fffffffffffff, 0x1275, 0x0) 09:53:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)='\x00', 0x1, 0x400}], 0x0, 0x0) 09:53:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) r2 = msgget$private(0x0, 0x400) msgctl$IPC_RMID(r2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'fo\x00', 0x0, 0x100000}, 0xffffffffffffffcd) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, [], 0x11}, 0xb0}}, 0x400, 0x3, 0xffb, 0xfff, 0x200}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r3, 0xc4, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x0, @local, 0x3}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x487, @remote, 0x1ff}, @in={0x2, 0x4e22, @rand_addr=0x7f}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x0, @empty, 0xfffffffffffffffe}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000002c0)=0x10) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) [ 1816.447917] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 09:53:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x4}}, 0x2e) 09:53:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) 09:53:01 executing program 2: perf_event_open(&(0x7f0000000180)={0xfffffffffffffffe, 0x50, 0x903e, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x8000, 0x0) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000300)) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x4}}, 0x2e) [ 1816.804960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.812344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.827961] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1816.860248] device bridge0 left promiscuous mode [ 1816.895247] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) [ 1817.074596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.081603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.089959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.097146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.189320] device bridge0 entered promiscuous mode [ 1817.219448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1817.239935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 09:53:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) 09:53:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) sched_setscheduler(r2, 0x7, &(0x7f0000000280)=0x3) symlink(0x0, 0x0) 09:53:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x141180) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f0000000140)=0xfffffffffffffdc2) syz_open_dev$vcsn(0x0, 0x0, 0x804200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x800, &(0x7f00000001c0)="b283b0043cdcba129d1f832e6e0a5ab318cad281eea362451bf97988dfa5dc19319fb81a90a105d736df4ff763fbdd41cf34d81c5fe59551a73cdca0b89b34396f5631067b81c72ac2a87157c0e1371cd005c7dcd3ff3d55b12c9071a59b9f0e51f9015c1933400717966a16d0bf22381e78bfd160d5855d2b7b0fed65a002b59c5a6a6cd0b18108e2854acd857ce483d9e8188b4ff78ad22789fce9a0bda739c2653235e0c536f17c96fcf0dfdea1fa4e2f432a516591cd5105189ea916da04ba", &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000002c0)="d1141a70c1f1303e2914900b23d3d8d6d184cf53cfa7cbbd2cd2e7b95269e05d0815376bd5940b23cd2893068f6f036229ae0d0a62beb728d9225f84b5c72913f32f39cff52a3aa6a4fbb9ee847158dde9b822231aa2f748f10a23ddcc9d8b3efda4c9a7db40cb727a3f7dc35f93b92080bc6868b169d9b5625dbe50ec7307874a877c943edffca63fe15ec6b6cb743531ec553e823c2616285fd759c58a870ca9edec9806057f822b45bf0030422be1f99837a7e98d318848c0424d71c81ae01c") capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) 09:53:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x4}}, 0x2e) 09:53:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4}}, 0x2e) [ 1817.449731] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1817.476901] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) 09:53:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000007140073656375646974792e0200706162696c69df7900080000000d51b3632a8f3a6582595e473f94c74f554f9f2bebe702a5a52c069212f2713cea676b10c059d3ff70a526d5731d4e121b54e8bbe6dea3259912b0fb79f6455ad80cb30adb231b2abd67fef8a431c8aae70ca1c287340001000000000000cfda0c88fa36b838db9771c4c37ed728fce0d3c37dd983e41f330425"], 0x21) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000280)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0xffffffffffff2b44}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) 09:53:02 executing program 0: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80800, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1817.789086] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 09:53:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1817.829399] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) 09:53:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x4}}, 0x2e) 09:53:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x9, 0x4, 0x0, 0x1}) 09:53:03 executing program 0: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000280)) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @loopback}, {0x307}, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 'team_slave_0\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x4}}, 0x2e) [ 1818.053137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.060455] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0xf2c5, 0x181800) syz_open_dev$loop(&(0x7f0000002680)='/dev/loop#\x00', 0x0, 0x210000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200) pread64(r2, &(0x7f00000025c0)=""/1, 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000002640)=0x100000001, 0x12) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000100)=@ax25={0x3, {"82b315fc93fa6f"}, 0x81}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000180)="0df1a9982bc2955d4d2048be7fdcf4822f7e461f7db46a0f48fbcfb0595be1ce7c25e68774d7bc352ccd8f06f54748ffd74868f2640ecbf2a72e47cf0bd86cf14680ca412aa9dbb42dea52c4e76521e6ab5c9c5ce4771ac1e331b93078879f4c890fc917f51a6ad0adb031c3eb02e6430f512d3bf07c7f2eaeeaa420365f060427b47c52111a621ef3df4724e3f658", 0x8f}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="2c1b501353acd7a4e92a9ccc33bde9fcd78e303f2cf141622981745326407b56593c8f7531988e15283fe46296f22d2298453c2d91de15b76ac9959b4a9dacbc93ccbf358120a481aedefde064b859a49a8e3baedf3d7ed9c263685077dc9526d1c90090dc4eabb83066fdfe67125f00a81a78edb213e374c0d4b492726672e9fb5eb2b086a3a4255604f187a91808b86a5828cd24a2ed9f4a9d0971", 0x9c}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="18817102168f351e19e6a4c84e2d5013edd13ad89e93428e004914bd5d7fd5adf8a60289097b5aae9d65e2b02fdf4b9d7f46b9001f1299a4914b5d43bf902cc8f8c40132aa7f3a97a679c1b12cdfd5464144a988b7b6c16fefcb5a6f59ae34d3b489e41ee4aa3c4f84ec772f8a9639e500140bcfc06936f9a774b51d1ead539738add3941de2d2ca9191a8604b550ced7a1c9c34eaad1368d124300526716c3b75c3ffd78bb9e892dc6effb93dd3b61b6d927fcc7d0800e6afc7fd8367ed4b86ca3869fbd1fad3ea8235a1b0f6555fda97d6fe34b8d76fe2a8ad04129bbe1bfc6d294c825183", 0xe6}], 0x6, 0x0, 0x0, 0x80}, 0x800) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000002600)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000002580)=0x9a5, 0x12) 09:53:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:03 executing program 0: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1818.187416] device bridge0 left promiscuous mode [ 1818.273281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.279793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.286516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.293019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.339540] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$tun(r1, &(0x7f0000000040)={@void, @val={0x0, 0x0, 0x3, 0x0, 0x7, 0x8}, @arp=@generic={0x336, 0x9200, 0x6, 0xe, 0x3, @broadcast, "e4217c743e09d06428fd871aa2d4", @broadcast, "ebb9f53757961728d5bb9ba8c0b1b7ac"}}, 0x3c) getrlimit(0xf, &(0x7f0000000240)) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x121000) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x410802, 0x0) 09:53:03 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1818.388165] device bridge0 entered promiscuous mode 09:53:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) personality(0x5800017) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000280)) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x4}}, 0x2e) 09:53:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) 09:53:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) rt_sigreturn() clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}, 0x4}}, 0x2e) [ 1818.703263] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 09:53:03 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1818.746836] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) 09:53:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x22) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r1 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000200), 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000002ac0)) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000640)=0xc3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001b00)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x401, 0x7}, &(0x7f0000001bc0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002600)=@assoc_value={0x0}, &(0x7f0000002640)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000028c0)={0x0, 0x6}, &(0x7f0000002900)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002980)=[{&(0x7f0000000280)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="9044dcc6b0", 0x5}, {&(0x7f0000000300)="d7ca02662a3a4c3b4119f4837e07e3fef4ed67c5b83ab13b24d5fae85a85d1d4e98741ecb603a2516ffe800729e5471bbcdf176bc6613539bc8b38205d4adc51a973bae8fd9e65f668a76a6950f73af9651461b9df5df9b2ec096c2d316e77b5f0a9550a8d0dc87aacfc26317c8eab3cd9e0d4b1d9fda1b81b1edaae8f9a885d5896c327ede3c220d77ccc55a62736e0286f13f57efcc78de9d5d3a211844160cd56b647fcd7483dd48414f0b7def83cbdb40186bfbc49b5", 0xb8}], 0x2, &(0x7f00000007c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x73ca}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xd0b, 0x8, 0x20f, 0x41e6, 0x400, 0x6, 0xbd0000, 0xe1, r4}}], 0xb8, 0x4010}, {&(0x7f0000000680)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001a80)=[{&(0x7f00000008c0)="19211f711003950fd9220dca53a723f85ec087a3ff5e26f71657b250806041c58a4d0fc8d72c1f14c146aa06307ef0a77a4aa03bbdb7d17e98c4091711f23b04c34bd6535d3a7716b9168691f9939c612224fd43a2bc8233a0d1e15fe408ba8b73e65c2a732a", 0x66}, {&(0x7f00000006c0)="ee4b73931762a271533d74e4258b031c3d3b9514279144e33185d842c003626f706a36510a", 0x25}, {&(0x7f0000000940)="ff110a35c38172a5d7fa11002263c2c81b1c5672fb586f526b5e9312589f41e48df19ea321bc8d6ca98ba4e32776791f109812cf8c9c41dc6149d33d", 0x3c}, {&(0x7f0000000980)="0a8bfb1a313e4749ef15d569b5193a92b6506a7c6bbc23ec52a33005e5db54baac6ebf4900afab18d3a445f4cf9b6ca8f89182f29456b2b01bc391c129e9739b4ba83270cbb5bb92a9db842741c86a7b0cc3acdea08fdd47b1ea44455acd077d486289cbc2a2f852", 0x68}, {&(0x7f0000000a00)="424b06d74d12a4f93daa1f0e8eeda18a742b4c3acdf05202ddb0118a3d6e3006fdb7aae8cc9589282a6b95a16091b5297cd61baa68c128c4af32c8ce9f5c00d152c082a66f34521a3c1f4e0c2589d72037f39085b44d3f5ccae84742be392b0df8436e4fd35afc5515b49e61ec29ca6fc78a72a1c6a0ebab47e61eb981", 0x7d}, {&(0x7f0000000a80)="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", 0x1000}], 0x6, &(0x7f0000001c00)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff7, 0x200, 0x4, 0x2, 0x5, 0x0, 0x1, 0x8, r5}}, @init={0x18, 0x84, 0x0, {0x6, 0x1, 0x1000, 0x7cbbe544}}, @init={0x18, 0x84, 0x0, {0x5, 0x7000000, 0x0, 0x1}}], 0x60, 0x40}, {&(0x7f0000001c80)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001cc0)="95254de48509160505792e05fe69d93f536dbfdb81c153cef8e2488ed5a1c71540d2a206ae7036fc53da22f9ed4aa68d9d901bfdf2225f6c8b5ebf34d5bc528c4b51621429f8bac7effe5eceaf6334feb9dfc9c02783f99fe1a8495a369ab40c5cbc7555cbdbc8d0dd1d93909d7fa41d51368fea59a83bb7b0c7ea3dc310f436eb1621d54bef6966a0c0b41e9f98d615d85073a864188bd82545c434bee02c40a65a1dbfeab0576bb3af5e56d44ecae10c121fc3ce9f462d6f2a66afa09456acd1f60a92763221d41627deaba6f081b80599f3d7d0f2ed583e6c3b942f8e6967afcbc8790f371aa76c2e2ffe212bbd54e8e602a8954481", 0xf7}, {&(0x7f0000001dc0)="8ddf36e549b94b04b89fba38250115556d15ad1d59e31b853aae777327f33550e954b8b641f3d6cc8fb291681a287c0e7e015273a1067cdeff6a44e3c0ae13de664a437b15d69cc566551294005ca00da5a413429f6b959510b74c959ae4dc029c516dc3b791ec1efed54f55ba2bb12f6977eccd845e40b15d19f0f67efef0484d4b9e1abbf7ff5121d4c2640b4303670979", 0x92}, {&(0x7f0000001e80)="5d1a53f26db4d6b8781fb79bf69565117a2c4bc39cd52c17d73b1c3e800c6ee1f7eefb330d96b6cad6880b1f3ab182f38bfc9fcdf3343fc0b42b5f1f57d110bf3c476d332714f874ac96c7214dca001f1f3cd96595833ea041b667b724479dfd7c047973b5081eddbee02d010b2bbfdc2cdab379d18cec4c949edc9251477934c6c8fcb778a2e41858cda4bbb4ecdcdb17e772480f4b88ca87b4428f0055819f15c3c688089e905a2a6d228b406957da59c92099110b8a96fd10edcc4a4c41cfccf9e566888e3a3fb51735b1cc2f7f393590e37a95c0639b9f5e0a089bba47020bffabfa7f96a223b20ef9bd3f18b4e3c430e2b70b", 0xf5}, {&(0x7f0000001f80)="d2d813423b9644a859871b4e13f722d096a2c29bde3624e641af7c681c656e9da7777e864a5ac963cb5af60bea1fcecbf97f8476751bc17b3eb36451fee95e86a8f41b9cbcb9559f44c18c89269c6ff6717c169de367c647ab5268437e177e5e146c4ae6c0e5a116f770b081c9ae0f16c5867b9b760473dea3d622385d65608a916e3e83d55af5a0e83efa764770d219bbbf048c33e69d2605bdd38e2eabc4b82f80ac4f62a46d94e0b0db49190239e009f3efd7bf8ebee84fe08b3f973fb837c7589c20ac6c27abc340ccc82e558da8c3909dcc033095fa1bd0b18421c1b43b550b854b5eea886255bacb92f108e857d0ef", 0xf2}], 0x4, &(0x7f00000020c0)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0xfffffffffffffffb, 0xaf, 0x8, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x48, 0x8800}, {&(0x7f0000002140)=@in6={0xa, 0x4e23, 0x8001, @loopback, 0x9}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000002180)="34b4b1005379aa14cff40e115b4fe959cb5b3fdafa7c29e9fc63439f20bcf0107e42f4675c77f141673ad7744c9f95e2614c8aa7b3f9d8858f6f3c5c2462fe45d5f755cff77ecc08407b25f61c4342334d57f6c6e651e2c5fba8e4e66bcc9f092fcf133037129c8d7834584d819c880bedaa863186451bde5c5e44a5da6d73f0fba3261f704ff7a1f91a62c38cd1ba1670cd57a37a9771ab131f5d8c3becc8544148b61c7717f459a84b6b48538576b99d551aa22247a023ee137d645bc317", 0xbf}, {&(0x7f0000002240)="05da0d09f9c739373ac59f49c703dadd79d36f0b137f48b341f111fe9f6097fb1c43dc38c24ccd", 0x27}, {&(0x7f0000002280)="1384803c4159868549e6f27d8aaac68678142a8576009be7ae96a75514962e5a0b1f5e5055f4184c9fb184b2af8a3b101d5afbe4d862fe628d0876e62814172664509ea81c0869e639358b337dfe7e7fcdd4bbe4f6586e5b3e55bc7464c693239dd3df66623b66f2776efc53529a4489c176394d1e6d26c1c065d6583a166960251f30f008182e9ad92c2e3849", 