [ 934.672811][T25572] set_capacity_and_notify: 2 callbacks suppressed [ 934.672910][T25572] loop5: detected capacity change from 0 to 512 [ 934.706353][T25572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 934.716484][T25572] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 934.826251][T25588] Cannot find add_set index 0 as target [ 934.841903][T25588] siw: device registration error -23 [ 934.871652][T25588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.883038][T25588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.894202][T25588] bond0 (unregistering): Released all slaves [ 934.949968][T25591] loop4: detected capacity change from 0 to 8192 [ 934.961497][T25595] netlink: 'syz.3.6360': attribute type 16 has an invalid length. [ 934.971380][T25595] netlink: 'syz.3.6360': attribute type 17 has an invalid length. [ 934.997495][T25591] netlink: 'syz.4.6357': attribute type 5 has an invalid length. [ 935.052910][T25595] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 935.897099][T25611] xt_hashlimit: max too large, truncated to 1048576 [ 935.904974][T25611] ipt_REJECT: TCP_RESET invalid for non-tcp [ 936.121520][T25613] netlink: 'syz.1.6366': attribute type 16 has an invalid length. [ 936.181188][T25603] Set syz1 is full, maxelem 65536 reached [ 936.193267][T25613] netlink: 'syz.1.6366': attribute type 17 has an invalid length. [ 936.351472][T25614] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 936.390976][T25622] loop4: detected capacity change from 0 to 512 [ 936.413628][T25622] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 936.423581][T25622] System zones: 0-2, 18-18, 34-35 [ 936.440512][T25622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 936.468563][T25622] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 936.501672][T25622] __nla_validate_parse: 7 callbacks suppressed [ 936.501688][T25622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6369'. [ 936.573444][T25632] loop1: detected capacity change from 0 to 1024 [ 936.580595][T25632] EXT4-fs: Ignoring removed bh option [ 936.586119][T25632] ext4: Unknown parameter 'smackfsfloor' [ 936.602657][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 936.647766][T25636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6375'. [ 936.855124][T25654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6380'. [ 936.931331][T25661] netlink: 'syz.4.6383': attribute type 8 has an invalid length. [ 936.995133][T25655] syzkaller0: entered promiscuous mode [ 937.014503][T25655] syzkaller0: entered allmulticast mode [ 937.037141][T25666] loop2: detected capacity change from 0 to 512 [ 937.046566][T25666] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 937.055617][T25666] System zones: 0-2, 18-18, 34-35 [ 937.065248][T25666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 937.096011][T25666] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 937.134896][T25666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6386'. [ 937.308601][T25674] loop3: detected capacity change from 0 to 1024 [ 937.340578][T25679] loop2: detected capacity change from 0 to 1024 [ 937.380017][T25674] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.398072][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 937.398089][ T28] audit: type=1400 audit(1780242240.873:14767): avc: denied { write } for pid=25673 comm="syz.3.6389" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 937.734789][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6392'. [ 937.758102][T25689] loop5: detected capacity change from 0 to 128 [ 937.990811][T25689] loop5: detected capacity change from 0 to 1024 [ 938.007286][T25689] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 938.017387][T25689] EXT4-fs (loop5): mount failed [ 938.055643][T25701] loop5: detected capacity change from 0 to 512 [ 938.068929][T25701] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 938.077438][T25701] System zones: 0-2, 18-18, 34-35 [ 938.106242][T25701] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.123810][T25701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6398'. [ 938.180238][T25709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6400'. [ 938.251058][T25720] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6405'. [ 938.266944][T25721] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 938.275079][T25721] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 938.285457][T25721] EXT4-fs (loop3): 1 truncate cleaned up [ 938.331643][T25726] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.6406: inode has both inline data and extents flags [ 938.350837][T25726] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 938.350953][T25726] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6406: couldn't read orphan inode 15 (err -117) [ 938.360274][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 938.360297][ C0] EXT4-fs (loop3): initial error at time 1780242241: ext4_orphan_get:1397: inode 15 [ 938.360331][ C0] EXT4-fs (loop3): last error at time 1780242241: ext4_orphan_get:1397: inode 15 [ 938.399053][T25726] loop3: lost filesystem error report for type 5 error -117 [ 938.399258][ T28] audit: type=1400 audit(1780242241.818:14768): avc: denied { map } for pid=25728 comm="syz.2.6408" path="socket:[70791]" dev="sockfs" ino=70791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 938.449873][ T28] audit: type=1400 audit(1780242241.865:14769): avc: denied { write } for pid=25725 comm="syz.3.6406" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 938.685635][T25742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 938.695187][T25742] System zones: 0-2, 18-18, 34-35 [ 938.711777][T25742] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.725886][T25742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6411'. [ 938.847993][T25752] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 938.856943][T25752] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 938.867471][T25752] EXT4-fs (loop3): 1 truncate cleaned up [ 939.166403][T25769] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6422: inode has both inline data and extents flags [ 939.182616][T25769] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 939.184304][T25769] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6422: couldn't read orphan inode 15 (err -117) [ 939.193502][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 939.193526][ C1] EXT4-fs (loop2): initial error at time 1780242242: ext4_orphan_get:1397: inode 15 [ 939.193557][ C1] EXT4-fs (loop2): last error at time 1780242242: ext4_orphan_get:1397: inode 15 [ 939.230938][T25769] loop2: lost filesystem error report for type 5 error -117 [ 939.255658][T25775] FAT-fs (loop5): Directory bread(block 524322) failed [ 939.272581][ T28] audit: type=1400 audit(1780242242.622:14770): avc: denied { write } for pid=25768 comm="syz.2.6422" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 939.276920][T25775] FAT-fs (loop5): Directory bread(block 524323) failed [ 939.301787][T25775] FAT-fs (loop5): Directory bread(block 524324) failed [ 939.309372][T25775] FAT-fs (loop5): Directory bread(block 524325) failed [ 939.309815][T25768] process '/file0' started with executable stack [ 939.317743][T25775] FAT-fs (loop5): Directory bread(block 524326) failed [ 939.329679][T25775] FAT-fs (loop5): Directory bread(block 524327) failed [ 939.337180][T25775] FAT-fs (loop5): Directory bread(block 524328) failed [ 939.344099][T25775] FAT-fs (loop5): Directory bread(block 524329) failed [ 939.381710][T25777] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 939.390014][T25777] System zones: 0-2, 18-18, 34-35 [ 939.395827][T25777] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 939.407879][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6425'. [ 939.468975][T23497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.479222][T23497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.496236][T23497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.507142][T23497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.553533][ T28] audit: type=1400 audit(1780242242.893:14771): avc: denied { getopt } for pid=25789 comm="syz.5.6431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 939.637648][T25800] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6435: inode has both inline data and extents flags [ 939.654500][T25800] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 939.654757][T25800] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6435: couldn't read orphan inode 15 (err -117) [ 939.664139][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 939.664159][ C1] EXT4-fs (loop2): initial error at time 1780242242: ext4_orphan_get:1397: inode 15 [ 939.664188][ C1] EXT4-fs (loop2): last error at time 1780242242: ext4_orphan_get:1397: inode 15 [ 939.701850][T25800] loop2: lost filesystem error report for type 5 error -117 [ 939.712656][ T28] audit: type=1400 audit(1780242243.043:14772): avc: denied { write } for pid=25799 comm="syz.2.6435" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 939.811924][ T28] audit: type=1400 audit(1780242243.127:14773): avc: denied { setattr } for pid=25802 comm="syz.2.6436" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 939.869006][T25806] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 939.877365][T25806] System zones: 0-2, 18-18, 34-35 [ 939.892785][T25806] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 939.903591][T25803] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 940.050943][ T3623] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.061840][ T3623] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.080238][ T3623] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.104870][ T3623] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.160047][ T3623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.170209][ T3623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.188382][ T3623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.211582][ T3623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.317337][T25825] set_capacity_and_notify: 14 callbacks suppressed [ 940.317395][T25825] loop4: detected capacity change from 0 to 512 [ 940.344177][T25825] EXT4-fs: Ignoring removed nobh option [ 940.350508][T25825] EXT4-fs: Ignoring removed mblk_io_submit option [ 940.368436][T25825] EXT4-fs error (device loop4): __ext4_iget:5481: inode #11: block 1: comm syz.4.6444: invalid block [ 940.404415][T25825] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 940.406915][T25825] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6444: couldn't read orphan inode 11 (err -117) [ 940.416217][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 940.416281][ C1] EXT4-fs (loop4): initial error at time 1780242243: __ext4_iget:5481: inode 11: block 1 [ 940.416506][ C1] EXT4-fs (loop4): last error at time 1780242243: __ext4_iget:5481: inode 11: block 1 [ 940.455870][T25825] loop4: lost filesystem error report for type 5 error -117 [ 940.468484][T25828] netlink: 'syz.3.6445': attribute type 16 has an invalid length. [ 940.486005][T25828] netlink: 'syz.3.6445': attribute type 17 has an invalid length. [ 940.588653][T25831] loop4: detected capacity change from 0 to 1024 [ 940.612640][T25833] loop5: detected capacity change from 0 to 512 [ 940.615464][T25829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 940.643426][T25833] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 940.671018][ T28] audit: type=1400 audit(1780242243.932:14774): avc: denied { write } for pid=25832 comm="syz.5.6446" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 940.673850][T25833] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.6446: directory missing '..' [ 940.885976][T25840] loop5: detected capacity change from 0 to 1764 [ 940.893819][T25840] iso9660: Unknown parameter '›' [ 940.942252][T25842] loop2: detected capacity change from 0 to 512 [ 940.954236][T25842] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 940.962804][T25842] System zones: 0-2, 18-18, 34-35 [ 940.968845][T25842] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 941.030848][T25850] loop2: detected capacity change from 0 to 512 [ 941.043457][T25850] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6453: inode has both inline data and extents flags [ 941.067556][T25850] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 941.069137][T25850] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6453: couldn't read orphan inode 15 (err -117) [ 941.078378][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 941.078402][ C0] EXT4-fs (loop2): initial error at time 1780242244: ext4_orphan_get:1397: inode 15 [ 941.078436][ C0] EXT4-fs (loop2): last error at time 1780242244: ext4_orphan_get:1397: inode 15 [ 941.100796][ T28] audit: type=1400 audit(1780242244.334:14775): avc: denied { unmount } for pid=25843 comm="syz.3.6451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 941.107122][T25850] loop2: lost filesystem error report for type 5 error -117 [ 941.140163][ T28] audit: type=1400 audit(1780242244.371:14776): avc: denied { write } for pid=25849 comm="syz.2.6453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 941.180610][T25854] loop3: detected capacity change from 0 to 512 [ 941.208285][T25854] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.290378][T25861] loop2: detected capacity change from 0 to 512 [ 941.304490][T25861] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 941.318794][T25861] EXT4-fs warning (device loop2): ext4_empty_dir:3104: inode #12: comm syz.2.6456: directory missing '..' [ 941.564511][T25866] ipvlan2: entered promiscuous mode [ 941.571584][T25866] bridge0: port 4(ipvlan2) entered blocking state [ 941.578177][T25866] bridge0: port 4(ipvlan2) entered disabled state [ 941.586652][T25866] ipvlan2: entered allmulticast mode [ 941.592430][T25866] bridge0: entered allmulticast mode [ 941.599106][T25866] ipvlan2: left allmulticast mode [ 941.607334][T25866] bridge0: left allmulticast mode [ 941.778606][T25868] loop4: detected capacity change from 0 to 1764 [ 941.786752][T25868] iso9660: Unknown parameter '›' [ 941.922022][T25876] loop4: detected capacity change from 0 to 512 [ 941.954465][T25876] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 941.964552][T25876] System zones: 0-2, 18-18, 34-35 [ 941.970558][T25876] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 941.982267][T25876] __nla_validate_parse: 8 callbacks suppressed [ 941.982279][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6462'. [ 942.071412][T25884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6465'. [ 942.118380][T25886] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6466: inode has both inline data and extents flags [ 942.136043][T25886] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 942.136371][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 942.151993][ C0] EXT4-fs (loop4): initial error at time 1780242245: ext4_orphan_get:1397: inode 15 [ 942.161456][ C0] EXT4-fs (loop4): last error at time 1780242245: ext4_orphan_get:1397: inode 15 [ 942.171852][T25886] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6466: couldn't read orphan inode 15 (err -117) [ 942.173848][T25889] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6467: inode has both inline data and extents flags [ 942.183986][T25886] loop4: lost filesystem error report for type 5 error -117 [ 942.201369][T25889] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 942.221989][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 942.225089][T25889] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6467: couldn't read orphan inode 15 (err -117) [ 942.231297][ C1] EXT4-fs (loop5): initial error at time 1780242245: ext4_orphan_get:1397: inode 15 [ 942.258999][ C1] EXT4-fs (loop5): last error at time 1780242245: ext4_orphan_get:1397: inode 15 [ 942.272972][T25889] loop5: lost filesystem error report for type 5 error -117 [ 942.306976][T25892] iso9660: Unknown parameter '›' [ 942.334623][T25892] FAULT_INJECTION: forcing a failure. [ 942.334623][T25892] name failslab, interval 1, probability 0, space 0, times 0 [ 942.347660][T25892] CPU: 1 UID: 0 PID: 25892 Comm: syz.4.6468 Not tainted syzkaller #0 PREEMPT(lazy) [ 942.347688][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 942.347699][T25892] Call Trace: [ 942.347705][T25892] [ 942.347712][T25892] __dump_stack+0x1d/0x30 [ 942.347806][T25892] dump_stack_lvl+0x95/0xd0 [ 942.347831][T25892] dump_stack+0x15/0x1b [ 942.347902][T25892] should_fail_ex+0x263/0x280 [ 942.347921][T25892] should_failslab+0x8c/0xb0 [ 942.348024][T25892] __kmalloc_noprof+0xb8/0x4d0 [ 942.348061][T25892] ? io_cache_alloc_new+0x2a/0xb0 [ 942.348081][T25892] ? __account_obj_stock+0x111/0x5f0 [ 942.348185][T25892] io_cache_alloc_new+0x2a/0xb0 [ 942.348210][T25892] io_sqe_buffer_register+0x18e/0xf70 [ 942.348239][T25892] ? io_sqe_buffers_register+0xd0/0x4e0 [ 942.348263][T25892] ? perf_trace_kmalloc+0xeb/0x130 [ 942.348301][T25892] ? __kvmalloc_node_noprof+0x569/0x640 [ 942.348326][T25892] ? io_sqe_buffers_register+0xd0/0x4e0 [ 942.348351][T25892] ? iovec_from_user+0x179/0x200 [ 942.348419][T25892] io_sqe_buffers_register+0x245/0x4e0 [ 942.348442][T25892] __se_sys_io_uring_register+0xe59/0x1330 [ 942.348468][T25892] ? fput+0x8f/0xc0 [ 942.348539][T25892] ? ksys_write+0x194/0x1a0 [ 942.348595][T25892] __x64_sys_io_uring_register+0x55/0x70 [ 942.348665][T25892] x64_sys_call+0x2be0/0x3020 [ 942.348694][T25892] do_syscall_64+0x12c/0x3b0 [ 942.348748][T25892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.348876][T25892] RIP: 0033:0x7f7fea68ce59 [ 942.348895][T25892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.348912][T25892] RSP: 002b:00007f7fe90e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 942.348954][T25892] RAX: ffffffffffffffda RBX: 00007f7fea905fa0 RCX: 00007f7fea68ce59 [ 942.349052][T25892] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 942.349070][T25892] RBP: 00007f7fe90e7090 R08: 0000000000000000 R09: 0000000000000000 [ 942.349086][T25892] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 942.349099][T25892] R13: 00007f7fea906038 R14: 00007f7fea905fa0 R15: 00007ffe3692cd28 [ 942.349124][T25892] [ 942.590168][T25896] xt_policy: output policy not valid in PREROUTING and INPUT [ 942.715298][T25907] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 942.723483][T25907] System zones: 0-2, 18-18, 34-35 [ 942.729479][T25907] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 942.740894][T25907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6473'. [ 942.792234][T25912] vfat: Unknown parameter '18446744073709551615zUÂõÛ»‡[){׃_Š@9â—{5¡R(z2õ4ž…L „ÛÄcÕÕº_¡ö‡Ëa貈—.‹h×ÕMfi^ [ 942.792234][T25912] EÕiP ¼bÒB˜Œ3¥R͉¢ùJ9 mžãç: ^b±Ý.+¢J‘UôýãigEO @  ¬Ÿþ‚ÞÓÂz¥lþPžÇ9' [ 942.817577][T25912] pim6reg1: entered promiscuous mode [ 942.823232][T25912] pim6reg1: entered allmulticast mode [ 942.961791][T25919] Invalid logical block size (270) [ 942.983633][ T28] kauditd_printk_skb: 156 callbacks suppressed [ 942.983645][ T28] audit: type=1400 audit(1780242246.101:14933): avc: denied { setopt } for pid=25920 comm="syz.4.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 943.047424][T25926] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.062207][ T28] audit: type=1400 audit(1780242246.176:14934): avc: denied { write } for pid=25925 comm="syz.4.6478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 943.086323][T25926] bond0: entered allmulticast mode [ 943.094703][T25926] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 943.198096][T25930] bond0: Error: CAN devices cannot be enslaved [ 943.341350][T25939] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6482: inode has both inline data and extents flags [ 943.372551][T25939] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 943.372718][T25939] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6482: couldn't read orphan inode 15 (err -117) [ 943.382022][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 943.382062][ C0] EXT4-fs (loop4): initial error at time 1780242246: ext4_orphan_get:1397: inode 15 [ 943.382088][ C0] EXT4-fs (loop4): last error at time 1780242246: ext4_orphan_get:1397: inode 15 [ 943.423394][T25939] loop4: lost filesystem error report for type 5 error -117 [ 943.549980][T25946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 943.577193][T25946] System zones: 0-2, 18-18, 34-35 [ 943.583315][T25946] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 943.757980][T25952] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 943.770657][T25952] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #12: comm syz.4.6488: directory missing '..' [ 943.782539][ T28] audit: type=1400 audit(1780242246.831:14935): avc: denied { write } for pid=25951 comm="syz.4.6488" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 944.007749][ T28] audit: type=1400 audit(1780242246.971:14936): avc: denied { bind } for pid=25953 comm="syz.5.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 944.063615][T25961] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 944.149194][T25961] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.6487: lblock 2 mapped to illegal pblock 2 (length 1) [ 944.163311][T25961] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 944.163537][T25961] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 944.182049][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 944.182167][ C1] EXT4-fs (loop5): initial error at time 1780242247: ext4_map_blocks:791: inode 3: block 2 [ 944.182401][ C1] EXT4-fs (loop5): last error at time 1780242247: ext4_map_blocks:791: inode 3: block 2 [ 944.215234][T25961] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.6487: lblock 0 mapped to illegal pblock 48 (length 1) [ 944.232820][T25961] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 944.238978][T25961] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 944.258689][T25961] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.6487: Failed to acquire dquot type 0 [ 944.270382][T25961] loop5: lost filesystem error report for type 5 error -117 [ 944.271448][T25961] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 944.290278][T25961] loop5: lost filesystem error report for type 5 error -117 [ 944.291961][T25961] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.6487: mark_inode_dirty error [ 944.310721][T25961] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 944.311290][T25961] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 944.330818][T25961] EXT4-fs (loop5): 1 orphan inode deleted [ 944.844282][T23497] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 944.880370][T23497] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 944.897094][T23497] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 944.908854][ T28] audit: type=1400 audit(1780242247.888:14937): avc: denied { mount } for pid=25963 comm="syz.2.6491" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 944.982516][ T28] audit: type=1400 audit(1780242247.935:14938): avc: denied { unmount } for pid=25141 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 945.023591][T25966] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6493: inode has both inline data and extents flags [ 945.093304][T25966] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 945.093546][T25966] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6493: couldn't read orphan inode 15 (err -117) [ 945.102839][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 945.102862][ C1] EXT4-fs (loop2): initial error at time 1780242248: ext4_orphan_get:1397: inode 15 [ 945.102890][ C1] EXT4-fs (loop2): last error at time 1780242248: ext4_orphan_get:1397: inode 15 [ 945.164925][T25966] loop2: lost filesystem error report for type 5 error -117 [ 945.633233][T24335] EXT4-fs error (device loop5): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 945.655041][T24335] loop5: lost filesystem error report for type 5 error -117 [ 945.655172][T24335] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 945.672108][T24335] loop5: lost filesystem error report for type 5 error -117 [ 945.672313][T24335] EXT4-fs error (device loop5): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 945.691173][T24335] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 945.717266][ T28] audit: type=1400 audit(1780242248.655:14939): avc: denied { create } for pid=25981 comm="syz.5.