last executing test programs: 3m47.481164312s ago: executing program 0 (id=476): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x39, 0x62, 0x64, 0x39, 0x64, 0x33, 0x32, 0x35, 0x64, 0x63, 0x33, 0x61, 0x39, 0x34, 0x30]}, &(0x7f0000000ec0)={0x0, "36bfeafaba2e0def8634718fbb96c28f51c321ff7374dd18bfd9defbc7d5b35c88f66c311837b1f617e383b8cf09c4a40affa73a8f18befd54f02d5007d453a5", 0x24}, 0x48, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r0, 0xa018) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, 0x0, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x4d4, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x4c0, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x470, 0x2, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0x6, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc0, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x1000004, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x5, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x101, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[@ANYBLOB="e90c610faca2bbbbbbbbbbbb08004595d00e7cede3da926b33c0c1f711907800000000000000000000fffe00279078820100"], 0x0) syz_emit_ethernet(0x3c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1f080045f8002e0000000200119078000000000000000000004e20001a9078dff98c8d6b02f029f30930cc593d79e16d2fb736d5ed0dfadf5acd61b68594d40dd75d53996f4f344053ad61ffeb3fdc975e28dd05c7b0377ad97917d70097ac5625650334d7014de36c1fda17bd8850d9310fa3888b27328a4f17c87fa393902e4206faadd5e3ceaf784215400d48163a9c03da700b73"], 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001"], 0x48}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="aa79b293", 0x4) write$binfmt_elf32(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b0000000600000005002000020001000100200000f2ffff04"], 0x78) syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') read(r2, &(0x7f0000000440)=""/49, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYBLOB='-'], 0x20}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r5, 0x0) unshare(0x4020480) 3m47.26548678s ago: executing program 0 (id=480): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) getsockopt(r0, 0x1, 0x6, &(0x7f0000001840)=""/4096, &(0x7f0000002840)=0x1000) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3a5, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x514, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x7, 0x4fff, 0xb709, 0x58c, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_ACT={0x4ec, 0x7, [@m_mirred={0x184, 0x5, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9b, 0x5, 0x6, 0xffffff80}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x40, 0x2, 0x2f, 0x4}, 0x6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x3, 0x6, 0x1}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x935, 0x8000, 0x3, 0x3, 0x23}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x4, 0x5, 0x5a4, 0x7f}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x7, 0xffffffffffffffff, 0x63, 0x4}, 0x2}}]}, {0x97, 0x6, "6dc5d4e28d7270e7c01759350e96a54139ab0947d6b49a099d928dbb5553e797537a8a7bcec682dc7d4c34ad0d418c693c63b16d9fc8eaa536cc6736bd266546adec041d3784e962d090695ad1288d4c9c2b5c6a8fd20fb6ba31c884134505b389859aa82f1735f62469c956f9df391e243caa71c5d3203d127dc6f0919df1dc128e77ffacfa4a4ca5885b2e9f70ea2df2a5f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x5c, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x23, 0x6, "b93131299c45ee80e6217f4b155003d81d7dfb67703a30039e135eef185109"}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_csum={0xd0, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9812, 0x4, 0x4, 0xd8}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x20000000, 0x10001}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4, 0x7, 0x5, 0x2}, 0x1f}}]}, {0x50, 0x6, "d860a011f67a9459a269b19671cd29065a597b3fa07c65ce88d74cf563f6f3793af7ad5b06f90017edc28b4cf5cc2e22a9cff972b96b2abde30381bb6b300c7999fffe34a60c28c8efb9bf68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xec, 0x10, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x3, 0x8, 0x6, 0x5}}, @TCA_CT_LABELS={0x14, 0x7, "8eecbc51eadfcc13527407e01bb139e9"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x68, 0x6, "f0697837520c9d7acf451ddea8461e0f3fa8670a6958ec215cd8a5ea83a015e71e0b311f7060abf5f3455410f7c46fbf496b28de42e03f211d2cff61e53bba2692ca4fc6d37bed6aad63247f9526b06650860c9b5412e5f494e5554d86255ab2f34b6492"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x14c, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6b, 0x4, 0x7, 0xa1ad, 0x4}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0xfc, 0x6, "e3095ef78bad55d7e08d0ddf7a97d4d2a3a8da30a7e60a2aa09927734c96e4b3950a35661eecb7e977c93a4f6e37ceec1b9d731454f85a4fe4405fc0c33810d47179db695902654410d749563947da165cbd04f57a982200dfb21f4395a490633b6dddf75b902befc87b66a0c24cd028b73f09a61d4fa8b92f049d6f282423fd51b7495853d17df14436bf7c81422b5be36fb2329cb0e5b7a1a464a6c3b787963a1dae1f6d3ebcb93cded57e58491f635fb7bf96cba3cb9ebfeffabd5ee487e2c78024d77302ea3701041f337e0a94ed4fa3c5fa8ae112c920aaab29203e2a866c8c736b504859634b9f07b446709d8febd5142d4a996cb9"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 3m47.118893877s ago: executing program 0 (id=482): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x6352, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1170, 0x190, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @remote, [0xff, 0x322, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'veth0_vlan\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e21, 0x40, 0x4, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1], 0xfe}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xd2a8, 0xffff, 0x1, 0x0, "eadf1dcd205687fabd531c7dff55e269458a5d7cfefb89a8e64ffb02d92b3d2513f27f3c85c5ef29e602d2a4bdb3ca6f29735bf58f05dfeb885010218f10de38"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xffffffff, 0xff000000], [0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'vlan1\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d2], 0xdde, 0x2, 0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0xc800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a8000000000101040000000000000000020000003c0001802c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000007170c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000bb1400040000000000000000000000ffffac1e00010c000280050001000000000042ff0740000000001400068008000100ac1414bb08000200e0000001"], 0xa8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x1e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x4000040) sendto$inet(r3, 0x0, 0x0, 0x2004cfe9, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800010000000000fbdbdf251d010900500012804c00f88045004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e2e6478e60ffc3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d000000200106801c01ac8018013e801401a080100161800c019d800801", @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3m46.652781715s ago: executing program 0 (id=487): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000108fefffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="ed131600048ade0004002b801400030076657468305f766972745f7769666900"], 0x38}}, 0x400c040) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x10, 0x4, 0x87ffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x3, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x3, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x13c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000070605000000000008000000050040000900020073797a3100000000050001000750"], 0x28}}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e20, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) fsetxattr(r5, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='\x00', 0x1, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, &(0x7f0000006140)) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5403, 0x0, 0x0) 3m46.091030166s ago: executing program 0 (id=493): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', 0x0}) timer_create(0x0, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r1}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x18000, &(0x7f0000000240)={[{@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@commit={'commit', 0x3d, 0x100}}, {@inlinecrypt}]}, 0x3, 0x4df, &(0x7f0000000680)="$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") r2 = epoll_create(0x3ff) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r3, 0x10c000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r4 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000440)={0x2000000}) syz_open_dev$sg(0x0, 0x0, 0x800) r6 = mq_open(&(0x7f0000000140)='commit', 0x2, 0x20, &(0x7f0000000180)={0xffffffffffffff01, 0xbd, 0x3, 0x80000000}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) mq_timedreceive(r6, &(0x7f0000000340)=""/65, 0x41, 0xb89, &(0x7f0000000400)={r7, r8+10000000}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000000c0)={0x4}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@netkit}, 0x1c) getsockopt$inet6_tcp_int(r9, 0x6, 0x2b, 0x0, 0x0) 3m45.663023494s ago: executing program 0 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001180)="b9074ee92d14cc047497e5f0888e", 0x0, 0x8, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x8000000}]}}]}, 0x48}}, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x1, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000200008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 3m45.655497384s ago: executing program 32 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57bbb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333a8b1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d7500760600f3ffb2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a08ff275df45508ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a03b4c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b1eb176d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4f9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000061d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a381b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df620047bade4ba41ee0141843958479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2af2b96779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd02000000bf48ea48e0e1f463d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a24460e545c71e1940c998f39ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d596b5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c3e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1a1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a1866b598a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a8adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cea48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89e11a300510776934e87bb3c21394f46954a012b2a3b0760f5bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb000000000000000000000000001b58cadcc5aaf65e05663985a177aa1d1ea2ad1b8151c7d58f5b92827f550269b3585d98e1394e816a477e52ce2f6de2bd7192f46cf965e774968d151d2bda084b10ec4c8d2c6ab582b1e5e3ed874235ff128c661298ed75879d8a4025ad1c3d9ef6355dc7284c6e648a61da026a777fcc7ae2c60ce64a2f2b0000000000000000000000000000003022110d1230e998429a6fd8f35939a8ae5acc89123839d84b98df6f8ee2ad0b238759bf400ac14c591aefe9660076a494f73b0ea8f3cb4a9c2e4f745a2afb593fabb9481600b2f44e6415153c1f8cf974a226d2700608bb2838ef07d75aed8b082716be3c37f60f48b9995f6325fdaa1c164b1e2bcbde00"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001180)="b9074ee92d14cc047497e5f0888e", 0x0, 0x8, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x8000000}]}}]}, 0x48}}, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x1, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000200008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 8.16552368s ago: executing program 1 (id=2686): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000300)) 7.389344751s ago: executing program 1 (id=2693): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 7.219705097s ago: executing program 5 (id=2695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket(0x840000000002, 0x4, 0xff) sendmmsg$inet(r4, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x100c404, &(0x7f0000000540)={[{@nodots}, {@dots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, 0x0) sendmsg$kcm(r5, 0x0, 0x4d090) 7.216279237s ago: executing program 1 (id=2696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 6.338982842s ago: executing program 1 (id=2699): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) clock_gettime(0x0, &(0x7f0000000140)) socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000180)) capset(0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)="1ca8fa6ae78fd3f386b6b0e9173dc3cf41ae6d9126d1850d47920f8c494156af976822ad5b8f3bbb50dd3fd9242743277d7a61c589a9d7bfd97c10", 0x3b) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="48bd370e9b04cdd58b47f6e09cfb9f3da5bfb5103ee20fde78430b0ebd4bba2a6819453e7083a49ebd789e7e2aa08d67"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xba9315253d54dce6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) io_uring_setup(0x78f2, &(0x7f0000000400)={0x0, 0xef48, 0x4000, 0x2, 0x23d, 0x0, r0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x7041, 0x0) unshare(0xe060400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") r4 = inotify_init1(0x0) fcntl$setsig(r4, 0xa, 0x40000000100b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xf9, 0x1ff, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7, 0x10, 0x4, 0x3}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) 6.112456201s ago: executing program 1 (id=2703): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000300)) 5.554915693s ago: executing program 3 (id=2710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x4, 0x0, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 5.440069787s ago: executing program 5 (id=2712): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={0x0}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)) pselect6(0x0, 0x0, &(0x7f0000000400)={0x59ddaf4c, 0xa0ee, 0x4, 0x7, 0x0, 0x5, 0x64, 0x80}, &(0x7f0000000600)={0x2, 0x3, 0x1, 0x0, 0xc, 0x8000000000000000, 0x5, 0x9}, &(0x7f0000000fc0), &(0x7f0000001040)={&(0x7f0000001000)={[0x1ff]}, 0x8}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x8, 0x7f, 0x8, 0x0, 0xfffffffffffffffd, 0x24, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x4}, 0xc500, 0xffffffffffff0001, 0x8, 0x7, 0x6, 0x8, 0x8000, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000850000006d924480a962c58975144c7c443cabf821ef389af66e5cbec8c1aeb941255998209e04366e29c8315bd5ec6ad66232d7715dbd03e9486136c899f03df8e24cb5c9110791df446fef3d296a84827afbf2fb745e3650421e8c77a3f3633c32ce773b5491b8341a86f86912180aef80030d837a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 5.439335347s ago: executing program 1 (id=2713): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") 3.971959275s ago: executing program 3 (id=2722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 3.738989904s ago: executing program 5 (id=2723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket(0x840000000002, 0x4, 0xff) sendmmsg$inet(r4, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x100c404, &(0x7f0000000540)={[{@nodots}, {@dots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, 0x0) sendmsg$kcm(r5, 0x0, 0x4d090) 3.570115331s ago: executing program 3 (id=2725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 3.346210529s ago: executing program 3 (id=2727): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) memfd_create(0x0, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x853}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socket$packet(0x11, 0x3, 0x300) socket(0x200000000000011, 0x2, 0xd) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, 0x0, 0x0, 0x3a, 0x5) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.010768712s ago: executing program 5 (id=2733): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[], 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) 1.500120312s ago: executing program 4 (id=2737): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014", 0x5}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380), 0x3ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000100), 0x7, r0}, 0x38) 1.427099384s ago: executing program 2 (id=2738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x9, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 1.351104078s ago: executing program 4 (id=2739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.348937808s ago: executing program 4 (id=2740): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.300145689s ago: executing program 4 (id=2741): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 1.29245624s ago: executing program 2 (id=2742): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x3010840, &(0x7f00000001c0)=ANY=[], 0x1, 0x28a, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x1, 0xfffffffffffffffe}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x26000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) unshare(0x8000000) 1.218879993s ago: executing program 4 (id=2743): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000029c0)=@newtclass={0x4c, 0x28, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x2}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd9}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x19}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_RATE={0x6, 0x5, {0xff, 0x9}}]}, 0x4c}}, 0x2000400c) recvmsg$can_j1939(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/73, 0x49}, {&(0x7f00000027c0)=""/191, 0xbf}, {&(0x7f0000002880)}], 0x5, &(0x7f0000002940)=""/52, 0x34}, 0x40000102) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x1ff, 0x6, 0x800}) r3 = fcntl$dupfd(r0, 0x406, r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x40010000, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r6, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x9, 0x18}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x9, 0x18}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x12, 0x8, 0x401, 0xfffffffa, 0x41001, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x80000000}, 0xc) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000010000000000000800000018000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fdffffff030200000500000018320000050000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x4, 0xed, &(0x7f0000000480)=""/237, 0x41000, 0x66, '\x00', r1, @cgroup_sock_addr=0x1d, r3, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x1ff, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000780)=[r5, r6, r7, r8, r9, r10, r11, r12], &(0x7f00000007c0)=[{0x5, 0x2, 0x3, 0x3}, {0x3, 0x2, 0x8, 0x3}, {0x4, 0x5, 0xd, 0xb}, {0x1, 0x4, 0x6, 0x3}, {0x0, 0x5, 0x6, 0x8}, {0x3, 0x4, 0x1, 0x1}, {0x4, 0x1, 0x0, 0xb}, {0x0, 0x4, 0x10, 0x6}], 0x10, 0xfffff001}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1c0000}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f00000011c0)="$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") r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r13, 0x2, 0x2, 0x0) r14 = syz_open_dev$ttys(0xc, 0x2, 0x1) r15 = socket$qrtr(0x2a, 0x2, 0x0) r16 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write$binfmt_aout(r16, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r15, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @empty, 'lo\x00'}}, 0x80, 0x0}, 0x0) ioctl$VT_GETSTATE(r14, 0x5603, &(0x7f0000000000)={0x94, 0x8, 0x1}) 1.146919755s ago: executing program 2 (id=2744): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000000cf00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000400)={0x0, 0xfb, 0x81, 0x1, 0x1, "5bb1aa9eecabd8a6b522014e9db53a1b", "93af84ee473b6e60b109bf163f1c4ac249e268306c07831511d03f391caf70405c99da11d9a8fc14687c6d514ef31a4ce422e57245c24a6943647e02b707c28d96f1c052521ea61fcdad12507603e6146ac11e96634ac367a186f507d563e58dd8f7fa0655e0a2cc83aec6e5"}, 0x81, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) getdents(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000180)=""/61) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000080)={0x2000, 0xd000007}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xffffffff) 1.104851157s ago: executing program 5 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) connect$unix(r6, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x20040040) socket$pppl2tp(0x18, 0x1, 0x1) r9 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) tgkill(r9, r10, 0x2a) 966.870653ms ago: executing program 3 (id=2746): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x40c, &(0x7f00000000c0)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@noinit_itable}, {@auto_da_alloc}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x9) fallocate(r2, 0x10, 0xbf9, 0x20003fe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 521.26183ms ago: executing program 5 (id=2747): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee00}, {0x0, 0x0, 0x7f, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 457.105193ms ago: executing program 2 (id=2748): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 456.473083ms ago: executing program 3 (id=2749): prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000004000)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x3b}], @pkt_toobig={0x2, 0x0, 0x0, 0xd943, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2}}}}}}, 0x6e) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup, 0x16, 0x0, 0xc, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c004) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@ifindex, 0xffffffffffffffff, 0xd, 0x8, 0xffffffffffffffff, @void, @value=r9, @void, @void, r6}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) r12 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={@empty, 0x17, r11}) 362.690457ms ago: executing program 4 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 81.625387ms ago: executing program 2 (id=2751): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 0s ago: executing program 2 (id=2752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x3, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) kernel console output (not intermixed with test programs): nges committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.047400][T10195] batadv_slave_1: entered promiscuous mode [ 265.077017][T10195] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 265.098776][T10199] loop2: detected capacity change from 0 to 512 [ 265.114265][T10195] syz_tun: entered promiscuous mode [ 265.125144][T10195] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 265.145214][T10192] loop4: detected capacity change from 0 to 512 [ 265.157963][T10192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 265.201579][T10192] EXT4-fs (loop4): 1 truncate cleaned up [ 265.247710][T10192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.274074][ T28] audit: type=1400 audit(1778638006.964:1975): avc: denied { write } for pid=10191 comm="syz.4.2000" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.296918][T10208] loop3: detected capacity change from 0 to 256 [ 265.327847][T10208] FAT-fs (loop3): Directory bread(block 64) failed [ 265.334504][T10208] FAT-fs (loop3): Directory bread(block 65) failed [ 265.341085][T10208] FAT-fs (loop3): Directory bread(block 66) failed [ 265.347648][T10208] FAT-fs (loop3): Directory bread(block 67) failed [ 265.373138][T10191] batadv_slave_1: left promiscuous mode [ 265.394443][T10208] FAT-fs (loop3): Directory bread(block 68) failed [ 265.395044][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'. [ 265.411825][T10215] program syz.2.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.414720][T10208] FAT-fs (loop3): Directory bread(block 69) failed [ 265.433272][T10208] FAT-fs (loop3): Directory bread(block 70) failed [ 265.440377][T10208] FAT-fs (loop3): Directory bread(block 71) failed [ 265.454809][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'. [ 265.465296][T10208] FAT-fs (loop3): Directory bread(block 72) failed [ 265.477369][T10208] FAT-fs (loop3): Directory bread(block 73) failed [ 265.485267][T10215] team_slave_0: left allmulticast mode [ 265.492060][T10215] team0 (unregistering): Port device team_slave_0 removed [ 265.492504][T10192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.512930][T10215] team_slave_1: left allmulticast mode [ 265.519171][T10215] team0 (unregistering): Port device team_slave_1 removed [ 265.535766][T10208] syz.3.2006: attempt to access beyond end of device [ 265.535766][T10208] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 265.705548][ T28] audit: type=1326 audit(1778638007.394:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.4.2010" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa41d8ce59 code=0x0 [ 265.793135][T10223] program syz.3.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.881819][T10225] vhci_hcd vhci_hcd.0: invalid port number 23 [ 266.002891][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'. [ 266.134914][T10233] loop2: detected capacity change from 0 to 512 [ 266.491976][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.622173][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 266.631401][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 266.641085][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 266.650126][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2021'. [ 266.811466][T10259] loop1: detected capacity change from 0 to 512 [ 266.860717][ T28] audit: type=1400 audit(1778638008.574:1977): avc: denied { sys_module } for pid=10254 comm="syz.1.2023" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 266.890147][T10259] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 267.065065][ T28] audit: type=1326 audit(1778638008.724:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.4.2025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa41d8ce59 code=0x7ffc0000 [ 267.089510][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2025'. [ 267.105085][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2026'. [ 267.130536][ T28] audit: type=1326 audit(1778638008.724:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10261 comm="syz.4.2025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa41d8ce59 code=0x7ffc0000 [ 267.162847][T10262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.176545][T10262] bond3: Unable to set up delay as MII monitoring is disabled [ 267.204991][T10271] loop3: detected capacity change from 0 to 512 [ 267.389303][T10279] loop3: detected capacity change from 0 to 256 [ 267.442404][T10285] netlink: 'syz.1.2033': attribute type 15 has an invalid length. [ 267.490660][ T3433] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 267.500130][T10285] netlink: 'syz.1.2033': attribute type 15 has an invalid length. [ 267.509212][ T3433] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 267.519373][ T3433] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 267.530274][ T3433] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 267.668570][T10288] loop4: detected capacity change from 0 to 2048 [ 267.806030][T10288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.243855][T10298] loop1: detected capacity change from 0 to 512 [ 268.291895][T10298] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 268.355148][T10298] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 268.397862][T10298] EXT4-fs (loop1): failed to initialize system zone (-117) [ 268.426824][T10298] EXT4-fs (loop1): mount failed [ 268.493967][T10313] loop3: detected capacity change from 0 to 2048 [ 268.542248][T10311] veth0: entered promiscuous mode [ 268.556326][T10313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.587521][T10311] bond0: entered promiscuous mode [ 268.593066][T10311] bond_slave_0: entered promiscuous mode [ 268.600961][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 268.600985][ T28] audit: type=1400 audit(1778638010.314:2048): avc: denied { write } for pid=10312 comm="syz.3.2042" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.612535][T10311] bond_slave_1: entered promiscuous mode [ 268.699090][T10310] bond0: left promiscuous mode [ 268.703916][T10310] bond_slave_0: left promiscuous mode [ 268.709384][T10310] bond_slave_1: left promiscuous mode [ 268.723590][T10321] loop1: detected capacity change from 0 to 512 [ 268.730900][T10310] veth0: left promiscuous mode [ 268.740642][T10321] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 269.187415][ T36] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 269.202523][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 269.216501][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 269.216501][ T36] [ 269.226527][ T36] EXT4-fs (loop3): Total free blocks count 0 [ 269.232612][ T36] EXT4-fs (loop3): Free/Dirty block details [ 269.238775][ T36] EXT4-fs (loop3): free_blocks=4096 [ 269.245881][ T36] EXT4-fs (loop3): dirty_blocks=512 [ 269.252263][ T36] EXT4-fs (loop3): Block reservation details [ 269.271509][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.304016][ T36] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 269.339581][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 269.364779][ T3301] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 269.368096][T10328] loop4: detected capacity change from 0 to 512 [ 269.395346][T10328] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.410235][T10328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.433881][T10331] loop3: detected capacity change from 0 to 512 [ 269.441852][T10328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.443537][T10331] EXT4-fs: Ignoring removed bh option [ 269.459195][T10328] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.476880][ T28] audit: type=1400 audit(1778638011.194:2049): avc: denied { write } for pid=10327 comm="syz.4.2047" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.499401][T10331] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 269.508561][T10331] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 269.518816][T10331] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 269.539404][T10331] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 269.551851][ T28] audit: type=1400 audit(1778638011.274:2050): avc: denied { write } for pid=10327 comm="syz.4.2047" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.575020][T10331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.635408][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.795580][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.815970][T10350] loop1: detected capacity change from 0 to 2048 [ 269.954177][T10357] program syz.4.