0x8d}, {&(0x7f0000002340)="91422811328a1a7da3025bb9c1c4248c502dd6b66f12228533dd99dd61dfbc79bafd813bdf1fdc6e6901120c2118933b30120e01b1a7a940aee556782f02410c31917fed010e27345de14b2d57d4b1a36a1997a5b6d4ebbe098db64929dda4cfa65024111ddd175add63faeb3fd7722940f289dff8d6b4540a34d5e2f93a8b12515350496b97e62f49da83bf81ba3fc1a148c5aea637b5d63db91bf2b4fe1e90b0c6eaf0425edd6f1d8ff9e272018676e9f5e95870c113c9024e9671f6dbced1860781eca40c543fecea75e8b833ab99c4ecc22c459e51edcce39d2323869c239f7493131b133cb96c2183cc4761ac9fd9abcf04a95d4720", 0xf8}, {&(0x7f0000002440)="d2bc7db6891c1530ae32fd808b11ca6e967321a6d7972725895ebd32ce777b88eb28fe2148ee4f72acaec4e2190300e5da5887d5d9bcfd30ce93d6e6c2c04bc60db406feff07cf1c3dd0c4d7e1534b", 0x4f}, {&(0x7f00000024c0)="8750c2a8ba9d6d988840ae7a79c0a88b9b7a8b11dd099249ddf45b0d002eb0648ca131a0606695df748092f14f0e0e0b9c63ad160946cb28aef32b6cff8e7d2e6583de97c80cee9f86390976eafe72d3fe1f9b84b8d0efd5ac11c2e03781542aeec4bed977cac5cebb324d7a300e4196b4f39874895680548c04ef02c49b63d55d69e1560744c2452a929e25df68ff927fb923aeee72382ce186ff837438b2b951e1a742fec5e8083360db6bf1", 0xad}], 0x6, &(0x7f0000002b40)=ANY=[@ANYBLOB="1800000000070000000000000600000007000000000000001800000000000000840000000500000020000000180000001800007f00000000840000000000000005000500000016473ef6a59aa4b0502773180180180000000000000084000000050000002000000000000000300000000000000084000000010000000200ff0003000000030000000100000080000000d1000000080000004007834195f0359335d0c6761a71e8d96ec5133d6273c582a498fb3af390db7696bc09007d58f4e038f2bdc379331dae7aa66afa28756de51664828c6e6a7287be23fa23bd97fb31661eec8cebaa00af0c351835d9643a3d598d74106554f622bff899e90448003a154e3e241d0bec38bfd3c9619b6d5704895eef50f6d42afd4bb7a4ae2ce8b441a73ad95a362f9c48bd182400b9da1bfbc1c4713f945ec6b336eb3bde7c019b20260b432ed753188ec99dfb375313c6df551ffb0fd6063c302f8067bc48243f0c0b0cbbeea9c7c310751948c83c63eced45108672d500000000000000", @ANYRES32=r6], 0x90, 0x4004}, {&(0x7f0000002740)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002780)="93045b2f269fd893bf240af772d2efa210c378be806f71b57017b60efcc6ba97ebc217554784a289b51c5e87c4c16a1b4f9680aa32cfbe6a0ffe89e7a2e51610b0751c4e1808dd348afe694e5709e10e24d7a7949e616fbb35a750af5a2c59dc78a89ee9bad2405b6c739d1970e2b8c4b99e66ecb1d8e2916e2def0747e5a37d6b65d44634ddf85bc0e42d006a7a70c323bf25c653b5a52a225ba762590cdbd0a43585b61f408c65616d7f51bb34b9e554c15613734edfc033b0e0d0e824cf247a0bcd9a99223dea4320faf4ac83dad58f7769607edaa883394fe7f321d689707b7b18f7dda80f1709", 0xe9}], 0x1, &(0x7f0000002940)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x8005, 0x843e, 0x7, r7}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xff}}], 0x38, 0x804}], 0x5, 0x80) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000002b00)) [ 1818.888585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.896665] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) [ 1818.930437] device bridge0 left promiscuous mode 09:53:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 09:53:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x4}}, 0x2e) [ 1819.021609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.028151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.034943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.041400] bridge0: port 1(bridge_slave_0) entered forwarding state 09:53:04 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r1, 0x1, 0x80002f, &(0x7f0000000300), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$cgroup_pid(r0, &(0x7f0000000280)=r2, 0x12) symlink(0x0, 0x0) [ 1819.155819] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1819.194212] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) [ 1819.208298] device bridge0 entered promiscuous mode 09:53:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1000000000002, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0xeab0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r3, &(0x7f0000000240)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'usercpuset@$'}, 0x24, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x10e}, 0x8) 09:53:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x4}}, 0x2e) 09:53:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef01000105040000", 0x41, 0x400}], 0x0, 0x0) 09:53:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x4}}, 0x2e) 09:53:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) fstat(r0, &(0x7f0000000100)) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x0) [ 1819.630250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.641275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.650070] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1819.657566] EXT4-fs (loop4): bad geometry: block count 33684 exceeds size of device (2 blocks) 09:53:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1819.680655] device bridge0 left promiscuous mode 09:53:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x28000, 0x0) symlink(0x0, 0x0) 09:53:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000", 0x51, 0x400}], 0x0, 0x0) [ 1819.767419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.773945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.780915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.787310] bridge0: port 1(bridge_slave_0) entered forwarding state 09:53:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4}}, 0x2e) [ 1819.915273] device bridge0 entered promiscuous mode [ 1819.979598] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1820.040353] EXT4-fs (loop4): invalid first ino: 0 09:53:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x4}}, 0x2e) 09:53:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(0x0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x4}}, 0x2e) 09:53:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(0x0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(0x0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1820.525074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.531738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.600231] device bridge0 left promiscuous mode [ 1820.634312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.640779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1820.647578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.654089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1820.729921] device bridge0 entered promiscuous mode 09:53:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) accept(r1, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x4}}, 0x2e) 09:53:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000", 0x51, 0x400}], 0x0, 0x0) 09:53:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1821.315348] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1821.329343] EXT4-fs (loop4): invalid first ino: 0 [ 1821.349970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.357521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.369983] device bridge0 left promiscuous mode 09:53:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}, 0x4}}, 0x2e) 09:53:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000", 0x51, 0x400}], 0x0, 0x0) 09:53:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1821.509538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.516054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.522892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.529349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.574130] device bridge0 entered promiscuous mode 09:53:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}, 0x4}}, 0x2e) [ 1821.693352] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1821.700178] IPVS: ftp: loaded support on port[0] = 21 09:53:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1821.739658] EXT4-fs (loop4): invalid first ino: 0 [ 1821.776448] IPVS: ftp: loaded support on port[0] = 21 [ 1821.936644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.944765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.967172] device bridge0 left promiscuous mode [ 1822.046530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.053080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.059898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.066358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.076445] device bridge0 entered promiscuous mode [ 1822.830964] device bridge_slave_1 left promiscuous mode [ 1822.836531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.890242] device bridge_slave_0 left promiscuous mode [ 1822.895678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.980811] device bridge_slave_1 left promiscuous mode [ 1822.986298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.030209] device bridge_slave_0 left promiscuous mode [ 1823.035676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.125623] team0 (unregistering): Port device team_slave_1 removed [ 1823.139875] team0 (unregistering): Port device team_slave_0 removed [ 1823.150179] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1823.183419] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1823.292556] bond0 (unregistering): Released all slaves [ 1823.344789] team0 (unregistering): Port device team_slave_1 removed [ 1823.355771] team0 (unregistering): Port device team_slave_0 removed [ 1823.366359] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1823.404411] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1823.461957] bond0 (unregistering): Released all slaves [ 1823.678936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.685505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.693179] device bridge_slave_0 entered promiscuous mode [ 1823.752256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.769756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.777265] device bridge_slave_1 entered promiscuous mode [ 1823.840280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.846758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.854340] device bridge_slave_0 entered promiscuous mode [ 1823.879268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1823.932591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.941939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.949936] device bridge_slave_1 entered promiscuous mode [ 1823.975033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1824.066266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1824.190663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1824.204142] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1824.308231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1824.478154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1824.554823] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1824.777808] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1824.808865] team0: Port device team_slave_0 added [ 1824.893248] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1824.900878] team0: Port device team_slave_1 added [ 1824.908149] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1824.920148] team0: Port device team_slave_0 added [ 1824.970059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1824.976968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1824.990106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1825.051445] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1825.058972] team0: Port device team_slave_1 added [ 1825.110268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1825.117190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1825.135881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1825.199641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1825.206553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1825.219965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1825.235462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1825.242829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1825.254449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1825.314943] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1825.322223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1825.332124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1825.343534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1825.359471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1825.367402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1825.447764] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1825.455011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1825.472742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1825.559809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1825.567014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1825.579451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1826.174908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.181383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.188077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.194528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1826.202408] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1826.214409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.220828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.227516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.233961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1826.242378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1826.969701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1826.977020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1828.250708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.266688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.435345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1828.461220] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1828.623671] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1828.630029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1828.637223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1828.656650] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1828.663297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1828.673466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1828.825153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.846084] 8021q: adding VLAN 0 to HW filter on device team0 09:53:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaabaa0004000000000800450000700000000000019078ac14fabaac141411030490780000000045000000000000141400444000000000000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac1414008000000000000000000000000020"], 