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 945.788327][T25988] set_capacity_and_notify: 14 callbacks suppressed [ 945.788402][T25988] loop5: detected capacity change from 0 to 512 [ 945.813448][T25988] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 945.821950][T25988] System zones: 0-2, 18-18, 34-35 [ 945.827794][T25988] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.918979][T25996] loop5: detected capacity change from 0 to 512 [ 945.944833][T25996] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.957124][T25996] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.6500: directory missing '..' [ 946.037453][T23497] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 946.050556][T23497] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 946.073769][T23497] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 946.083226][T23497] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 946.162306][T26008] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6505'. [ 946.174700][T26010] FAULT_INJECTION: forcing a failure. [ 946.174700][T26010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.203836][T26010] CPU: 0 UID: 0 PID: 26010 Comm: syz.2.6506 Not tainted syzkaller #0 PREEMPT(lazy) [ 946.203867][T26010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 946.203899][T26010] Call Trace: [ 946.203906][T26010] [ 946.203923][T26010] __dump_stack+0x1d/0x30 [ 946.203951][T26010] dump_stack_lvl+0x95/0xd0 [ 946.203975][T26010] dump_stack+0x15/0x1b [ 946.204048][T26010] should_fail_ex+0x263/0x280 [ 946.204072][T26010] should_fail+0xb/0x20 [ 946.204091][T26010] should_fail_usercopy+0x1a/0x20 [ 946.204136][T26010] _copy_from_user+0x1c/0xb0 [ 946.204254][T26010] sctp_getsockopt_pr_streamstatus+0x6a/0x4e0 [ 946.204304][T26010] sctp_getsockopt+0x7a7/0xaa0 [ 946.204362][T26010] sock_common_getsockopt+0x60/0x70 [ 946.204405][T26010] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 946.204446][T26010] do_sock_getsockopt+0x2f5/0x570 [ 946.204508][T26010] __x64_sys_getsockopt+0x11d/0x1a0 [ 946.204543][T26010] x64_sys_call+0x2dcf/0x3020 [ 946.204573][T26010] do_syscall_64+0x12c/0x3b0 [ 946.204613][T26010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.204716][T26010] RIP: 0033:0x7f42b2d3ce59 [ 946.204734][T26010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.204756][T26010] RSP: 002b:00007f42b1797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 946.204781][T26010] RAX: ffffffffffffffda RBX: 00007f42b2fb5fa0 RCX: 00007f42b2d3ce59 [ 946.204798][T26010] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003 [ 946.204879][T26010] RBP: 00007f42b1797090 R08: 0000200000000240 R09: 0000000000000000 [ 946.204925][T26010] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 946.205007][T26010] R13: 00007f42b2fb6038 R14: 00007f42b2fb5fa0 R15: 00007ffd3bfa7d88 [ 946.205090][T26010] [ 946.246507][T26015] loop4: detected capacity change from 0 to 512 [ 946.411520][T26019] loop2: detected capacity change from 0 to 512 [ 946.432186][T26019] ext4: Unknown parameter '"' [ 946.433562][T26015] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 946.462880][T26015] System zones: 0-2, 18-18, 34-35 [ 946.483311][T26015] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 946.559888][T26028] loop5: detected capacity change from 0 to 1024 [ 946.567256][T26028] EXT4-fs: Ignoring removed bh option [ 946.702000][T26026] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6510'. [ 946.916340][T26036] loop5: detected capacity change from 0 to 512 [ 946.932507][T26036] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 946.952187][T26036] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.6512: directory missing '..' [ 947.206415][T26044] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.213660][T26044] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.286246][T26044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.300474][T26044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.340687][T26055] loop5: detected capacity change from 0 to 512 [ 947.359525][T26055] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 947.367787][T26055] System zones: 0-2, 18-18, 34-35 [ 947.373598][T26055] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 947.399538][ T3623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.417693][ T3623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.427431][ T3623] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.444027][ T3623] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.458687][T26061] FAULT_INJECTION: forcing a failure. [ 947.458687][T26061] name failslab, interval 1, probability 0, space 0, times 0 [ 947.461908][T26059] loop2: detected capacity change from 0 to 1024 [ 947.471518][T26061] CPU: 0 UID: 0 PID: 26061 Comm: syz.5.6521 Not tainted syzkaller #0 PREEMPT(lazy) [ 947.471604][T26061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.471660][T26061] Call Trace: [ 947.471678][T26061] [ 947.471701][T26061] __dump_stack+0x1d/0x30 [ 947.471758][T26061] dump_stack_lvl+0x95/0xd0 [ 947.471885][T26061] dump_stack+0x15/0x1b [ 947.471943][T26061] should_fail_ex+0x263/0x280 [ 947.472023][T26061] should_failslab+0x8c/0xb0 [ 947.472178][T26061] __kmalloc_noprof+0xb8/0x4d0 [ 947.472344][T26061] ? kernfs_fop_write_iter+0xdc/0x2f0 [ 947.472497][T26061] ? selinux_file_permission+0x1e1/0x320 [ 947.472576][T26061] kernfs_fop_write_iter+0xdc/0x2f0 [ 947.472716][T26061] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 947.472871][T26061] vfs_write+0x5a6/0x9f0 [ 947.473014][T26061] ksys_write+0xdc/0x1a0 [ 947.473098][T26061] __x64_sys_write+0x40/0x50 [ 947.473193][T26061] x64_sys_call+0x27e1/0x3020 [ 947.473266][T26061] do_syscall_64+0x12c/0x3b0 [ 947.473373][T26061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.473434][T26061] RIP: 0033:0x7f458cafce59 [ 947.473539][T26061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.473597][T26061] RSP: 002b:00007f458b557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 947.473659][T26061] RAX: ffffffffffffffda RBX: 00007f458cd75fa0 RCX: 00007f458cafce59 [ 947.473704][T26061] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 947.473754][T26061] RBP: 00007f458b557090 R08: 0000000000000000 R09: 0000000000000000 [ 947.473804][T26061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.473843][T26061] R13: 00007f458cd76038 R14: 00007f458cd75fa0 R15: 00007ffcfc13e418 [ 947.473932][T26061] [ 947.743688][T26064] loop5: detected capacity change from 0 to 512 [ 947.766912][T26069] loop4: detected capacity change from 0 to 512 [ 947.783943][T26064] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.804187][T26073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6527'. [ 947.843835][T26069] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.939123][T26082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6529'. [ 947.954014][ T3602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.968940][ T3602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.978199][ T3602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.997424][ T3602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.026046][T26088] ext4: Unknown parameter '"' [ 948.046805][T26087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 948.060355][T26087] System zones: 0-2, 18-18, 34-35 [ 948.066380][T26087] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 948.220525][T26100] netlink: 324 bytes leftover after parsing attributes in process `syz.5.6534'. [ 948.230483][T26100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.240069][T26100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.386510][T26104] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.870807][T26115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6542'. [ 948.895376][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 948.895406][ T28] audit: type=1326 audit(1780242251.629:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 948.964948][ T28] audit: type=1326 audit(1780242251.629:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.030175][ T28] audit: type=1326 audit(1780242251.629:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.056611][ T28] audit: type=1326 audit(1780242251.629:15040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.095159][ T28] audit: type=1326 audit(1780242251.629:15041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.121989][ T28] audit: type=1326 audit(1780242251.629:15042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.148009][ T28] audit: type=1326 audit(1780242251.629:15043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.174148][ T28] audit: type=1326 audit(1780242251.629:15044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.200533][ T28] audit: type=1326 audit(1780242251.629:15045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.226975][ T28] audit: type=1326 audit(1780242251.629:15046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26116 comm="syz.2.6543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42b2d3ce59 code=0x7ffc0000 [ 949.397571][T26123] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 949.426217][T26123] System zones: 0-2, 18-18, 34-35 [ 949.446202][T26123] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 949.560897][T26128] ext4: Unknown parameter '"' [ 949.674057][T26130] bridge0: port 4(ip6gretap0) entered blocking state [ 949.680906][T26130] bridge0: port 4(ip6gretap0) entered disabled state [ 949.688099][T26130] ip6gretap0: entered allmulticast mode [ 949.694317][T26130] ip6gretap0: entered promiscuous mode [ 949.800685][T26140] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6552: inode has both inline data and extents flags [ 949.814739][T26140] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 949.815012][T26140] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6552: couldn't read orphan inode 15 (err -117) [ 949.824196][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 949.824226][ C0] EXT4-fs (loop2): initial error at time 1780242252: ext4_orphan_get:1397: inode 15 [ 949.824271][ C0] EXT4-fs (loop2): last error at time 1780242252: ext4_orphan_get:1397: inode 15 [ 949.862784][T26140] loop2: lost filesystem error report for type 5 error -117 [ 949.863884][T26140] EXT4-fs mount: 77 callbacks suppressed [ 949.863895][T26140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.070610][T26148] Invalid argument reading file caps for ./file0 [ 950.329852][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.408728][T26154] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 950.422648][T26154] System zones: 0-2, 18-18, 34-35 [ 950.428752][T26154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 950.441724][T26154] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.463130][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 950.519181][T26161] program syz.4.6558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 950.787321][T26172] netlink: 'syz.4.6561': attribute type 16 has an invalid length. [ 950.799688][T26172] netlink: 'syz.4.6561': attribute type 17 has an invalid length. [ 950.870529][T26173] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 951.657317][T26179] set_capacity_and_notify: 7 callbacks suppressed [ 951.657336][T26179] loop5: detected capacity change from 0 to 512 [ 951.706033][T26179] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6565: inode has both inline data and extents flags [ 951.741914][T26179] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 951.742731][T26179] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6565: couldn't read orphan inode 15 (err -117) [ 951.751945][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 951.751961][ C0] EXT4-fs (loop5): initial error at time 1780242254: ext4_orphan_get:1397: inode 15 [ 951.751990][ C0] EXT4-fs (loop5): last error at time 1780242254: ext4_orphan_get:1397: inode 15 [ 951.791365][T26179] loop5: lost filesystem error report for type 5 error -117 [ 951.791946][T26179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.823405][T26179] Invalid argument reading file caps for ./file0 [ 951.876606][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.126224][T26191] loop2: detected capacity change from 0 to 512 [ 952.135055][T26191] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 952.143126][T26191] System zones: 0-2, 18-18, 34-35 [ 952.149038][T26191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 952.163264][T26191] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 952.183576][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 952.236051][T26200] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6571'. [ 952.298057][T26207] loop3: detected capacity change from 0 to 512 [ 952.304941][T26207] EXT4-fs: Ignoring removed oldalloc option [ 952.312080][T26207] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6575: bad orphan inode 32 [ 952.322523][T26207] loop3: lost filesystem error report for type 5 error -117 [ 952.322699][T26207] ext4_test_bit(bit=31, block=4) = 0 [ 952.330044][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 952.330084][ C0] EXT4-fs (loop3): initial error at time 1780242254: ext4_orphan_get:1423 [ 952.330110][ C0] EXT4-fs (loop3): last error at time 1780242254: ext4_orphan_get:1423 [ 952.360472][T26207] EXT4-fs (loop3): 1 truncate cleaned up [ 952.366448][T26207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.382284][T26207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6575'. [ 952.404805][T24293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.472955][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6578'. [ 952.482024][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6578'. [ 952.602935][T26219] loop4: detected capacity change from 0 to 512 [ 952.620246][T26219] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 952.632570][T26219] System zones: 0-2, 18-18, 34-35 [ 952.638687][T26219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 952.651659][T26219] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 952.674566][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 