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.964665][T10350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.984287][T10362] 9p: Bad value for 'rfdno' [ 269.990673][ T28] audit: type=1400 audit(1778638011.704:2051): avc: denied { write } for pid=10349 comm="syz.1.2056" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.284218][T10364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.329302][T10364] __nla_validate_parse: 6 callbacks suppressed [ 270.329423][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 270.405076][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2061'. [ 270.453479][T10371] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2060'. [ 270.532218][T10371] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.547913][T10371] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 270.637940][T10371] EXT4-fs (loop3): failed to initialize system zone (-117) [ 270.733627][T10371] EXT4-fs (loop3): mount failed [ 270.894545][T10381] EXT4-fs: Ignoring removed bh option [ 270.920908][T10381] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.952115][T10381] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 270.981065][T10381] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 271.034718][T10381] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 271.043354][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.080315][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 271.228106][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.496319][ T30] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 271.533510][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 271.580776][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 271.580776][ T30] [ 271.615470][ T30] EXT4-fs (loop1): Total free blocks count 0 [ 271.632957][ T30] EXT4-fs (loop1): Free/Dirty block details [ 271.656241][ T30] EXT4-fs (loop1): free_blocks=4096 [ 271.677542][ T30] EXT4-fs (loop1): dirty_blocks=240 [ 271.683660][T10397] EXT4-fs: Ignoring removed bh option [ 271.715993][ T30] EXT4-fs (loop1): Block reservation details [ 271.726930][T10397] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.739055][ T30] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 271.753330][T10397] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 271.764771][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 271.788073][T10397] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 271.801503][ T3300] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 271.814916][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.826010][T10397] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 271.863812][T10397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.886667][T10403] 9p: Bad value for 'rfdno' [ 271.949484][T10407] FAULT_INJECTION: forcing a failure. [ 271.949484][T10407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.962793][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.1.2072 Not tainted syzkaller #0 PREEMPT(full) [ 271.962827][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.962844][T10407] Call Trace: [ 271.962922][T10407] [ 271.962930][T10407] __dump_stack+0x1d/0x30 [ 271.962953][T10407] dump_stack_lvl+0x95/0xd0 [ 271.962972][T10407] dump_stack+0x15/0x1b [ 271.962994][T10407] should_fail_ex+0x263/0x280 [ 271.963036][T10407] should_fail+0xb/0x20 [ 271.963097][T10407] should_fail_usercopy+0x1a/0x20 [ 271.963213][T10407] strncpy_from_user+0x27/0x250 [ 271.963321][T10407] __se_sys_memfd_create+0x20f/0x3b0 [ 271.963357][T10407] __x64_sys_memfd_create+0x31/0x40 [ 271.963446][T10407] x64_sys_call+0x1f22/0x3020 [ 271.963474][T10407] do_syscall_64+0x12c/0x3b0 [ 271.963547][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.963570][T10407] RIP: 0033:0x7fdbf46bce59 [ 271.963585][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.963601][T10407] RSP: 002b:00007fdbf310ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 271.963663][T10407] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007fdbf46bce59 [ 271.963679][T10407] RDX: 00007fdbf310eee0 RSI: 0000000000000000 RDI: 00007fdbf4752f4f [ 271.963694][T10407] RBP: 0000200000000740 R08: 00000000ffffffff R09: 0000000000000000 [ 271.963709][T10407] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 271.963723][T10407] R13: 00007fdbf310eee0 R14: 00007fdbf310eea0 R15: 0000200000000000 [ 271.963742][T10407] [ 271.982789][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.993541][T10409] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2076'. [ 272.166130][T10416] set_capacity_and_notify: 4 callbacks suppressed [ 272.166147][T10416] loop1: detected capacity change from 0 to 512 [ 272.179504][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.192285][T10413] loop4: detected capacity change from 0 to 512 [ 272.198951][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.200018][T10416] EXT4-fs: Ignoring removed bh option [ 272.244145][T10413] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.257542][T10416] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.277984][T10413] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 272.286629][T10416] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 272.295795][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 272.305331][T10413] EXT4-fs (loop4): failed to initialize system zone (-117) [ 272.312778][T10416] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 272.322032][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 272.322629][T10413] EXT4-fs (loop4): mount failed [ 272.331322][T10416] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 272.344713][T10421] netlink: 'syz.3.2079': attribute type 15 has an invalid length. [ 272.357303][T10421] netlink: 'syz.3.2079': attribute type 18 has an invalid length. [ 272.367744][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 272.369361][T10416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.394733][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 272.403694][T10424] netlink: 'syz.3.2079': attribute type 15 has an invalid length. [ 272.421490][T10424] netlink: 'syz.3.2079': attribute type 18 has an invalid length. [ 272.471580][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.789072][T10436] loop3: detected capacity change from 0 to 2048 [ 272.798559][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 272.906565][T10436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.025496][T10442] 9p: Bad value for 'rfdno' [ 273.106261][T10444] loop2: detected capacity change from 0 to 512 [ 273.121544][T10444] EXT4-fs: Ignoring removed bh option [ 273.149643][T10444] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.163168][T10444] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 273.180000][T10444] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 273.193856][T10444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 273.207934][T10444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.596441][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.687761][T10451] loop4: detected capacity change from 0 to 1024 [ 273.715343][T10453] loop2: detected capacity change from 0 to 512 [ 273.769542][T10453] EXT4-fs: inline encryption not supported [ 273.813634][T10453] EXT4-fs: Invalid want_extra_isize -2147483648 [ 274.303459][T10459] loop5: detected capacity change from 0 to 256 [ 274.330878][T10459] FAT-fs (loop5): Directory bread(block 64) failed [ 274.339145][T10459] FAT-fs (loop5): Directory bread(block 65) failed [ 274.346789][T10459] FAT-fs (loop5): Directory bread(block 66) failed [ 274.362221][T10459] FAT-fs (loop5): Directory bread(block 67) failed [ 274.369627][T10459] FAT-fs (loop5): Directory bread(block 68) failed [ 274.376623][T10459] FAT-fs (loop5): Directory bread(block 69) failed [ 274.383303][T10459] FAT-fs (loop5): Directory bread(block 70) failed [ 274.389978][T10459] FAT-fs (loop5): Directory bread(block 71) failed [ 274.396831][T10459] FAT-fs (loop5): Directory bread(block 72) failed [ 274.403456][T10459] FAT-fs (loop5): Directory bread(block 73) failed [ 274.410778][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.429213][T10451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.516013][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.576504][ T28] audit: type=1400 audit(1778638016.294:2052): avc: denied { create } for pid=10473 comm="syz.4.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 274.770803][T10482] loop2: detected capacity change from 0 to 512 [ 274.790078][T10482] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 274.809396][T10482] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.817971][T10482] EXT4-fs (loop2): failed to initialize system zone (-117) [ 274.827273][T10482] EXT4-fs (loop2): mount failed [ 274.986448][T10498] loop3: detected capacity change from 0 to 512 [ 274.998704][T10498] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 275.267159][T10509] loop2: detected capacity change from 0 to 512 [ 275.282832][T10509] EXT4-fs: inline encryption not supported [ 275.289156][T10509] EXT4-fs: Invalid want_extra_isize -2147483648 [ 275.410162][T10513] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c019, mo2=0002] [ 275.418308][T10513] EXT4-fs (loop5): orphan cleanup on readonly fs [ 275.425182][T10513] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 275.440071][T10513] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 275.446960][T10513] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.2109: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 275.464932][T10513] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 275.465115][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 275.480735][ C1] EXT4-fs (loop5): last error at time 1778638017: ext4_ext_check_inode:521: inode 13 [ 275.501235][T10513] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2109: couldn't read orphan inode 13 (err -117) [ 275.536000][T10513] loop5: lost filesystem error report for type 5 error -117 [ 275.537661][T10513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.620678][T10523] tmpfs: Unknown parameter 'sysvgroups' [ 275.841075][T10528] program syz.2.2113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.945946][T10534] can0: slcan on ptm0. [ 275.959759][ T28] audit: type=1400 audit(1778638017.674:2053): avc: denied { read } for pid=3018 comm="dhcpcd" name="n26" dev="tmpfs" ino=19599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.963673][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.021158][ T28] audit: type=1400 audit(1778638017.674:2054): avc: denied { open } for pid=3018 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=19599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.057694][T10530] FAT-fs (loop1): Filesystem has been set read-only [ 276.074337][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.094034][ T28] audit: type=1400 audit(1778638017.674:2055): avc: denied { getattr } for pid=3018 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=19599 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.120355][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.145637][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.163067][T10542] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 276.166300][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.194489][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.196997][ T28] audit: type=1326 audit(1778638017.724:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.213857][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.273426][ T28] audit: type=1326 audit(1778638017.724:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.276547][T10534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.323627][ T28] audit: type=1326 audit(1778638017.724:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.332206][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.349202][ T28] audit: type=1326 audit(1778638017.724:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.349241][ T28] audit: type=1326 audit(1778638017.724:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.349275][ T28] audit: type=1326 audit(1778638017.724:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10532 comm="syz.2.