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) symlink(0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000008c0)="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", 0x1000) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 09:53:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001e", 0x59, 0x400}], 0x0, 0x0) 09:53:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(0x0, &(0x7f0000000080)) 09:53:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}, 0x4}}, 0x2e) 09:53:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1830.103709] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1830.160011] EXT4-fs (loop4): unsupported inode size: 30 09:53:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(0x0, &(0x7f0000000080)) 09:53:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x4}}, 0x2e) 09:53:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/227, 0xe3, 0x10021, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x800) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001e", 0x59, 0x400}], 0x0, 0x0) 09:53:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) open$dir(&(0x7f0000000280)='./bus\x00', 0x40240, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="00659e579e2635442815c7eb7afd87cfa1014c7db622f06676d19bf4b5ff122c4c7c719290163b0f7844b377bfe548ea36fdf48a94824a939bc3fb772cfed8dd6dd325b957135b46dbc53233c26adedc8dec19a3252349be6251cb9b8ac4da8dff83239ed4dc2ae828a8fda670"], 0x1) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$binfmt_misc(r1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) fsetxattr$security_smack_entry(r6, &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000280)='wrr\x00', 0x4, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000100)={0xf, @capture={0x1000, 0x1, {0x5, 0x5}, 0xfffffffffffffff7, 0x9}}) [ 1830.430637] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1830.461965] EXT4-fs (loop4): unsupported inode size: 30 09:53:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(0x0, &(0x7f0000000080)) [ 1830.485074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.492906] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, 0x4}}, 0x2e) [ 1830.579604] device bridge0 left promiscuous mode 09:53:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001e", 0x59, 0x400}], 0x0, 0x0) 09:53:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1830.633159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.639759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1830.646521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.653011] bridge0: port 1(bridge_slave_0) entered forwarding state 09:53:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) 09:53:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x6, 0x4}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r2 = semget$private(0x0, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xa7, 0x1000}], 0x1, &(0x7f00000001c0)={r3, r4+30000000}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1830.701232] device bridge0 entered promiscuous mode 09:53:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1830.789629] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1830.797166] EXT4-fs (loop4): unsupported inode size: 30 09:53:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x4}}, 0x2e) 09:53:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) 09:53:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5", 0x5d, 0x400}], 0x0, 0x0) 09:53:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syncfs(r0) r1 = syz_open_dev$vcsn(0x0, 0xffffffffffffffff, 0x4000000020000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, r2, 0x3}, 0xc) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1830.979214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.986952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.060162] device bridge0 left promiscuous mode 09:53:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000080)) 09:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}, 0x4}}, 0x2e) 09:53:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)={{0x108, 0x7, 0x6, 0x2ac, 0x1af, 0xca, 0x2d6, 0x7}, "bd3f1c14c9ba3c5e25baad86214d8022c74c7690da46e369d55322892ffcee8d80a832d578f47deb5505f82c9d2e6f0e4b343418bb540baf1969dfb60cf66bad2ba166538d3bc8363a8341f77843da57c8bf6b5f758a6d3ec71046d4eb5a24c733b6b6d25dde9c0a568468fcef7aa1dc596121ccb2", [[], [], [], []]}, 0x495) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1831.140052] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1831.165835] EXT4-fs (loop4): unsupported inode size: 50974 [ 1831.170973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.177903] bridge0: port 2(bridge_slave_1) entered forwarding state 09:53:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) [ 1831.184666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.191124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.249274] device bridge0 entered promiscuous mode 09:53:16 executing program 2: timer_create(0x7, &(0x7f0000000280)={0x0, 0xf, 0x2}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000340)={{}, {r1, r2+30000000}}, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r3 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r4, 0x9) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r5}, 0x18, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x0, @broadcast}, 0x40, {0x2, 0x0, @multicast2}, 'erspan0\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r8 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r8, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r8, &(0x7f0000005fc0), 0x80000000000006a, 0x0) write$selinux_create(r6, &(0x7f0000000540)=@access={'system_u:object_r:systemd_systemctl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8000}, 0x52) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0) r9 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r9, 0xc0345642, &(0x7f00000004c0)={0x9, "1314382623befc367f31f266fcea366d3919c020b71f8ed4335b048c95a531da", 0x1, 0x1}) 09:53:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, r2, 0x3}, 0xc) 09:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, 0x4}}, 0x2e) 09:53:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5", 0x5d, 0x400}], 0x0, 0x0) 09:53:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) [ 1831.533386] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 09:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x4}}, 0x2e) 09:53:16 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) [ 1831.577375] EXT4-fs (loop4): unsupported inode size: 50974 [ 1831.676749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1831.684679] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5", 0x5d, 0x400}], 0x0, 0x0) 09:53:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x82f80, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) syz_open_dev$vcsn(0x0, 0x81, 0x1fffe) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) recvfrom$inet(r1, &(0x7f0000000040)=""/7, 0x7, 0x40010000, &(0x7f0000002180)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1831.753375] device bridge0 left promiscuous mode 09:53:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x2e) 09:53:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) [ 1831.834660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.841126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.847871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.854418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.879310] device bridge0 entered promiscuous mode [ 1831.893469] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1831.910240] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1831.935256] EXT4-fs (loop4): unsupported inode size: 50974 09:53:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000540)=""/205, 0xcd) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000280)='./bus\x00', 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a", 0x5f, 0x400}], 0x0, 0x0) 09:53:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 09:53:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x4}}, 0x2e) [ 1832.111840] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1832.147471] EXT4-fs (loop4): unsupported inode size: 50974 09:53:17 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, 0x0) 09:53:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a", 0x5f, 0x400}], 0x0, 0x0) 09:53:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = dup(0xffffffffffffffff) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x4}}, 0x2e) [ 1832.289242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.297079] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1832.377421] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1832.392540] device bridge0 left promiscuous mode [ 1832.417688] EXT4-fs (loop4): unsupported inode size: 50974 [ 1832.461467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.467925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.474745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.481211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.495277] device bridge0 entered promiscuous mode 09:53:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x4}}, 0x2e) [ 1832.517632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 09:53:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a", 0x5f, 0x400}], 0x0, 0x0) 09:53:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x2, 0x4) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1832.601307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.610494] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}, 0x4}}, 0x2e) [ 1832.718160] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1832.754663] EXT4-fs (loop4): unsupported inode size: 50974 09:53:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x7, 0x1, [0x0]}, &(0x7f00000002c0)=0xa) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e22, 0x800000, @remote, 0x2}}}, 0x84) 09:53:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x4}}, 0x2e) 09:53:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/82, &(0x7f0000000100)=0x52) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x4}}, 0x2e) 09:53:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x4, 0x100000001, 0x0, 0x6940a5f2, 0xffff, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r2, 0x766, 0x20, 0x2, 0x7}, &(0x7f0000000340)=0x18) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r3}, 0x18, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000540)='/dev/video#\x00', 0x6, 0xb1beba9d9533edf7) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000004c0)=@v2={0x2000000, [{0xffff, 0xffffffffffffff3f}, {0x2d, 0xa1a}]}, 0x14, 0x2) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000300), 0x4) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(r0, 0x0, 0xfffffffffffffdb9) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1833.586691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.593196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.600075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.606497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.617777] device bridge0 entered promiscuous mode 09:53:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x4}}, 0x2e) [ 1833.634055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.640664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.672408] device bridge0 left promiscuous mode [ 1833.689550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.696044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.702887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.709342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.756630] device bridge0 entered promiscuous mode [ 1833.763476] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 09:53:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/137, 0x89, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x11, &(0x7f0000000080)={@loopback={0x200000000000000}}, 0x20) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 09:53:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, 0x4}}, 0x2e) 09:53:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a57", 0x60, 0x400}], 0x0, 0x0) 09:53:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1833.812304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.819323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.842228] device bridge0 left promiscuous mode [ 1833.936763] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem 09:53:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}, 0x4}}, 0x2e) 09:53:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() chown(&(0x7f0000000280)='./file1\x00', r0, r1) r2 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r3, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r4}, 0x18, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) write$P9_RRENAME(r2, 0x0, 0xffffff25) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1834.040108] EXT4-fs (loop4): unsupported inode size: 50974 09:53:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, 0x4}}, 0x2e) 09:53:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x4}}, 0x2e) [ 1834.646110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.652616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.659418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.665805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.679605] device bridge0 entered promiscuous mode [ 1834.689579] bridge0: port 2(bridge_slave_1) entered disabled state 09:53:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:19 executing program 2: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0x883d1236fe1398c7) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0)) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write(r1, &(0x7f0000000280)="5d8fa07ebf7e71f891d9a90250d0af3e878ae2a1078f6e4f", 0x18) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1834.696099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.729454] device bridge0 left promiscuous mode 09:53:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}, 0x4}}, 0x2e) 09:53:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a57", 0x60, 0x400}], 0x0, 0x0) 09:53:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x2, [0xff, 0x8]}, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) fcntl$getflags(r1, 0xb) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0xfffffffffffffe85) 09:53:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x0, 