953.931951][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.977665][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.009143][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.037385][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.096074][T26236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6586'. [ 954.737214][T26261] loop5: detected capacity change from 0 to 256 [ 954.784592][T26245] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.804167][T26245] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.815113][T26245] bridge_slave_0: entered allmulticast mode [ 954.828110][T26245] bridge_slave_0: entered promiscuous mode [ 954.845763][T26245] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.859923][T26245] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.878097][T26245] bridge_slave_1: entered allmulticast mode [ 954.971226][T26245] bridge_slave_1: entered promiscuous mode [ 955.519218][T26269] loop4: detected capacity change from 0 to 512 [ 955.599542][T26269] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 955.609921][T26269] System zones: 0-2, 18-18, 34-35 [ 955.621319][T26269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 955.708160][T26273] loop5: detected capacity change from 0 to 1024 [ 955.716531][T26269] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 956.222922][T26245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.233806][T26245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.255324][T26245] team0: Port device team_slave_0 added [ 956.284201][T26245] team0: Port device team_slave_1 added [ 956.301664][T26245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.308770][T26245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.334833][T26245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.347924][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 956.363970][ T28] audit: type=1400 audit(1780242258.597:15219): avc: denied { map } for pid=26275 comm="syz.2.6594" path="socket:[73028]" dev="sockfs" ino=73028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 956.389522][T26245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.396697][T26245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.397523][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 956.423006][T26245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.772846][T26245] hsr_slave_0: entered promiscuous mode [ 956.778982][T26245] hsr_slave_1: entered promiscuous mode [ 956.785030][T26245] debugfs: 'hsr0' already exists in 'hsr' [ 956.790782][T26245] Cannot create hsr debugfs directory [ 956.937776][T14395] IPVS: starting estimator thread 0... [ 957.007400][T26245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 957.009493][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.010384][T26245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 957.020437][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.021295][T26245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 957.023241][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.023941][T26245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 957.025959][T26245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.030407][T26294] IPVS: using max 2736 ests per chain, 136800 per kthread [ 957.066382][T26245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.086761][T26245] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.098384][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.098467][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.099920][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.099956][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.360165][T26245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.498600][T26245] veth0_vlan: entered promiscuous mode [ 957.507241][T26245] veth1_vlan: entered promiscuous mode [ 957.546604][T26245] veth0_macvtap: entered promiscuous mode [ 957.559318][T26245] veth1_macvtap: entered promiscuous mode [ 957.582935][T26245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.602554][T26245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.623333][ T3623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.632681][ T3623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.648996][ T3623] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.664121][ T3623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.748415][T26334] loop5: detected capacity change from 0 to 128 [ 957.904292][T26343] loop2: detected capacity change from 0 to 512 [ 957.928963][T26334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6603'. [ 957.943346][T26343] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 957.952016][T26343] System zones: 0-2, 18-18, 34-35 [ 957.958039][T26343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 958.021220][T26343] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 958.063608][T26348] loop6: detected capacity change from 0 to 512 [ 958.078161][T26348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 958.165261][T26348] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 958.174744][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 958.204019][T26348] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.6605: corrupted in-inode xattr: e_value size too large [ 958.281039][T26348] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 958.291998][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 958.307644][ C1] EXT4-fs (loop6): initial error at time 1780242260: ext4_iget_extra_inode:5128: inode 15 [ 958.317630][ C1] EXT4-fs (loop6): last error at time 1780242260: ext4_iget_extra_inode:5128: inode 15 [ 958.331908][T26348] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6605: couldn't read orphan inode 15 (err -117) [ 958.395434][T26348] loop6: lost filesystem error report for type 5 error -117 [ 958.445801][T26348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.525759][T26365] netlink: 'syz.2.6611': attribute type 8 has an invalid length. [ 958.582720][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6611'. [ 958.698809][T26365] bond0: entered promiscuous mode [ 958.738435][T26365] bond_slave_0: entered promiscuous mode [ 958.785280][T26365] bond_slave_1: entered promiscuous mode [ 958.800679][T26365] batadv0: entered promiscuous mode [ 958.806495][T26365] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 958.816474][T26365] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 958.827232][T26365] hsr1: entered promiscuous mode [ 958.832424][T26365] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 958.832574][T26360] loop4: detected capacity change from 0 to 2048 [ 958.848970][T26245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.014550][T26371] netlink: 'syz.2.6614': attribute type 16 has an invalid length. [ 959.032852][T26372] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6612'. [ 959.083810][T26371] netlink: 'syz.2.6614': attribute type 17 has an invalid length. [ 959.121020][T26373] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 959.218374][T26382] loop5: detected capacity change from 0 to 512 [ 959.234494][T26382] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 959.254640][T26382] System zones: 0-2, 18-18, 34-35 [ 959.260677][T26382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 959.287963][T26382] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 959.313739][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 959.528294][T26394] loop5: detected capacity change from 0 to 4096 [ 959.633375][T26396] xt_hashlimit: max too large, truncated to 1048576 [ 959.641006][T26396] ipt_REJECT: TCP_RESET invalid for non-tcp [ 960.049097][T26394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 960.088489][T26394] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 960.097885][T26394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.107544][T26394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.117878][T26394] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 960.128159][T26394] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 960.138044][T26394] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.6623: Failed to acquire dquot type 1 [ 960.152099][T26394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.179113][T26394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.250438][T24884] IPVS: starting estimator thread 0... [ 960.378921][ T28] audit: type=1326 audit(1780242262.366:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.405498][T26407] IPVS: using max 2592 ests per chain, 129600 per kthread [ 960.412960][ T28] audit: type=1326 audit(1780242262.403:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.438794][ T28] audit: type=1326 audit(1780242262.403:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.570712][ T28] audit: type=1326 audit(1780242262.403:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.596503][ T28] audit: type=1326 audit(1780242262.403:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.622183][ T28] audit: type=1326 audit(1780242262.450:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.650224][ T28] audit: type=1326 audit(1780242262.450:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26410 comm="syz.6.6629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a8ece59 code=0x7ffc0000 [ 960.699537][T26409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6628'. [ 960.929117][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.805322][T26435] loop5: detected capacity change from 0 to 512 [ 961.856795][T26435] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 961.886384][T26435] System zones: 0-2, 18-18, 34-35 [ 961.904706][T26435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 961.946955][T26443] loop2: detected capacity change from 0 to 512 [ 961.955030][T26435] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 961.977309][T26443] ext3: Unknown parameter 'nouser_xattr' [ 962.039252][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 962.069791][T26443] netlink: 384 bytes leftover after parsing attributes in process `syz.2.6639'. [ 962.106117][T26443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6639'. [ 962.138097][T26445] netlink: 'syz.5.6640': attribute type 2 has an invalid length. [ 962.153122][T26447] loop2: detected capacity change from 0 to 1024 [ 962.162871][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6640'. [ 962.170901][T26447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 962.203521][T26447] System zones: 0-1, 3-36 [ 962.214748][T26447] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.6639: bad orphan inode 134217728 [ 962.247736][T26447] loop2: lost filesystem error report for type 5 error -117 [ 962.249037][T26447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.414770][T26453] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6642'. [ 962.450115][T26455] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6643'. [ 962.483828][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.842964][T26463] xt_hashlimit: max too large, truncated to 1048576 [ 962.850813][T26463] ipt_REJECT: TCP_RESET invalid for non-tcp [ 963.331635][T26474] loop4: detected capacity change from 0 to 512 [ 963.356924][T26474] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 963.365223][T26474] System zones: 0-2, 18-18, 34-35 [ 963.380431][T26474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 963.392988][T26474] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 963.415427][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 963.471968][T26481] loop4: detected capacity change from 0 to 4096 [ 963.515010][T26481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 963.553596][T26481] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 963.568704][T26481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.590036][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6654'. [ 963.613845][T26481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.619458][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6654'. [ 963.630654][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6654'. [ 963.641967][T26488] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6655'. [ 963.656271][T26481] __quota_error: 500 callbacks suppressed [ 963.656290][T26481] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 963.709232][T26481] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 963.733172][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.747082][T26481] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6653: Failed to acquire dquot type 1 [ 963.776740][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.894247][T26505] sctp: [Deprecated]: syz.6.6660 (pid 26505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 963.894247][T26505] Use struct sctp_sack_info instead [ 963.910886][T26504] loop2: detected capacity change from 0 to 512 [ 963.918935][T26504] EXT4-fs: Ignoring removed nobh option [ 963.924650][T26504] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.938183][T26504] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.6661: invalid block [ 963.949117][T26504] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 963.954616][T26504] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6661: couldn't read orphan inode 11 (err -117) [ 963.975590][T26504] loop2: lost filesystem error report for type 5 error -117 [ 963.976627][T26504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.041361][T26504] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.132224][T26514] loop2: detected capacity change from 0 to 512 [ 964.147724][T26514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 964.158607][T26514] System zones: 0-2, 18-18, 34-35 [ 964.164754][T26514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 964.177280][T26514] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 964.199676][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 964.339697][T26520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.348389][T26520] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.359872][T26520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.390253][T26520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.400305][T26520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.413326][T26520] veth1_vlan: left promiscuous mode [ 964.419527][T26520] veth0_vlan: left promiscuous mode [ 964.425386][T26520] veth0_vlan: entered promiscuous mode [ 964.434478][T26520] veth1_vlan: entered promiscuous mode [ 964.454064][T26520] veth1_macvtap: left promiscuous mode [ 964.461108][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.471733][T26520] veth0_macvtap: left promiscuous mode [ 964.478233][T26520] veth0_macvtap: entered promiscuous mode [ 964.484849][T26520] veth1_macvtap: entered promiscuous mode [ 964.511395][T26520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 964.520519][T26520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.529627][T26520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 964.538548][T26520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.585099][T26520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.601412][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.608557][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.618899][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.626023][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.660881][ T3611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.670022][ T3611] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.679242][ T3611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.688147][ T3611] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 964.697603][ T3625] vlan0: left allmulticast mode [ 964.702529][ T3625] geneve0: left allmulticast mode [ 964.709384][ T3625] bridge0: port 1(vlan0) entered disabled state [ 964.783410][ T3625] bond10 (unregistering): (slave gretap1): Releasing backup interface [ 964.912651][ T3625] bond0 (unregistering): left promiscuous mode [ 964.919408][ T3625] bond0 (unregistering): Released all slaves [ 964.929265][ T3625] bond1 (unregistering): Released all slaves [ 964.938942][ T3625] bond2 (unregistering): Released all slaves [ 964.948978][ T3625] bond3 (unregistering): Released all slaves [ 964.958573][ T3625] bond4 (unregistering): Released all slaves [ 964.968401][ T3625] bond5 (unregistering): Released all slaves [ 964.978610][ T3625] bond6 (unregistering): Released all slaves [ 964.987997][ T3625] bond7 (unregistering): Released all slaves [ 964.997150][ T3625] bond8 (unregistering): Released all slaves [ 965.005922][ T3625] bond9 (unregistering): Released all slaves [ 965.015737][ T3625] bond10 (unregistering): Released all slaves [ 965.025550][ T3625] bond11 (unregistering): Released all slaves [ 965.037697][ T3611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.053257][ T3611] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 965.070433][ T3611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.084141][T26536] can: request_module (can-proto-3) failed. [ 965.084448][ T3611] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 965.170863][T26529] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.178154][T26529] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.250674][T26529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.266958][T26529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.322996][ T3611] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.341032][ T3625] tipc: Disabling bearer [ 965.346518][ T3625] tipc: Left network mode [ 965.389595][ T3611] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.400770][ T3611] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.421506][ T3611] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.474565][T26547] netlink: 'syz.5.6672': attribute type 16 has an invalid length. [ 965.511282][T26547] netlink: 'syz.5.6672': attribute type 17 has an invalid length. [ 965.580126][T26552] loop2: detected capacity change from 0 to 512 [ 965.594141][T26552] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 965.602301][T26552] System zones: 0-2, 18-18, 34-35 [ 965.635557][T26552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 965.647675][T26552] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 965.686946][T26551] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 965.715044][ T3625] batadv0: left promiscuous mode [ 965.741687][ T3625] hsr_slave_0: left promiscuous mode [ 965.767819][ T3625] hsr_slave_1: left promiscuous mode [ 966.013132][T26562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26562 comm=syz.4.6677 [ 966.045844][T26564] xt_hashlimit: max too large, truncated to 1048576 [ 966.053395][T26564] ipt_REJECT: TCP_RESET invalid for non-tcp [ 966.146032][ T28] audit: type=1400 audit(1780242267.763:15727): avc: denied { append } for pid=26557 comm="syz.4.6677" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 966.237909][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 966.510136][T26574] __nla_validate_parse: 11 callbacks suppressed [ 966.510156][T26574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6678'. [ 966.777127][ T3625] IPVS: stop unused estimator thread 0... [ 966.801109][ T28] audit: type=1326 audit(1780242268.370:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26585 comm="syz.5.6684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x0 [ 967.498557][T26597] loop4: detected capacity change from 0 to 512 [ 967.518873][T26597] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 967.527109][T26597] System zones: 0-2, 18-18, 34-35 [ 967.533196][T26597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 967.545516][T26597] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 967.568643][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 967.646475][T26600] loop4: detected capacity change from 0 to 1024 [ 967.699413][T26600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 967.720485][T26600] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.857815][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 967.975218][T26608] xt_hashlimit: max too large, truncated to 1048576 [ 967.982986][T26608] ipt_REJECT: TCP_RESET invalid for non-tcp [ 968.018056][T26607] loop4: detected capacity change from 0 to 128 [ 968.207946][T26607] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 968.287593][T26607] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.570065][T23300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.812807][ T28] audit: type=1326 audit(1780242270.250:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 968.838432][ T28] audit: type=1326 audit(1780242270.250:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 968.864094][ T28] audit: type=1326 audit(1780242270.250:15731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 968.889756][ T28] audit: type=1326 audit(1780242270.250:15732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 968.982561][T26623] xt_hashlimit: max too large, truncated to 1048576 [ 968.990410][T26623] ipt_REJECT: TCP_RESET invalid for non-tcp [ 969.021545][T26625] loop5: detected capacity change from 0 to 764 [ 969.177489][ T28] audit: type=1326 audit(1780242270.250:15733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.204164][ T28] audit: type=1326 audit(1780242270.250:15734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.310773][ T28] audit: type=1326 audit(1780242270.250:15735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.545786][ T28] audit: type=1326 audit(1780242270.278:15736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.615467][ T28] audit: type=1326 audit(1780242270.278:15737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.738562][T26639] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6699'. [ 969.768817][ T28] audit: type=1326 audit(1780242270.278:15738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26620 comm="syz.5.6695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f458cafce59 code=0x7ffc0000 [ 969.824183][ T28] audit: type=1400 audit(1780242271.148:15739): avc: denied { shutdown } for pid=26640 comm="syz.6.6698" lport=45721 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 969.851066][T20037] bridge_slave_1: left allmulticast mode [ 969.857346][T20037] bridge_slave_1: left promiscuous mode [ 969.878616][T20037] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.921606][T20037] bridge_slave_0: left allmulticast mode [ 969.927462][T20037] bridge_slave_0: left promiscuous mode [ 969.936391][T20037] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.208720][T26655] xt_hashlimit: max too large, truncated to 1048576 [ 970.216132][T26655] ipt_REJECT: TCP_RESET invalid for non-tcp [ 970.641132][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6703'. [ 970.658842][T20037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.674520][T20037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.691502][T20037] bond0 (unregistering): Released all slaves [ 970.705817][T20037] bond1 (unregistering): Released all slaves [ 970.721996][T26657] loop5: detected capacity change from 0 to 512 [ 970.731899][T26644] batadv_slave_1: entered promiscuous mode [ 970.734921][T26657] EXT4-fs: Ignoring removed nobh option [ 970.751503][T26650] batadv_slave_1: left promiscuous mode [ 970.800427][T26657] EXT4-fs: Ignoring removed mblk_io_submit option [ 970.877275][T26657] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.6703: invalid block [ 970.915527][T26657] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 970.919232][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 970.934847][ C1] EXT4-fs (loop5): initial error at time 1780242272: __ext4_iget:5481: inode 11: block 1 [ 970.944707][ C1] EXT4-fs (loop5): last error at time 1780242272: __ext4_iget:5481: inode 11: block 1 [ 970.975010][T26657] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6703: couldn't read orphan inode 11 (err -117) [ 971.015618][T26657] loop5: lost filesystem error report for type 5 error -117 [ 971.021654][T26657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.047000][T26657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.116453][T20037] hsr_slave_0: left promiscuous mode [ 971.127229][T20037] hsr_slave_1: left promiscuous mode [ 971.142602][T20037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.158564][T26683] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6709'. [ 971.171040][T20037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.184194][ T28] audit: type=1400 audit(1780242272.467:15740): avc: denied { write } for pid=26661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.249414][ T28] audit: type=1400 audit(1780242272.532:15741): avc: denied { write } for pid=26687 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.327282][T20037] team0 (unregistering): Port device team_slave_1 removed [ 971.337220][T20037] team0 (unregistering): Port device team_slave_0 removed [ 971.362880][T26694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6713'. [ 971.406999][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 971.452956][T26670] loop6: detected capacity change from 0 to 8192 [ 971.502647][T26670] loop6: p2 p3 [ 971.526381][T26704] loop5: detected capacity change from 0 to 2048 [ 971.533582][T26717] loop4: detected capacity change from 0 to 128 [ 971.544788][T26670] loop6: p3 start 117440512 is beyond EOD, truncated [ 971.585294][T26704] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 971.658271][T26732] loop2: detected capacity change from 0 to 512 [ 971.679007][ T28] audit: type=1400 audit(1780242272.935:15742): avc: denied { write } for pid=26710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.716851][T26732] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 