last executing test programs: 5m49.604836963s ago: executing program 4 (id=6): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 5m48.189107064s ago: executing program 4 (id=12): set_mempolicy(0x3, 0x0, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 5m44.300411431s ago: executing program 4 (id=18): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x802, 0xee) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1, 0x2, 0x10, @mcast1, @rand_addr=' \x01\x00', 0x20, 0x7800, 0x6, 0x39}}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x10, @val=@tracing={0xffffffffffffffff, 0x6}}, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r5, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) 5m38.881350801s ago: executing program 4 (id=28): syz_open_procfs(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000d00)={0xa, 0xce1c, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001800)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xb2}, 0x106200, 0x10004, 0x30da, 0x5, 0x9, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) listen(0xffffffffffffffff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x118}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc0, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 5m34.709735872s ago: executing program 4 (id=30): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 5m19.543837046s ago: executing program 32 (id=30): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 22.460571107s ago: executing program 3 (id=797): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x1, 0x26e, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8ffff) 21.345555334s ago: executing program 3 (id=806): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x914, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x52ef, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x800080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x0) 20.29416109s ago: executing program 3 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001e00218cb192dd0222"], 0x14}}, 0x4000040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) open(&(0x7f0000000000)='.\x00', 0x0, 0x33) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 17.320581104s ago: executing program 3 (id=816): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 12.384051206s ago: executing program 0 (id=822): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) getrlimit(0x8, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 11.803593315s ago: executing program 3 (id=824): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x11, [{0xb, 0x3, 0x11}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300", 0xaf}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x403}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10e8ce, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) stat(0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 7.42565404s ago: executing program 3 (id=826): lseek(0xffffffffffffffff, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 7.42503875s ago: executing program 0 (id=827): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x11, [{0xb, 0x3, 0x11}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300", 0xaf}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x403}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10e8ce, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) stat(0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 6.167700349s ago: executing program 5 (id=830): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10100, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) pipe(&(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@nodioread_nolock}, {@errors_remount}, {@user_xattr}, {@noload}, {@resgid}, {@acl}, {@grpid}, {@auto_da_alloc}, {@grpid}]}, 0x1, 0x470, &(0x7f0000000400)="$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") setresuid(0xee00, 0xee00, 0x0) getegid() socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7d, 0xffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xd, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0x6}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x80100) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 5.149543414s ago: executing program 0 (id=833): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f00000005c0)=0x4, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4004) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e22, 0x10003, 'rr\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d56, 0x12d5c}}, 0x44) 5.081738074s ago: executing program 5 (id=834): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xff7f, r3, 0x10024, 0x1012}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x40008c0) 4.71259606s ago: executing program 0 (id=836): r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002100)=@can_delroute={0x34, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x4, 0x4, 0xfffffffffffffffe, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "37c658519d2086c5"}, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40804) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = getpid() rt_tgsigqueueinfo(r4, 0x0, 0xb, &(0x7f0000000200)={0xa, 0xfffff432, 0x2}) 4.627701632s ago: executing program 5 (id=838): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45a, &(0x7f00000008c0)="$eJzs282PE+UfAPDvzL7w29+CuyK+gS+raCS+7LKAysGDGk08YGKiBz142OwWghQw7JoIIRGMwZMxJt6NR/8FT3oxxpOJV70bEmK4CJ5qpp3ZbUtbtqXdIv18koHnmZd9vt/OPO0z87QBjKy57J8kYntE/B4RM7Vq4w5ztf+uXT2/fP3q+eUkKpW3/0qq+/199fxysWtx3HRe2ZdGpJ8lsadFu6tnz51YKpdLZ/L6wtrJDxdWz5577vjJpWOlY6VTBw4fPnRw8cUXDjzflzynI81Lb7z31ZtHvmjIvymPPpnrtPHJSqXPzQ3XjrpyMj7EQOjKWERkp2ui2v9nYiw2Tt5MvP7pUIMDBqpSqVSm22++UAHuYEk01nV5GBXFB312/1sszYOAlwc3/Bi6K6/UboCyvK/lS23L+PoTg4mm+9t+mouIdy/88022xGCeQwAANPghG/88m412msd/adxXt99d+dzQbETcHRE7I+KeOBW7IuLeiOq+90fEA1223zxJcuP4J73cU2KblI3/XsrnthrHf8XoL2bH8tqOav4TydHj5dL+2mvyfj6MLi12aOPH1377st22+vFftmTtF2PBPI7L49saj1lZWlu6lZzrXbkYsXu8Vf7J+kxAEhEPRsTuHts4/vR3D7XbdvP8O+jDPFPl24inauf/QjTlX0g6z08u/C/Kpf0LxVVxo19+vfRWu/ZvKf8+yM7//1te/+v5zyb187Wr3bdx6Y/P297T9Hr9TybvVMuT+bqPl9bWzixGTCZHakHXrz+wcWxRL/bP8t+3t3X/3xkbr8SeiMgu4ocj4pGIeDSP/bGIeDwi9nbI/+dXn/iged3UpvMfrCz/la7O/0ZhMprXtC6Mnfjp+4ZGZzeKef7XO5//Q9XSvnzNZt7/NhNXb1czAAAA/PekEbE9knR+vZym8/O17/DvikjLp1fXnjl6+qNTK7XfCMzGRFo86Zqpex66mN/W1+oXI6L21YJi+8H8ufHXY1PV+vzy6fLKsJOHETfdpv9nlT/Hhh0dMHB+rwWjq6v+nwwuDmDr+fyH0dVd/982sDiArTbRqv9PDSMSYOu1+vz/ZAhxAFuvqf+b9oMR4vkfjC79H0aX/g8jaXUqbv4j+Y6F4i/1ePgdW4iJ2yKM3grjmzjv6e0RqsJgCsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EtDizw==") process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2e3, &(0x7f0000000700)="$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") inotify_init1(0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback, [@routing={0x2b, 0x0, 0x1, 0xf}], "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"}}}}}}, 0xffd) fcntl$notify(0xffffffffffffffff, 0x402, 0x1) rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147041, 0x38) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.551968833s ago: executing program 0 (id=839): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64f42, 0x22) pwritev2(r2, &(0x7f0000000a80)=[{&(0x7f0000001940)='.', 0x1}], 0x1, 0x9c00, 0x0, 0xcccc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={r7, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x81, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004084) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x4a, 0x0, 0x0) 4.548321252s ago: executing program 1 (id=840): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fe08000007"], 0x50) timer_create(0xffffffea, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x11, [{0xb, 0x3, 0x11}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300", 0xaf}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x4000}], 0x1) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x403}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10e8ce, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) stat(0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 4.370354885s ago: executing program 0 (id=842): lseek(0xffffffffffffffff, 0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}, {0x0, 0x0, 0x3e0000}], 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00), 0x0, &(0x7f0000000240)=ANY=[], 0x18, 0x200040c0}, 0xa4ff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x2}, &(0x7f00000000c0)=0xa, 0x0, 0x7, 0x7, 0x6, 0x2, 0x4, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x7}, 0x0, 0x0, 0xf, 0xfffffffffffffff7, 0x10001, 0x0, 0x6f, 0xffffffff}}], 0xb0, 0x8004}, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) shmdt(r4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 3.999113681s ago: executing program 2 (id=843): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a00850, &(0x7f0000000640)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@barrier}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@acl}, {@jqfmt_vfsv0}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x59b, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x90, 0x200, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600ff8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x114, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x27d0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) 3.701159295s ago: executing program 2 (id=844): syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000d00)={0xa, 0xce1c, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001800)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80111, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xb2}, 0x106200, 0x10004, 0x30da, 0x5, 0x9, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) listen(0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7b5d051a47465618fe24ce2a25419cbd2d"}]}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x118}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x2400c890) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.663280756s ago: executing program 1 (id=845): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3644, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10100, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff2, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x401}, @TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) pipe(&(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@nodioread_nolock}, {@errors_remount}, {@user_xattr}, {@noload}, {@resgid}, {@acl}, {@grpid}, {@auto_da_alloc}, {@grpid}]}, 0x1, 0x470, &(0x7f0000000400)="$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") setresuid(0xee00, 0xee00, 0x0) getegid() socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7d, 0xffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0xd, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0x6}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x80100) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 3.164122793s ago: executing program 5 (id=846): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x86b, 0x2, 0x1, 'queue1\x00', 0x7}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x20, 0xffffff}, 0x3, {0x1, 0xfc}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x400000000010, 0x3, 0x20259040) r2 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) r3 = socket(0x1e, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000004c0), 0x0) r4 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x20, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/168, 0xa8}, 0xb}, {{0x0, 0x0, &(0x7f0000006840)}, 0x2a0}], 0x2, 0x2143, 0x0) sendmsg$tipc(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4800) r5 = io_uring_setup(0x2be0, &(0x7f0000000000)={0x0, 0x6503, 0x10, 0x3, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r6) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0xff09, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0) close(r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0xf807, 0x8, 0x81, 0x3, {{0x13, 0x4, 0x3, 0x3, 0x4c, 0x64, 0x0, 0x53, 0x29, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x11, 0xffffffffffffffff, [{0x0, 0x9, "6bb1263b047555"}, {0x2, 0x2}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xe6}, @end, @timestamp_addr={0x44, 0x4, 0x49, 0x1, 0x9}, @timestamp_prespec={0x44, 0x14, 0xa0, 0x3, 0x8, [{@local, 0x4}, {@empty, 0x9}]}, @generic={0x83, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r8, 0x29, 0x8, 0x6, 0x10, 0x36, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x40, 0x1, 0x800002}}) setsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 3.102031954s ago: executing program 2 (id=847): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1807000000000000000000b708000000020000b708000009000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000c6a90971fd76edbbfcc11a231bdbc2eca6c4f4b26800000000000000000000deff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x6, 0x5, 0x61, @empty, @private2, 0x10, 0x7800, 0x2, 0x71d}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'gre0\x00', r3, 0x8000, 0x40, 0x1, 0x7, {{0x1a, 0x4, 0x0, 0xe, 0x68, 0x66, 0x0, 0x42, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_prespec={0x44, 0x54, 0xd8, 0x3, 0x6, [{@multicast1, 0x3}, {@local}, {@private=0xa010102, 0x7ff}, {@local, 0x8000}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@private=0xa010100, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ea}, {@private=0xa010101, 0x80}, {@local, 0x80}]}]}}}}}) io_cancel(0x0, 0x0, 0x0) r6 = socket(0x1, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20000800) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18080002000000000000f1658d3a5900004a00000018df6ad3a783b1cb0508e104001a00", @ANYRES32=r7, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x91, &(0x7f0000000100)=""/145, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.744092259s ago: executing program 2 (id=848): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) openat(0xffffffffffffffff, 0x0, 0x802, 0xee) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) 2.737016809s ago: executing program 1 (id=849): socket$nl_route(0x10, 0x3, 0x0) setpriority(0x3, 0x0, 0x4004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000ec0)='attr/current\x00') openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_io_uring_setup(0x5aea, &(0x7f0000000200)={0x0, 0xcfca, 0x800, 0x8000, 0x2c1}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000)) r1 = eventfd2(0x3c75, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) unshare(0x2a020600) r2 = epoll_create(0x3) r3 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x10000001}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001b000000000006001c000000000008"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x28184, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) r6 = getpid() r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x25, &(0x7f00000004c0)={0x0, 0x0, 0xf}) 2.68427501s ago: executing program 5 (id=850): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45a, &(0x7f00000008c0)="$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") rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147041, 0x38) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.496493903s ago: executing program 2 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000380)) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001e00218cb192dd0222"], 0x14}}, 0x4000040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) open(&(0x7f0000000000)='.