0x5}, 0x0, 0x7, 0x1, {0x101, 0x2}, 0x7fff, 0x1}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1834.864812] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1834.873457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.880810] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x4}}, 0x2e) [ 1834.921146] EXT4-fs (loop4): unsupported inode size: 50974 [ 1834.936488] device bridge0 left promiscuous mode 09:53:20 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xd8157233abaf49ef, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x80002) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a57", 0x60, 0x400}], 0x0, 0x0) 09:53:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) [ 1835.256951] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1835.292552] EXT4-fs (loop4): unsupported inode size: 50974 09:53:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x6, 0x4}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r2 = semget$private(0x0, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xa7, 0x1000}], 0x1, &(0x7f00000001c0)={r3, r4+30000000}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x4}}, 0x2e) 09:53:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)=0x1) 09:53:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r2}, 0x18, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @window={0x3, 0xffffffffffffda5b, 0x7f}, @mss, @window={0x3, 0x8, 0x1}, @timestamp, @window={0x3, 0x179c000000, 0x8001}, @timestamp, @mss={0x2, 0x6}, @window={0x3, 0x3, 0x6}], 0x9) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(0x0, 0x0) 09:53:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61}], 0x0, 0x0) [ 1835.630882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.637276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.644054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.650502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.657421] device bridge0 entered promiscuous mode 09:53:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x4}}, 0x2e) [ 1835.851493] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 09:53:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x6, 0x4}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r2 = semget$private(0x0, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000140)=[{0x2, 0xa7, 0x1000}], 0x1, &(0x7f00000001c0)={r3, r4+30000000}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61}], 0x0, 0x0) 09:53:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x4}}, 0x2e) [ 1836.119514] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 09:53:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61}], 0x0, 0x0) 09:53:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1836.208067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.219820] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}, 0x4}}, 0x2e) [ 1836.394274] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 09:53:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x59) 09:53:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x4}}, 0x2e) [ 1837.030594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.037136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.043934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.050377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.057544] device bridge0 entered promiscuous mode [ 1837.079407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.085983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.097299] device bridge0 left promiscuous mode 09:53:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x2, 0x200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) flistxattr(r0, &(0x7f0000000100)=""/4096, 0x1000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 09:53:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x4}}, 0x2e) 09:53:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(0xffffffffffffffff, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}, 0x4}}, 0x2e) 09:53:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x10003, 0x3}) flistxattr(r0, &(0x7f00000001c0)=""/19, 0x13) ppoll(&(0x7f0000000100)=[{r0, 0xc31a}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x3}, 0x8) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x9, r2}) 09:53:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1837.735341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.741938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.748622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.755085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.761894] device bridge0 entered promiscuous mode [ 1837.770705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.777180] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000100)={0x13, 0x7, 0x20}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x9) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}, 0x4}}, 0x2e) [ 1837.783893] device bridge0 left promiscuous mode 09:53:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x4}}, 0x2e) 09:53:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xd000, &(0x7f0000000040), 0x0, r2, 0xc}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) connect$rds(r2, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x6}, 0x10) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000200)={0x0, @loopback, 0x4e22, 0x2, 'rr\x00', 0x8, 0xffffffffffffffff, 0x1a}, 0x2c) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={r1, 0x0, 0xffffffffffffffff, 0x3, 0x8}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 09:53:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, 0x4}}, 0x2e) [ 1838.225091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.231602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.238244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.244703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.251557] device bridge0 entered promiscuous mode [ 1838.258973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.265502] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}, 0x4}}, 0x2e) [ 1838.727656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.734153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.740936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.747325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.755892] device bridge0 entered promiscuous mode [ 1838.770090] bridge0: port 2(bridge_slave_1) entered disabled state 09:53:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x4}}, 0x2e) 09:53:23 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c653020777272000acde0ab3d415005bd823f8ed5f4665a9dc76d32dfd2ea4d15f112ff14eb8ef52680aa675aba2bec9324f86a0b309a39ae3f5319d5be67e3ea9ec284bdd6beae3ee1298f8e8e668788a220d966493600bc6b3da76be9530b2e67bffade3a5d85c05313c4e8ff90e6ccb47b6aeb1ae6a5743b6c0bdd91fc34994556876b49fca1c6106885be65043a515fe49ab5611ed7c0e83d0e8389a4f37508528d5cdbdb8a92f1f5cb917ddcf4735549ce108462b0a23d2d0fd9696b8311ff37b54ca5898d078b03373e060827d78f4690ce6a14b25da7c6a83b1615d361513be1ab7fbdd8b9474d00404fe4c4e7d17bc600d2e18b9ac894ec2a1ecc90e55376efe55460da"], 0x10f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 09:53:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1838.776591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.783727] device bridge0 left promiscuous mode [ 1839.179959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.186518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.193303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.199726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1839.206550] device bridge0 entered promiscuous mode [ 1839.214539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.221188] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x4, &(0x7f0000000100)='wrr\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r1, 0x0, 0x1, &(0x7f0000000040)='\x00', r3}, 0x30) 09:53:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x4}}, 0x2e) [ 1839.228269] device bridge0 left promiscuous mode 09:53:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) [ 1839.614435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.620970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.627603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.634063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1839.640947] device bridge0 entered promiscuous mode 09:53:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}, 0x4}}, 0x2e) 09:53:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) capset(&(0x7f00000005c0)={0x20080522, r2}, &(0x7f0000000600)={0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x6}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r4 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in6, 0x4e21, 0xd4, 0x4e20, 0x0, 0x0, 0x80, 0xa0, 0x87, r3, r4}, {0x3ff, 0x3, 0x80000001, 0x2, 0x0, 0x9, 0x7a0, 0x8000}, {0x7e0, 0x7ff, 0x755b, 0x6}, 0x1, 0x0, 0x2, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x1f}, 0x3505, 0x0, 0x0, 0xffffffffffffffff, 0x10000, 0x61cd, 0x80000000}}, 0xe8) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:53:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1839.659602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.666146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.673320] device bridge0 left promiscuous mode [ 1840.093024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.099571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.106217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.112669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.119616] device bridge0 entered promiscuous mode [ 1840.126722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.133272] bridge0: port 1(bridge_slave_0) entered disabled state 09:53:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r2, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r4, r3, 0x80000) fcntl$getown(r1, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0x27e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0x9}, {0xfff, 0x1}], r6}, 0x18, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x0) ioprio_get$pid(0xfffffffffffffffe, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x27, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/39}, &(0x7f0000000180)=0x78) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x4}}, 0x2e) [ 1840.140152] device bridge0 left promiscuous mode [ 1840.521576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.528089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1840.534877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.541309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1840.548099] device bridge0 entered promiscuous mode [ 1840.561348] bridge0: port 2(bridge_slave_1) entered disabled state 09:53:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0xb00000000000000, 0x38000, 0x880d}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x2ad) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)="71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000100") ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000700)={0x1, &(0x7f0000000280)=[0x0]}) mq_unlink(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7c5a4076b06e8238, 0x19, 0x1, {0x2, {0x2}, 0x80, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0xfffffffffffff0a7, 0x0, 0x8, 0xab, 0x5, 0x0, 0x3, 0x7f, 0x8, 0x1ff}}, 0xfffffffffffffd02) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000300)={0x0, 0x8, 0x8000001}) getsockopt$sock_buf(r1, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) 09:53:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='wrr\x00', 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000140)="8d36b37ab28343e7b48fe3880327844253eecfad9b938c7fe5586621a086b9968ea80e71ac60d55885036d1aaf97606542d960f8879f086c016bf0e3d3ecf473feb821f89ff9d6abd1f214e4f16ea53c138446a21a891f0affbc5b5dfd459267a89525ba50edb41cda2177f6447ae7645729494b90e1837fda567ebfa5b42abadfafeb98ed2f10552b9cdd5f3de0a2c5cda5202420b8ce9c758b487fc18f30578c71ad2a62c631266a5ff3ea8ea12628009bc0a2754cb69cc0346b79ffaf51357e87ccad82fa22896ad2b4e62a5826da29666030279e2ecc92a2063100e406ccc4", 0xe1) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) 09:53:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x4}}, 0x2e) 09:53:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1840.567848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.579496] device bridge0 left promiscuous mode 09:53:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x4}}, 0x2e) 09:53:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) 09:53:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) mq_getsetattr(r1, &(0x7f0000000000)={0x5, 0x4, 0xd8c, 0xd4c, 0xfff, 0x5, 0x7}, &(0x7f0000000040)) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffff9) r2 = request_key(&(0x7f0000001180)='asymmetric\x00', &(0x7f00000011c0)={'syz', 0x1}, &(0x7f0000001200)='wrr\x00', 0x0) r3 = add_key$user(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={'syz', 0x3}, &(0x7f00000012c0)="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", 0x1000, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000022c0)={r2, r2, r3}, &(0x7f0000002300)=""/231, 0xe7, &(0x7f0000002500)={&(0x7f0000002400)={'michael_mic\x00'}, &(0x7f0000002440)="e68fe0a23a6f02709dc3fa8180a4f76e0859ac0a9ab7bf812f5a07407d65fab0bdb52afafae89394f77385c9b86708f1bd2154f40273f7c11cf544f3192c70e1bca45868517a4ecd19fddf686a667c637b10369ba603f8179df7138fc9b55e5c212b25ebfd3a1ca4af8724ec053aa2634d61d1e14e3c5001323baeab37de62a4ee112bc6c23338cbf2eac7ff2884f078afc264b286118d51efbb67d5a06089e42e7a9ead9dffac77cc275da6a641", 0xae}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000002540)="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") 09:53:26 executing program 4 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) 09:53:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0xb00000000000000, 0x38000, 0x880d}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x2ad) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)="71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000100") ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000700)={0x1, &(0x7f0000000280)=[0x0]}) mq_unlink(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7c5a4076b06e8238, 0x19, 0x1, {0x2, {0x2}, 0x80, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0xfffffffffffff0a7, 0x0, 0x8, 0xab, 0x5, 0x0, 0x3, 0x7f, 0x8, 0x1ff}}, 0xfffffffffffffd02) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000300)={0x0, 