971.738229][T23383] udevd[23383]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 971.781717][T26732] System zones: 0-2, 18-18, 34-35 [ 971.799757][T26732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 971.815023][T26732] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 971.851472][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 971.863777][T26614] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.876140][T26614] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.883677][T26614] bridge_slave_0: entered allmulticast mode [ 971.890503][T26614] bridge_slave_0: entered promiscuous mode [ 971.897564][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 971.915119][T26614] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.922613][T26743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6716'. [ 971.931733][T26614] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.942274][T26757] IPVS: set_ctl: invalid protocol: 232 172.20.20.187:20001 [ 971.952142][T26614] bridge_slave_1: entered allmulticast mode [ 971.959045][T26614] bridge_slave_1: entered promiscuous mode [ 971.997689][T26757] loop5: detected capacity change from 0 to 512 [ 972.021411][T26614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.034731][T26757] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 972.046944][T26614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.101821][T26757] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 972.115871][T26614] team0: Port device team_slave_0 added [ 972.122509][T26614] team0: Port device team_slave_1 added [ 972.139681][T26614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.146657][T26614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.172552][T26614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.183982][T26614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.191035][T26614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.233188][T26614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.335338][T26812] loop6: detected capacity change from 0 to 512 [ 972.354146][T26812] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.6722: inode has both inline data and extents flags [ 972.367673][T26812] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 972.367831][T26812] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6722: couldn't read orphan inode 15 (err -117) [ 972.377012][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 972.377033][ C0] EXT4-fs (loop6): initial error at time 1780242273: ext4_orphan_get:1397: inode 15 [ 972.377059][ C0] EXT4-fs (loop6): last error at time 1780242273: ext4_orphan_get:1397: inode 15 [ 972.421187][T26812] loop6: lost filesystem error report for type 5 error -117 [ 972.421860][T26812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.465978][T26815] netlink: 'syz.4.6723': attribute type 1 has an invalid length. [ 972.491631][T26812] Invalid argument reading file caps for ./file0 [ 972.545000][T26245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.590569][T26830] loop5: detected capacity change from 0 to 512 [ 972.617534][T26614] hsr_slave_0: entered promiscuous mode [ 972.632510][T26830] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 972.641581][T26614] hsr_slave_1: entered promiscuous mode [ 972.647592][T26614] debugfs: 'hsr0' already exists in 'hsr' [ 972.654073][T26830] System zones: 0-2, 18-18, 34-35 [ 972.667263][T26614] Cannot create hsr debugfs directory [ 972.691685][T26830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 972.704148][T26830] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 972.721979][T26849] netlink: 'syz.6.6729': attribute type 16 has an invalid length. [ 972.739466][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 972.748669][T26839] loop4: detected capacity change from 0 to 1024 [ 972.764513][T26849] netlink: 'syz.6.6729': attribute type 17 has an invalid length. [ 972.775496][T26839] EXT4-fs: Ignoring removed i_version option [ 972.803296][T26839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 972.903047][T26839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.866325][T26870] xt_hashlimit: max too large, truncated to 1048576 [ 973.873000][T26870] ipt_REJECT: TCP_RESET invalid for non-tcp [ 973.896338][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 973.912843][T26873] netlink: 'syz.2.6734': attribute type 16 has an invalid length. [ 973.923361][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.940716][T26873] netlink: 'syz.2.6734': attribute type 17 has an invalid length. [ 973.975543][T26875] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6736: inode has both inline data and extents flags [ 973.994024][T26875] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 973.996241][T26875] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6736: couldn't read orphan inode 15 (err -117) [ 974.005478][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 974.005497][ C1] EXT4-fs (loop5): initial error at time 1780242275: ext4_orphan_get:1397: inode 15 [ 974.005519][ C1] EXT4-fs (loop5): last error at time 1780242275: ext4_orphan_get:1397: inode 15 [ 974.043915][T26875] loop5: lost filesystem error report for type 5 error -117 [ 974.044095][T26873] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 974.053378][T26875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.102036][T26875] Invalid argument reading file caps for ./file0 [ 974.132896][T26614] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.138745][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.156495][T26614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.164374][T26614] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.174990][T26614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.205129][T26614] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 974.223370][T26886] netlink: 'syz.2.6738': attribute type 1 has an invalid length. [ 974.244133][T26614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.254068][T26614] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.266601][T26884] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 974.276588][T26614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.298000][T26884] System zones: 0-2, 18-18, 34-35 [ 974.319920][T26884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 974.365407][T26884] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 974.423583][T26907] set_capacity_and_notify: 3 callbacks suppressed [ 974.423633][T26907] loop4: detected capacity change from 0 to 512 [ 974.445307][T26245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 974.471168][T26907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.497549][T26907] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.526131][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 974.542507][T26614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.554496][T26614] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.563835][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.570934][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.628886][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.636118][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.651640][T26930] loop5: detected capacity change from 0 to 4096 [ 974.696583][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.697122][T26932] loop2: detected capacity change from 0 to 512 [ 974.714580][T26932] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.6747: inode has both inline data and extents flags [ 974.731357][T26932] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 974.731506][T26932] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6747: couldn't read orphan inode 15 (err -117) [ 974.740819][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 974.740839][ C0] EXT4-fs (loop2): initial error at time 1780242275: ext4_orphan_get:1397: inode 15 [ 974.740874][ C0] EXT4-fs (loop2): last error at time 1780242275: ext4_orphan_get:1397: inode 15 [ 974.779611][T26932] loop2: lost filesystem error report for type 5 error -117 [ 974.780511][T26932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.828255][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 974.828272][ T28] audit: type=1400 audit(1780242275.881:15755): avc: denied { write } for pid=26931 comm="syz.2.6747" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 974.863246][T26932] Invalid argument reading file caps for ./file0 [ 974.934586][T25141] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.159420][T26614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.168826][T26968] loop6: detected capacity change from 0 to 512 [ 975.177312][T26968] ext4: Unknown parameter 'audit' [ 975.204242][T26972] loop4: detected capacity change from 0 to 256 [ 975.298909][T26977] loop6: detected capacity change from 0 to 512 [ 975.363372][T26980] loop5: detected capacity change from 0 to 4096 [ 975.402681][T26980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 975.426015][T26980] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 975.455558][T26980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.467379][T26980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.491802][T26980] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 975.505376][T26980] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 975.514906][T26980] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.6758: Failed to acquire dquot type 1 [ 975.530338][T26980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.550022][T26980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.560209][T26614] veth0_vlan: entered promiscuous mode [ 975.588211][T26614] veth1_vlan: entered promiscuous mode [ 975.603596][T27002] 9pnet_virtio: no channels available for device ./file0 [ 975.610796][ T28] audit: type=1400 audit(1780242276.610:15756): avc: denied { mounton } for pid=26971 comm="syz.4.6756" path="/212/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 975.638367][T26614] veth0_macvtap: entered promiscuous mode [ 975.660849][T26614] veth1_macvtap: entered promiscuous mode [ 975.671781][T26994] rdma_rxe: rxe_newlink: failed to add syz_tun [ 975.684779][T26614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.708907][T26614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.716627][T26994] loop6: detected capacity change from 0 to 1024 [ 975.728805][ T3623] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.739646][ T3623] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.754299][ T3623] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.765959][ T3623] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.842260][T26994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 975.857680][T27011] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6692'. [ 975.873649][T26994] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.947595][ T28] audit: type=1400 audit(1780242276.928:15757): avc: denied { write } for pid=26993 comm="syz.6.6761" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 975.988722][T26994] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.6761: lblock 3 mapped to illegal pblock 3 (length 3) [ 976.010100][T27013] bridge0: port 3(vlan2) entered blocking state [ 976.016755][T27015] loop2: detected capacity change from 0 to 128 [ 976.023230][T27013] bridge0: port 3(vlan2) entered disabled state [ 976.033936][T27013] vlan2: entered allmulticast mode [ 976.039215][T27013] geneve0: entered allmulticast mode [ 976.045888][T26994] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 976.059109][T26994] EXT4-fs (loop6): This should not happen!! Data will be lost [ 976.059109][T26994] [ 976.072371][T27013] vlan2: entered promiscuous mode [ 976.083531][T27013] geneve0: entered promiscuous mode [ 976.157362][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.182037][ T3611] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 3) [ 976.207862][T27026] loop2: detected capacity change from 0 to 1024 [ 976.236137][ T3611] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 976.267180][T27026] EXT4-fs: Ignoring removed i_version option [ 976.278044][ T3611] EXT4-fs (loop6): This should not happen!! Data will be lost [ 976.278044][ T3611] [ 976.292606][T27026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 976.315063][ T3611] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:14: lblock 4 mapped to illegal pblock 4 (length 2) [ 976.358867][ T3611] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 976.375990][T27036] netlink: 'syz.4.6771': attribute type 1 has an invalid length. [ 976.389824][T27026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.393616][ T3611] EXT4-fs (loop6): This should not happen!! Data will be lost [ 976.393616][ T3611] [ 976.425509][T26245] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 