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 276.485970][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.494227][T10530] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.509129][T10529] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 276.564283][T10532] can0 (unregistered): slcan off ptm0. [ 276.593361][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.647542][T10567] __nla_validate_parse: 2 callbacks suppressed [ 276.647631][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 276.697243][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 276.711415][T10570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.775185][T10579] 9p: Bad value for 'source' [ 276.942884][T10594] EXT4-fs: Ignoring removed bh option [ 276.956245][T10594] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.979296][T10594] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 277.002577][T10594] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 277.030694][T10594] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 277.053252][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.091482][T10600] veth0: entered promiscuous mode [ 277.097087][T10599] veth0: left promiscuous mode [ 277.334357][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.359393][T10607] set_capacity_and_notify: 6 callbacks suppressed [ 277.359414][T10607] loop5: detected capacity change from 0 to 512 [ 277.438903][T10607] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 277.598048][T10625] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2138'. [ 277.639910][T10628] veth0: entered promiscuous mode [ 277.651002][T10625] loop2: detected capacity change from 0 to 512 [ 277.654817][T10627] veth0: left promiscuous mode [ 277.674967][T10623] loop3: detected capacity change from 0 to 512 [ 277.706536][T10623] EXT4-fs: inline encryption not supported [ 277.712728][T10623] EXT4-fs: Invalid want_extra_isize -2147483648 [ 277.721606][T10625] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 277.738396][ T49] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 277.753413][T10625] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 277.769948][T10625] EXT4-fs (loop2): failed to initialize system zone (-117) [ 277.793690][T10625] EXT4-fs (loop2): mount failed [ 277.808550][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 277.853829][ T49] EXT4-fs (loop4): This should not happen!! Data will be lost [ 277.853829][ T49] [ 277.887070][ T49] EXT4-fs (loop4): Total free blocks count 0 [ 277.895800][ T49] EXT4-fs (loop4): Free/Dirty block details [ 277.910665][ T49] EXT4-fs (loop4): free_blocks=4096 [ 277.916649][ T49] EXT4-fs (loop4): dirty_blocks=512 [ 277.925970][ T49] EXT4-fs (loop4): Block reservation details [ 277.938995][T10635] loop2: detected capacity change from 0 to 512 [ 277.945388][ T49] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 277.957421][T10635] EXT4-fs: Ignoring removed bh option [ 277.964832][T10637] loop1: detected capacity change from 0 to 256 [ 277.976013][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 277.996005][T10635] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.004776][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 278.020276][T10635] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 278.056573][T10635] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 278.068051][T10637] FAT-fs (loop1): Directory bread(block 64) failed [ 278.076570][T10635] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 278.086270][T10635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.095692][T10637] FAT-fs (loop1): Directory bread(block 65) failed [ 278.139160][T10637] FAT-fs (loop1): Directory bread(block 66) failed [ 278.173839][T10637] FAT-fs (loop1): Directory bread(block 67) failed [ 278.183992][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.188206][T10637] FAT-fs (loop1): Directory bread(block 68) failed [ 278.190394][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.201102][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.203291][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.203371][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.224975][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.231372][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.232933][T10637] FAT-fs (loop1): Directory bread(block 69) failed [ 278.238178][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.238221][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.238268][T10642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.257633][T10637] FAT-fs (loop1): Directory bread(block 70) failed [ 278.257746][T10637] FAT-fs (loop1): Directory bread(block 71) failed [ 278.264967][T10642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.282056][T10637] FAT-fs (loop1): Directory bread(block 72) failed [ 278.297063][T10637] FAT-fs (loop1): Directory bread(block 73) failed [ 278.651342][T10654] loop1: detected capacity change from 0 to 2048 [ 278.682648][T10654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.830534][T10664] veth0: entered promiscuous mode [ 278.863221][T10662] veth0: left promiscuous mode [ 278.863636][T10668] loop2: detected capacity change from 0 to 512 [ 278.945584][T10668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.982321][T10668] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.012498][T10674] loop4: detected capacity change from 0 to 512 [ 279.033437][T10674] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 279.188404][T10677] loop3: detected capacity change from 0 to 512 [ 279.224363][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.244749][T10682] loop4: detected capacity change from 0 to 512 [ 279.251557][T10677] EXT4-fs: inline encryption not supported [ 279.273625][T10682] EXT4-fs: Ignoring removed bh option [ 279.292205][T10677] EXT4-fs: Invalid want_extra_isize -2147483648 [ 279.331798][T10682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.349695][T10682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 279.389439][T10682] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 279.402318][T10682] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 279.410968][T10682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.468098][T10684] FAT-fs (loop5): Directory bread(block 64) failed [ 279.474750][T10684] FAT-fs (loop5): Directory bread(block 65) failed [ 279.481360][T10684] FAT-fs (loop5): Directory bread(block 66) failed [ 279.487880][T10684] FAT-fs (loop5): Directory bread(block 67) failed [ 279.527160][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.536642][T10684] FAT-fs (loop5): Directory bread(block 68) failed [ 279.551445][T10684] FAT-fs (loop5): Directory bread(block 69) failed [ 279.558013][T10684] FAT-fs (loop5): Directory bread(block 70) failed [ 279.595762][T10684] FAT-fs (loop5): Directory bread(block 71) failed [ 279.620633][T10684] FAT-fs (loop5): Directory bread(block 72) failed [ 279.627391][T10684] FAT-fs (loop5): Directory bread(block 73) failed [ 279.662722][ T116] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 279.749550][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 279.749567][ T28] audit: type=1326 audit(1778638277.465:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.3.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa981bce59 code=0x0 [ 279.800295][ T116] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 279.812874][ T116] EXT4-fs (loop1): This should not happen!! Data will be lost [ 279.812874][ T116] [ 279.822613][ T116] EXT4-fs (loop1): Total free blocks count 0 [ 279.828830][ T116] EXT4-fs (loop1): Free/Dirty block details [ 279.834811][ T116] EXT4-fs (loop1): free_blocks=4096 [ 279.840349][ T116] EXT4-fs (loop1): dirty_blocks=400 [ 279.845703][ T116] EXT4-fs (loop1): Block reservation details [ 279.852323][ T116] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 279.860373][T10712] netlink: 'syz.3.2169': attribute type 17 has an invalid length. [ 279.868289][ T116] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 279.885643][T10711] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 279.898758][ T3300] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 280.049738][ T28] audit: type=1400 audit(1778638277.777:2138): avc: denied { egress } for pid=3390 comm="kworker/0:4" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 280.087327][ T28] audit: type=1400 audit(1778638277.777:2139): avc: denied { sendto } for pid=3390 comm="kworker/0:4" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 280.134678][T10712] veth0_to_team: entered promiscuous mode [ 280.199706][ T7965] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 280.200890][T10710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.222805][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 280.233337][ T30] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 280.241995][ T30] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 280.251680][ T30] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 280.263106][ T30] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 280.282286][T10725] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2173'. [ 280.301761][T10725] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 280.317556][T10725] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 280.335811][T10726] EXT4-fs: Ignoring removed bh option [ 280.341994][T10725] EXT4-fs (loop1): failed to initialize system zone (-117) [ 280.350918][T10725] EXT4-fs (loop1): mount failed [ 280.363986][T10726] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.383455][T10726] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 280.443037][T10726] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 280.452970][T10726] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 280.453492][T10729] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2174'. [ 280.463649][T10726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.486621][T10729] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2174'. [ 280.498602][ T28] audit: type=1400 audit(1778638278.180:2140): avc: denied { ioctl } for pid=10728 comm="syz.2.2174" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29848 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.528239][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.587996][T10738] hsr0: entered promiscuous mode [ 280.604001][T10736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.618467][ T28] audit: type=1400 audit(1778638278.342:2141): avc: denied { write } for pid=10735 comm="syz.5.2177" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.665194][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.745978][T10746] EXT4-fs: inline encryption not supported [ 280.752874][T10746] EXT4-fs: Invalid want_extra_isize -2147483648 [ 280.814398][T10751] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.839664][T10751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.897486][T10751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.028040][T10751] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.046390][ T28] audit: type=1400 audit(1778638278.775:2142): avc: denied { write } for pid=10750 comm="syz.1.2181" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.068524][ T28] audit: type=1400 audit(1778638278.775:2143): avc: denied { write } for pid=10750 comm="syz.1.2181" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.151943][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 281.160868][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2184'. [ 281.170039][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2184'. [ 281.228896][T10729] hsr0: left promiscuous mode [ 281.235663][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.333221][T10775] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 281.376755][T10783] syzkaller0: entered promiscuous mode [ 281.384390][T10783] syzkaller0: entered allmulticast mode [ 281.687106][T10803] EXT4-fs: Ignoring removed bh option [ 281.719263][T10803] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.744304][T10803] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 281.763090][ T28] audit: type=1400 audit(1778638279.480:2144): avc: denied { mounton } for pid=10804 comm="syz.1.2203" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 281.764453][T10803] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 281.798371][T10551] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 281.827785][T10803] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 281.847281][T10803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.992325][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 282.005530][T10805] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 282.013577][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 282.013577][ T36] [ 282.023644][T10805] FAT-fs (loop1): Filesystem has been set read-only [ 282.030303][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 282.032314][T10814] __nla_validate_parse: 2 callbacks suppressed [ 282.032357][T10814] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2204'. [ 282.043049][ T36] EXT4-fs (loop5): Free/Dirty block details [ 282.057497][ T36] EXT4-fs (loop5): free_blocks=4096 [ 282.063335][ T36] EXT4-fs (loop5): dirty_blocks=400 [ 282.068699][ T36] EXT4-fs (loop5): Block reservation details [ 282.074711][ T36] EXT4-fs (loop5): i_reserved_data_blocks=25 [ 282.082954][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 282.095729][ T5208] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 282.112495][ T28] audit: type=1400 audit(1778638279.843:2145): avc: denied { ioctl } for pid=10797 comm="syz.3.2199" path="socket:[30008]" dev="sockfs" ino=30008 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.237894][T10825] bond0: entered promiscuous mode [ 282.249554][T10814] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.276151][T10814] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 282.280135][T10825] bond_slave_0: entered promiscuous mode [ 282.284103][T10814] EXT4-fs (loop4): failed to initialize system zone (-117) [ 282.284136][T10814] EXT4-fs (loop4): mount failed [ 282.320692][T10825] bond_slave_1: entered promiscuous mode [ 282.341346][T10824] bond0: left promiscuous mode [ 282.353982][T10824] bond_slave_0: left promiscuous mode [ 282.359616][T10824] bond_slave_1: left promiscuous mode [ 282.418988][ T28] audit: type=1400 audit(1778638280.155:2146): avc: denied { bind } for pid=10831 comm="syz.2.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 282.583102][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2213'. [ 282.602016][T10836] set_capacity_and_notify: 14 callbacks suppressed [ 282.602034][T10836] loop3: detected capacity change from 0 to 512 [ 282.644002][T10836] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 282.805980][T10848] FAULT_INJECTION: forcing a failure. [ 282.805980][T10848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.822201][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 282.831113][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 282.840311][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 282.849265][T10845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 282.911957][T10848] CPU: 1 UID: 0 PID: 10848 Comm: syz.1.2215 Not tainted syzkaller #0 PREEMPT(full) [ 282.911987][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.912000][T10848] Call Trace: [ 282.912005][T10848] [ 282.912013][T10848] __dump_stack+0x1d/0x30 [ 282.912073][T10848] dump_stack_lvl+0x95/0xd0 [ 282.912094][T10848] dump_stack+0x15/0x1b [ 282.912112][T10848] should_fail_ex+0x263/0x280 [ 282.912140][T10848] should_fail+0xb/0x20 [ 282.912209][T10848] should_fail_usercopy+0x1a/0x20 [ 282.912246][T10848] _copy_from_iter+0xcf/0xea0 [ 282.912275][T10848] ? __alloc_skb+0x4f6/0x690 [ 282.912344][T10848] ? __alloc_skb+0x200/0x690 [ 282.912370][T10848] netlink_sendmsg+0x4ae/0x6f0 [ 282.912442][T10848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.912473][T10848] ____sys_sendmsg+0x563/0x5b0 [ 282.912501][T10848] ___sys_sendmsg+0x195/0x1e0 [ 282.912556][T10848] __sys_sendmmsg+0x185/0x320 [ 282.912604][T10848] __x64_sys_sendmmsg+0x57/0x70 [ 282.912634][T10848] x64_sys_call+0x27aa/0x3020 [ 282.912708][T10848] do_syscall_64+0x12c/0x3b0 [ 282.912742][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.912764][T10848] RIP: 0033:0x7fdbf46bce59 [ 282.912799][T10848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.912888][T10848] RSP: 002b:00007fdbf310f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.912909][T10848] RAX: ffffffffffffffda RBX: 00007fdbf4935fa0 RCX: 00007fdbf46bce59 [ 282.912924][T10848] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 282.912942][T10848] RBP: 00007fdbf310f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.913002][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.913015][T10848] R13: 00007fdbf4936038 R14: 00007fdbf4935fa0 R15: 00007ffc155e6298 [ 282.913043][T10848] [ 283.128815][T10856] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2219'. [ 283.180996][T10858] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 283.279387][T10868] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2221'. [ 283.546988][T10886] netlink: 'syz.4.2232': attribute type 10 has an invalid length. [ 283.559807][T10886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.568080][T10886] team0: Port device netdevsim2 added [ 283.616505][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.635986][T10894] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 283.686614][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.874186][T10916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.884029][T10916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.950834][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2250'. [ 284.058499][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 284.389289][T10947] loop5: detected capacity change from 0 to 1024 [ 284.444378][T10947] EXT4-fs: dax option not supported [ 284.614693][T10967] loop3: detected capacity change from 0 to 512 [ 284.626831][T10967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 284.638084][T10967] System zones: 0-2, 18-18, 34-34 [ 284.644627][T10967] EXT4-fs (loop3): orphan cleanup on readonly fs [ 284.651667][T10967] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #15: comm syz.3.2271: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 284.671578][T10967] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 284.671786][T10967] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.2271: Bad quota inode: 15, type: 2 [ 284.680991][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 284.681016][ C1] EXT4-fs (loop3): last error at time 2000000000: ext4_ext_check_inode:521: inode 15 [ 284.708273][T10967] loop3: lost filesystem error report for type 5 error -117 [ 284.710530][T10967] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 284.734568][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 284.734585][ T28] audit: type=1400 audit(2000000000.420:2161): avc: denied { bind } for pid=10971 comm="syz.4.