0x8, 0x8000001}) getsockopt$sock_buf(r1, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) 09:53:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x4000000000000000}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 09:53:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}, 0x4}}, 0x2e) 09:53:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1841.169463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.175948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1841.182746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.189136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1841.195963] device bridge0 entered promiscuous mode 09:53:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000100)="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", 0xfb) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) delete_module(&(0x7f0000000000)='wrr\x00', 0x800) 09:53:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x4}}, 0x2e) 09:53:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)={0xb00000000000000, 0x38000, 0x880d}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x2ad) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000580)="71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000100") ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000700)={0x1, &(0x7f0000000280)=[0x0]}) mq_unlink(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7c5a4076b06e8238, 0x19, 0x1, {0x2, {0x2}, 0x80, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7, 0xfffffffffffff0a7, 0x0, 0x8, 0xab, 0x5, 0x0, 0x3, 0x7f, 0x8, 0x1ff}}, 0xfffffffffffffd02) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000300)={0x0, 0x8, 0x8000001}) getsockopt$sock_buf(r1, 0x1, 0x3f, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) [ 1841.355121] FAULT_INJECTION: forcing a failure. [ 1841.355121] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.438420] CPU: 0 PID: 19211 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1841.445836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1841.455204] Call Trace: [ 1841.457825] dump_stack+0x244/0x39d [ 1841.461490] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1841.466725] ? debug_smp_processor_id+0x1c/0x20 [ 1841.471421] ? perf_trace_lock+0x14d/0x7a0 [ 1841.475710] should_fail.cold.4+0xa/0x17 [ 1841.479800] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1841.484964] ? lock_downgrade+0x900/0x900 [ 1841.489141] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1841.494699] ? proc_fail_nth_write+0x9e/0x210 [ 1841.494732] ? find_held_lock+0x36/0x1c0 [ 1841.494777] ? perf_trace_sched_process_exec+0x860/0x860 [ 1841.508762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1841.514347] __should_failslab+0x124/0x180 [ 1841.518632] should_failslab+0x9/0x14 [ 1841.522452] __kmalloc+0x2e0/0x760 [ 1841.526022] ? strncpy_from_user+0x5a0/0x5a0 [ 1841.530456] ? fput+0x130/0x1a0 [ 1841.533764] ? do_syscall_64+0x9a/0x820 [ 1841.537742] ? __x64_sys_memfd_create+0x142/0x4f0 [ 1841.542576] ? do_syscall_64+0x9a/0x820 [ 1841.546560] __x64_sys_memfd_create+0x142/0x4f0 [ 1841.551237] ? memfd_fcntl+0x1910/0x1910 [ 1841.555299] do_syscall_64+0x1b9/0x820 [ 1841.559188] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1841.564575] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1841.569555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1841.574436] ? trace_hardirqs_on_caller+0x310/0x310 [ 1841.579471] ? prepare_exit_to_usermode+0x3b0/0x3b0 09:53:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x4}}, 0x2e) 09:53:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1841.584505] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1841.589550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1841.594417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1841.599618] RIP: 0033:0x457569 [ 1841.599638] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1841.599648] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1841.599665] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 [ 1841.599676] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1841.599691] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 [ 1841.621801] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1841.621811] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 09:53:26 executing program 4 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r2 = socket$inet6(0xa, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0xd207}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0xffffffffffffffff}, 0x8) setsockopt$inet_buf(r2, 0x0, 0x100000040, &(0x7f0000000040), 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:26 executing program 0 (fault-call:4 fault-nth:0): clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, 0x4}}, 0x2e) 09:53:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x100) setsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000040)=0x3f, 0x4) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x7}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1841.929785] FAULT_INJECTION: forcing a failure. [ 1841.929785] name failslab, interval 1, probability 0, space 0, times 0 09:53:27 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x4}}, 0x2e) 09:53:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1842.051830] CPU: 1 PID: 19258 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1842.059256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.068627] Call Trace: [ 1842.071249] dump_stack+0x244/0x39d [ 1842.071281] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1842.071318] ? debug_smp_processor_id+0x1c/0x20 [ 1842.084791] ? perf_trace_lock+0x14d/0x7a0 [ 1842.089099] should_fail.cold.4+0xa/0x17 [ 1842.093193] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1842.098347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1842.103920] ? perf_trace_lock+0x14d/0x7a0 [ 1842.108193] ? perf_trace_lock_acquire+0x15b/0x800 [ 1842.113154] ? lock_downgrade+0x900/0x900 [ 1842.117356] ? check_preemption_disabled+0x48/0x280 [ 1842.122709] ? find_held_lock+0x36/0x1c0 [ 1842.126815] ? perf_trace_sched_process_exec+0x860/0x860 [ 1842.126837] ? find_held_lock+0x36/0x1c0 [ 1842.136379] __should_failslab+0x124/0x180 [ 1842.140674] should_failslab+0x9/0x14 [ 1842.144520] kmem_cache_alloc+0x2be/0x730 [ 1842.144564] ? shmem_destroy_callback+0xc0/0xc0 [ 1842.144589] shmem_alloc_inode+0x1b/0x40 [ 1842.157506] alloc_inode+0x63/0x190 [ 1842.161170] new_inode_pseudo+0x71/0x1a0 [ 1842.165251] ? prune_icache_sb+0x1c0/0x1c0 [ 1842.169510] ? _raw_spin_unlock+0x2c/0x50 [ 1842.169534] new_inode+0x1c/0x40 [ 1842.169553] shmem_get_inode+0xf1/0x920 [ 1842.169577] ? shmem_encode_fh+0x340/0x340 [ 1842.169596] ? lock_downgrade+0x900/0x900 [ 1842.169626] ? lock_release+0xa00/0xa00 [ 1842.169641] ? perf_trace_sched_process_exec+0x860/0x860 [ 1842.169671] ? usercopy_warn+0x110/0x110 [ 1842.177199] __shmem_file_setup.part.50+0x83/0x2a0 [ 1842.207948] shmem_file_setup+0x65/0x90 [ 1842.211945] __x64_sys_memfd_create+0x2af/0x4f0 [ 1842.216641] ? memfd_fcntl+0x1910/0x1910 [ 1842.220786] do_syscall_64+0x1b9/0x820 [ 1842.224708] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1842.230099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1842.235055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1842.239921] ? trace_hardirqs_on_caller+0x310/0x310 [ 1842.244955] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1842.249991] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1842.255054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1842.259930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1842.265132] RIP: 0033:0x457569 [ 1842.268341] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1842.287267] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1842.287286] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 09:53:27 executing program 4 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xa497, 0x101800) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000100)={0x2, 0x0, 0x0, 0xfff, 'syz0\x00', 0x1000}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:27 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 1842.287296] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1842.287307] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 [ 1842.287318] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1842.287334] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 09:53:27 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x1e, 0x37, 0x1, {0x4, 0x1f, 0x60, r0, 0xfffffffffffffe05}}, 0xffffffffffffffd9) 09:53:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4}}, 0x2e) 09:53:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1842.526473] FAULT_INJECTION: forcing a failure. [ 1842.526473] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.580837] CPU: 1 PID: 19307 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1842.588224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.588236] Call Trace: [ 1842.600195] dump_stack+0x244/0x39d [ 1842.603846] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1842.609109] should_fail.cold.4+0xa/0x17 [ 1842.613314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1842.618439] ? is_bpf_text_address+0xac/0x170 [ 1842.618462] ? lock_downgrade+0x900/0x900 [ 1842.618483] ? check_preemption_disabled+0x48/0x280 [ 1842.618504] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1842.637079] ? kasan_check_read+0x11/0x20 [ 1842.641247] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1842.646550] ? rcu_softirq_qs+0x20/0x20 [ 1842.650550] ? rcu_softirq_qs+0x20/0x20 [ 1842.654543] ? unwind_dump+0x190/0x190 [ 1842.658464] ? is_bpf_text_address+0xd3/0x170 [ 1842.662983] ? kernel_text_address+0x79/0xf0 [ 1842.667575] ? perf_trace_sched_process_exec+0x860/0x860 [ 1842.673162] __should_failslab+0x124/0x180 09:53:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1842.678310] should_failslab+0x9/0x14 [ 1842.682596] kmem_cache_alloc+0x2be/0x730 [ 1842.686797] ? __shmem_file_setup.part.50+0x83/0x2a0 [ 1842.691917] ? shmem_file_setup+0x65/0x90 [ 1842.696083] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 1842.701057] ? do_syscall_64+0x1b9/0x820 [ 1842.705140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1842.710667] selinux_inode_alloc_security+0x107/0x3a0 [ 1842.715878] ? inode_free_rcu+0x20/0x20 [ 1842.719870] ? __put_user_ns+0x60/0x60 [ 1842.723781] ? kasan_check_read+0x11/0x20 [ 1842.727940] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1842.733245] security_inode_alloc+0x73/0xd0 [ 1842.737589] inode_init_always+0x68f/0xd80 [ 1842.737613] ? get_nr_inodes+0x120/0x120 [ 1842.737642] ? rcu_pm_notify+0xc0/0xc0 [ 1842.737674] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1842.745962] ? kmem_cache_alloc+0x33a/0x730 [ 1842.759356] ? shmem_alloc_inode+0x1b/0x40 [ 1842.763610] ? shmem_destroy_callback+0xc0/0xc0 [ 1842.768703] alloc_inode+0x80/0x190 [ 1842.772387] new_inode_pseudo+0x71/0x1a0 [ 1842.776467] ? prune_icache_sb+0x1c0/0x1c0 09:53:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) pipe2(&(0x7f0000000100), 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1c, 0xfffffffffffffcd9) [ 1842.780736] ? _raw_spin_unlock+0x2c/0x50 [ 1842.784908] new_inode+0x1c/0x40 [ 1842.788311] shmem_get_inode+0xf1/0x920 [ 1842.792314] ? shmem_encode_fh+0x340/0x340 [ 1842.796572] ? lock_downgrade+0x900/0x900 [ 1842.800992] ? lock_release+0xa00/0xa00 [ 1842.801008] ? perf_trace_sched_process_exec+0x860/0x860 [ 1842.801043] ? usercopy_warn+0x110/0x110 [ 1842.801074] __shmem_file_setup.part.50+0x83/0x2a0 [ 1842.814653] shmem_file_setup+0x65/0x90 [ 1842.823679] __x64_sys_memfd_create+0x2af/0x4f0 09:53:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x2e) [ 1842.828375] ? memfd_fcntl+0x1910/0x1910 [ 1842.832492] do_syscall_64+0x1b9/0x820 [ 1842.836409] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1842.841924] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1842.846874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1842.851740] ? trace_hardirqs_on_caller+0x310/0x310 [ 1842.856776] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1842.861944] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1842.867125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1842.867168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1842.867185] RIP: 0033:0x457569 [ 1842.880450] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1842.899533] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1842.907287] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 [ 1842.914570] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1842.921868] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 09:53:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1842.929322] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1842.936628] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 09:53:28 executing program 4 (fault-call:2 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:28 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x804, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x400000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001f00)='cpu.stat\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000200), 0x4) close(r1) write$cgroup_pid(r4, &(0x7f0000000100), 0xda4fff08) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x1) set_robust_list(&(0x7f0000000040)={&(0x7f0000000000), 0x48c8}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x1a000000) ftruncate(r3, 0x40) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000340)=""/195) r5 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000100)={0x7, 0x7fff}, 0x2) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x28800, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x1ff) tkill(r0, 0x39) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000240)=0x2) 09:53:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000040)='\x00', &(0x7f0000000100)=',GPLselinux\x00', &(0x7f0000000140)='wrr\x00', &(0x7f0000000180)='wrr\x00', &(0x7f00000001c0)='nodevloppp0vboxnet1eth1wlan0md5sum\x00', &(0x7f0000000200)='-', &(0x7f0000000240)='wrr\x00', &(0x7f0000000280)='wrr\x00', &(0x7f00000002c0)='wrr\x00', &(0x7f0000000300)='*^}{(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='keyring%]${]\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00']) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}, 0x4}}, 0x2e) 09:53:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x80000, 