976.518064][T27045] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6768'. [ 976.541480][T27047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6773'. [ 976.612583][T27045] EXT4-fs: Ignoring removed nobh option [ 976.630777][ T28] audit: type=1326 audit(1780242277.574:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.4.6775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 976.659870][T27045] EXT4-fs: Ignoring removed mblk_io_submit option [ 976.670758][T27052] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6775'. [ 976.675677][T27050] netlink: 131336 bytes leftover after parsing attributes in process `syz.7.6774'. [ 976.696355][ T28] audit: type=1326 audit(1780242277.592:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.4.6775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 976.700275][T27045] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 1: comm syz.6.6768: invalid block [ 976.737002][T27050] netlink: zone id is out of range [ 976.737980][ T28] audit: type=1326 audit(1780242277.592:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.4.6775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 976.742717][T27045] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 976.769369][ T28] audit: type=1326 audit(1780242277.592:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.4.6775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 976.804636][ T28] audit: type=1326 audit(1780242277.592:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27051 comm="syz.4.6775" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 976.831430][T27045] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.6768: couldn't read orphan inode 11 (err -117) [ 976.842889][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 976.845187][T27045] loop6: lost filesystem error report for type 5 error -117 [ 976.849800][ C1] EXT4-fs (loop6): initial error at time 1780242277: __ext4_iget:5481: inode 11: block 1 [ 976.849843][ C1] EXT4-fs (loop6): last error at time 1780242277: __ext4_iget:5481: inode 11: block 1 [ 976.940090][T27058] netlink: 'syz.7.6778': attribute type 36 has an invalid length. [ 976.962185][T27056] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 976.964083][T27058] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 976.980862][T27058] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 976.998470][T27056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.022072][T27058] netlink: 'syz.7.6778': attribute type 2 has an invalid length. [ 977.025518][T27056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.030271][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6778'. [ 977.094732][T27056] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.6776: Failed to acquire dquot type 1 [ 977.121475][T27056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.148839][T27056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.425088][T27081] netlink: 'syz.6.6784': attribute type 1 has an invalid length. [ 977.870418][T27095] EXT4-fs: Ignoring removed i_version option [ 977.876969][T27095] EXT4-fs: Ignoring removed bh option [ 978.170561][T27118] rock: directory entry would overflow storage [ 978.176879][T27118] rock: sig=0x4654, size=5, remaining=4 [ 978.239214][T27120] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 978.260386][T27120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.279865][T27120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.298597][T27120] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6796: Failed to acquire dquot type 1 [ 978.321476][T27120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.355590][T27120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.759505][T27129] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 978.767737][T27129] System zones: 0-2, 18-18, 34-35 [ 978.773370][T27129] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 979.031982][T27143] Invalid argument reading file caps for ./file0 [ 979.059339][T27145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6805'. [ 979.116327][T27145] EXT4-fs: Ignoring removed oldalloc option [ 979.183290][T27145] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 979.201663][T27145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6805'. [ 979.357473][T27160] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 979.386189][T27160] System zones: 0-2, 18-18, 34-35 [ 979.406892][T27160] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 979.570843][T27174] netlink: 'syz.4.6815': attribute type 8 has an invalid length. [ 979.614070][T27176] Invalid argument reading file caps for ./file0 [ 979.705732][T27181] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.937353][T27159] set_capacity_and_notify: 9 callbacks suppressed [ 979.937375][T27159] loop7: detected capacity change from 0 to 512 [ 979.951629][T27181] EXT4-fs warning (device loop6): verify_group_input:156: Last group not full [ 979.986949][T27159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 980.091237][T27159] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 980.154651][T27159] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6810: corrupted in-inode xattr: e_value size too large [ 980.209926][T27159] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 980.210576][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 980.226238][ C0] EXT4-fs (loop7): initial error at time 1780242280: ext4_iget_extra_inode:5128: inode 15 [ 980.236216][ C0] EXT4-fs (loop7): last error at time 1780242280: ext4_iget_extra_inode:5128: inode 15 [ 980.247946][T27159] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6810: couldn't read orphan inode 15 (err -117) [ 980.278371][T27159] loop7: lost filesystem error report for type 5 error -117 [ 980.294912][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6810'. [ 980.339788][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6810'. [ 980.352694][T26802] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.359038][T27155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6810'. [ 980.362912][T26802] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.387685][T26802] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.406929][T26802] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.601866][T27216] Invalid argument reading file caps for ./file0 [ 980.784565][T27229] loop6: detected capacity change from 0 to 4096 [ 980.882584][T27235] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6836'. [ 980.921776][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6837'. [ 981.035851][T27237] loop7: detected capacity change from 0 to 512 [ 981.047953][T27239] loop2: detected capacity change from 0 to 1024 [ 981.054859][T27237] EXT4-fs: Ignoring removed nobh option [ 981.060491][T27237] EXT4-fs: Ignoring removed mblk_io_submit option [ 981.063009][T27239] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 981.084373][T27239] EXT4-fs (loop2): mount failed [ 981.158567][T27237] EXT4-fs error (device loop7): __ext4_iget:5481: inode #11: block 1: comm syz.7.6837: invalid block [ 981.194512][T27237] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 981.197449][T27237] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6837: couldn't read orphan inode 11 (err -117) [ 981.218687][T27237] loop7: lost filesystem error report for type 5 error -117 [ 981.247202][T27250] loop4: detected capacity change from 0 to 512 [ 981.297224][T27250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 981.348925][T27250] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.461233][T27266] Invalid logical block size (32) [ 981.469388][T27266] netlink: 'syz.5.6847': attribute type 21 has an invalid length. [ 981.480959][T27271] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6849'. [ 981.485450][T27266] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6847'. [ 981.682851][T27283] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6853'. [ 981.701497][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 981.701537][ T28] audit: type=1400 audit(1780242282.297:15803): avc: denied { append } for pid=27282 comm="syz.6.6853" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 981.952046][T27288] xt_hashlimit: max too large, truncated to 1048576 [ 981.960252][T27288] ipt_REJECT: TCP_RESET invalid for non-tcp [ 983.111672][T27302] xt_hashlimit: max too large, truncated to 1048576 [ 983.119016][T27302] ipt_REJECT: TCP_RESET invalid for non-tcp [ 984.034671][T27314] loop4: detected capacity change from 0 to 2048 [ 984.131890][T27314] loop4: p1 < > p3 [ 984.137421][T27314] loop4: p3 size 134217728 extends beyond EOD, truncated [ 984.151262][ T2982] loop4: p1 < > p3 [ 984.159096][ T2982] loop4: p3 size 134217728 extends beyond EOD, truncated [ 984.171032][T27320] FAULT_INJECTION: forcing a failure. [ 984.171032][T27320] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 984.196070][T27320] CPU: 0 UID: 0 PID: 27320 Comm: syz.2.6866 Not tainted syzkaller #0 PREEMPT(lazy) [ 984.196096][T27320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 984.196108][T27320] Call Trace: [ 984.196115][T27320] [ 984.196125][T27320] __dump_stack+0x1d/0x30 [ 984.196219][T27320] dump_stack_lvl+0x95/0xd0 [ 984.196243][T27320] dump_stack+0x15/0x1b [ 984.196264][T27320] should_fail_ex+0x263/0x280 [ 984.196286][T27320] should_fail_alloc_page+0xf2/0x100 [ 984.196317][T27320] __alloc_frozen_pages_noprof+0x108/0x350 [ 984.196341][T27320] alloc_pages_mpol+0xb3/0x260 [ 984.196434][T27320] alloc_pages_noprof+0x8f/0x140 [ 984.196463][T27320] alloc_skb_with_frags+0x1ca/0x3d0 [ 984.196574][T27320] sock_alloc_send_pskb+0x44d/0x500 [ 984.196635][T27320] ? terminate_walk+0x1e6/0x210 [ 984.196743][T27320] ? path_openat+0x1ab2/0x2050 [ 984.196782][T27320] tun_get_user+0x653/0x27e0 [ 984.196828][T27320] ? ref_tracker_alloc+0x1eb/0x2f0 [ 984.196916][T27320] ? selinux_file_permission+0x1e1/0x320 [ 984.196948][T27320] tun_chr_write_iter+0x15e/0x210 [ 984.197057][T27320] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 984.197189][T27320] vfs_write+0x5a6/0x9f0 [ 984.197230][T27320] ksys_write+0xdc/0x1a0 [ 984.197257][T27320] __x64_sys_write+0x40/0x50 [ 984.197289][T27320] x64_sys_call+0x27e1/0x3020 [ 984.197331][T27320] do_syscall_64+0x12c/0x3b0 [ 984.197396][T27320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.197422][T27320] RIP: 0033:0x7f42b2cfd68e [ 984.197440][T27320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 984.197481][T27320] RSP: 002b:00007f42b1796fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 984.197504][T27320] RAX: ffffffffffffffda RBX: 00007f42b17976c0 RCX: 00007f42b2cfd68e [ 984.197557][T27320] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 00000000000000c8 [ 984.197585][T27320] RBP: 00007f42b1797090 R08: 0000000000000000 R09: 0000000000000000 [ 984.197601][T27320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.197616][T27320] R13: 00007f42b2fb6038 R14: 00007f42b2fb5fa0 R15: 00007ffd3bfa7d88 [ 984.197641][T27320] [ 984.289228][T27319] loop7: detected capacity change from 0 to 512 [ 984.368668][T23383] udevd[23383]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 984.378718][T27319] EXT4-fs: Ignoring removed bh option [ 984.396758][T27322] loop4: detected capacity change from 0 to 2048 [ 984.398449][T27319] EXT4-fs: inline encryption not supported [ 984.453329][T27319] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 984.454005][T23386] udevd[23386]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 984.491203][T27322] EXT4-fs mount: 26 callbacks suppressed [ 984.491217][T27322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.495197][T27319] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 984.529850][T27319] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6865: bg 0: block 248: padding at end of block bitmap is not set [ 984.546536][T23386] udevd[23386]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 984.547090][T23383] udevd[23383]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 984.566709][T27319] loop7: lost filesystem error report for type 5 error -117 [ 984.572972][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 984.587192][ C1] EXT4-fs (loop7): last error at time 1780242284: ext4_validate_block_bitmap:441 [ 984.621099][T27322] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 984.630826][T27319] Quota error (device loop7): write_blk: dquota write failed [ 984.691223][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.702846][T27319] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 984.776376][T27319] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.6865: Failed to acquire dquot type 1 [ 984.795909][T27319] loop7: lost filesystem error report for type 5 error -28 [ 984.800866][T27319] EXT4-fs (loop7): 1 truncate cleaned up [ 984.818770][T27319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 984.885576][ T28] audit: type=1400 audit(1780242285.290:15804): avc: denied { write } for pid=27334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.955132][T27319] syz.7.6865 (27319) used greatest stack depth: 8920 bytes left [ 985.001487][ T28] audit: type=1400 audit(1780242285.393:15805): avc: denied { write } for pid=27370 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.046082][T26614] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 985.072670][T27374] __nla_validate_parse: 1 callbacks suppressed [ 985.072741][T27374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6877'. [ 985.188927][T27374] loop2: detected capacity change from 0 to 512 [ 985.195524][T27374] EXT4-fs: Ignoring removed nobh option [ 985.207515][T27374] EXT4-fs: Ignoring removed mblk_io_submit option [ 985.241073][T27374] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.6877: invalid block [ 985.259965][T27378] loop7: detected capacity change from 0 to 256 [ 985.321701][T27378] netlink: 'syz.7.6878': attribute type 3 has an invalid length. [ 985.338796][T27374] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 985.342736][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 985.358350][ C1] EXT4-fs (loop2): initial error at time 1780242285: __ext4_iget:5481: inode 11: block 1 [ 985.368241][ C1] EXT4-fs (loop2): last error at time 1780242285: __ext4_iget:5481: inode 11: block 1 [ 985.380336][T27374] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6877: couldn't read orphan inode 11 (err -117) [ 985.393757][T27374] loop2: lost filesystem error report for type 5 error -117 [ 985.401415][T27374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.474705][T27374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.538300][T27385] netlink: 'syz.7.6880': attribute type 16 has an invalid length. [ 985.570469][T27385] netlink: 'syz.7.6880': attribute type 17 has an invalid length. [ 985.922595][T27397] netlink: 'syz.2.6883': attribute type 16 has an invalid length. [ 985.943111][T27397] netlink: 'syz.2.6883': attribute type 17 has an invalid length. [ 986.063044][T27402] loop2: detected capacity change from 0 to 128 [ 986.133749][T27402] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 986.146184][T27402] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.163541][ T28] audit: type=1400 audit(1780242286.477:15806): avc: denied { write } for pid=27400 comm="syz.2.6885" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 986.259528][T27405] xt_hashlimit: max too large, truncated to 1048576 [ 986.266925][T27405] ipt_REJECT: TCP_RESET invalid for non-tcp [ 986.353108][T27401] netlink: 'syz.2.6885': attribute type 1 has an invalid length. [ 986.576738][T27410] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 986.664139][ T28] audit: type=1326 audit(1780242286.833:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 986.689916][ T28] audit: type=1326 audit(1780242286.833:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 986.715707][ T28] audit: type=1326 audit(1780242286.842:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 986.749250][T27412] loop5: detected capacity change from 0 to 128 [ 986.757939][ T28] audit: type=1326 audit(1780242286.842:15810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 986.764369][T27412] EXT4-fs: Mount option(s) incompatible with ext3 [ 986.812214][T27401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 986.848913][T27402] bond2: entered allmulticast mode [ 986.873532][T27407] bond2: (slave ip6gretap2): making interface the new active one [ 986.881491][T27407] ip6gretap2: entered allmulticast mode [ 986.895083][T27407] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 986.924510][T27413] netlink: 'syz.5.6887': attribute type 1 has an invalid length. [ 987.006695][T27413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 987.006760][T27421] loop7: detected capacity change from 0 to 512 [ 987.022564][T25141] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 987.050988][T27421] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.6888: inode has both inline data and extents flags [ 987.064429][T27421] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 987.065778][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 987.065792][ T28] audit: type=1326 audit(1780242287.329:15852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7fea68cc57 code=0x7ffc0000 [ 987.074965][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 987.074985][ C1] EXT4-fs (loop7): initial error at time 1780242287: ext4_orphan_get:1397: inode 15 [ 987.075012][ C1] EXT4-fs (loop7): last error at time 1780242287: ext4_orphan_get:1397: inode 15 [ 987.097614][T27421] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6888: couldn't read orphan inode 15 (err -117) [ 987.123167][ T28] audit: type=1326 audit(1780242287.329:15851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 987.169379][T27421] loop7: lost filesystem error report for type 5 error -117 [ 987.174004][ T28] audit: type=1326 audit(1780242287.329:15853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7fea649b51 code=0x7ffc0000 [ 987.177749][T27421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.183569][ T28] audit: type=1326 audit(1780242287.329:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27408 comm="syz.4.6886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fea68ce59 code=0x7ffc0000 [ 987.441708][T27414] audit: audit_backlog=65 > audit_backlog_limit=64 [ 987.448493][T27414] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 987.566909][T27414] audit: backlog limit exceeded [ 987.581721][T27441] loop5: detected capacity change from 0 to 512 [ 987.643214][T26614] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.654783][T27441] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 987.686906][T27445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 987.693549][T27445] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 987.713619][T27445] audit: backlog limit exceeded [ 987.720649][T27441] EXT4-fs (loop5): 1 orphan inode deleted [ 987.728289][T27441] EXT4-fs (loop5): 1 truncate cleaned up [ 987.742408][T27441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.794984][T27441] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6892'. [ 987.880410][T24335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.535097][T27493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6895'. [ 988.706813][T27495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6898'. [ 988.761493][T27495] loop2: detected capacity change from 0 to 512 [ 988.775525][T27495] EXT4-fs: Ignoring removed nobh option [ 988.778272][T27499] loop4: detected capacity change from 0 to 512 [ 988.790475][T27495] EXT4-fs: Ignoring removed mblk_io_submit option [ 988.806125][T27499] EXT4-fs: Ignoring removed oldalloc option [ 988.819133][T27499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 988.830135][T27495] EXT4-fs error (device loop2): __ext4_iget:5481: inode #11: block 1: comm syz.2.6898: invalid block [ 988.843354][T27499] EXT4-fs (loop4): orphan cleanup on readonly fs [ 988.844496][T27495] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 988.851142][T27499] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 988.860407][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 988.860445][ C0] EXT4-fs (loop2): initial error at time 1780242289: __ext4_iget:5481: inode 11: block 1 [ 988.860480][ C0] EXT4-fs (loop2): last error at time 1780242289: __ext4_iget:5481: inode 11: block 1 [ 988.884887][T27495] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6898: couldn't read orphan inode 11 (err -117) [ 988.891763][T27499] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 988.900877][T27495] loop2: lost filesystem error report for type 5 error -117 [ 988.921734][T27499] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.6899: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 988.950307][T27495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.968976][T27495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.978392][T27499] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 988.978544][T27499] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6899: couldn't read orphan inode 13 (err -117) [ 988.999570][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 988.999592][ C0] EXT4-fs (loop4): last error at time 1780242289: ext4_ext_check_inode:521: inode 13 [ 989.017571][T27499] loop4: lost filesystem error report for type 5 error -117 [ 989.018146][T27499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 989.122517][T27509] bridge0: port 3(vlan2) entered blocking state [ 989.129200][T27509] bridge0: port 3(vlan2) entered disabled state [ 989.135709][T27509] vlan2: entered allmulticast mode [ 989.142046][T27509] geneve0: entered allmulticast mode [ 989.148092][T27509] vlan2: entered promiscuous mode [ 989.153310][T27509] geneve0: entered promiscuous mode [ 989.183661][T27499] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.6899: deleted inode referenced: 12 [ 989.195951][T27499] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 989.205766][T27499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 989.252216][T27518] loop6: detected capacity change from 0 to 512 [ 989.258842][T27518] EXT4-fs: Ignoring removed oldalloc option [ 989.265968][T27518] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 989.280957][T27520] ext4: Unknown parameter '/dev/net/tun' [ 989.285425][T27518] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.6904: invalid indirect mapped block 83886080 (level 1) [ 989.296715][T27499] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 989.324010][T27518] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 989.328552][T27518] EXT4-fs (loop6): Remounting filesystem read-only [ 989.344502][T27518] EXT4-fs (loop6): 1 orphan inode deleted [ 989.350402][T27518] EXT4-fs (loop6): 1 truncate cleaned up [ 989.356345][T27518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.379724][T27518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.521839][T27537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6909'. [ 989.551429][T23300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.607789][T27537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6909'. [ 989.656948][T27537] loop7: detected capacity change from 0 to 512 [ 989.666336][T27537] EXT4-fs: Ignoring removed nobh option [ 989.672462][T27537] EXT4-fs: Ignoring removed mblk_io_submit option [ 989.694105][ T2982] ================================================================== [ 989.702223][ T2982] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 989.708840][ T2982] [ 989.711168][ T2982] read-write to 0xffff8881554fd540 of 4 bytes by task 23386 on cpu 1: [ 989.719329][ T2982] dont_mount+0x2a/0x40 [ 989.723520][ T2982] vfs_unlink+0x206/0x490 [ 989.727883][ T2982] filename_unlinkat+0x1e2/0x410 [ 989.732849][ T2982] __se_sys_unlink+0x2b/0xe0 [ 989.737464][ T2982] __x64_sys_unlink+0x1f/0x30 [ 989.742184][ T2982] x64_sys_call+0x2eb6/0x3020 [ 989.746892][ T2982] do_syscall_64+0x12c/0x3b0 [ 989.751498][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.757408][ T2982] [ 989.759767][ T2982] read to 0xffff8881554fd540 of 4 bytes by task 2982 on cpu 0: [ 989.767331][ T2982] lookup_fast+0xf0/0x320 [ 989.771696][ T2982] path_lookupat+0x15c/0x500 [ 989.776301][ T2982] filename_lookup+0x190/0x390 [ 989.781091][ T2982] do_readlinkat+0x74/0x2f0 [ 989.785622][ T2982] __x64_sys_readlink+0x47/0x60 [ 989.790504][ T2982] x64_sys_call+0x2b51/0x3020 [ 989.795221][ T2982] do_syscall_64+0x12c/0x3b0 [ 989.799836][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.805761][ T2982] [ 989.808100][ T2982] value changed: 0x00300080 -> 0x00004080 [ 989.813847][ T2982] [ 989.816181][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 989.822348][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 989.831221][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 989.841295][ T2982] ================================================================== [ 989.876167][T27537] EXT4-fs error (device loop7): __ext4_iget:5481: inode #11: block 1: comm syz.7.6909: invalid block [ 989.897463][T27537] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 989.905763][T27537] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6909: couldn't read orphan inode 11 (err -117) [ 989.915270][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 989.915301][ C0] EXT4-fs (loop7): initial error at time 1780242289: __ext4_iget:5481: inode 11: block 1 [ 989.915406][ C0] EXT4-fs (loop7): last error at time 1780242289: __ext4_iget:5481: inode 11: block 1 [ 989.963212][T27537] loop7: lost filesystem error report for type 5 error -117 [ 989.975585][T27537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.011367][T27537] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.