\x00', 0x0, 0x33) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2.495818533s ago: executing program 1 (id=852): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'vcan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x9, 0xf9, 0x5, 0x2, 0x6, 0x2, 0xba, 0x2, 0x4f, [0x6, 0x6, 0x9, 0xfffffff2, 0xf119, 0xffffffff, 0x0, 0x2c9df12a]}}) (fail_nth: 4) 2.179911808s ago: executing program 1 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000314010000010000000000000900026977001400330073797a6b616c6c6572300000000000000000000000000000000000000000187f0384bb0da29015e459e609328c919c94c17f9c597a519bf43c67043e7d7d73a8e7595097ab490ad2f49c11ba6e6395cf3a159bfec8ba99bb6e66fefd8f0d77bacc79027bcb62423411d71d3f172d9e534735ce"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000140)={0x0, @aes256, 0x0, @desc1}) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x914, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x52ef, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x800080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1.516999647s ago: executing program 2 (id=854): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x7fff, &(0x7f0000000000)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0xf, &(0x7f0000000040)=0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x305b, 0x6, &(0x7f0000000080)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f00000000c0)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x5, &(0x7f0000000100)=0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xf0, &(0x7f0000000140)) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x4, &(0x7f0000000180)=0x1) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7f, 0x8, &(0x7f00000001c0)=0x1) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) splice(r0, &(0x7f0000000280)=0x6, r1, &(0x7f0000000300), 0xb, 0x8) ftruncate(r1, 0x422d) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x70441041}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x37, 0x3, "1133ba2d091ee72576715067247de24e964c699ba614bf4c1e51dd701772db97def1376d1efbb576660cecfb1f748406b4e57f"}]}, @TIPC_NLA_BEARER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000000500)) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x248402, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000640)={0x0, @empty, @multicast1}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2040080) (async) personality(0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f00000007c0)='cgroup.stat\x00', 0x0, 0x0) fcntl$setflags(r5, 0x2, 0x1) (async) r6 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000800)=@nbd={'/dev/nbd', 0x0}, 0xee00, &(0x7f0000000840)={0x5, 0xa5, 0x99, 0x10000, 0xfffffffffffffffa, 0x7fffffff, 0x6, 0x1, 0x401}) (async, rerun: 32) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x9}, @var={0x10, 0x0, 0x0, 0xe, 0x1}, @enum={0x10, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x80}, {0x2, 0x2}, {0xb, 0x5}, {0x6, 0x80}, {0x1, 0x8}, {0x10, 0xdea}]}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0x6, [{0x4, 0x8, 0x7}, {0x9, 0xcba00000, 0x7fffffff}, {0x1, 0xc6c0, 0x8887}]}]}, {0x0, [0x2e, 0x30, 0x30]}}, &(0x7f0000000b80)=""/4096, 0xa9, 0x1000, 0x0, 0x6}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x12, 0x25, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x783d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='syzkaller\x00', 0x9e4, 0x7d, &(0x7f0000000a40)=""/125, 0x41000, 0x7a, '\x00', 0x0, @cgroup_sock_addr=0xe, r7, 0x8, &(0x7f0000001bc0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x2, 0x5, 0x8, 0x2}, 0x10, r8, r5, 0x4, &(0x7f0000001c80)=[r1, r1, r5, r5, r5], &(0x7f0000001cc0)=[{0x4, 0x3, 0x8}, {0x4, 0x2, 0xa, 0xc}, {0x0, 0x5, 0xc, 0x4}, {0x2, 0x3, 0x0, 0x1}], 0x10, 0x7}, 0x94) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffc, 0x2, &(0x7f0000001dc0)=0x1) socket$nl_route(0x10, 0x3, 0x0) 1.264192961s ago: executing program 5 (id=855): pipe(&(0x7f0000000080)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4120, 0x1018}], 0x1, 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000001c0)={0x206, 0x1000, 0x7, 0x0, 0x4002, 0x4}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000040)={0x224b, &(0x7f0000000140)=[{0x6, 0x8, 0xf7, 0x5}]}) syz_usb_connect$uac3(0x5, 0xfa, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x1, 0x18, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0x43}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x28, 0x6}, [@power_domain={0xb, 0x24, 0x10, 0xd, 0x1000, 0x7, 0x6, "f46b"}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x307, 0x3, 0x3, 0x6, 0xcbd, 0x2, 0x3ff, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x34, 0x5, 0x1}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x95, 0x3, 0x7, 0x1, "260f038c3b7552"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0x7, 0x5, "67803b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0xe7, 0x9, "9233ec"}, @as_header={0x17, 0x24, 0x1, 0x6, 0x1, 0xfb09, 0x3, 0x8b, 0x4, 0xa, 0xa}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x1, 0xff, "bf1c", "5e0661"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0xcc, 0x4, {0xa, 0x25, 0x25, 0x6, 0x9, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x9, 0x2, 0x3, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0xf, 0x2, {0xa, 0x25, 0x25, 0x3, 0x3, 0x7fff}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x9, 0x9, 0x5, 0x20, 0x2}, 0x2f, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f2f0006071002007d03000a1003020a000302eaff06100202e504000c100a7ea0000000000f000203100b03100b66e65fb7d59346c3664a8b6633ddfe68c18e12e013fd08ca358ffc088e617008000000d5d76754738ea527143c41c88e340573d12ddd9a93f7037dd766da4392943c1614082529237c1d010f975cb888d27ca0d5341fd1000000"], 0x5, [{0x45, &(0x7f0000000540)=@string={0x45, 0x3, "0255b262969d78633625098574ae16f7cd8c7a786750c767a446234a130e434bf88dca542fbd5a2b6c95f6f84e3c2adc3bd2de53c87cea00a14499f5b7dffb12895b8d"}}, {0xbf, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/464]}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x83, &(0x7f0000000700)=@string={0x83, 0x3, "55dece6421382107dd99e7e0fc142e4fd13731b79c8ba884b2a7b2e33003be81b1bede40ac476a672f1a1d16de4c205ccb80e5513b3f77f99e178cff32ecfae0b6cc2a6a28f8dabfe2eccc7e5d5e5fadf0ddf93d877bc17e79b515ba8341350b00ac92882e30b11506f0e6478cd3ea67a71cae0014096ca1314dfde3da2f608839"}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c0005000100060000002400078008"], 0x6c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 1 (id=856): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) kernel console output (not intermixed with test programs): l. Quota mode: writeback. [ 323.896386][ T6523] loop2: detected capacity change from 0 to 512 [ 323.928529][ T6499] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.134407][ T6523] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.655: corrupted inode contents [ 324.204813][ T6523] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.209124][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 324.224784][ C0] EXT4-fs (loop2): initial error at time 1782480698: ext4_do_update_inode:5742: inode 16 [ 324.234681][ C0] EXT4-fs (loop2): last error at time 1782480698: ext4_do_update_inode:5742: inode 16 [ 324.260194][ T6523] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.655: mark_inode_dirty error [ 324.322310][ T6523] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 324.325858][ T6529] loop5: detected capacity change from 0 to 512 [ 324.343645][ T6523] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.655: corrupted inode contents [ 324.411990][ T6529] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.656: corrupted inode contents [ 324.417210][ T6523] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.655: mark_inode_dirty error [ 324.514839][ T6529] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.656: mark_inode_dirty error [ 324.526240][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 324.526268][ C0] EXT4-fs (loop5): initial error at time 1782480698: ext4_do_update_inode:5742: inode 16 [ 324.526308][ C0] EXT4-fs (loop5): last error at time 1782480698: ext4_do_update_inode:5742: inode 16 [ 324.541337][ T6523] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.655: corrupted inode contents [ 324.576338][ T6529] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.656: corrupted inode contents [ 324.623513][ T6529] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.656: mark_inode_dirty error [ 324.647998][ T6523] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 324.664976][ T6535] loop1: detected capacity change from 0 to 128 [ 324.673542][ T6523] loop2: lost filesystem error report for type 5 error -117 [ 324.674702][ T6523] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.655: corrupted inode contents [ 324.706300][ T6529] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.656: corrupted inode contents [ 324.730763][ T6529] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 324.753783][ T6523] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.655: mark_inode_dirty error [ 324.776272][ T6529] loop5: lost filesystem error report for type 5 error -117 [ 324.776587][ T6529] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.656: corrupted inode contents [ 324.862080][ T6529] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.656: mark_inode_dirty error [ 324.878550][ T6523] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 324.909811][ T6523] loop2: lost filesystem error report for type 5 error -117 [ 324.936808][ T6523] EXT4-fs (loop2): 1 truncate cleaned up [ 324.952313][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 324.969262][ T6529] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 324.979624][ T49] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 325.014767][ T49] loop2: lost filesystem error report for type 5 error -117 [ 325.038944][ T6529] loop5: lost filesystem error report for type 5 error -117 [ 325.074898][ T6523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.078755][ T6523] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.133705][ T6529] EXT4-fs (loop5): 1 truncate cleaned up [ 325.134205][ T6529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.134283][ T6529] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.151513][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 325.151546][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 325.690407][ T6544] loop1: detected capacity change from 0 to 512 [ 325.742380][ T6544] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.660: Unrecognised inode hash code 255 [ 325.755616][ T6544] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.660: Corrupt directory, running e2fsck is recommended [ 325.802052][ T6544] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 325.811827][ T6544] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.660: corrupted in-inode xattr: e_name out of bounds [ 325.829785][ T6544] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.660: couldn't read orphan inode 15 (err -117) [ 325.842365][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 325.842426][ C1] EXT4-fs (loop1): initial error at time 1782480700: ext4_iget_extra_inode:5180: inode 15 [ 325.842556][ C1] EXT4-fs (loop1): last error at time 1782480700: ext4_iget_extra_inode:5180: inode 15 [ 325.872452][ T6544] loop1: lost filesystem error report for type 5 error -117 [ 325.881667][ T6544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.940756][ T28] audit: type=1326 audit(1782480700.400:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6546 comm="syz.3.661" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5c4ce59 code=0x0 [ 325.967864][ T6544] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.660: Unrecognised inode hash code 255 [ 326.000559][ T6544] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.660: Corrupt directory, running e2fsck is recommended [ 326.085364][ T6544] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.660: Unrecognised inode hash code 255 [ 326.122177][ T6544] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.660: Corrupt directory, running e2fsck is recommended [ 326.155744][ T6544] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.660: path /139/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 326.206695][ T6544] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.660: path /139/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 326.302261][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.386914][ T6551] loop1: detected capacity change from 0 to 1024 [ 326.400950][ T6551] ext4: Unknown parameter 'nouser_xattr' [ 326.514498][ T28] audit: type=1400 audit(1782480700.970:451): avc: denied { create } for pid=6550 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.594278][ T6551] netlink: 6 bytes leftover after parsing attributes in process `syz.1.662'. [ 326.677420][ T6551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.905556][ T28] audit: type=1400 audit(1782480701.360:452): avc: denied { bind } for pid=6556 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.105166][ T6559] loop3: detected capacity change from 0 to 764 [ 327.120927][ T6559] ======================================================= [ 327.120927][ T6559] WARNING: The mand mount option has been deprecated and [ 327.120927][ T6559] and is ignored by this kernel. Remove the mand [ 327.120927][ T6559] option from the mount to silence this warning. [ 327.120927][ T6559] ======================================================= [ 327.912143][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.019876][ T28] audit: type=1400 audit(1782480701.650:453): avc: denied { mount } for pid=6553 comm="syz.3.663" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 328.042150][ T28] audit: type=1400 audit(1782480701.900:454): avc: denied { name_bind } for pid=6553 comm="syz.3.663" src=24100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 328.164806][ T28] audit: type=1400 audit(1782480701.900:455): avc: denied { node_bind } for pid=6553 comm="syz.3.663" saddr=172.20.20.187 src=24100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 328.698406][ T6558] team0: Port device syz_tun added [ 328.715489][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 328.715503][ T28] audit: type=1400 audit(1782480703.160:461): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 328.767460][ T6563] team0: Port device syz_tun removed [ 328.820595][ T6563] bridge_slave_0: left allmulticast mode [ 328.846722][ T6563] bridge_slave_0: left promiscuous mode [ 328.867646][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.883707][ T6572] loop0: detected capacity change from 0 to 512 [ 328.893944][ T6563] bridge_slave_1: left allmulticast mode [ 328.901357][ T6563] bridge_slave_1: left promiscuous mode [ 328.919705][ T6572] ------------[ cut here ]------------ [ 328.925249][ T6572] EA inode 11 i_nlink=0 [ 328.925276][ T6572] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.0.667/6572 [ 328.938803][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.940185][ T6572] Modules linked in: [ 328.940202][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.0.667 Not tainted syzkaller #0 PREEMPT(lazy) [ 328.960613][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.970778][ T6572] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 328.977445][ T6572] Code: 36 d2 96 ff 49 8d 7e 40 4c 8d 2d 0b 8d 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 1a d9 03 90 90 90 90 90 90 90 [ 328.997174][ T6572] RSP: 0018:ffffc9000cda77f8 EFLAGS: 00010246 [ 329.003299][ T6572] RAX: ffff888103e672b0 RBX: ffff888105d0eb10 RCX: ffffffff81c2a506 [ 329.011363][ T6572] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3200 [ 329.019516][ T6572] RBP: 000000000000000b R08: 0001888105d0eac3 R09: 0000000000000000 [ 329.027530][ T6572] R10: ffffc9000cda7728 R11: 0001c9000cda7728 R12: ffff888105d0eac0 [ 329.035628][ T6572] R13: ffffffff871d3200 R14: ffff888105d0ea78 R15: 0000000000000001 [ 329.043711][ T6572] FS: 00007f7b24b9e6c0(0000) GS:ffff8882ae9d2000(0000) knlGS:0000000000000000 [ 329.052724][ T6572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.059349][ T6572] CR2: 0000200000d68030 CR3: 000000011996a000 CR4: 00000000003506f0 [ 329.067454][ T6572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.075491][ T6572] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 329.083580][ T6572] Call Trace: [ 329.086893][ T6572] [ 329.089948][ T6572] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 329.095973][ T6572] ext4_xattr_delete_inode+0x6b5/0x790 [ 329.101510][ T6572] ext4_evict_inode+0xb18/0xdf0 [ 329.106399][ T6572] ? __pfx_ext4_evict_inode+0x10/0x10 [ 329.111844][ T6572] evict+0x2a5/0x510 [ 329.115873][ T6572] iput+0x430/0x5a0 [ 329.119838][ T6572] ext4_process_orphan+0x1a4/0x1c0 [ 329.125077][ T6572] ext4_orphan_cleanup+0x6a6/0xa10 [ 329.130377][ T6572] ? ext4_register_li_request+0x403/0x440 [ 329.136191][ T6572] ext4_fill_super+0x33ab/0x3760 [ 329.141266][ T6572] ? set_blocksize+0x14c/0x270 [ 329.146096][ T6572] ? __pfx_ext4_fill_super+0x10/0x10 [ 329.151473][ T6572] get_tree_bdev_flags+0x291/0x300 [ 329.156619][ T6572] ? __pfx_ext4_fill_super+0x10/0x10 [ 329.162027][ T6572] get_tree_bdev+0x1f/0x30 [ 329.166477][ T6572] ext4_get_tree+0x1c/0x30 [ 329.170952][ T6572] vfs_get_tree+0x57/0x1d0 [ 329.175434][ T6572] do_new_mount+0x288/0x8d0 [ 329.180000][ T6572] path_mount+0x4ad/0xb90 [ 329.184378][ T6572] __se_sys_mount+0x28c/0x2e0 [ 329.189183][ T6572] __x64_sys_mount+0x67/0x80 [ 329.193850][ T6572] x64_sys_call+0x2d61/0x3020 [ 329.198571][ T6572] do_syscall_64+0x136/0x3c0 [ 329.203249][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.209303][ T6572] RIP: 0033:0x7f7b2616e0ca [ 329.213758][ T6572] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.233684][ T6572] RSP: 002b:00007f7b24b9de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.242180][ T6572] RAX: ffffffffffffffda RBX: 00007f7b24b9dee0 RCX: 00007f7b2616e0ca [ 329.250333][ T6572] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007f7b24b9dea0 [ 329.258338][ T6572] RBP: 0000200000000180 R08: 00007f7b24b9dee0 R09: 0000000000800700 [ 329.266472][ T6572] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 329.274506][ T6572] R13: 00007f7b24b9dea0 R14: 0000000000000470 R15: 000000000000002c [ 329.282556][ T6572] [ 329.285605][ T6572] ---[ end trace 0000000000000000 ]--- [ 329.302015][ T6563] bond0: (slave 1@ÿ): Releasing backup interface [ 329.320590][ T6572] EXT4-fs (loop0): 1 orphan inode deleted [ 329.327128][ T6572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.339980][ T6563] bond0: (slave bond_slave_1): Releasing backup interface [ 329.365030][ T6563] team0: Port device team_slave_0 removed [ 329.411021][ T6577] sctp: [Deprecated]: syz.3.668 (pid 6577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.411021][ T6577] Use struct sctp_sack_info instead [ 329.430035][ T6563] team0: Port device team_slave_1 removed [ 329.451648][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.466379][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.494871][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.516512][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.543688][ T6563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.664008][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.678948][ T28] audit: type=1400 audit(1782480704.130:462): avc: denied { write } for pid=6582 comm="syz.1.670" path="socket:[13481]" dev="sockfs" ino=13481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 329.705107][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.751975][ T28] audit: type=1400 audit(1782480704.210:463): avc: denied { setopt } for pid=6582 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 329.783694][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.809242][ T28] audit: type=1400 audit(1782480704.260:464): avc: denied { recv } for pid=6586 comm="syz.5.672" saddr=10.128.0.163 src=47900 daddr=10.128.1.102 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.922336][ T28] audit: type=1400 audit(1782480704.380:465): avc: denied { read } for pid=6592 comm="syz.2.673" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 329.969822][ T28] audit: type=1400 audit(1782480704.380:466): avc: denied { open } for pid=6592 comm="syz.2.673" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 330.040741][ T28] audit: type=1400 audit(1782480704.440:467): avc: denied { create } for pid=6596 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.096156][ T6594] sctp: [Deprecated]: syz.5.672 (pid 6594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.096156][ T6594] Use struct sctp_sack_info instead [ 330.137233][ T28] audit: type=1400 audit(1782480704.460:468): avc: denied { getopt } for pid=6596 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.199085][ T6597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6597 comm=syz.3.674 [ 330.209431][ T28] audit: type=1400 audit(1782480704.540:469): avc: denied { create } for pid=6596 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 330.231000][ T28] audit: type=1400 audit(1782480704.540:470): avc: denied { ioctl } for pid=6596 comm="syz.3.674" path="socket:[14353]" dev="sockfs" ino=14353 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 330.406118][ T6605] netlink: 56 bytes leftover after parsing attributes in process `syz.2.676'. [ 330.844233][ T6609] netlink: 16191 bytes leftover after parsing attributes in process `syz.3.678'. [ 331.111547][ T6611] loop5: detected capacity change from 0 to 512 [ 331.177407][ T6611] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.677: Unrecognised inode hash code 255 [ 331.227475][ T6611] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 331.276140][ T6611] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 331.289152][ T6611] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.677: corrupted in-inode xattr: e_name out of bounds [ 331.303886][ T6611] fserror_report: 13 callbacks suppressed [ 331.303906][ T6611] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.312758][ T6611] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.677: couldn't read orphan inode 15 (err -117) [ 331.322587][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 331.322610][ C1] EXT4-fs (loop5): initial error at time 1782480705: ext4_iget_extra_inode:5180: inode 15 [ 331.322646][ C1] EXT4-fs (loop5): last error at time 1782480705: ext4_iget_extra_inode:5180: inode 15 [ 331.403664][ T6618] loop0: detected capacity change from 0 to 512 [ 331.410226][ T6611] loop5: lost filesystem error report for type 5 error -117 [ 331.410908][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.436425][ T6618] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.671: corrupted in-inode xattr: invalid ea_ino [ 331.482856][ T6618] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.483046][ T6618] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.671: couldn't read orphan inode 15 (err -117) [ 331.492346][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 331.492376][ C0] EXT4-fs (loop0): initial error at time 1782480705: ext4_iget_extra_inode:5180: inode 15 [ 331.492401][ C0] EXT4-fs (loop0): last error at time 1782480705: ext4_iget_extra_inode:5180: inode 15 [ 331.544562][ T6619] loop1: detected capacity change from 0 to 512 [ 331.634614][ T6618] loop0: lost filesystem error report for type 5 error -117 [ 331.635375][ T6618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.672751][ T6619] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.675: corrupted inode contents [ 331.700734][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 331.700960][ T6619] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.675: mark_inode_dirty error [ 331.710377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 331.710407][ C0] EXT4-fs (loop1): initial error at time 1782480706: ext4_do_update_inode:5742: inode 16 [ 331.710447][ C0] EXT4-fs (loop1): last error at time 1782480706: ext4_do_update_inode:5742: inode 16 [ 331.815576][ T6610] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.677: Unrecognised inode hash code 255 [ 331.838493][ T6585] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.671: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 331.864376][ T6610] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 331.931687][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.952412][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 331.952948][ T6619] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.675: corrupted inode contents [ 331.992347][ T6610] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.677: Unrecognised inode hash code 255 [ 332.016224][ T6610] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.677: Corrupt directory, running e2fsck is recommended [ 332.045925][ T6610] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 4: comm syz.5.677: path /112/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 332.067027][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 332.068803][ T6619] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.675: mark_inode_dirty error [ 332.130511][ T6610] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 8: comm syz.5.677: path /112/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 332.179874][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 332.183726][ T6619] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.675: corrupted inode contents [ 332.232559][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 332.236507][ T6619] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 332.254468][ T6619] loop1: lost filesystem error report for type 5 error -117 [ 332.258501][ T6619] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.675: corrupted inode contents [ 332.277695][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 332.280125][ T6619] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.675: mark_inode_dirty error [ 332.303979][ T6619] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 332.305403][ T6619] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 332.343187][ T6629] sctp: [Deprecated]: syz.3.682 (pid 6629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.343187][ T6629] Use struct sctp_sack_info instead [ 332.387687][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.420316][ T6619] loop1: lost filesystem error report for type 5 error -117 [ 332.420858][ T6619] EXT4-fs (loop1): 1 truncate cleaned up [ 332.464597][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 332.476015][ T6619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.488584][ T6619] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.597121][ T6642] loop5: detected capacity change from 0 to 512 [ 332.621388][ T6642] EXT4-fs: dax option not supported [ 332.661343][ T6640] loop3: detected capacity change from 0 to 8192 [ 332.689863][ T6640] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.812716][ T6645] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 332.923930][ T6641] loop2: detected capacity change from 0 to 512 [ 332.974806][ T6650] mmap: syz.0.689 (6650) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.086075][ T6658] loop3: detected capacity change from 0 to 512 [ 333.105916][ T6658] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.690: Unrecognised inode hash code 255 [ 333.129848][ T6641] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.683: corrupted inode contents [ 333.144157][ T6658] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.690: Corrupt directory, running e2fsck is recommended [ 333.182580][ T6641] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 333.189066][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 333.204838][ C0] EXT4-fs (loop2): initial error at time 1782480707: ext4_do_update_inode:5742: inode 16 [ 333.214825][ C0] EXT4-fs (loop2): last error at time 1782480707: ext4_do_update_inode:5742: inode 16 [ 333.225237][ T6641] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.683: mark_inode_dirty error [ 333.246989][ T6658] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 333.266985][ T6658] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.690: corrupted in-inode xattr: e_name out of bounds [ 333.290912][ T6658] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.690: couldn't read orphan inode 15 (err -117) [ 333.291723][ T6641] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.683: corrupted inode contents [ 333.309091][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 333.321800][ C1] EXT4-fs (loop3): initial error at time 1782480707: ext4_iget_extra_inode:5180: inode 15 [ 333.331839][ C1] EXT4-fs (loop3): last error at time 1782480707: ext4_iget_extra_inode:5180: inode 15 [ 333.352600][ T6641] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.683: mark_inode_dirty error [ 333.365903][ T6658] loop3: lost filesystem error report for type 5 error -117 [ 333.366762][ T6658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.388953][ T6641] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.683: corrupted inode contents [ 333.413622][ T6641] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 333.434868][ T6641] loop2: lost filesystem error report for type 5 error -117 [ 333.439370][ T6641] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.683: corrupted inode contents [ 333.485526][ T6641] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.683: mark_inode_dirty error [ 333.513354][ T6641] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 333.541287][ T6641] loop2: lost filesystem error report for type 5 error -117 [ 333.557632][ T6641] EXT4-fs (loop2): 1 truncate cleaned up [ 333.580860][ T5836] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 333.618183][ T5836] loop2: lost filesystem error report for type 5 error -117 [ 333.627475][ T6656] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.690: Unrecognised inode hash code 255 [ 333.629265][ T6641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.650512][ T6656] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.690: Corrupt directory, running e2fsck is recommended [ 333.671286][ T6641] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.854121][ T6656] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.690: Unrecognised inode hash code 255 [ 333.888284][ T6656] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.690: Corrupt directory, running e2fsck is recommended [ 333.942485][ T6656] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.690: path /151/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 333.979832][ T6656] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.690: path /151/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 334.188300][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.205563][ T6666] loop5: detected capacity change from 0 to 512 [ 334.286933][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.693'. [ 334.311517][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.692: corrupted inode contents [ 334.329662][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.331636][ T6666] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.692: mark_inode_dirty error [ 334.338950][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 334.339530][ C0] EXT4-fs (loop5): initial error at time 1782480708: ext4_do_update_inode:5742: inode 16 [ 334.339820][ C0] EXT4-fs (loop5): last error at time 1782480708: ext4_do_update_inode:5742: inode 16 [ 334.393748][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.692: corrupted inode contents [ 334.401343][ T6671] netlink: 112 bytes leftover after parsing attributes in process `syz.2.693'. [ 334.417224][ T6666] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.692: mark_inode_dirty error [ 