0x0, 0x20}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}, 0x4}}, 0x2e) 09:53:28 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/13, 0xd, 0x2, &(0x7f0000000100)={0xa, 0x4e22, 0x400, @mcast1, 0x5}, 0x1c) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:53:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1843.321164] FAULT_INJECTION: forcing a failure. [ 1843.321164] name failslab, interval 1, probability 0, space 0, times 0 09:53:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1843.419575] CPU: 1 PID: 19356 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1843.426994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.436373] Call Trace: [ 1843.439099] dump_stack+0x244/0x39d [ 1843.442778] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1843.448002] ? debug_smp_processor_id+0x1c/0x20 [ 1843.452727] ? perf_trace_lock+0x14d/0x7a0 [ 1843.457028] should_fail.cold.4+0xa/0x17 [ 1843.461118] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1843.466258] ? perf_trace_lock+0x14d/0x7a0 [ 1843.470513] ? debug_smp_processor_id+0x1c/0x20 [ 1843.475203] ? perf_trace_lock_acquire+0x15b/0x800 [ 1843.480157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1843.485842] ? lock_is_held_type+0x210/0x210 [ 1843.490311] ? find_held_lock+0x36/0x1c0 [ 1843.494428] ? perf_trace_sched_process_exec+0x860/0x860 [ 1843.499917] __should_failslab+0x124/0x180 [ 1843.504568] should_failslab+0x9/0x14 [ 1843.508392] kmem_cache_alloc+0x2be/0x730 [ 1843.512558] ? mpol_shared_policy_init+0x235/0x650 09:53:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1843.517507] ? current_time+0x72/0x1b0 [ 1843.521416] __d_alloc+0xc8/0xb90 [ 1843.524897] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 1843.529926] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1843.534963] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 1843.540173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1843.540192] ? timespec64_trunc+0xea/0x180 [ 1843.540210] ? inode_init_owner+0x340/0x340 [ 1843.540233] ? _raw_spin_unlock+0x2c/0x50 [ 1843.558499] ? current_time+0x131/0x1b0 [ 1843.558519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1843.558539] ? __lockdep_init_map+0x105/0x590 [ 1843.558564] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1843.578105] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1843.583684] d_alloc_pseudo+0x1d/0x30 [ 1843.587512] alloc_file_pseudo+0x158/0x3f0 [ 1843.591779] ? alloc_file+0x4d0/0x4d0 [ 1843.595673] ? usercopy_warn+0x110/0x110 [ 1843.599768] __shmem_file_setup.part.50+0x110/0x2a0 [ 1843.599796] shmem_file_setup+0x65/0x90 [ 1843.599817] __x64_sys_memfd_create+0x2af/0x4f0 [ 1843.599835] ? memfd_fcntl+0x1910/0x1910 [ 1843.599869] do_syscall_64+0x1b9/0x820 [ 1843.599888] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1843.599908] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1843.617625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1843.617649] ? trace_hardirqs_on_caller+0x310/0x310 [ 1843.617674] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1843.646708] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1843.651773] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1843.656652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1843.661894] RIP: 0033:0x457569 [ 1843.665136] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1843.684069] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1843.691796] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 [ 1843.699368] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1843.706797] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 [ 1843.714086] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1843.721465] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 09:53:28 executing program 4 (fault-call:2 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:28 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:28 executing program 0: getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfff}, 0x37f) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) sync_file_range(r0, 0x3f, 0x7fff, 0x1) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) r1 = gettid() tkill(r1, 0x2e) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000280)=0x95, 0x4) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) 09:53:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x4}}, 0x2e) 09:53:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) write$FUSE_LSEEK(r1, &(0x7f0000000000)={0x18, 0x0, 0x3, {0x10001}}, 0x18) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x4, 0x20003) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x42, 0x0, 0x1, 0x1, 0x7}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000780), 0x0, r2}, 0x68) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) [ 1843.989720] FAULT_INJECTION: forcing a failure. [ 1843.989720] name failslab, interval 1, probability 0, space 0, times 0 [ 1844.032082] CPU: 0 PID: 19411 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1844.039485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1844.048862] Call Trace: [ 1844.051488] dump_stack+0x244/0x39d [ 1844.051517] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1844.051547] ? debug_smp_processor_id+0x1c/0x20 [ 1844.060349] ? perf_trace_lock+0x14d/0x7a0 [ 1844.060377] should_fail.cold.4+0xa/0x17 [ 1844.060401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1844.060422] ? debug_smp_processor_id+0x1c/0x20 [ 1844.083194] ? perf_trace_lock_acquire+0x15b/0x800 [ 1844.088161] ? lock_is_held_type+0x210/0x210 [ 1844.088184] ? lock_is_held_type+0x210/0x210 [ 1844.096990] ? zap_class+0x640/0x640 [ 1844.100748] ? find_held_lock+0x36/0x1c0 [ 1844.104860] ? perf_trace_sched_process_exec+0x860/0x860 [ 1844.110332] ? lock_downgrade+0x900/0x900 [ 1844.114529] __should_failslab+0x124/0x180 [ 1844.118804] should_failslab+0x9/0x14 [ 1844.122628] kmem_cache_alloc+0x2be/0x730 [ 1844.126827] __alloc_file+0xa8/0x470 [ 1844.130564] ? file_free_rcu+0xd0/0xd0 [ 1844.134473] ? d_instantiate+0x79/0xa0 [ 1844.138377] ? lock_downgrade+0x900/0x900 [ 1844.142545] ? kasan_check_read+0x11/0x20 [ 1844.142563] ? do_raw_spin_unlock+0xa7/0x330 [ 1844.142582] ? do_raw_spin_trylock+0x270/0x270 [ 1844.155750] alloc_empty_file+0x72/0x170 [ 1844.159853] alloc_file+0x5e/0x4d0 [ 1844.163408] ? _raw_spin_unlock+0x2c/0x50 [ 1844.167576] alloc_file_pseudo+0x261/0x3f0 [ 1844.171831] ? alloc_file+0x4d0/0x4d0 [ 1844.175693] __shmem_file_setup.part.50+0x110/0x2a0 [ 1844.180753] shmem_file_setup+0x65/0x90 [ 1844.184758] __x64_sys_memfd_create+0x2af/0x4f0 [ 1844.189473] ? memfd_fcntl+0x1910/0x1910 [ 1844.193584] do_syscall_64+0x1b9/0x820 [ 1844.197492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1844.202875] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1844.207823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1844.212721] ? trace_hardirqs_on_caller+0x310/0x310 [ 1844.217769] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1844.222804] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1844.227850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1844.232737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1844.237941] RIP: 0033:0x457569 [ 1844.241155] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1844.260066] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1844.267798] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 [ 1844.275081] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 09:53:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x8000000200020fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x4}}, 0x2e) 09:53:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1844.282362] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 [ 1844.289643] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1844.296926] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 09:53:29 executing program 4 (fault-call:2 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x40) 09:53:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x4}}, 0x2e) 09:53:29 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) ptrace$setsig(0x4203, r0, 0x8, &(0x7f0000000040)={0x3c, 0x8, 0x401, 0x8001}) 09:53:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x42) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:29 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000040)) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1844.631132] FAULT_INJECTION: forcing a failure. [ 1844.631132] name failslab, interval 1, probability 0, space 0, times 0 09:53:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}, 0x4}}, 0x2e) [ 1844.719701] CPU: 1 PID: 19454 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1844.727150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1844.736549] Call Trace: [ 1844.739198] dump_stack+0x244/0x39d [ 1844.742883] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1844.748126] ? debug_smp_processor_id+0x1c/0x20 [ 1844.752844] ? perf_trace_lock+0x14d/0x7a0 [ 1844.757179] should_fail.cold.4+0xa/0x17 [ 1844.761311] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1844.766461] ? save_stack+0xa9/0xd0 [ 1844.770350] ? kasan_kmalloc+0xc7/0xe0 [ 1844.774260] ? kasan_slab_alloc+0x12/0x20 [ 1844.778431] ? kmem_cache_alloc+0x12e/0x730 [ 1844.782788] ? __alloc_file+0xa8/0x470 [ 1844.786708] ? find_held_lock+0x36/0x1c0 [ 1844.790793] ? ipvlan_add_addr+0x218/0x510 [ 1844.795082] ? perf_trace_sched_process_exec+0x860/0x860 [ 1844.801063] ? check_preemption_disabled+0x48/0x280 [ 1844.806120] __should_failslab+0x124/0x180 [ 1844.810382] should_failslab+0x9/0x14 [ 1844.814209] kmem_cache_alloc+0x2be/0x730 [ 1844.818388] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1844.818980] FAULT_INJECTION: forcing a failure. [ 1844.818980] name failslab, interval 1, probability 0, space 0, times 0 [ 1844.823442] selinux_file_alloc_security+0xb4/0x190 [ 1844.823479] security_file_alloc+0x4c/0xa0 [ 1844.823502] __alloc_file+0x12a/0x470 [ 1844.823522] ? file_free_rcu+0xd0/0xd0 [ 1844.823542] ? d_instantiate+0x79/0xa0 [ 1844.823576] ? lock_downgrade+0x900/0x900 [ 1844.823604] ? kasan_check_read+0x11/0x20 [ 1844.863932] ? do_raw_spin_unlock+0xa7/0x330 [ 1844.868377] ? do_raw_spin_trylock+0x270/0x270 [ 1844.872996] alloc_empty_file+0x72/0x170 [ 1844.877122] alloc_file+0x5e/0x4d0 [ 1844.880691] ? _raw_spin_unlock+0x2c/0x50 [ 1844.884872] alloc_file_pseudo+0x261/0x3f0 [ 1844.889122] ? alloc_file+0x4d0/0x4d0 [ 1844.892952] ? usercopy_warn+0x110/0x110 [ 1844.897058] __shmem_file_setup.part.50+0x110/0x2a0 [ 1844.902102] shmem_file_setup+0x65/0x90 [ 1844.906111] __x64_sys_memfd_create+0x2af/0x4f0 [ 1844.910798] ? memfd_fcntl+0x1910/0x1910 [ 1844.914898] do_syscall_64+0x1b9/0x820 [ 1844.918805] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1844.924191] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1844.929132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1844.933995] ? trace_hardirqs_on_caller+0x310/0x310 [ 1844.939051] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1844.944118] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1844.949156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1844.954040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1844.959248] RIP: 0033:0x457569 [ 1844.962456] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1844.981368] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1844.989101] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 0000000000457569 [ 1844.996384] RDX: 0000000020000158 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1845.003668] RBP: 000000000072bf00 R08: 0000000020000158 R09: 00000000fbad8001 [ 1845.010947] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f4115f876d4 [ 1845.018229] R13: 00000000004c4fdb R14: 00000000004d8bd0 R15: 0000000000000005 [ 1845.029104] CPU: 0 PID: 19470 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #145 [ 1845.036501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.045863] Call Trace: [ 1845.048474] dump_stack+0x244/0x39d [ 1845.052131] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1845.057375] ? debug_smp_processor_id+0x1c/0x20 [ 1845.062076] ? perf_trace_lock+0x14d/0x7a0 [ 1845.066333] should_fail.cold.4+0xa/0x17 [ 1845.070412] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1845.075569] ? debug_smp_processor_id+0x1c/0x20 [ 1845.080257] ? perf_trace_lock_acquire+0x15b/0x800 [ 1845.085216] ? lock_is_held_type+0x210/0x210 [ 1845.089646] ? perf_trace_lock+0x7a0/0x7a0 [ 1845.093923] ? find_held_lock+0x36/0x1c0 [ 1845.098011] ? security_node_sid+0x198/0x680 [ 1845.102464] ? perf_trace_sched_process_exec+0x860/0x860 [ 1845.107954] __should_failslab+0x124/0x180 [ 1845.112217] should_failslab+0x9/0x14 [ 1845.116052] kmem_cache_alloc_node_trace+0x270/0x740 [ 1845.121188] __kmalloc_node+0x3c/0x70 [ 1845.125024] kvmalloc_node+0x65/0xf0 [ 1845.128763] xt_alloc_table_info+0x42/0xa0 [ 1845.133036] do_arpt_set_ctl+0x2d4/0x870 [ 1845.137124] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1845.142671] ? __do_replace+0xd00/0xd00 [ 1845.146653] ? mutex_unlock+0xd/0x10 [ 1845.150361] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1845.155631] nf_setsockopt+0x7d/0xd0 [ 1845.159340] ip_setsockopt+0xd8/0xf0 [ 1845.163045] tcp_setsockopt+0x93/0xe0 [ 1845.166840] sock_common_setsockopt+0x9a/0xe0 [ 1845.171342] __sys_setsockopt+0x1ba/0x3c0 [ 1845.175494] ? kernel_accept+0x310/0x310 [ 1845.179560] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1845.184135] ? trace_hardirqs_on+0xbd/0x310 [ 1845.188450] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.193815] ? trace_hardirqs_off_caller+0x310/0x310 [ 1845.198907] __x64_sys_setsockopt+0xbe/0x150 [ 1845.203310] do_syscall_64+0x1b9/0x820 [ 1845.207188] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1845.212540] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1845.217487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1845.222316] ? trace_hardirqs_on_caller+0x310/0x310 [ 1845.227323] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1845.232329] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1845.237337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1845.242174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1845.247353] RIP: 0033:0x457569 [ 1845.250539] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:53:30 executing program 4 (fault-call:2 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x2ff, 0x0, 0x2, 0x4, 0x9, 0x7, 