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.761937][T10967] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 284.769268][T10967] EXT4-fs mount: 2 callbacks suppressed [ 284.769280][T10967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.799245][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.901226][T10974] loop4: detected capacity change from 0 to 8192 [ 284.957315][T10974] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 284.978125][T10974] FAT-fs (loop4): Filesystem has been set read-only [ 285.025409][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 285.187397][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.199646][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.248387][T11013] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 285.260638][T11013] bond4 (unregistering): Released all slaves [ 285.267955][T11015] netlink: 'syz.2.2294': attribute type 11 has an invalid length. [ 285.296674][T11017] batman_adv: batadv0: Adding interface: dummy0 [ 285.301553][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.311727][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.313104][T11017] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.345105][T11017] batman_adv: batadv0: Interface activated: dummy0 [ 285.372107][T11023] net_ratelimit: 5950 callbacks suppressed [ 285.372129][T11023] batadv0: mtu less than device minimum [ 285.385743][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.396819][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.407810][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.418907][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.429854][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.440834][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.451937][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.462992][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.473889][T11023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 285.493978][ T28] audit: type=1400 audit(2000000001.170:2162): avc: denied { bind } for pid=11028 comm="syz.4.2300" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.536239][ T28] audit: type=1400 audit(2000000001.170:2163): avc: denied { name_bind } for pid=11028 comm="syz.4.2300" src=65503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 285.561197][ T28] audit: type=1400 audit(2000000001.170:2164): avc: denied { node_bind } for pid=11028 comm="syz.4.2300" saddr=172.20.20.15 src=65503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 285.678639][ T28] audit: type=1400 audit(2000000001.360:2165): avc: denied { accept } for pid=11046 comm="syz.3.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.777948][T11057] netlink: 'syz.4.2313': attribute type 1 has an invalid length. [ 285.808660][T11057] bond4: entered promiscuous mode [ 285.814921][T11057] bond4: entered allmulticast mode [ 285.822189][T11057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.837301][T11057] bridge3: entered promiscuous mode [ 285.842657][T11057] bridge3: entered allmulticast mode [ 285.848824][T11057] bond4: (slave bridge3): Enslaving as a backup interface with an up link [ 285.905883][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.914979][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.929725][ T28] audit: type=1400 audit(2000000001.610:2166): avc: denied { bind } for pid=11069 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.993066][ T28] audit: type=1400 audit(2000000001.670:2167): avc: denied { associate } for pid=11075 comm="syz.3.2322" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.083277][ T28] audit: type=1400 audit(2000000001.760:2168): avc: denied { setopt } for pid=11087 comm="syz.3.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.153251][T11091] vlan3: entered promiscuous mode [ 286.154634][ T28] audit: type=1326 audit(2000000001.830:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11092 comm="syz.1.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 286.169572][T11091] bond0: entered promiscuous mode [ 286.186624][ T28] audit: type=1326 audit(2000000001.830:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11092 comm="syz.1.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 286.215356][T11093] loop1: detected capacity change from 0 to 128 [ 286.303519][T11101] loop4: detected capacity change from 0 to 1024 [ 286.318241][T11101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 286.330651][T11101] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.334998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811be8dc00: rx timeout, send abort [ 286.350057][T11101] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.2334: lblock 0 mapped to illegal pblock 0 (length 6) [ 286.365163][T11101] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 286.379597][T11101] EXT4-fs (loop4): This should not happen!! Data will be lost [ 286.379597][T11101] [ 286.392296][T11101] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.2334: lblock 0 mapped to illegal pblock 0 (length 1) [ 286.398875][T11106] loop1: detected capacity change from 0 to 512 [ 286.406837][T11101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2334: bg 0: block 112: padding at end of block bitmap is not set [ 286.426968][T11101] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 37 with max blocks 3 with error 28 [ 286.428394][T11106] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2335: inode has both inline data and extents flags [ 286.439758][T11101] EXT4-fs (loop4): This should not happen!! Data will be lost [ 286.439758][T11101] [ 286.462434][T11101] EXT4-fs (loop4): Total free blocks count 0 [ 286.468528][T11101] EXT4-fs (loop4): Free/Dirty block details [ 286.474559][T11101] EXT4-fs (loop4): free_blocks=0 [ 286.479576][T11101] EXT4-fs (loop4): dirty_blocks=32 [ 286.484751][T11101] EXT4-fs (loop4): Block reservation details [ 286.490968][T11106] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 286.492300][T11106] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2335: couldn't read orphan inode 15 (err -117) [ 286.506478][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 286.519951][ C0] EXT4-fs (loop1): initial error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 286.529401][ C0] EXT4-fs (loop1): last error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 286.542819][T11106] loop1: lost filesystem error report for type 5 error -117 [ 286.548607][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 286.579884][T11106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.598174][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.607849][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.630924][T11115] tmpfs: Unsupported parameter 'huge' [ 286.651428][T11106] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.2335: Directory hole found for htree leaf block 0 [ 286.677027][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.835110][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111a00a00: rx timeout, send abort [ 286.849412][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811be8dc00: abort rx timeout. Force session deactivation [ 287.185475][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.200421][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.343379][ C0] vcan0: j1939_tp_rxtimer: 0xffff888111a00a00: abort rx timeout. Force session deactivation [ 287.373428][T11145] loop5: detected capacity change from 0 to 1024 [ 287.389426][T11145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 287.401838][T11145] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.506045][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 287.779995][T11178] program syz.4.2364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.826139][T11182] __nla_validate_parse: 1 callbacks suppressed [ 287.826160][T11182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2366'. [ 289.782882][T11127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.819008][T11194] bond0: entered promiscuous mode [ 289.824245][T11194] bond_slave_0: entered promiscuous mode [ 289.830544][T11194] bond_slave_1: entered promiscuous mode [ 289.837293][T11193] bond0: left promiscuous mode [ 289.842875][T11193] bond_slave_0: left promiscuous mode [ 289.852704][T11193] bond_slave_1: left promiscuous mode [ 289.914487][T11202] loop4: detected capacity change from 0 to 512 [ 289.924738][T11202] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 290.288042][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 290.296970][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 290.306187][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 290.315131][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2382'. [ 290.444465][T11241] net_ratelimit: 12 callbacks suppressed [ 290.444509][T11241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.457032][T11241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.463649][T11241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.470296][T11241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.476846][T11241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.483396][T11241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.490159][T11241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.496725][T11241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.503271][T11241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.509757][T11241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.643459][T11233] loop2: detected capacity change from 0 to 2048 [ 290.652770][T11244] loop4: detected capacity change from 0 to 1024 [ 290.659653][T11244] EXT4-fs: Ignoring removed bh option [ 290.791194][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.841212][T11233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.882466][T11252] loop5: detected capacity change from 0 to 256 [ 291.027871][T11263] loop1: detected capacity change from 0 to 512 [ 291.049750][T11263] EXT4-fs: inline encryption not supported [ 291.076145][T11263] EXT4-fs: Invalid want_extra_isize -2147483648 [ 291.271790][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.321074][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'. [ 291.349684][T11274] vlan3: entered promiscuous mode [ 291.364139][T11274] gretap0: entered promiscuous mode [ 291.753058][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 291.863689][T11289] loop4: detected capacity change from 0 to 128 [ 291.910949][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 291.932659][T11289] FAT-fs (loop4): Filesystem has been set read-only [ 291.946543][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 291.957034][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 291.969603][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 291.984850][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.009020][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.019004][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.027142][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.035177][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.043992][T11289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 292.377221][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 292.377240][ T28] audit: type=1400 audit(2000000008.060:2196): avc: denied { write } for pid=11307 comm="syz.5.