334.433451][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.692: corrupted inode contents [ 334.449831][ T6666] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 334.459634][ T6666] loop5: lost filesystem error report for type 5 error -117 [ 334.461979][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 334.462358][ T6666] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.692: corrupted inode contents [ 334.493329][ T6666] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.692: mark_inode_dirty error [ 334.504888][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 334.504923][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 334.532133][ T6666] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 334.544454][ T6666] loop5: lost filesystem error report for type 5 error -117 [ 334.550614][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 334.551652][ T6666] EXT4-fs (loop5): 1 truncate cleaned up [ 334.585945][ T6666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.602052][ T6666] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.606813][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 334.606840][ T28] audit: type=1400 audit(1782480709.060:481): avc: denied { ioctl } for pid=6667 comm="syz.2.693" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 334.614607][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 334.674021][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 334.732829][ T6680] loop2: detected capacity change from 0 to 256 [ 334.747156][ T6680] FAT-fs (loop2): Directory bread(block 64) failed [ 334.753958][ T6680] FAT-fs (loop2): Directory bread(block 65) failed [ 334.762372][ T6680] FAT-fs (loop2): Directory bread(block 66) failed [ 334.768957][ T6680] FAT-fs (loop2): Directory bread(block 67) failed [ 334.776732][ T6680] FAT-fs (loop2): Directory bread(block 68) failed [ 334.783928][ T6680] FAT-fs (loop2): Directory bread(block 69) failed [ 334.790619][ T6680] FAT-fs (loop2): Directory bread(block 70) failed [ 334.797262][ T6680] FAT-fs (loop2): Directory bread(block 71) failed [ 334.852388][ T6680] FAT-fs (loop2): Directory bread(block 72) failed [ 334.860431][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.871234][ T6680] FAT-fs (loop2): Directory bread(block 73) failed [ 334.925348][ T6680] syz.2.697: attempt to access beyond end of device [ 334.925348][ T6680] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 335.027152][ T6693] loop5: detected capacity change from 0 to 2048 [ 335.057132][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'. [ 335.074300][ T6693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.095339][ T6693] EXT4-fs error (device loop5): ext4_find_extent:904: inode #2: comm syz.5.701: inode has invalid extent depth: 8 [ 335.142842][ T6693] EXT4-fs (loop5): Remounting filesystem read-only [ 335.225886][ T6693] syzkaller0: entered promiscuous mode [ 335.250118][ T6693] syzkaller0: entered allmulticast mode [ 335.306467][ T28] audit: type=1400 audit(1782480709.760:482): avc: denied { ioctl } for pid=6692 comm="syz.5.701" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.360906][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 335.474541][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.216812][ T6722] loop3: detected capacity change from 0 to 512 [ 336.228811][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.260724][ T6722] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.707: Unrecognised inode hash code 255 [ 336.287374][ T6722] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.707: Corrupt directory, running e2fsck is recommended [ 336.302827][ T6722] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 336.311404][ T6722] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.707: corrupted in-inode xattr: e_name out of bounds [ 336.325603][ T6722] fserror_report: 14 callbacks suppressed [ 336.325621][ T6722] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.339068][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 336.354712][ C0] EXT4-fs (loop3): initial error at time 1782480710: ext4_iget_extra_inode:5180: inode 15 [ 336.364708][ C0] EXT4-fs (loop3): last error at time 1782480710: ext4_iget_extra_inode:5180: inode 15 [ 336.402037][ T6722] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.707: couldn't read orphan inode 15 (err -117) [ 336.437889][ T6722] loop3: lost filesystem error report for type 5 error -117 [ 336.438460][ T6722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.478596][ T6731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6731 comm=syz.5.710 [ 336.719706][ T6732] loop1: detected capacity change from 0 to 512 [ 336.782161][ T6731] loop5: detected capacity change from 0 to 512 [ 336.904071][ T6732] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.708: corrupted inode contents [ 336.917787][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 336.919046][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 336.934844][ C1] EXT4-fs (loop1): initial error at time 1782480711: ext4_do_update_inode:5742: inode 16 [ 336.944797][ C1] EXT4-fs (loop1): last error at time 1782480711: ext4_do_update_inode:5742: inode 16 [ 336.954595][ T6732] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.708: mark_inode_dirty error [ 336.966679][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.387193][ T6737] loop5: detected capacity change from 0 to 512 [ 337.413828][ T6737] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 337.438946][ T6720] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.707: Unrecognised inode hash code 255 [ 337.577891][ T6732] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.708: corrupted inode contents [ 337.590887][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.593082][ T6732] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.708: mark_inode_dirty error [ 337.615712][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.617734][ T6732] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.708: corrupted inode contents [ 337.640451][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.646776][ T6732] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 337.665769][ T6732] loop1: lost filesystem error report for type 5 error -117 [ 337.668380][ T6732] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.708: corrupted inode contents [ 337.688495][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.690362][ T6732] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.708: mark_inode_dirty error [ 337.711388][ T6732] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 337.713118][ T6732] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 337.732258][ T6732] loop1: lost filesystem error report for type 5 error -117 [ 337.740086][ T6732] EXT4-fs (loop1): 1 truncate cleaned up [ 337.766137][ T6732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.780653][ T6732] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.810396][ T6720] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.707: Corrupt directory, running e2fsck is recommended [ 337.831308][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 337.841287][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 337.977729][ T6722] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.707: Unrecognised inode hash code 255 [ 338.068314][ T6722] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.707: Corrupt directory, running e2fsck is recommended [ 338.188345][ T6722] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.707: path /155/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 338.305650][ T6722] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.707: path /155/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 338.444364][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.552751][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.768769][ T6744] loop5: detected capacity change from 0 to 512 [ 338.945873][ T6744] EXT4-fs (loop5): 1 orphan inode deleted [ 338.969269][ T6744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.009449][ T6747] loop1: detected capacity change from 0 to 512 [ 339.076981][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.155423][ T6747] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.714: corrupted inode contents [ 339.168234][ T6747] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 339.171067][ T6747] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.714: mark_inode_dirty error [ 339.181068][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 339.181289][ C1] EXT4-fs (loop1): initial error at time 1782480713: ext4_do_update_inode:5742: inode 16 [ 339.181428][ C1] EXT4-fs (loop1): last error at time 1782480713: ext4_do_update_inode:5742: inode 16 [ 339.223048][ T6747] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 339.368708][ T6747] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.714: corrupted inode contents [ 339.404359][ T6747] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.714: mark_inode_dirty error [ 339.610492][ T6765] xt_ecn: cannot match TCP bits for non-tcp packets [ 339.621260][ T28] audit: type=1400 audit(1782480714.050:483): avc: denied { mounton } for pid=6761 comm="syz.5.718" path="/127/file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.676014][ T6747] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.714: corrupted inode contents [ 339.758423][ T6747] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 339.837701][ T6747] loop1: lost filesystem error report for type 5 error -117 [ 339.844067][ T6747] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.714: corrupted inode contents [ 339.866846][ T6755] loop2: detected capacity change from 0 to 512 [ 340.184953][ T6747] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.714: mark_inode_dirty error [ 340.265306][ T6747] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 340.316468][ T6747] loop1: lost filesystem error report for type 5 error -117 [ 340.322894][ T6747] EXT4-fs (loop1): 1 truncate cleaned up [ 340.350425][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 340.399755][ T49] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 340.422117][ T6747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.449133][ T49] loop1: lost filesystem error report for type 5 error -117 [ 340.475654][ T6747] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.855640][ T6755] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.713: corrupted inode contents [ 341.405939][ T6772] loop3: detected capacity change from 0 to 512 [ 341.515478][ T6772] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.719: corrupted inode contents [ 341.529804][ T6772] fserror_report: 5 callbacks suppressed [ 341.529873][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.537160][ T6772] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.719: mark_inode_dirty error [ 341.546838][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 341.546866][ C0] EXT4-fs (loop3): initial error at time 1782480715: ext4_do_update_inode:5742: inode 16 [ 341.547091][ C0] EXT4-fs (loop3): last error at time 1782480715: ext4_do_update_inode:5742: inode 16 [ 341.551918][ T6755] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.557587][ T6755] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.713: mark_inode_dirty error [ 341.589131][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 341.589155][ C1] EXT4-fs (loop2): initial error at time 1782480716: ext4_do_update_inode:5742: inode 16 [ 341.589190][ C1] EXT4-fs (loop2): last error at time 1782480716: ext4_do_update_inode:5742: inode 16 [ 341.591509][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.678695][ T6772] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.719: corrupted inode contents [ 341.700810][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.702084][ T6772] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.719: mark_inode_dirty error [ 341.724120][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.726076][ T6772] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.719: corrupted inode contents [ 341.747959][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.749122][ T6772] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 341.768033][ T6772] loop3: lost filesystem error report for type 5 error -117 [ 341.769335][ T6772] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.719: corrupted inode contents [ 341.789313][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.792875][ T6772] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.719: mark_inode_dirty error [ 341.814272][ T6772] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.815645][ T6772] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 341.835286][ T6772] loop3: lost filesystem error report for type 5 error -117 [ 341.840858][ T6772] EXT4-fs (loop3): 1 truncate cleaned up [ 341.856147][ T6755] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.857373][ T6755] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.713: corrupted inode contents [ 341.886017][ T134] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 341.914180][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.928970][ T6772] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.060662][ T134] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 342.185279][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.250353][ T6755] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 342.256299][ T6755] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.713: mark_inode_dirty error [ 342.362302][ T6783] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.722'. [ 342.377678][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.463173][ T6755] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.713: corrupted inode contents [ 342.544431][ T6755] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 342.721106][ T6755] loop2: lost filesystem error report for type 5 error -117 [ 342.724089][ T6755] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.713: corrupted inode contents [ 342.779374][ T6755] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.713: mark_inode_dirty error [ 342.792449][ T6755] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 343.190419][ T6795] loop1: detected capacity change from 0 to 512 [ 343.253319][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.319344][ T6795] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.726: corrupted inode contents [ 343.333308][ T6795] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.726: mark_inode_dirty error [ 343.345251][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 343.345283][ C0] EXT4-fs (loop1): initial error at time 1782480717: ext4_do_update_inode:5742: inode 16 [ 343.345363][ C0] EXT4-fs (loop1): last error at time 1782480717: ext4_do_update_inode:5742: inode 16 [ 343.377985][ T6795] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.726: corrupted inode contents [ 343.392215][ T6795] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.726: mark_inode_dirty error [ 343.405646][ T6795] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.726: corrupted inode contents [ 343.419540][ T6795] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 343.428658][ T6795] loop1: lost filesystem error report for type 5 error -117 [ 343.430251][ T6795] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.726: corrupted inode contents [ 343.451757][ T6795] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.726: mark_inode_dirty error [ 343.465618][ T6795] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 343.475281][ T6795] loop1: lost filesystem error report for type 5 error -117 [ 343.483341][ T6795] EXT4-fs (loop1): 1 truncate cleaned up [ 343.507195][ T6795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.523183][ T6795] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.578598][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 343.619944][ T6755] loop2: lost filesystem error report for type 5 error -117 [ 343.631479][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 343.732238][ T6755] EXT4-fs (loop2): 1 truncate cleaned up [ 343.767936][ T36] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 343.798686][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 343.828477][ T6755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.846478][ T36] loop2: lost filesystem error report for type 5 error -117 [ 343.859834][ T6793] loop0: detected capacity change from 0 to 512 [ 343.943557][ T6755] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.019261][ T6793] EXT4-fs (loop0): 1 orphan inode deleted [ 344.066250][ T6793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.169535][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.212680][ T6806] loop0: detected capacity change from 0 to 512 [ 344.247445][ T6806] EXT4-fs: Invalid want_extra_isize 9 [ 344.320686][ T6806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.729'. [ 344.439297][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.684148][ T6809] loop0: detected capacity change from 0 to 512 [ 344.715150][ T6807] loop3: detected capacity change from 0 to 512 [ 344.718357][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.744019][ T6807] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 344.815537][ T6809] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.731: corrupted inode contents [ 344.830707][ T6809] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.731: mark_inode_dirty error [ 344.838526][ T28] audit: type=1400 audit(1782480719.290:484): avc: denied { block_suspend } for pid=6812 comm="syz.1.732" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.842708][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 344.872132][ C1] EXT4-fs (loop0): initial error at time 1782480719: ext4_do_update_inode:5742: inode 16 [ 344.883026][ C1] EXT4-fs (loop0): last error at time 1782480719: ext4_do_update_inode:5742: inode 16 [ 344.897557][ T6809] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.731: corrupted inode contents [ 344.907470][ T6807] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.730: bad orphan inode 131083 [ 344.926170][ T6809] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.731: mark_inode_dirty error [ 344.938544][ T6813] syzkaller0: entered promiscuous mode [ 344.942079][ T6809] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.731: corrupted inode contents [ 344.944469][ T6813] syzkaller0: entered allmulticast mode [ 344.964020][ T6807] loop3: lost filesystem error report for type 5 error -117 [ 344.964768][ T6809] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 344.972729][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 344.972769][ C1] EXT4-fs (loop3): initial error at time 1782480719: ext4_orphan_get:1425 [ 344.973007][ C1] EXT4-fs (loop3): last error at time 1782480719: ext4_orphan_get:1425 [ 345.006790][ T6809] loop0: lost filesystem error report for type 5 error -117 [ 345.014974][ T6809] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.731: corrupted inode contents [ 345.026665][ T6807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.063422][ T6809] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.731: mark_inode_dirty error [ 345.083220][ T6809] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 345.100388][ T6809] loop0: lost filesystem error report for type 5 error -117 [ 345.121333][ T6809] EXT4-fs (loop0): 1 truncate cleaned up [ 345.142161][ T6738] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 345.144090][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.152316][ T6738] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 345.183802][ T6809] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.261713][ T6819] loop1: detected capacity change from 0 to 164 [ 345.303975][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.366293][ T6824] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.3.730: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 345.370713][ T28] audit: type=1400 audit(1782480719.820:485): avc: denied { write } for pid=6804 comm="syz.3.730" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.427517][ T28] audit: type=1400 audit(1782480719.820:486): avc: denied { write } for pid=6804 comm="syz.3.730" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.449585][ T6824] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 345.458585][ T28] audit: type=1400 audit(1782480719.820:487): avc: denied { remove_name } for pid=6804 comm="syz.3.730" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.460557][ T6824] EXT4-fs warning (device loop3): ext4_rename_delete:3739: inode #2: comm syz.3.730: Deleting old file: nlink 4, error=-117 [ 345.481921][ T28] audit: type=1400 audit(1782480719.820:488): avc: denied { rename } for pid=6804 comm="syz.3.730" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.516929][ T28] audit: type=1400 audit(1782480719.870:489): avc: denied { listen } for pid=6823 comm="syz.0.735" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.538535][ T28] audit: type=1400 audit(1782480719.880:490): avc: denied { name_bind } for pid=6823 comm="syz.0.735" src=20067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 345.658785][ T28] audit: type=1400 audit(1782480720.110:491): avc: denied { create } for pid=6830 comm="syz.0.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.721928][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.089855][ T6844] loop0: detected capacity change from 0 to 512 [ 346.182997][ T6844] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 346.195516][ T6844] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 346.207984][ T6844] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.739: Corrupt directory, running e2fsck is recommended [ 346.239161][ T6844] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 346.248510][ T6844] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.739: corrupted in-inode xattr: e_name out of bounds [ 346.267808][ T6844] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.739: couldn't read orphan inode 15 (err -117) [ 346.280375][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 346.280685][ C0] EXT4-fs (loop0): initial error at time 1782480720: ext4_iget_extra_inode:5180: inode 15 [ 346.280928][ C0] EXT4-fs (loop0): last error at time 1782480720: ext4_iget_extra_inode:5180: inode 15 [ 346.321315][ T6844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.819198][ T28] audit: type=1400 audit(1782480721.230:492): avc: denied { allowed } for pid=6846 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 346.954490][ T6836] loop3: detected capacity change from 0 to 512 [ 347.123084][ T6836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.235219][ T6836] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.311822][ T6852] loop1: detected capacity change from 0 to 512 [ 347.354872][ T6852] EXT4-fs (loop1): 1 orphan inode deleted [ 347.387399][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.495010][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.516541][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.729645][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.743166][ T6857] loop3: detected capacity change from 0 to 512 [ 348.034871][ T6859] loop0: detected capacity change from 0 to 1024 [ 348.364189][ T6869] loop1: detected capacity change from 0 to 512 [ 349.084116][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 349.094532][ T6869] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.743: corrupted inode contents [ 349.096907][ T6859] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.122641][ T6869] fserror_report: 19 callbacks suppressed [ 349.122754][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.140501][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 349.159264][ C0] EXT4-fs (loop1): initial error at time 1782480723: ext4_do_update_inode:5742: inode 16 [ 349.169873][ C0] EXT4-fs (loop1): last error at time 1782480723: ext4_do_update_inode:5742: inode 16 [ 349.335487][ T6876] loop3: detected capacity change from 0 to 512 [ 349.368173][ T6869] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.743: mark_inode_dirty error [ 349.380335][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.382294][ T6869] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.743: corrupted inode contents [ 349.404325][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.406437][ T6869] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.743: mark_inode_dirty error [ 349.428254][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.429685][ T6869] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.743: corrupted inode contents [ 349.451384][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.452341][ T6869] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 349.471373][ T6869] fserror_report: 2 callbacks suppressed [ 349.471398][ T6869] loop1: lost filesystem error report for type 5 error -117 [ 349.483159][ T6869] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.743: corrupted inode contents [ 349.503625][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.504837][ T6869] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.743: mark_inode_dirty error [ 349.527813][ T6869] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.528701][ T6869] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 349.547820][ T6869] loop1: lost filesystem error report for type 5 error -117 [ 349.551613][ T6869] EXT4-fs (loop1): 1 truncate cleaned up [ 349.577573][ T6869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.591763][ T6869] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.709894][ T6876] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.746: corrupted inode contents [ 349.722722][ T6876] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.723724][ T6876] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.746: mark_inode_dirty error [ 349.733405][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 349.733583][ C0] EXT4-fs (loop3): initial error at time 1782480724: ext4_do_update_inode:5742: inode 16 [ 349.733684][ C0] EXT4-fs (loop3): last error at time 1782480724: ext4_do_update_inode:5742: inode 16 [ 349.783509][ T6876] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.812714][ T6876] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.746: corrupted inode contents [ 349.819597][ T1631] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 349.822594][ T6876] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 349.856100][ T6876] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.746: mark_inode_dirty error [ 349.881419][ T6876] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.746: corrupted inode contents [ 349.895878][ T6876] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 349.905257][ T6876] loop3: lost filesystem error report for type 5 error -117 [ 349.908074][ T6876] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.746: corrupted inode contents [ 349.934143][ T6876] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.746: mark_inode_dirty error [ 349.949530][ T6876] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 349.958899][ T6876] loop3: lost filesystem error report for type 5 error -117 [ 349.963955][ T6876] EXT4-fs (loop3): 1 truncate cleaned up [ 349.986576][ T6876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.001474][ T6876] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.003585][ T5836] __quota_error: 16 callbacks suppressed [ 350.003627][ T5836] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 350.117711][ T5836] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 350.140807][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 350.142908][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.160749][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.271359][ T28] audit: type=1400 audit(1782480724.730:508): avc: denied { read write } for pid=6886 comm="syz.3.750" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 350.349592][ T28] audit: type=1400 audit(1782480724.730:509): avc: denied { open } for pid=6886 comm="syz.3.750" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 350.401469][ T6887] loop3: detected capacity change from 0 to 512 [ 350.410819][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 350.419360][ T28] audit: type=1400 audit(1782480724.730:510): avc: denied { ioctl } for pid=6886 comm="syz.3.750" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 350.471677][ T6887] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 350.495690][ T6887] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 350.565610][ T6887] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 350.573682][ T28] audit: type=1326 audit(1782480725.030:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.0.754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b2616ce59 code=0x0 [ 350.590648][ T6887] System zones: 1-12 [ 350.604922][ T6887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.614843][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.629008][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.631477][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.639112][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 350.639219][ C1] EXT4-fs (loop3): initial error at time 1782480725: ext4_read_block_bitmap_nowait:517 [ 350.639459][ C1] EXT4-fs (loop3): last error at time 1782480725: ext4_read_block_bitmap_nowait:517 [ 350.680109][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.681487][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.710404][ T28] audit: type=1400 audit(1782480725.160:512): avc: denied { shutdown } for pid=6899 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.731648][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.732574][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.796017][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.798493][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.851939][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.853910][ T6887] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.750: Block bitmap for bg 0 marked uninitialized [ 350.900239][ T6887] loop3: lost filesystem error report for type 5 error -117 [ 350.902118][ T6887] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 350.941395][ T6887] EXT4-fs (loop3): 1 truncate cleaned up [ 350.971228][ T6887] EXT4-fs mount: 1 callbacks suppressed [ 350.971265][ T6887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.093513][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.536467][ T6921] loop2: detected capacity change from 0 to 512 [ 351.743469][ T6923] loop3: detected capacity change from 0 to 512 [ 351.917222][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.760: corrupted inode contents [ 351.931308][ T6923] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.760: mark_inode_dirty error [ 351.942980][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 351.943102][ C0] EXT4-fs (loop3): initial error at time 1782480726: ext4_do_update_inode:5742: inode 16 [ 351.943189][ C0] EXT4-fs (loop3): last error at time 1782480726: ext4_do_update_inode:5742: inode 16 [ 351.980062][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.760: corrupted inode contents [ 352.009894][ T6923] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.760: mark_inode_dirty error [ 352.024693][ T6921] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.759: corrupted inode contents [ 