0x3ff}, &(0x7f0000000140)=0x20) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x100003fffd, 0x0) clone(0x2200104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x4, 0x2, 0x6f}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x3, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 09:53:30 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x400) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xfffffffffffffff9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) wait4(r1, 0x0, 0x7ffffffd, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) [ 1845.269480] RSP: 002b:00007f49f36edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1845.277177] RAX: ffffffffffffffda RBX: 00007f49f36edc90 RCX: 0000000000457569 [ 1845.284434] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1845.291716] RBP: 000000000072bf00 R08: dcd6eb3c516781eb R09: 0000000000000000 [ 1845.298982] R10: 0000000020000080 R11: 0000000000000246 R12: 00007f49f36ee6d4 [ 1845.306240] R13: 00000000004c41e5 R14: 00000000004d6ae8 R15: 0000000000000004 09:53:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}, 0x4}}, 0x2e) 09:53:30 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x1) msgctl$IPC_RMID(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x39) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) [ 1845.418501] FAULT_INJECTION: forcing a failure. [ 1845.418501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1845.537505] CPU: 0 PID: 19489 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1845.544920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1845.554285] Call Trace: [ 1845.556914] dump_stack+0x244/0x39d [ 1845.560566] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1845.565774] ? perf_trace_lock+0x14d/0x7a0 [ 1845.570047] ? debug_smp_processor_id+0x1c/0x20 [ 1845.574741] ? perf_trace_lock_acquire+0x15b/0x800 [ 1845.579693] should_fail.cold.4+0xa/0x17 [ 1845.579721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1845.588882] ? debug_smp_processor_id+0x1c/0x20 [ 1845.593565] ? zap_class+0x640/0x640 [ 1845.597297] ? perf_trace_lock_acquire+0x15b/0x800 [ 1845.602248] ? zap_class+0x640/0x640 [ 1845.605978] ? lock_is_held_type+0x210/0x210 [ 1845.610413] ? perf_trace_lock+0x7a0/0x7a0 [ 1845.614679] ? __lock_is_held+0xb5/0x140 [ 1845.618778] ? lock_release+0xa00/0xa00 [ 1845.618798] ? perf_trace_sched_process_exec+0x860/0x860 [ 1845.618825] ? __might_sleep+0x95/0x190 [ 1845.632226] __alloc_pages_nodemask+0x366/0xea0 [ 1845.632245] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1845.632268] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1845.647218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.652790] ? check_preemption_disabled+0x48/0x280 [ 1845.657847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.663417] ? percpu_counter_add_batch+0x141/0x190 [ 1845.668459] ? mpol_shared_policy_lookup+0xf7/0x150 [ 1845.673537] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1845.679108] alloc_pages_vma+0x11e/0x4a0 [ 1845.679146] shmem_alloc_page+0xa5/0x190 [ 1845.679165] ? shmem_swapin+0x230/0x230 [ 1845.679222] shmem_alloc_and_acct_page+0x248/0xdb0 [ 1845.696210] ? shmem_getattr+0x2c0/0x2c0 [ 1845.700291] ? print_usage_bug+0xc0/0xc0 [ 1845.700309] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1845.700336] ? mark_held_locks+0x130/0x130 [ 1845.700357] ? print_usage_bug+0xc0/0xc0 [ 1845.700372] ? perf_trace_lock+0x14d/0x7a0 [ 1845.700409] ? debug_smp_processor_id+0x1c/0x20 [ 1845.722542] ? perf_trace_lock_acquire+0x15b/0x800 [ 1845.722568] ? __lock_acquire+0x62f/0x4c20 [ 1845.722588] ? check_preemption_disabled+0x48/0x280 [ 1845.722606] ? print_usage_bug+0xc0/0xc0 [ 1845.722626] ? debug_smp_processor_id+0x1c/0x20 [ 1845.722651] shmem_getpage_gfp+0x71d/0x4840 [ 1845.754586] ? shmem_add_to_page_cache+0x1950/0x1950 [ 1845.759710] ? print_usage_bug+0xc0/0xc0 [ 1845.763812] ? print_usage_bug+0xc0/0xc0 [ 1845.767906] ? print_usage_bug+0xc0/0xc0 [ 1845.771983] ? mark_held_locks+0x130/0x130 [ 1845.776248] ? print_usage_bug+0xc0/0xc0 [ 1845.780336] ? lock_is_held_type+0x210/0x210 [ 1845.784761] ? print_usage_bug+0xc0/0xc0 [ 1845.788849] ? print_usage_bug+0xc0/0xc0 [ 1845.792948] ? __lock_acquire+0x62f/0x4c20 [ 1845.797194] ? __lock_acquire+0x62f/0x4c20 [ 1845.801475] ? __lock_acquire+0x62f/0x4c20 [ 1845.801503] ? mark_held_locks+0x130/0x130 [ 1845.801520] ? print_usage_bug+0xc0/0xc0 [ 1845.801542] ? mark_held_locks+0x130/0x130 [ 1845.818318] ? print_usage_bug+0xc0/0xc0 [ 1845.822423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.827981] ? check_preemption_disabled+0x48/0x280 [ 1845.833047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.838606] ? lock_unpin_lock+0x4a0/0x4a0 [ 1845.842867] ? __lock_acquire+0x62f/0x4c20 [ 1845.847145] ? __lock_acquire+0x62f/0x4c20 [ 1845.851414] ? mark_held_locks+0x130/0x130 [ 1845.855692] ? mark_held_locks+0x130/0x130 [ 1845.859939] ? print_usage_bug+0xc0/0xc0 [ 1845.864033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.869587] ? check_preemption_disabled+0x48/0x280 [ 1845.874647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.880205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1845.880226] ? check_preemption_disabled+0x48/0x280 [ 1845.880249] ? debug_smp_processor_id+0x1c/0x20 [ 1845.895467] ? perf_trace_lock+0x14d/0x7a0 [ 1845.899737] ? debug_smp_processor_id+0x1c/0x20 [ 1845.904424] ? perf_trace_lock_acquire+0x15b/0x800 [ 1845.904441] ? perf_trace_lock+0x7a0/0x7a0 [ 1845.904462] ? lock_is_held_type+0x210/0x210 [ 1845.904482] ? perf_trace_lock+0x7a0/0x7a0 [ 1845.922298] ? __lock_acquire+0x62f/0x4c20 [ 1845.926555] ? zap_class+0x640/0x640 [ 1845.930305] ? print_usage_bug+0xc0/0xc0 [ 1845.934402] ? find_held_lock+0x36/0x1c0 [ 1845.934429] ? find_held_lock+0x36/0x1c0 [ 1845.934460] ? mark_held_locks+0xc7/0x130 [ 1845.946736] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 1845.946754] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 1845.946772] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1845.946793] ? trace_hardirqs_on+0xbd/0x310 [ 1845.966061] ? current_time+0x72/0x1b0 [ 1845.969969] ? trace_hardirqs_off_caller+0x310/0x310 [ 1845.975128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1845.980688] ? iov_iter_fault_in_readable+0x22a/0x450 [ 1845.985891] ? _copy_from_iter_flushcache+0xfc0/0xfc0 [ 1845.991100] ? __sanitizer_cov_trace_pc+0x40/0x50 [ 1845.995960] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 1846.001179] shmem_write_begin+0x10a/0x1e0 [ 1846.005445] generic_perform_write+0x3aa/0x6a0 [ 1846.010074] ? add_page_wait_queue+0x400/0x400 [ 1846.014692] ? file_update_time+0xe4/0x640 [ 1846.018949] ? current_time+0x1b0/0x1b0 [ 1846.022955] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1846.028005] ? generic_write_check_limits+0x28d/0x370 [ 1846.033234] __generic_file_write_iter+0x26e/0x630 [ 1846.038194] generic_file_write_iter+0x34d/0x6b0 [ 1846.042975] ? __generic_file_write_iter+0x630/0x630 [ 1846.048124] ? inode_has_perm.isra.59+0x17a/0x210 [ 1846.053013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1846.058575] ? iov_iter_init+0xe5/0x210 [ 1846.062584] __vfs_write+0x6b8/0x9f0 [ 1846.066334] ? kernel_read+0x120/0x120 [ 1846.070255] ? __lock_is_held+0xb5/0x140 [ 1846.074358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.079907] ? __sb_start_write+0x1b2/0x370 [ 1846.084246] vfs_write+0x1fc/0x560 [ 1846.087806] ksys_pwrite64+0x181/0x1b0 [ 1846.091704] ? __ia32_sys_pread64+0xf0/0xf0 [ 1846.096050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1846.101603] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1846.106985] ? trace_hardirqs_off_caller+0x310/0x310 [ 1846.112123] ? do_sys_ftruncate+0x449/0x550 [ 1846.116471] __x64_sys_pwrite64+0x97/0xf0 [ 1846.120645] do_syscall_64+0x1b9/0x820 [ 1846.124547] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1846.129929] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1846.134886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1846.139774] ? trace_hardirqs_on_caller+0x310/0x310 [ 1846.144804] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1846.149837] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1846.154889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1846.159757] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1846.164952] RIP: 0033:0x411207 [ 1846.168163] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 09:53:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 09:53:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4}}, 0x2e) 09:53:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x2000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000001940)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001980)={{r2, r3/1000+30000}, {0x77359400}}, &(0x7f00000019c0)) r4 = getuid() r5 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001700)={r0, r0, 0x1, 0x7, &(0x7f0000000700)="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", 0x72, 0x9, 0x20, 0x7, 0x401, 0x2, 0x2, "95cab9f99e981e06a2d9853af1cb3e446c3db653e9548d2c71eadd3133f7dd44ce4bc508556992398b6920a1be38ec1aa5b3ccb5bed17a6b7dfdd096d5c6fe0c83273503bb89c4b7f2e7a5b71fb434e1549eccd70b003a64f962e39034f7126d9f0a37fe3b062c657efbef14bed59e7278c79ba7f89b365acd0928a6d51f290071701f6538e080d8f459f944214d8593e8c24be7b2dc37b442ea33f5806de4f486a20bd634e681d83bdccea71dfa716fc86204743449dd2467cfeb59633280256c7f34f1db5ddae5d645f8"}) r10 = geteuid() stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() getgroups(0x2, &(0x7f0000000640)=[0xee01, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x3}, [{0x2, 0x3, r4}, {0x2, 0x4, r5}, {0x2, 0x5, r6}, {0x2, 0x1, r7}, {0x2, 0x4, r8}, {0x2, 0x0, r9}, {0x2, 0x1, r10}], {0x4, 0x1}, [{0x8, 0x2, r11}, {0x8, 0x1, r12}, {0x8, 0x6, r13}], {}, {0x20, 0x5}}, 0x74, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) exit(0xab54) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x84, 0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000018c0)={r0, r1, 0x4, 0x6, &(0x7f0000001800)="b528a5b2566e1489003669e5302abfa008a99c782a67d805feb1fd7cf9b413da632f99e3202f89ef1ccebf257cbabb24b677bdc3f7ea2ccde7454e67f33cf78c15c4da215b1f9b0f8cad72b32760c76412f6124ead32110c23077e952040f5e5c0778a62a1b087f829a1f47c3b5322f350a9b3d7140c8d08b4741572a2728f12fd97af81eaf97832ab2bde583a85dcb7167cc211", 0x1, 0x7ff, 0x3, 0x7fffffff, 0x3800000, 0x1, 0x5, "8d39f3707aa066006b5882ed1a2365567f17fd18a5c6bd9dd8444db82d9a157306d4f3c4d8129e"}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) [ 1846.187079] RSP: 002b:00007f4115f86a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1846.194806] RAX: ffffffffffffffda RBX: 0000000020000150 RCX: 0000000000411207 [ 1846.202084] RDX: 0000000000000061 RSI: 0000000020000300 RDI: 0000000000000006 [ 1846.209370] RBP: 0000000000000000 R08: 0000000020000158 R09: 00000000fbad8001 [ 1846.216652] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000006 [ 1846.223926] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1846.255043] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 09:53:31 executing program 4 (fault-call:2 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, 0x4}}, 0x2e) 09:53:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x6000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:31 executing program 0: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1846.570689] FAULT_INJECTION: forcing a failure. [ 1846.570689] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.593850] CPU: 1 PID: 19553 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1846.601240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1846.610608] Call Trace: [ 1846.613232] dump_stack+0x244/0x39d [ 1846.616901] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1846.622125] ? debug_smp_processor_id+0x1c/0x20 [ 1846.626822] ? perf_trace_lock+0x14d/0x7a0 [ 1846.631094] should_fail.cold.4+0xa/0x17 [ 1846.635178] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1846.640295] ? debug_smp_processor_id+0x1c/0x20 [ 1846.644983] ? perf_trace_lock+0x14d/0x7a0 [ 1846.649252] ? lock_is_held_type+0x210/0x210 [ 1846.653688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1846.659258] ? find_held_lock+0x36/0x1c0 [ 1846.663345] ? assign_eip_far.isra.3+0x298/0xae0 09:53:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, 0x4}}, 0x2e) [ 1846.668361] ? perf_trace_sched_process_exec+0x860/0x860 [ 1846.673834] ? vfs_write+0x2f3/0x560 [ 1846.673854] ? lock_downgrade+0x900/0x900 [ 1846.673879] __should_failslab+0x124/0x180 [ 1846.673903] should_failslab+0x9/0x14 [ 1846.673938] kmem_cache_alloc+0x2be/0x730 [ 1846.681798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1846.681817] ? check_preemption_disabled+0x48/0x280 [ 1846.681860] getname_flags+0xd0/0x590 [ 1846.681882] getname+0x19/0x20 [ 1846.711638] do_sys_open+0x383/0x700 [ 1846.715377] ? filp_open+0x80/0x80 09:53:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x4}}, 0x2e) [ 1846.718942] ? trace_hardirqs_off_caller+0x310/0x310 [ 1846.724066] ? do_sys_ftruncate+0x449/0x550 [ 1846.728417] __x64_sys_open+0x7e/0xc0 [ 1846.732239] do_syscall_64+0x1b9/0x820 [ 1846.736146] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1846.741533] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1846.746484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1846.751346] ? trace_hardirqs_on_caller+0x310/0x310 [ 1846.756392] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1846.761438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1846.766308] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:53:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x4}}, 0x2e) [ 1846.771513] RIP: 0033:0x4111a1 [ 1846.774735] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1846.793655] RSP: 002b:00007f4115f86a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1846.801900] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004111a1 [ 1846.801915] RDX: 00007f4115f86afa RSI: 0000000000000002 RDI: 00007f4115f86af0 09:53:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x200000000000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:31 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x85, "d353a0ad89f805ed1bee197d1c57e0dc9b8f9a71aa84bb005f17cfc5d2a8a7fd470e256e46aa928a370ce0714bb57f983a2eb689919e6fa4d7bc770150a89dac5936d109a8bd23f46554952b6778338d85ca2e5e7c384844b99ccfb18d701374ce7edc223562e25fd2f87dd2d4cacd7e69b0f5383bde5247de7ebf35c8eea22ec760bf48b7"}, &(0x7f0000000180)=0x8d) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x0, 