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 292.514160][T11310] loop1: detected capacity change from 0 to 256 [ 292.819969][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.032010][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 293.101959][T11377] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 293.184090][T11377] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 293.199306][T11391] loop1: detected capacity change from 0 to 256 [ 293.202220][T11395] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.2427'. [ 293.244837][T11395] loop4: detected capacity change from 0 to 512 [ 293.396903][T11395] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.448085][T11395] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 293.477501][T11395] EXT4-fs (loop4): failed to initialize system zone (-117) [ 293.505210][T11395] EXT4-fs (loop4): mount failed [ 293.579842][T11453] loop2: detected capacity change from 0 to 1024 [ 293.607870][T11453] EXT4-fs: Ignoring removed bh option [ 293.665858][T11453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.858748][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.866934][T11479] FAT-fs (loop5): Filesystem has been set read-only [ 293.873766][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.882057][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.889975][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.897939][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.905875][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.913842][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.921792][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.930023][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 293.938922][T11479] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 294.028839][T11484] EXT4-fs: Ignoring removed bh option [ 294.042375][T11484] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.051843][T11484] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 294.061145][T11484] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 294.071062][T11484] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 294.080151][T11484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.124968][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.296382][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.334329][T11492] bond0: entered promiscuous mode [ 294.341208][T11492] bond_slave_0: entered promiscuous mode [ 294.347506][T11492] bond_slave_1: entered promiscuous mode [ 294.372062][T11491] bond0: left promiscuous mode [ 294.379095][T11491] bond_slave_0: left promiscuous mode [ 294.384646][T11491] bond_slave_1: left promiscuous mode [ 294.479131][T11500] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 294.685997][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 294.694934][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'. [ 294.704104][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 294.709894][T11514] EXT4-fs: Ignoring removed bh option [ 294.713103][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'. [ 294.748580][T11514] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.762500][T11514] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 294.780048][T11514] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 294.789946][T11514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 294.801063][T11514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.889416][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.254670][T11539] set_capacity_and_notify: 5 callbacks suppressed [ 295.254691][T11539] loop5: detected capacity change from 0 to 512 [ 295.293594][T11539] EXT4-fs: inline encryption not supported [ 295.303280][T11539] EXT4-fs: Invalid want_extra_isize -2147483648 [ 295.405241][T11540] loop4: detected capacity change from 0 to 2048 [ 295.459686][T11540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.822253][T11547] loop5: detected capacity change from 0 to 128 [ 295.854684][T11549] loop2: detected capacity change from 0 to 128 [ 295.922881][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 295.938135][T11549] FAT-fs (loop2): Filesystem has been set read-only [ 295.954499][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 295.955198][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 295.983437][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.003930][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.016490][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.016966][T11547] FAT-fs (loop5): Filesystem has been set read-only [ 296.034565][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.054762][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.064415][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.082416][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.096867][T11549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 296.137279][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.244988][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.276531][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.354694][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.457316][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.497053][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.581201][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.638902][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.709881][T11547] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 296.834875][T11554] loop2: detected capacity change from 0 to 512 [ 296.859212][T11554] EXT4-fs: Ignoring removed bh option [ 296.886028][T11554] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.915517][T11554] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 296.942957][T11554] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 296.965428][T11554] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 296.984266][T11554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.101386][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.208087][T11562] loop5: detected capacity change from 0 to 256 [ 297.479932][T11570] loop2: detected capacity change from 0 to 512 [ 297.486760][T11570] EXT4-fs: inline encryption not supported [ 297.503627][T11570] EXT4-fs: Invalid want_extra_isize -2147483648 [ 297.518490][T11574] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 297.548376][T11577] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2478'. [ 297.561528][T11574] bond2: entered promiscuous mode [ 297.574669][T11574] bond2: entered allmulticast mode [ 297.576100][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.581024][T11574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.753576][T11596] loop2: detected capacity change from 0 to 512 [ 297.771065][T11596] EXT4-fs: Ignoring removed bh option [ 297.782099][T11600] loop4: detected capacity change from 0 to 256 [ 297.809289][T11596] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.818368][T11596] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 297.827654][T11600] FAT-fs (loop4): Directory bread(block 64) failed [ 297.834220][T11600] FAT-fs (loop4): Directory bread(block 65) failed [ 297.843654][T11600] FAT-fs (loop4): Directory bread(block 66) failed [ 297.850235][T11600] FAT-fs (loop4): Directory bread(block 67) failed [ 297.858739][T11600] FAT-fs (loop4): Directory bread(block 68) failed [ 297.865609][T11600] FAT-fs (loop4): Directory bread(block 69) failed [ 297.872510][T11596] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 297.872624][T11600] FAT-fs (loop4): Directory bread(block 70) failed [ 297.888234][T11600] FAT-fs (loop4): Directory bread(block 71) failed [ 297.895220][T11600] FAT-fs (loop4): Directory bread(block 72) failed [ 297.896341][T11596] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 297.901762][T11600] FAT-fs (loop4): Directory bread(block 73) failed [ 297.911468][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.991604][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.023164][T11614] can0: slcan on ptm0. [ 298.038606][ T28] audit: type=1326 audit(2000000013.680:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.106803][ T28] audit: type=1326 audit(2000000013.680:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.132864][T11622] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 298.140958][T11614] loop2: detected capacity change from 0 to 1024 [ 298.158130][ T28] audit: type=1326 audit(2000000013.680:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.183727][ T28] audit: type=1326 audit(2000000013.680:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.212144][ T28] audit: type=1326 audit(2000000013.680:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.245517][ T28] audit: type=1326 audit(2000000013.680:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.271569][ T28] audit: type=1326 audit(2000000013.680:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.297307][ T28] audit: type=1326 audit(2000000013.680:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.332671][T11614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.351372][ T28] audit: type=1326 audit(2000000013.680:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.377135][ T28] audit: type=1326 audit(2000000013.680:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.2.2492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 298.477007][T11613] can0 (unregistered): slcan off ptm0. [ 298.501541][T11644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.527415][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.851842][T11681] net_ratelimit: 11910 callbacks suppressed [ 298.851862][T11681] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.864350][T11681] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.870845][T11681] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.877216][T11681] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.883637][T11681] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.890014][T11681] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.896465][T11681] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.902944][T11681] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.909380][T11681] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.916031][T11681] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 299.148004][T11693] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2514'. [ 299.268628][T11693] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.281337][T11693] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 299.289733][T11693] EXT4-fs (loop2): failed to initialize system zone (-117) [ 299.297393][T11693] EXT4-fs (loop2): mount failed [ 299.324303][T11434] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 299.344286][T11434] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 299.356497][T11434] EXT4-fs (loop4): This should not happen!! Data will be lost [ 299.356497][T11434] [ 299.369429][T11434] EXT4-fs (loop4): Total free blocks count 0 [ 299.387604][T11434] EXT4-fs (loop4): Free/Dirty block details [ 299.405458][T11434] EXT4-fs (loop4): free_blocks=4096 [ 299.417567][T11434] EXT4-fs (loop4): dirty_blocks=32 [ 299.427431][T11434] EXT4-fs (loop4): Block reservation details [ 299.433468][T11434] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 299.441251][T11429] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 299.457980][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 299.526713][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 299.537308][T11705] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.549190][T11706] 8021q: VLANs not supported on vcan0 [ 299.555909][T11705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.582094][T11705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.623761][T11705] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.746630][T11730] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2527'. [ 299.767500][T11730] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.781879][T11730] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 299.790258][T11730] EXT4-fs (loop1): failed to initialize system zone (-117) [ 299.805511][T11730] EXT4-fs (loop1): mount failed [ 300.071319][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.218939][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2534'. [ 300.228165][T11746] 8021q: VLANs not supported on vcan0 [ 300.272840][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.281776][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.290968][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.299858][T11748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.471592][T11760] set_capacity_and_notify: 8 callbacks suppressed [ 300.471608][T11760] loop4: detected capacity change from 0 to 512 [ 300.488859][T11759] loop1: detected capacity change from 0 to 512 [ 300.510768][T11759] EXT4-fs: Ignoring removed bh option [ 300.552524][T11759] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 300.561239][T11760] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 300.562359][T11759] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 300.579151][T11759] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 300.589975][T11759] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 300.603114][T11759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.768869][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.778130][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2545'. [ 300.789146][T11778] 8021q: VLANs not supported on vcan0 [ 300.957213][T11802] loop2: detected capacity change from 0 to 512 [ 300.997453][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 301.033933][T11802] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 301.187568][T11799] loop1: detected capacity change from 0 to 256 [ 301.457955][T11811] loop2: detected capacity change from 0 to 512 [ 301.492244][T11811] EXT4-fs: inline encryption not supported [ 301.498326][T11811] EXT4-fs: Invalid want_extra_isize -2147483648 [ 302.071219][T11861] vlan3: entered promiscuous mode [ 302.092607][T11861] bridge0: entered promiscuous mode [ 302.108472][T11861] vlan2: entered promiscuous mode [ 302.115127][T11861] geneve0: entered promiscuous mode [ 302.133673][T11864] loop2: detected capacity change from 0 to 512 [ 302.148356][T11864] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.190451][T11864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.254471][T11864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.287603][T11864] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.323499][T11882] loop5: detected capacity change from 0 to 512 [ 302.344458][T11882] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 302.379861][T11886] can0: slcan on ptm0. [ 302.412861][T11888] loop4: detected capacity change from 0 to 128 [ 302.424988][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.439951][T11886] loop1: detected capacity change from 0 to 1024 [ 302.456567][T11888] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.469324][T11888] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.537731][T11886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.559354][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.576765][ T3297] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.629513][T11907] loop4: detected capacity change from 0 to 512 [ 302.638162][T11907] EXT4-fs: inline encryption not supported [ 302.657056][T11907] EXT4-fs: Invalid want_extra_isize -2147483648 [ 302.679687][T11885] can0 (unregistered): slcan off ptm0. [ 302.713167][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.944127][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.951493][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.959169][T11865] bridge_slave_0: entered allmulticast mode [ 302.965830][T11865] bridge_slave_0: entered promiscuous mode [ 302.973889][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.981187][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.992450][T11865] bridge_slave_1: entered allmulticast mode [ 302.999570][T11865] bridge_slave_1: entered promiscuous mode [ 303.023049][T11865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.035852][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 303.035867][ T28] audit: type=1400 audit(2000000018.720:2314): avc: denied { write } for pid=11917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.036007][T11865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.078675][T11939] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 303.106649][ T28] audit: type=1400 audit(2000000018.780:2315): avc: denied { write } for pid=11941 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.131477][T11865] team0: Port device team_slave_0 added [ 303.138456][T11865] team0: Port device team_slave_1 added [ 