352.039066][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 352.045559][ C0] EXT4-fs (loop2): initial error at time 1782480726: ext4_do_update_inode:5742: inode 16 [ 352.055461][ C0] EXT4-fs (loop2): last error at time 1782480726: ext4_do_update_inode:5742: inode 16 [ 352.068460][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.760: corrupted inode contents [ 352.083477][ T6921] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.759: mark_inode_dirty error [ 352.096596][ T6923] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 352.107765][ T6921] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.759: corrupted inode contents [ 352.127957][ T6923] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.760: corrupted inode contents [ 352.142877][ T6921] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.759: mark_inode_dirty error [ 352.156965][ T6923] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.760: mark_inode_dirty error [ 352.171467][ T6921] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.759: corrupted inode contents [ 352.184557][ T6923] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 352.195274][ T6921] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 352.208499][ T6921] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.759: corrupted inode contents [ 352.225553][ T6923] EXT4-fs (loop3): 1 truncate cleaned up [ 352.232177][ T6921] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.759: mark_inode_dirty error [ 352.252767][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.266907][ T6923] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.314691][ T3466] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 352.325454][ T6921] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 352.339241][ T6921] EXT4-fs (loop2): 1 truncate cleaned up [ 352.353907][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.368060][ T6921] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.543703][ T3466] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 352.589158][ T3466] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 352.744456][ T3466] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 353.227312][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 353.332128][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.764'. [ 353.344044][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.353135][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 353.370532][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.581187][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 353.956004][ T6948] loop3: detected capacity change from 0 to 512 [ 354.252086][ T6948] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.763: Unrecognised inode hash code 255 [ 354.819523][ T6955] capability: warning: `syz.0.769' uses 32-bit capabilities (legacy support in use) [ 355.073556][ T6948] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.763: Corrupt directory, running e2fsck is recommended [ 355.207012][ T6948] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 355.293006][ T6948] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.763: corrupted in-inode xattr: e_name out of bounds [ 355.407791][ T6948] fserror_report: 18 callbacks suppressed [ 355.407812][ T6948] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 355.466345][ T6948] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.763: couldn't read orphan inode 15 (err -117) [ 355.475714][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 355.475737][ C0] EXT4-fs (loop3): initial error at time 1782480729: ext4_iget_extra_inode:5180: inode 15 [ 355.475778][ C0] EXT4-fs (loop3): last error at time 1782480729: ext4_iget_extra_inode:5180: inode 15 [ 355.847488][ T6948] fserror_report: 4 callbacks suppressed [ 355.847506][ T6948] loop3: lost filesystem error report for type 5 error -117 [ 355.913725][ T6948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.327032][ T6970] loop5: detected capacity change from 0 to 512 [ 356.374938][ T6971] loop2: detected capacity change from 0 to 512 [ 356.445979][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.776'. [ 356.448488][ T6970] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.773: corrupted inode contents [ 356.468273][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.469256][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 356.486693][ C0] EXT4-fs (loop5): initial error at time 1782480730: ext4_do_update_inode:5742: inode 16 [ 356.497223][ C0] EXT4-fs (loop5): last error at time 1782480730: ext4_do_update_inode:5742: inode 16 [ 356.511705][ T6970] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.773: mark_inode_dirty error [ 356.512258][ T6971] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.775: corrupted in-inode xattr: invalid ea_ino [ 356.512334][ T6971] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 356.512481][ T6971] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.775: couldn't read orphan inode 15 (err -117) [ 356.512545][ T6971] loop2: lost filesystem error report for type 5 error -117 [ 356.562272][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.576536][ T6971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.605621][ T6970] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.773: corrupted inode contents [ 356.618221][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.621464][ T28] audit: type=1400 audit(1782480731.080:513): avc: denied { getopt } for pid=6972 comm="syz.0.776" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.653493][ T6970] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.773: mark_inode_dirty error [ 356.655430][ T6941] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.763: Unrecognised inode hash code 255 [ 356.667523][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.684182][ T6941] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.763: Corrupt directory, running e2fsck is recommended [ 356.687427][ T6970] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.773: corrupted inode contents [ 356.687788][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.700587][ T6969] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.775: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 356.733626][ T28] audit: type=1400 audit(1782480731.130:514): avc: denied { connect } for pid=6972 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.735747][ T6970] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 356.785344][ T6970] loop5: lost filesystem error report for type 5 error -117 [ 356.790675][ T28] audit: type=1400 audit(1782480731.150:515): avc: denied { write } for pid=6968 comm="syz.2.775" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.820030][ T6970] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.773: corrupted inode contents [ 356.832767][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.834498][ T6970] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.773: mark_inode_dirty error [ 356.859898][ T6970] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 356.862188][ T6970] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 356.882709][ T6970] loop5: lost filesystem error report for type 5 error -117 [ 356.890591][ T6970] EXT4-fs (loop5): 1 truncate cleaned up [ 356.915630][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.948734][ T6948] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.763: Unrecognised inode hash code 255 [ 356.948773][ T6948] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.763: Corrupt directory, running e2fsck is recommended [ 356.948821][ T6948] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.763: path /167/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 356.949714][ T6948] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.763: path /167/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 357.010259][ T6928] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 357.029660][ T6970] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.075263][ T28] audit: type=1400 audit(1782480731.230:516): avc: denied { mount } for pid=6972 comm="syz.0.776" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 357.092714][ T134] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 357.155434][ T134] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 357.208851][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.222372][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.314686][ T6981] loop1: detected capacity change from 0 to 512 [ 357.394306][ T6981] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.774: corrupted inode contents [ 357.442309][ T6981] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 357.443648][ T6981] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.774: mark_inode_dirty error [ 357.453053][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 357.453078][ C1] EXT4-fs (loop1): initial error at time 1782480731: ext4_do_update_inode:5742: inode 16 [ 357.453162][ C1] EXT4-fs (loop1): last error at time 1782480731: ext4_do_update_inode:5742: inode 16 [ 357.541709][ T6981] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.774: corrupted inode contents [ 357.584644][ T6981] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.774: mark_inode_dirty error [ 357.624937][ T6981] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.774: corrupted inode contents [ 357.659298][ T6981] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 357.677103][ T6981] loop1: lost filesystem error report for type 5 error -117 [ 357.677354][ T6981] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.774: corrupted inode contents [ 357.684273][ T6994] loop3: detected capacity change from 0 to 512 [ 357.697553][ T6981] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.774: mark_inode_dirty error [ 357.697950][ T6981] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 357.758686][ T6981] loop1: lost filesystem error report for type 5 error -117 [ 357.759253][ T6981] EXT4-fs (loop1): 1 truncate cleaned up [ 357.785933][ T6981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.845911][ T6981] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.905111][ T134] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 357.922405][ T6994] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.780: Unrecognised inode hash code 255 [ 358.207214][ T7003] loop2: detected capacity change from 0 to 512 [ 358.256022][ T6994] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.780: Corrupt directory, running e2fsck is recommended [ 358.374024][ T7003] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.781: corrupted inode contents [ 358.389034][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 358.395590][ C0] EXT4-fs (loop2): initial error at time 1782480732: ext4_do_update_inode:5742: inode 16 [ 358.405485][ C0] EXT4-fs (loop2): last error at time 1782480732: ext4_do_update_inode:5742: inode 16 [ 358.418687][ T7003] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.781: mark_inode_dirty error [ 358.432896][ T7003] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.781: corrupted inode contents [ 358.447059][ T7003] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.781: mark_inode_dirty error [ 358.468641][ T7003] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.781: corrupted inode contents [ 358.482635][ T7003] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 358.491889][ T7003] loop2: lost filesystem error report for type 5 error -117 [ 358.494550][ T7003] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.781: corrupted inode contents [ 358.516343][ T7003] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.781: mark_inode_dirty error [ 358.532388][ T7003] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 358.542869][ T7003] loop2: lost filesystem error report for type 5 error -117 [ 358.554532][ T7003] EXT4-fs (loop2): 1 truncate cleaned up [ 358.579509][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.593977][ T7003] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.739861][ T6994] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 358.790064][ T6994] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.780: corrupted in-inode xattr: e_name out of bounds [ 358.892764][ T134] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 358.939073][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 358.945623][ C1] EXT4-fs (loop3): initial error at time 1782480733: ext4_iget_extra_inode:5180: inode 15 [ 358.955639][ C1] EXT4-fs (loop3): last error at time 1782480733: ext4_iget_extra_inode:5180: inode 15 [ 359.039607][ T6994] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.780: couldn't read orphan inode 15 (err -117) [ 359.091650][ T6994] loop3: lost filesystem error report for type 5 error -117 [ 359.116259][ T6994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.639216][ T6928] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 359.659426][ T134] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.669563][ T134] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 359.682811][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.692266][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.759823][ T7015] loop5: detected capacity change from 0 to 512 [ 359.781288][ T6994] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.780: Unrecognised inode hash code 255 [ 359.810050][ T6994] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.780: Corrupt directory, running e2fsck is recommended [ 359.883365][ T6994] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.780: Unrecognised inode hash code 255 [ 359.909481][ T6994] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.780: Corrupt directory, running e2fsck is recommended [ 359.925162][ T6994] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.780: path /169/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 359.961900][ T7015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.514971][ T7021] loop2: detected capacity change from 0 to 512 [ 360.579676][ T6994] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.780: path /169/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 360.633110][ T7015] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.782: iget: bad i_size value: 38620345925642 [ 360.716158][ T7021] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.786: corrupted inode contents [ 360.728950][ T7021] fserror_report: 14 callbacks suppressed [ 360.734930][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.738536][ T7021] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.786: mark_inode_dirty error [ 360.739113][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 360.739226][ C1] EXT4-fs (loop2): initial error at time 1782480735: ext4_do_update_inode:5742: inode 16 [ 360.739450][ C1] EXT4-fs (loop2): last error at time 1782480735: ext4_do_update_inode:5742: inode 16 [ 360.788573][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.793273][ T7021] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.786: corrupted inode contents [ 360.815615][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.817075][ T7021] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.786: mark_inode_dirty error [ 360.838659][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.842404][ T7021] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.786: corrupted inode contents [ 360.866386][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.867413][ T7021] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 360.886197][ T7021] loop2: lost filesystem error report for type 5 error -117 [ 360.888629][ T7021] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.786: corrupted inode contents [ 360.908519][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.910735][ T7021] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.786: mark_inode_dirty error [ 360.932096][ T7021] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 360.933680][ T7021] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 360.953018][ T7021] loop2: lost filesystem error report for type 5 error -117 [ 360.962242][ T7021] EXT4-fs (loop2): 1 truncate cleaned up [ 360.978348][ T7015] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.979041][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 360.980856][ T7021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.988220][ C0] EXT4-fs (loop5): initial error at time 1782480735: ext4_orphan_get:1399: inode 15 [ 360.988277][ C0] EXT4-fs (loop5): last error at time 1782480735: ext4_orphan_get:1399: inode 15 [ 360.988682][ T7015] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.782: couldn't read orphan inode 15 (err -117) [ 360.988715][ T7015] loop5: lost filesystem error report for type 5 error -117 [ 360.990391][ T7015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.996598][ T7021] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.251292][ T28] audit: type=1400 audit(1782480735.660:517): avc: denied { write } for pid=7014 comm="syz.5.782" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.965479][ T3466] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.975452][ T3466] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 362.057857][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.169742][ T28] audit: type=1400 audit(1782480736.630:518): avc: denied { map } for pid=7014 comm="syz.5.782" path="/134/bus/cpuset.effective_mems" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 362.233603][ T36] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 362.258137][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 28 [ 362.285020][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 362.285020][ T36] [ 362.306959][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 362.318497][ T36] EXT4-fs (loop5): Free/Dirty block details [ 362.329081][ T36] EXT4-fs (loop5): free_blocks=0 [ 362.339280][ T36] EXT4-fs (loop5): dirty_blocks=80 [ 362.349334][ T36] EXT4-fs (loop5): Block reservation details [ 362.360677][ T36] EXT4-fs (loop5): i_reserved_data_blocks=80 [ 362.374341][ T3763] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 362.398920][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.415436][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.491456][ T28] audit: type=1326 audit(1782480736.950:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.2.791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5e60ce59 code=0x0 [ 362.766533][ T7032] loop3: detected capacity change from 0 to 512 [ 362.889639][ T7038] loop0: detected capacity change from 0 to 512 [ 362.902433][ T7032] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.788: corrupted in-inode xattr: invalid ea_ino [ 362.922386][ T7032] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 362.939042][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 362.949249][ T7038] EXT4-fs (loop0): 1 orphan inode deleted [ 362.954740][ C0] EXT4-fs (loop3): initial error at time 1782480737: ext4_iget_extra_inode:5180: inode 15 [ 362.954800][ C0] EXT4-fs (loop3): last error at time 1782480737: ext4_iget_extra_inode:5180: inode 15 [ 362.956262][ T7032] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.788: couldn't read orphan inode 15 (err -117) [ 362.965423][ T7038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.041764][ T7032] loop3: lost filesystem error report for type 5 error -117 [ 363.047624][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.051765][ T7032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.109083][ T28] audit: type=1400 audit(1782480737.560:520): avc: denied { write } for pid=7031 comm="syz.3.788" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.140454][ T7032] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.788: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 363.279371][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.307097][ T7053] loop3: detected capacity change from 0 to 128 [ 363.439924][ T7057] loop2: detected capacity change from 0 to 512 [ 363.498921][ T7057] EXT4-fs (loop2): 1 orphan inode deleted [ 363.521804][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.640018][ T7054] loop0: detected capacity change from 0 to 1024 [ 363.656818][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.718422][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.730869][ T7059] loop5: detected capacity change from 0 to 512 [ 363.771071][ T28] audit: type=1400 audit(1782480738.230:521): avc: denied { read } for pid=7052 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 363.867146][ T7054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 363.887172][ T7054] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.932012][ T28] audit: type=1400 audit(1782480738.390:522): avc: denied { mmap_zero } for pid=7051 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 363.955491][ T7059] EXT4-fs (loop5): 1 orphan inode deleted [ 364.001778][ T7059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.004839][ T28] audit: type=1400 audit(1782480738.460:523): avc: denied { name_bind } for pid=7051 comm="syz.0.796" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 364.208462][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.226091][ T28] audit: type=1400 audit(1782480738.680:524): avc: denied { setopt } for pid=7074 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.405950][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.415295][ T7083] loop5: detected capacity change from 0 to 512 [ 364.481827][ T7083] EXT4-fs (loop5): 1 orphan inode deleted [ 364.496023][ T7083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.616240][ T7094] loop2: detected capacity change from 0 to 512 [ 364.640473][ T7094] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.808: corrupted in-inode xattr: invalid ea_ino [ 364.688801][ T7094] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 364.689041][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 364.704826][ C0] EXT4-fs (loop2): initial error at time 1782480739: ext4_iget_extra_inode:5180: inode 15 [ 364.714815][ C0] EXT4-fs (loop2): last error at time 1782480739: ext4_iget_extra_inode:5180: inode 15 [ 364.725208][ T7094] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.808: couldn't read orphan inode 15 (err -117) [ 364.744947][ T7094] loop2: lost filesystem error report for type 5 error -117 [ 364.745893][ T7094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.769109][ T7094] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.808: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 364.788365][ T28] audit: type=1400 audit(1782480739.230:525): avc: denied { write } for pid=7089 comm="syz.2.808" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.614685][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.625136][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.678331][ T28] audit: type=1400 audit(1782480741.130:526): avc: denied { read write } for pid=7113 comm="syz.0.812" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 367.690825][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 367.690842][ T28] audit: type=1400 audit(1782480742.150:528): avc: denied { map } for pid=7115 comm="syz.1.813" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 367.962269][ T7117] netlink: 'syz.1.813': attribute type 27 has an invalid length. [ 368.146652][ T7120] loop0: detected capacity change from 0 to 512 [ 368.176003][ T7120] EXT4-fs: journaled quota format not specified [ 368.321765][ T28] audit: type=1400 audit(1782480742.410:529): avc: denied { read write } for pid=7115 comm="syz.1.813" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 368.459528][ T7126] loop0: detected capacity change from 0 to 764 [ 368.514116][ T7126] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 368.624223][ T7129] loop2: detected capacity change from 0 to 128 [ 369.793895][ T7123] loop5: detected capacity change from 0 to 512 [ 369.872019][ T7132] loop3: detected capacity change from 0 to 512 [ 370.625919][ T7123] EXT4-fs (loop5): 1 orphan inode deleted [ 370.926365][ T7123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.050330][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.179519][ T7132] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 373.603330][ T7151] loop5: detected capacity change from 0 to 512 [ 374.937120][ T7162] loop3: detected capacity change from 0 to 512 [ 375.121200][ T7162] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.824: Unrecognised inode hash code 255 [ 375.342356][ T7157] loop0: detected capacity change from 0 to 512 [ 375.918973][ T7162] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.824: Corrupt directory, running e2fsck is recommended [ 376.012086][ T7151] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 376.012576][ T7151] EXT4-fs: failed to create workqueue [ 376.029466][ T7151] EXT4-fs (loop5): mount failed [ 376.156227][ T7162] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 376.169625][ T7162] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.824: corrupted in-inode xattr: e_name out of bounds [ 376.915266][ T7162] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 376.915503][ T7162] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.824: couldn't read orphan inode 15 (err -117) [ 376.924792][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 376.924817][ C1] EXT4-fs (loop3): initial error at time 1782480751: ext4_iget_extra_inode:5180: inode 15 [ 376.924857][ C1] EXT4-fs (loop3): last error at time 1782480751: ext4_iget_extra_inode:5180: inode 15 [ 377.203318][ T7162] loop3: lost filesystem error report for type 5 error -117 [ 377.204877][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.289321][ T7157] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 377.290272][ T7157] EXT4-fs: failed to create workqueue [ 377.307122][ T7157] EXT4-fs (loop0): mount failed [ 378.390064][ T7174] loop2: detected capacity change from 0 to 512 [ 378.425680][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.486014][ T7178] loop0: detected capacity change from 0 to 512 [ 378.559145][ T7174] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.825: corrupted inode contents [ 378.571376][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.572876][ T7174] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.825: mark_inode_dirty error [ 378.582856][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 378.582984][ C1] EXT4-fs (loop2): initial error at time 1782480753: ext4_do_update_inode:5742: inode 16 [ 378.583091][ C1] EXT4-fs (loop2): last error at time 1782480753: ext4_do_update_inode:5742: inode 16 [ 378.622913][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.627984][ T7174] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.825: corrupted inode contents [ 378.651174][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.652904][ T7174] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.825: mark_inode_dirty error [ 378.674577][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.676041][ T7174] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.825: corrupted inode contents [ 378.698536][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.700733][ T7174] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 378.719861][ T7174] loop2: lost filesystem error report for type 5 error -117 [ 378.721143][ T7174] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.825: corrupted inode contents [ 378.741928][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.747636][ T7174] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.825: mark_inode_dirty error [ 378.769626][ T7174] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 378.770834][ T7174] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 378.789979][ T7174] loop2: lost filesystem error report for type 5 error -117 [ 378.795882][ T7174] EXT4-fs (loop2): 1 truncate cleaned up [ 378.819155][ T7174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.833434][ T7174] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.986672][ T7178] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.827: Unrecognised inode hash code 255 [ 378.998517][ T7178] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.827: Corrupt directory, running e2fsck is recommended [ 379.175817][ T7178] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 379.184381][ T7178] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.827: corrupted in-inode xattr: e_name out of bounds [ 379.198467][ T7178] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 379.198689][ T7178] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.827: couldn't read orphan inode 15 (err -117) [ 379.207951][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 379.207978][ C1] EXT4-fs (loop0): initial error at time 1782480753: ext4_iget_extra_inode:5180: inode 15 [ 379.208021][ C1] EXT4-fs (loop0): last error at time 1782480753: ext4_iget_extra_inode:5180: inode 15 [ 379.246890][ T7178] loop0: lost filesystem error report for type 5 error -117 [ 379.247442][ T7178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.414683][ T7183] netlink: 'syz.5.828': attribute type 3 has an invalid length. [ 379.424973][ T1631] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.471649][ T1631] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 379.567472][ T7177] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.827: Unrecognised inode hash code 255 [ 379.600258][ T7177] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.827: Corrupt directory, running e2fsck is recommended [ 379.667813][ T7189] loop1: detected capacity change from 0 to 512 [ 379.674610][ T28] audit: type=1400 audit(1782480754.100:530): avc: denied { ioctl } for pid=7188 comm="syz.1.829" path="socket:[15098]" dev="sockfs" ino=15098 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.729118][ T7189] EXT4-fs: Ignoring removed i_version option [ 379.774510][ T7189] EXT4-fs (loop1): bad geometry: block count 117440768 exceeds size of device (256 blocks) [ 379.813281][ T28] audit: type=1400 audit(1782480754.100:531): avc: denied { bind } for pid=7188 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.865895][ T7178] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.827: Unrecognised inode hash code 255 [ 379.889527][ T7191] loop5: detected capacity change from 0 to 512 [ 379.896518][ T28] audit: type=1400 audit(1782480754.100:532): avc: denied { setopt } for pid=7188 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.929107][ T7178] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.827: Corrupt directory, running e2fsck is recommended [ 379.948289][ T7178] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 4: comm syz.0.827: path /170/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 379.965361][ T28] audit: type=1400 audit(1782480754.100:533): avc: denied { write } for pid=7188 comm="syz.1.829" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.978960][ T7191] EXT4-fs (loop5): 1 orphan inode deleted [ 380.019140][ T28] audit: type=1400 audit(1782480754.110:534): avc: denied { create } for pid=7188 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 380.047955][ T7178] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.827: path /170/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 380.069280][ T28] audit: type=1400 audit(1782480754.120:535): avc: denied { write } for pid=7188 comm="syz.1.