303.165756][T11865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.173152][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.199591][T11865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.222765][T11865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.230061][T11865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.256865][T11865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.301366][T11865] hsr_slave_0: entered promiscuous mode [ 303.309413][T11947] EXT4-fs: Ignoring removed bh option [ 303.315489][T11865] hsr_slave_1: entered promiscuous mode [ 303.321599][T11865] debugfs: 'hsr0' already exists in 'hsr' [ 303.327468][T11865] Cannot create hsr debugfs directory [ 303.343678][T11947] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.353163][T11947] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 303.376885][T11947] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 303.399465][T11947] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 303.410900][T11947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.472701][T11865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.494601][T11865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 303.507625][T11865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.526292][T11958] EXT4-fs: Ignoring removed bh option [ 303.537024][T11958] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.571137][T11958] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 303.581618][T11958] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 303.584365][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.591797][T11958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 303.608404][T11958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.707828][T11865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.741458][T11865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 303.758866][T11865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.780101][T11971] netlink: 'syz.5.2602': attribute type 1 has an invalid length. [ 303.821619][T11968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.838096][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.852650][ T28] audit: type=1400 audit(2000000019.530:2316): avc: denied { write } for pid=11964 comm="syz.1.2600" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.064915][T11865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.082841][T11865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 304.093517][T11865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.514456][T11986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.569408][T11986] __nla_validate_parse: 5 callbacks suppressed [ 304.569469][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 304.594986][T11865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.687258][T11865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 304.697807][T11865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.020771][T11865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.038741][T11865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.048711][ T30] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 305.064185][T11865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.075388][ T30] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 305.092011][T11865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.099437][ T30] EXT4-fs (loop1): This should not happen!! Data will be lost [ 305.099437][ T30] [ 305.113870][T11865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.132002][T11865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.142989][ T30] EXT4-fs (loop1): Total free blocks count 0 [ 305.159013][T11865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.165920][ T30] EXT4-fs (loop1): Free/Dirty block details [ 305.177466][ T30] EXT4-fs (loop1): free_blocks=4096 [ 305.192176][T11865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.199883][ T30] EXT4-fs (loop1): dirty_blocks=336 [ 305.211992][ T30] EXT4-fs (loop1): Block reservation details [ 305.231934][ T30] EXT4-fs (loop1): i_reserved_data_blocks=21 [ 305.268242][T11421] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 305.304108][ T3300] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 305.360321][T11865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.422985][T11865] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.467833][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.474958][T11429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.484274][T12006] set_capacity_and_notify: 4 callbacks suppressed [ 305.484340][T12006] loop4: detected capacity change from 0 to 512 [ 305.533549][T12006] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 305.544411][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.551537][T11429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.581969][T11865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.593099][T11865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.653858][T12014] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 305.814809][T11865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.929366][T12035] loop5: detected capacity change from 0 to 256 [ 305.936368][T12006] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2610'. [ 306.027738][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.032431][T11865] veth0_vlan: entered promiscuous mode [ 306.125912][T11865] veth1_vlan: entered promiscuous mode [ 306.193651][T11865] veth0_macvtap: entered promiscuous mode [ 306.233612][T11865] veth1_macvtap: entered promiscuous mode [ 306.263031][T12054] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 306.280412][T11865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.311215][T11865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.331371][T11425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.344999][T11425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.378809][T11425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.390108][T11425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.436482][ T28] audit: type=1400 audit(2000000022.090:2317): avc: denied { mount } for pid=11865 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.495283][ T28] audit: type=1400 audit(2000000022.090:2318): avc: denied { mounton } for pid=11865 comm="syz-executor" path="/root/syzkaller.h8NEX4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 306.629623][ T28] audit: type=1400 audit(2000000022.100:2319): avc: denied { mount } for pid=11865 comm="syz-executor" name="/" dev="gadgetfs" ino=4709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 306.661978][T12076] loop2: detected capacity change from 0 to 1024 [ 306.668897][T12076] EXT4-fs: Ignoring removed bh option [ 306.750489][T12076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.772302][T12080] loop5: detected capacity change from 0 to 256 [ 306.829310][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2629'. [ 306.907736][T12088] loop5: detected capacity change from 0 to 512 [ 306.919671][T12088] EXT4-fs: Ignoring removed bh option [ 306.929141][T12088] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.940537][T12088] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 306.952045][T12088] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 306.965828][T12088] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 307.009660][T12088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.059639][T12098] loop4: detected capacity change from 0 to 128 [ 307.076908][T12098] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.099456][T12098] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.124147][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.133834][ T3297] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 307.285279][T12110] loop4: detected capacity change from 0 to 128 [ 307.308515][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.310370][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.316686][T12110] FAT-fs (loop4): Filesystem has been set read-only [ 307.348516][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.358257][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.367692][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.391830][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.405639][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.466549][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.491751][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.503741][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2641'. [ 307.523220][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.534832][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.543176][T12110] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 307.551933][T12116] batman_adv: batadv0: Adding interface: dummy0 [ 307.566373][T12116] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 307.576492][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 307.626772][T12119] loop3: detected capacity change from 0 to 128 [ 307.720191][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.736737][T12119] FAT-fs (loop3): Filesystem has been set read-only [ 307.751263][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.779042][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.787177][T12128] can0: slcan on ptm0. [ 307.799618][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.816984][ T28] audit: type=1326 audit(2000000023.490:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 307.862758][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.885451][T12128] loop1: detected capacity change from 0 to 1024 [ 307.894927][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.913427][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.927339][ T28] audit: type=1326 audit(2000000023.490:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 307.958796][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 307.975253][T12128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.977544][T12119] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 308.037196][ T28] audit: type=1326 audit(2000000023.490:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.091136][T12118] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000ff0) [ 308.148863][ T28] audit: type=1326 audit(2000000023.490:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.174552][T12127] can0 (unregistered): slcan off ptm0. [ 308.216941][ T28] audit: type=1326 audit(2000000023.490:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.244840][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.285635][ T28] audit: type=1326 audit(2000000023.510:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.319895][ T28] audit: type=1326 audit(2000000023.510:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.348617][T12146] loop5: detected capacity change from 0 to 128 [ 308.350429][ T28] audit: type=1326 audit(2000000023.510:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.400627][T12146] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.448455][ T28] audit: type=1326 audit(2000000023.500:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.503171][ T28] audit: type=1326 audit(2000000023.510:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.599630][ T28] audit: type=1326 audit(2000000023.510:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.679615][ T28] audit: type=1326 audit(2000000023.510:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.1.2647" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf46bce59 code=0x7ffc0000 [ 308.743602][T12146] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 308.846893][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'. [ 308.867103][T12180] EXT4-fs: Ignoring removed bh option [ 308.916047][T11425] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.082188][ T5208] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 309.097694][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.106598][T12186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.115833][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.124781][T12186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 309.207829][T12180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.236914][T12192] can0: slcan on ptm0. [ 309.525124][T12192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.572017][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.689928][T12219] can0: slcan on ptm1. [ 309.801547][T12219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.907018][T12189] can0 (unregistered): slcan off ptm0. [ 309.926815][T12218] can0 (unregistered): slcan off ptm1. [ 309.927590][T11865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.977668][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.023437][T12239] batman_adv: batadv0: Adding interface: dummy0 [ 310.029767][T12239] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.057474][T12239] batman_adv: batadv0: Interface activated: dummy0 [ 310.064918][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2666'. [ 310.083421][T12239] net_ratelimit: 17870 callbacks suppressed [ 310.083435][T12239] batadv0: mtu less than device minimum [ 310.105081][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.116065][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.126984][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.137869][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.148985][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.159966][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.171170][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.182106][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.193209][T12239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 310.429699][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2670'. [ 310.438923][T12251] 8021q: VLANs not supported on vcan0 [ 310.566347][T12258] set_capacity_and_notify: 4 callbacks suppressed [ 310.566365][T12258] loop1: detected capacity change from 0 to 512 [ 310.630899][T12258] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 310.835066][T12266] loop2: detected capacity change from 0 to 2048 [ 310.957881][T12269] loop4: detected capacity change from 0 to 512 [ 310.990154][T12266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.050659][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'. [ 311.090360][T12269] EXT4-fs: Ignoring removed bh option [ 311.130758][T12269] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.169964][T12269] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 311.207591][T12269] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 311.246455][T12269] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 311.455381][T12269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.572071][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.627381][T12254] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2672'. [ 311.690419][T12276] can0: slcan on ptm0. [ 311.738014][T12276] loop4: detected capacity change from 0 to 1024 [ 311.856944][T12282] loop1: detected capacity change from 0 to 512 [ 311.865693][T12276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.889859][T12282] EXT4-fs: Ignoring removed bh option [ 311.952953][T12275] can0 (unregistered): slcan off ptm0. [ 311.999927][T12282] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.009491][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.023927][T12282] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 312.049031][T12282] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 312.076071][T12282] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 312.102165][T12274] loop5: detected capacity change from 0 to 1024 [ 312.110636][T12282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.230139][T12274] EXT4-fs: Ignoring removed bh option [ 312.312651][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.357315][T12274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.516525][T12310] syzkaller0: entered promiscuous mode [ 312.540106][T12310] syzkaller0: entered allmulticast mode [ 312.580380][T12310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12310 comm=syz.3.2680 [ 312.681524][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2683'. [ 312.694127][T12323] 8021q: VLANs not supported on vcan0 [ 312.791918][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.824344][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.896819][T12335] can0: slcan on ptm0. [ 312.959863][T12335] loop3: detected capacity change from 0 to 1024 [ 313.062858][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 313.062877][ T28] audit: type=1326 audit(2000000284.760:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58a355d68e code=0x7ffc0000 [ 313.094626][ T28] audit: type=1326 audit(2000000284.760:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f58a359b297 code=0x7ffc0000 [ 313.120187][ T28] audit: type=1326 audit(2000000284.760:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58a355d68e code=0x7ffc0000 [ 313.145737][ T28] audit: type=1326 audit(2000000284.760:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.175122][ T28] audit: type=1326 audit(2000000284.760:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.200799][ T28] audit: type=1326 audit(2000000284.760:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.231212][ T28] audit: type=1326 audit(2000000284.760:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.277690][T12363] loop2: detected capacity change from 0 to 256 [ 313.278145][ T28] audit: type=1326 audit(2000000284.760:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.312433][T12334] can0 (unregistered): slcan off ptm0. [ 313.380124][T12363] FAT-fs (loop2): Directory bread(block 64) failed [ 313.394564][ T28] audit: type=1326 audit(2000000284.760:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.422866][T12363] FAT-fs (loop2): Directory bread(block 65) failed [ 313.437282][T12370] netlink: 'syz.4.2691': attribute type 4 has an invalid length. [ 313.445661][T12363] FAT-fs (loop2): Directory bread(block 66) failed [ 313.452764][T12363] FAT-fs (loop2): Directory bread(block 67) failed [ 313.474604][ T28] audit: type=1326 audit(2000000284.760:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.3.2688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a359ce59 code=0x7ffc0000 [ 313.502580][T12363] FAT-fs (loop2): Directory bread(block 68) failed [ 313.509452][T12377] netlink: 'syz.4.2691': attribute type 4 has an invalid length. [ 313.517637][T12363] FAT-fs (loop2): Directory bread(block 69) failed [ 313.546994][T12363] FAT-fs (loop2): Directory bread(block 70) failed [ 313.569269][T12363] FAT-fs (loop2): Directory bread(block 71) failed [ 313.592230][T12363] FAT-fs (loop2): Directory bread(block 72) failed [ 313.609497][T12363] FAT-fs (loop2): Directory bread(block 73) failed [ 313.620573][T12370] loop4: detected capacity change from 0 to 2048 [ 313.752999][T12370] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2691: bg 0: block 234: padding at end of block bitmap is not set [ 314.460765][T12370] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 408 with error 28 [ 314.508073][T12370] EXT4-fs (loop4): This should not happen!! Data will be lost [ 314.508073][T12370] [ 314.524071][T12370] EXT4-fs (loop4): Total free blocks count 0 [ 314.541940][T12370] EXT4-fs (loop4): Free/Dirty block details [ 314.549038][T12370] EXT4-fs (loop4): free_blocks=0 [ 314.562031][T12370] EXT4-fs (loop4): dirty_blocks=416 [ 314.570261][T12370] EXT4-fs (loop4): Block reservation details [ 314.576477][T12370] EXT4-fs (loop4): i_reserved_data_blocks=26 [ 314.607991][T12408] loop1: detected capacity change from 0 to 512 [ 314.640586][T12408] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 314.668287][T12408] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 314.679331][T12408] EXT4-fs (loop1): failed to initialize system zone (-117) [ 314.686667][T12408] EXT4-fs (loop1): mount failed [ 314.779606][ T3297] EXT4-fs unmount: 5 callbacks suppressed [ 314.779621][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.803062][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 314.820266][T12419] 8021q: VLANs not supported on vcan0 [ 314.836824][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.859088][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.883278][T12426] can0: slcan on ptm0. [ 314.940648][T12426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.040677][T12425] can0 (unregistered): slcan off ptm0. [ 315.051955][T12436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 315.062752][T12436] System zones: 0-1, 3-8 [ 315.069586][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.078801][T12436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.092083][T12436] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.254499][T12470] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 315.254927][T12468] IPVS: stopping backup sync thread 12470 ... [ 315.609225][T12488] set_capacity_and_notify: 4 callbacks suppressed [ 315.609245][T12488] loop5: detected capacity change from 0 to 512 [ 315.765344][T12488] EXT4-fs: Ignoring removed bh option [ 315.819989][T12496] loop4: detected capacity change from 0 to 128 [ 315.838701][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.847823][T12496] FAT-fs (loop4): Filesystem has been set read-only [ 315.856912][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.865129][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.873423][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.881374][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.889668][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.897884][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.905844][T12488] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 315.925683][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.944034][T11429] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:17: lblock 0 mapped to illegal pblock 0 (length 6) [ 315.960208][T12496] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.962457][T12488] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 315.976713][T12495] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000ff0) [ 315.989152][T11429] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 316.022956][T11429] EXT4-fs (loop2): This should not happen!! Data will be lost [ 316.022956][T11429] [ 316.060088][T11429] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 316.106715][T11429] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 316.139675][T11429] EXT4-fs (loop2): This should not happen!! Data will be lost [ 316.139675][T11429] [ 316.158751][T12500] loop1: detected capacity change from 0 to 2048 [ 316.177310][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 316.236492][T12500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.242568][T12488] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 316.408123][T12488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 316.409261][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 316.462284][T12488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.514063][T12505] loop2: detected capacity change from 0 to 128 [ 316.540242][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.564338][T12505] FAT-fs (loop2): Filesystem has been set read-only [ 316.590054][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.614118][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.636202][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.661757][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.681191][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.697899][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.711411][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.724871][T12505] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.745595][T12504] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 316.963802][T12134] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 317.177264][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.050640][T12538] loop4: detected capacity change from 0 to 2048 [ 318.113517][T12531] loop5: detected capacity change from 0 to 256 [ 318.164436][T12538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.185064][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2726'. [ 318.598208][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.637644][T12553] loop2: detected capacity change from 0 to 256 [ 318.688368][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.827598][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.841782][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.864490][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.903324][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.935228][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2727'. [ 318.957331][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.061398][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.069996][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.426976][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.657696][T12578] loop2: detected capacity change from 0 to 256 [ 319.804726][T12584] can0: slcan on ptm0. [ 319.825826][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 319.825841][ T28] audit: type=1326 audit(2000000291.582:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 319.893260][T12583] loop4: detected capacity change from 0 to 1024 [ 319.906958][ T28] audit: type=1326 audit(2000000291.612:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 319.936139][T12584] loop2: detected capacity change from 0 to 1024 [ 319.948200][T12583] EXT4-fs: Ignoring removed bh option [ 319.988198][ T28] audit: type=1326 audit(2000000291.612:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.048332][ T28] audit: type=1326 audit(2000000291.612:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.071405][T12592] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.075952][ T28] audit: type=1326 audit(2000000291.612:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.084186][T12584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.107426][ T28] audit: type=1326 audit(2000000291.612:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.143460][ T28] audit: type=1326 audit(2000000291.612:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.169729][ T28] audit: type=1326 audit(2000000291.612:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.196114][T12583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.201242][T12592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.217003][ T28] audit: type=1326 audit(2000000291.612:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.243292][ T28] audit: type=1326 audit(2000000291.612:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.2.2744" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f203794ce59 code=0x7ffc0000 [ 320.301259][T12592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.332959][T12592] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.418070][T12582] can0 (unregistered): slcan off ptm0. [ 320.435328][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.450542][T11865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.498197][T12134] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 320.567002][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.541330][ T5378] ================================================================== [ 321.549492][ T5378] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 321.557706][ T5378] [ 321.560064][ T5378] read-write to 0xffff88810048a978 of 8 bytes by task 3297 on cpu 0: [ 321.568150][ T5378] __filemap_remove_folio+0x218/0x2e0 [ 321.570044][T12621] set_capacity_and_notify: 1 callbacks suppressed [ 321.570086][T12621] loop5: detected capacity change from 0 to 2048 [ 321.573552][ T5378] __remove_mapping+0x398/0x4c0 [ 321.591189][ T5378] remove_mapping+0x22/0x90 [ 321.595730][ T5378] mapping_try_invalidate+0x293/0x430 [ 321.601134][ T5378] invalidate_mapping_pages+0x27/0x40 [ 321.606545][ T5378] invalidate_bdev+0x58/0x70 [ 321.611170][ T5378] ext4_put_super+0x610/0x7b0 [ 321.615885][ T5378] generic_shutdown_super+0xee/0x220 [ 321.621281][ T5378] kill_block_super+0x2a/0x70 [ 321.625983][ T5378] ext4_kill_sb+0x42/0x80 [ 321.630328][ T5378] deactivate_locked_super+0x75/0x1c0 [ 321.635735][ T5378] deactivate_super+0x97/0xa0 [ 321.640436][ T5378] cleanup_mnt+0x2bb/0x330 [ 321.644871][ T5378] __cleanup_mnt+0x19/0x20 [ 321.649306][ T5378] task_work_run+0x130/0x1a0 [ 321.653920][ T5378] exit_to_user_mode_loop+0x211/0x820 [ 321.659309][ T5378] do_syscall_64+0x232/0x3b0 [ 321.663933][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.669862][ T5378] [ 321.672199][ T5378] read to 0xffff88810048a978 of 8 bytes by task 5378 on cpu 1: [ 321.679759][ T5378] nr_blockdev_pages+0x7e/0xd0 [ 321.684550][ T5378] si_meminfo+0x87/0xd0 [ 321.688722][ T5378] update_defense_level+0x47/0x5d0 [ 321.693857][ T5378] defense_work_handler+0x1f/0x80 [ 321.698916][ T5378] process_scheduled_works+0x4f0/0x9c0 [ 321.704403][ T5378] worker_thread+0x58a/0x780 [ 321.709019][ T5378] kthread+0x22a/0x280 [ 321.713100][ T5378] ret_from_fork+0x146/0x330 [ 321.717716][ T5378] ret_from_fork_asm+0x1a/0x30 [ 321.722543][ T5378] [ 321.724877][ T5378] value changed: 0x0000000000000009 -> 0x0000000000000002 [ 321.732002][ T5378] [ 321.734383][ T5378] Reported by Kernel Concurrency Sanitizer on: [ 321.740543][ T5378] CPU: 1 UID: 0 PID: 5378 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 321.750023][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.760097][ T5378] Workqueue: events_long defense_work_handler [ 321.766188][ T5378] ================================================================== [ 321.949274][T12621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.998558][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'. [ 322.148632][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.614969][ T5208] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.