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 380.085471][ T7191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.112596][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.522981][ T7197] loop3: detected capacity change from 0 to 512 [ 380.593429][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.637640][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.826: corrupted inode contents [ 380.662140][ T28] audit: type=1400 audit(1782480755.110:536): avc: denied { read write } for pid=7203 comm="syz.2.832" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 380.662226][ T28] audit: type=1400 audit(1782480755.110:537): avc: denied { open } for pid=7203 comm="syz.2.832" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 380.721312][ T7197] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 380.722881][ T7204] loop2: detected capacity change from 0 to 256 [ 380.732082][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 380.732100][ C0] EXT4-fs (loop3): initial error at time 1782480755: ext4_do_update_inode:5742: inode 16 [ 380.732139][ C0] EXT4-fs (loop3): last error at time 1782480755: ext4_do_update_inode:5742: inode 16 [ 380.748698][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.755628][ T7197] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.826: mark_inode_dirty error [ 380.773234][ T7204] vfat: Unknown parameter 'check.relaxed' [ 380.777609][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.826: corrupted inode contents [ 380.816811][ T7197] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.826: mark_inode_dirty error [ 380.830989][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.826: corrupted inode contents [ 380.844631][ T7197] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 380.854321][ T7197] loop3: lost filesystem error report for type 5 error -117 [ 380.855968][ T7197] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.826: corrupted inode contents [ 380.877832][ T7197] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.826: mark_inode_dirty error [ 380.891283][ T7197] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 380.902168][ T7197] loop3: lost filesystem error report for type 5 error -117 [ 380.907710][ T7197] EXT4-fs (loop3): 1 truncate cleaned up [ 380.925717][ T36] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 380.941472][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 380.967359][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.981997][ T7197] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.337493][ T7223] loop1: detected capacity change from 0 to 512 [ 381.374150][ T7223] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.840: Unrecognised inode hash code 255 [ 381.391809][ T7223] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.840: Corrupt directory, running e2fsck is recommended [ 381.427295][ T7223] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 381.438926][ T7223] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.840: corrupted in-inode xattr: e_name out of bounds [ 381.456325][ T7223] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.840: couldn't read orphan inode 15 (err -117) [ 381.468241][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 381.468264][ C1] EXT4-fs (loop1): initial error at time 1782480755: ext4_iget_extra_inode:5180: inode 15 [ 381.468300][ C1] EXT4-fs (loop1): last error at time 1782480755: ext4_iget_extra_inode:5180: inode 15 [ 381.495076][ T7223] loop1: lost filesystem error report for type 5 error -117 [ 381.496826][ T7223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.507387][ T7216] loop5: detected capacity change from 0 to 512 [ 381.619032][ T7216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 381.695463][ T7216] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.838: bad orphan inode 131083 [ 381.731671][ T7216] loop5: lost filesystem error report for type 5 error -117 [ 381.739067][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 381.753212][ C0] EXT4-fs (loop5): initial error at time 1782480756: ext4_orphan_get:1425 [ 381.762029][ C0] EXT4-fs (loop5): last error at time 1782480756: ext4_orphan_get:1425 [ 381.763336][ T7216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.789259][ T7232] loop2: detected capacity change from 0 to 1024 [ 381.801492][ T7221] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.840: Unrecognised inode hash code 255 [ 381.822174][ T7221] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.840: Corrupt directory, running e2fsck is recommended [ 381.857993][ T7232] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.887714][ T7232] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 381.907404][ T7221] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.840: Unrecognised inode hash code 255 [ 381.916782][ T7232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 381.921524][ T7221] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.840: Corrupt directory, running e2fsck is recommended [ 381.945450][ T7221] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.840: path /172/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 381.973076][ T7221] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.840: path /172/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 381.973955][ T7232] IPVS: Unknown mcast interface: [ 382.042448][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 382.075301][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.133996][ T7240] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.838: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 382.197484][ T7240] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 382.228233][ T7240] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.838: Deleting old file: nlink 4, error=-117 [ 382.465493][ T7239] loop1: detected capacity change from 0 to 512 [ 382.576175][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.647086][ T7239] EXT4-fs (loop1): 1 orphan inode deleted [ 382.683601][ T7241] loop0: detected capacity change from 0 to 512 [ 382.782155][ T7239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.789033][ T7241] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.842: corrupted inode contents [ 382.810996][ T7241] fserror_report: 7 callbacks suppressed [ 382.811161][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 382.884482][ T7241] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.842: mark_inode_dirty error [ 382.894252][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 382.894382][ C0] EXT4-fs (loop0): initial error at time 1782480757: ext4_do_update_inode:5742: inode 16 [ 382.894642][ C0] EXT4-fs (loop0): last error at time 1782480757: ext4_do_update_inode:5742: inode 16 [ 382.940709][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 382.952536][ T7241] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.842: corrupted inode contents [ 383.007977][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 383.013495][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.014027][ T7241] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.842: mark_inode_dirty error [ 383.058540][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 383.065468][ T7241] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.842: corrupted inode contents [ 383.122144][ T7267] loop5: detected capacity change from 0 to 512 [ 383.141122][ T7265] netlink: 'syz.1.849': attribute type 27 has an invalid length. [ 383.176130][ T7267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 383.187541][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 383.212987][ T7241] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 383.239748][ T7241] loop0: lost filesystem error report for type 5 error -117 [ 383.251022][ T7271] FAULT_INJECTION: forcing a failure. [ 383.251022][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.271944][ T7267] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.850: bad orphan inode 131083 [ 383.349158][ T7271] CPU: 1 UID: 0 PID: 7271 Comm: syz.1.852 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 383.349235][ T7271] Tainted: [W]=WARN [ 383.349244][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.349281][ T7271] Call Trace: [ 383.349289][ T7271] [ 383.349298][ T7271] __dump_stack+0x1d/0x30 [ 383.349325][ T7271] dump_stack_lvl+0x95/0xd0 [ 383.349353][ T7271] dump_stack+0x15/0x1b [ 383.349380][ T7271] should_fail_ex+0x25e/0x270 [ 383.349420][ T7271] should_fail+0xb/0x20 [ 383.349534][ T7271] should_fail_usercopy+0x1a/0x20 [ 383.349573][ T7271] _copy_to_user+0x20/0xa0 [ 383.349599][ T7271] simple_read_from_buffer+0xb5/0x130 [ 383.349656][ T7271] proc_fail_nth_read+0x10e/0x150 [ 383.349685][ T7271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.349714][ T7271] vfs_read+0x18e/0x7c0 [ 383.349756][ T7271] ? __rcu_read_unlock+0x4e/0x70 [ 383.349797][ T7271] ? __fget_files+0x184/0x1c0 [ 383.349822][ T7271] ? mutex_lock+0x57/0x90 [ 383.349863][ T7271] ksys_read+0xdc/0x1a0 [ 383.350034][ T7271] __x64_sys_read+0x40/0x50 [ 383.350057][ T7271] x64_sys_call+0x2886/0x3020 [ 383.350144][ T7271] do_syscall_64+0x136/0x3c0 [ 383.350246][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.350269][ T7271] RIP: 0033:0x7f43f79ed68e [ 383.350285][ T7271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.350310][ T7271] RSP: 002b:00007f43f647efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.350336][ T7271] RAX: ffffffffffffffda RBX: 00007f43f647f6c0 RCX: 00007f43f79ed68e [ 383.350420][ T7271] RDX: 000000000000000f RSI: 00007f43f647f0a0 RDI: 0000000000000004 [ 383.350433][ T7271] RBP: 00007f43f647f090 R08: 0000000000000000 R09: 0000000000000000 [ 383.350446][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.350461][ T7271] R13: 00007f43f7ca6038 R14: 00007f43f7ca5fa0 R15: 00007ffe856f4f38 [ 383.350482][ T7271] [ 383.350512][ T7267] loop5: lost filesystem error report for type 5 error -117 [ 383.571454][ T7241] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.842: corrupted inode contents [ 383.621173][ T7267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.637753][ T7267] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.5.850: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 383.709318][ T7267] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem [ 383.727466][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 383.738732][ T7241] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.842: mark_inode_dirty error [ 383.768057][ T7267] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.850: Deleting old file: nlink 4, error=-117 [ 383.988988][ T7279] xt_ecn: cannot match TCP bits for non-tcp packets [ 384.197210][ T7241] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 384.198783][ T7241] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 384.218344][ T7241] loop0: lost filesystem error report for type 5 error -117 [ 384.388682][ T7241] EXT4-fs (loop0): 1 truncate cleaned up [ 384.743294][ T7241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.917727][ T7241] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.020232][ T36] __quota_error: 13 callbacks suppressed [ 385.020284][ T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 385.120033][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 385.165006][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.302841][ T28] audit: type=1400 audit(1782480759.760:551): avc: denied { ioctl } for pid=7282 comm="syz.5.855" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 385.331231][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.369777][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.420257][ T7283] loop5: detected capacity change from 0 to 512 [ 385.460543][ T7283] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 385.629259][ T7283] EXT4-fs (loop5): 1 truncate cleaned up [ 385.647009][ T7283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.698598][ T28] audit: type=1400 audit(1782480760.150:552): avc: denied { write } for pid=7282 comm="syz.5.855" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.774742][ T7286] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.856'. [ 386.049790][ T7286] loop1: detected capacity change from 0 to 512 [ 386.172234][ T7286] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.856: corrupted in-inode xattr: invalid ea_ino [ 386.210819][ T7286] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.212801][ T7286] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.856: couldn't read orphan inode 15 (err -117) [ 386.222462][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 386.222502][ C0] EXT4-fs (loop1): initial error at time 1782480760: ext4_iget_extra_inode:5180: inode 15 [ 386.222641][ C0] EXT4-fs (loop1): last error at time 1782480760: ext4_iget_extra_inode:5180: inode 15 [ 386.288417][ T3763] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.317843][ T3763] ================================================================== [ 386.326006][ T3763] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 386.333624][ T3763] [ 386.335992][ T3763] read-write to 0xffff888237d26528 of 1 bytes by task 7281 on cpu 1: [ 386.344278][ T3763] folio_add_lru+0xa4/0x250 [ 386.348918][ T3763] shmem_get_folio_gfp+0x7cc/0xd90 [ 386.354078][ T3763] shmem_write_begin+0xfc/0x1f0 [ 386.358974][ T3763] generic_perform_write+0x186/0x490 [ 386.359626][ T7286] loop1: lost filesystem error report for type 5 error -117 [ 386.364338][ T3763] shmem_file_write_iter+0xc5/0xf0 [ 386.364378][ T3763] __kernel_write_iter+0x30f/0x590 [ 386.364421][ T3763] dump_user_range+0xa73/0xd00 [ 386.364451][ T3763] elf_core_dump+0x21c0/0x2340 [ 386.364469][ T3763] coredump_write+0xaf9/0xdd0 [ 386.364514][ T3763] vfs_coredump+0x2770/0x3290 [ 386.364551][ T3763] get_signal+0xd33/0xf10 [ 386.364587][ T3763] arch_do_signal_or_restart+0x96/0x480 [ 386.364615][ T3763] exit_to_user_mode_loop+0x15d/0x8c0 [ 386.364648][ T3763] do_syscall_64+0x23c/0x3c0 [ 386.364684][ T3763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.364712][ T3763] [ 386.364720][ T3763] read to 0xffff888237d26528 of 1 bytes by task 3763 on cpu 0: [ 386.364742][ T3763] __lru_add_drain_all+0x17e/0x450 [ 386.364769][ T3763] lru_add_drain_all+0x10/0x20 [ 386.364794][ T3763] invalidate_bdev+0x47/0x70 [ 386.364821][ T3763] ext4_put_super+0x614/0x7c0 [ 386.364858][ T3763] generic_shutdown_super+0xee/0x220 [ 386.364897][ T3763] kill_block_super+0x2a/0x70 [ 386.364919][ T3763] ext4_kill_sb+0x42/0x80 [ 386.364948][ T3763] deactivate_locked_super+0x75/0x1c0 [ 386.364987][ T3763] deactivate_super+0x97/0xa0 [ 386.365023][ T3763] cleanup_mnt+0x2c3/0x340 [ 386.365057][ T3763] __cleanup_mnt+0x19/0x20 [ 386.365090][ T3763] task_work_run+0x130/0x1a0 [ 386.365116][ T3763] exit_to_user_mode_loop+0x1e4/0x8c0 [ 386.365148][ T3763] do_syscall_64+0x23c/0x3c0 [ 386.365183][ T3763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.365205][ T3763] [ 386.365210][ T3763] value changed: 0x0b -> 0x0d [ 386.365223][ T3763] [ 386.365229][ T3763] Reported by Kernel Concurrency Sanitizer on: [ 386.365247][ T3763] CPU: 0 UID: 0 PID: 3763 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 386.365287][ T3763] Tainted: [W]=WARN [ 386.365296][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.365333][ T3763] ================================================================== [ 386.586266][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.588699][ T7286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.633434][ T28] audit: type=1400 audit(1782480761.080:553): avc: denied { write } for pid=7285 comm="syz.1.856" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.658321][ T7286] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.856: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 386.757583][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.197710][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.