0x1, 0x86c7, 0xf40, 0xff}, &(0x7f0000000200)=0x14) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000280)=0xff00, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x1, 0x7, 0x100000001, 0x1000}, 0x0, 0x100, 0x6, r2, 0x4, 0xc23, 'syz0\x00', &(0x7f00000002c0)=['\x00', "a400", '/dev/rtc0\x00', '/dev/rtc0\x00'], 0x17, [], [0x5, 0xfffffffffffffe01, 0x3, 0x3]}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000240), 0x10) [ 1846.816457] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1846.823731] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1846.823742] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) write$smack_current(r0, &(0x7f0000000380)='/self\x00', 0x6) r1 = gettid() tkill(r1, 0x2e) process_vm_writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/186, 0xba}], 0x3, 0x0) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:53:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x10000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@hyper}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 09:53:32 executing program 4 (fault-call:2 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x1000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x4}}, 0x2e) 09:53:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x600, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x4}}, 0x2e) 09:53:32 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) accept$alg(r1, 0x0, 0x0) [ 1847.368888] FAULT_INJECTION: forcing a failure. [ 1847.368888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1847.380773] CPU: 0 PID: 19598 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1847.388153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1847.397524] Call Trace: [ 1847.400148] dump_stack+0x244/0x39d [ 1847.403828] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1847.409089] ? debug_smp_processor_id+0x1c/0x20 [ 1847.413802] should_fail.cold.4+0xa/0x17 [ 1847.417901] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1847.423056] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1847.428100] ? iov_iter_advance+0x306/0x13f0 [ 1847.432538] ? zap_class+0x640/0x640 [ 1847.436289] ? mark_held_locks+0x130/0x130 [ 1847.440551] ? find_held_lock+0x36/0x1c0 [ 1847.444658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.450227] ? check_preemption_disabled+0x48/0x280 [ 1847.455260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.460819] ? debug_smp_processor_id+0x1c/0x20 [ 1847.465519] ? perf_trace_lock+0x14d/0x7a0 [ 1847.469792] ? debug_smp_processor_id+0x1c/0x20 [ 1847.474476] ? perf_trace_lock_acquire+0x15b/0x800 [ 1847.479424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.484979] ? should_fail+0x22d/0xd01 [ 1847.488893] ? lock_is_held_type+0x210/0x210 [ 1847.493323] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1847.498450] ? debug_smp_processor_id+0x1c/0x20 [ 1847.503145] ? perf_trace_lock+0x14d/0x7a0 [ 1847.507408] __alloc_pages_nodemask+0x366/0xea0 [ 1847.512106] ? lock_is_held_type+0x210/0x210 [ 1847.516549] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1847.521597] ? find_held_lock+0x36/0x1c0 [ 1847.525711] ? trace_hardirqs_off+0xb8/0x310 [ 1847.530145] cache_grow_begin+0xa5/0x8c0 [ 1847.534223] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1847.539786] kmem_cache_alloc+0x66b/0x730 [ 1847.543954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1847.549524] getname_flags+0xd0/0x590 [ 1847.553380] getname+0x19/0x20 [ 1847.556601] do_sys_open+0x383/0x700 [ 1847.560331] ? filp_open+0x80/0x80 [ 1847.560354] ? trace_hardirqs_off_caller+0x310/0x310 [ 1847.560369] ? do_sys_ftruncate+0x449/0x550 [ 1847.560407] __x64_sys_open+0x7e/0xc0 [ 1847.577165] do_syscall_64+0x1b9/0x820 [ 1847.581147] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1847.586547] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1847.591493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1847.596360] ? trace_hardirqs_on_caller+0x310/0x310 [ 1847.601400] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1847.606439] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1847.611501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1847.616371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1847.621579] RIP: 0033:0x4111a1 [ 1847.624786] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1847.643705] RSP: 002b:00007f4115f86a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1847.651428] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004111a1 [ 1847.658705] RDX: 00007f4115f86afa RSI: 0000000000000002 RDI: 00007f4115f86af0 09:53:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x2, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1847.665982] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1847.673681] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1847.680963] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1847.810851] IPVS: ftp: loaded support on port[0] = 21 [ 1847.894419] device bridge_slave_1 left promiscuous mode [ 1847.909928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.920662] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1847.974633] device bridge_slave_0 left promiscuous mode [ 1847.989640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.074314] team0 (unregistering): Port device team_slave_1 removed [ 1848.086011] team0 (unregistering): Port device team_slave_0 removed [ 1848.099111] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1848.164032] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1848.245878] bond0 (unregistering): Released all slaves [ 1849.047105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.054014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.062058] device bridge_slave_0 entered promiscuous mode [ 1849.105247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.111826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.119901] device bridge_slave_1 entered promiscuous mode [ 1849.172082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1849.222615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1849.385057] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1849.441044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1849.492884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1849.500791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1849.704944] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1849.712674] team0: Port device team_slave_0 added [ 1849.763280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1849.772172] team0: Port device team_slave_1 added [ 1849.825253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1849.884129] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1849.919821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1849.926856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1849.936034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1849.966468] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1849.973696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1849.981928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1850.393717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.400114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.406710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.413137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.421097] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1851.369581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1851.583953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.699944] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1851.814688] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1851.821338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1851.828387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1851.934744] 8021q: adding VLAN 0 to HW filter on device team0 09:53:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:hald_dccm_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x59) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @loopback, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x3d}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:37 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x40000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x4, 0x0, [{0x7, 0x0, 0x5}, {0x59ebffa6, 0x0, 0x10001}, {0x9}, {0x65b, 0x0, 0x5}]}) 09:53:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}, 0x4}}, 0x2e) 09:53:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x6, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:37 executing program 4 (fault-call:2 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) [ 1852.632813] FAULT_INJECTION: forcing a failure. [ 1852.632813] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.681277] CPU: 0 PID: 19901 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1852.688682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1852.698073] Call Trace: [ 1852.700692] dump_stack+0x244/0x39d [ 1852.704380] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1852.709601] ? debug_smp_processor_id+0x1c/0x20 [ 1852.714301] ? perf_trace_lock+0x14d/0x7a0 [ 1852.718568] should_fail.cold.4+0xa/0x17 [ 1852.722655] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1852.727795] ? save_stack+0xa9/0xd0 [ 1852.731505] ? kasan_kmalloc+0xc7/0xe0 [ 1852.735417] ? kasan_slab_alloc+0x12/0x20 [ 1852.739575] ? kmem_cache_alloc+0x12e/0x730 [ 1852.743928] ? __alloc_file+0xa8/0x470 [ 1852.747851] ? find_held_lock+0x36/0x1c0 [ 1852.751979] ? perf_trace_sched_process_exec+0x860/0x860 [ 1852.757465] ? check_preemption_disabled+0x48/0x280 [ 1852.762510] __should_failslab+0x124/0x180 [ 1852.766766] should_failslab+0x9/0x14 [ 1852.766784] kmem_cache_alloc+0x2be/0x730 [ 1852.766809] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1852.774761] selinux_file_alloc_security+0xb4/0x190 [ 1852.774798] security_file_alloc+0x4c/0xa0 [ 1852.774820] __alloc_file+0x12a/0x470 [ 1852.792925] ? file_free_rcu+0xd0/0xd0 [ 1852.796856] ? find_held_lock+0x36/0x1c0 [ 1852.801112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1852.806677] ? check_preemption_disabled+0x48/0x280 [ 1852.811714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1852.817294] alloc_empty_file+0x72/0x170 [ 1852.821403] path_openat+0x170/0x5150 [ 1852.825216] ? lock_is_held_type+0x210/0x210 [ 1852.829650] ? perf_trace_lock+0x7a0/0x7a0 [ 1852.833906] ? zap_class+0x640/0x640 [ 1852.837657] ? path_lookupat.isra.43+0xc00/0xc00 [ 1852.842430] ? unwind_get_return_address+0x61/0xa0 [ 1852.847376] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1852.852426] ? expand_files.part.8+0x571/0x9a0 [ 1852.857047] ? find_held_lock+0x36/0x1c0 [ 1852.861149] ? __alloc_fd+0x347/0x6e0 [ 1852.864965] ? lock_downgrade+0x900/0x900 [ 1852.869150] ? kasan_check_read+0x11/0x20 [ 1852.873331] ? do_raw_spin_unlock+0xa7/0x330 [ 1852.877756] ? do_raw_spin_trylock+0x270/0x270 [ 1852.882359] ? __lock_is_held+0xb5/0x140 [ 1852.886437] ? __check_object_size+0xb1/0x782 [ 1852.890981] ? _raw_spin_unlock+0x2c/0x50 [ 1852.895148] ? __alloc_fd+0x347/0x6e0 [ 1852.899004] do_filp_open+0x255/0x380 [ 1852.902835] ? may_open_dev+0x100/0x100 [ 1852.906843] ? get_unused_fd_flags+0x122/0x1a0 [ 1852.911439] ? __alloc_fd+0x6e0/0x6e0 [ 1852.915268] do_sys_open+0x568/0x700 [ 1852.919037] ? filp_open+0x80/0x80 [ 1852.922603] ? trace_hardirqs_off_caller+0x310/0x310 [ 1852.927725] ? do_sys_ftruncate+0x449/0x550 [ 1852.932077] __x64_sys_open+0x7e/0xc0 [ 1852.935894] do_syscall_64+0x1b9/0x820 [ 1852.939788] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1852.939810] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1852.939826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1852.939846] ? trace_hardirqs_on_caller+0x310/0x310 [ 1852.939865] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1852.965067] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1852.970117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1852.975001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1852.980216] RIP: 0033:0x4111a1 [ 1852.983427] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1853.002339] RSP: 002b:00007f4115f86a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1853.010070] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004111a1 [ 1853.017351] RDX: 00007f4115f86afa RSI: 0000000000000002 RDI: 00007f4115f86af0 [ 1853.024627] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 09:53:37 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x8002) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, 0x4}}, 0x2e) 09:53:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:38 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000000100)={0x8, "a752617d6392c0bb7fbf5faaa3920765417d77e6e5a80c50e741dbd705ec19132385e1534de91745552b9083cc3a948bfdc299605610f0e8802639827fc120c09a96f202763ae6bafa432315fdab1df3c2df680a1d6dea83e84070386a9488197fa2604694d5d2b6173e84387f3ce9ef88671e9bada913edd8830e6e855c042831e98e0bfcafafae277e3443d9cad09b12c592f0430ad03138560c8c83997224bc153d8a7a5094f33ab5a3eb66a2e935b5b3d599310c89686f73b26d426117270ce57ce9c778f2293ee67799df2d2761b42c2c301d1fcd67f1cd3097c6f3a95f75530c3657408945487367c4feaccdc02911a6dd111d8e1332885bd6fecfed19bc6c9dcd0843c320dec639ef389d36520a976f2f3c880f7a76a376d7676789f2910e64bc354c9c49477457a0b1264738ae33128fc50010770cb93d86951ae8c69d09e5a1deec3031dd65e6b00ce262d04792bf93f6f37539ddee93ccc8d4c02980ca93dc1f8f105d12fb3d07e7eb7e8292b24d8c25ed105893ce5500fb91ce2e8c182759c5981db6ff25ff1405803ea8348ea8a93e83c89f336fa4d5619328b7a13953cce3b385709839c2650f70b396891295558792f55ab0d78de7391fd0834a28baa98df6e49b06bd93d691eaba0c5b1f9d0a4cf00b879a37d98f8e448bab09717ab7926a649dd1727a952369d783c130263fd0d90a76872f65d564563c18c6d7e94f34f86696466bd9e0904bf6fc4fad7987d3c321ee03d36443769563de4c2b7c1078ad255d839c9256b0fd33bdbc92674b3ed2407bfbe4cc5117043bcede55dc49eeaf73f8ca391c944948fe4e66ba14ac6a4bb71d079c049fc62f630a23a9102226b7aef4f93d98375fd03901a7f8b079852ce0f89fedd242f400ffa20774069b753c3365832352213a8f1dccf026787e6ab5809ddd39a77ed62540d93e27901ee3243ec3e25684a1817e87ea960944703ace366eb009722cf9988a3338ea59292a5a490d9834100d24220f59ea69c36752a1e4bc1f142b18329613ebf6ea2b9abafc9e3206ce7bb35a5edf9e719c61bdc2629c9cf4ddfffd2e968e9498febba08f64cc452c2b1bcb784e8bf1cb9b711b5bbe61d50af8d91b42a87203e2cb974100c5ec60d57a6d44709df7170a795b9a304514162bb334584a595da911c9c8bf8bc81889ee62a9cbfde4c564e08532ed667dc3a581250f1a643762bbbb03871cef2e6b96e3408b3c3dfd816da192d84dab353124987015009ee9c2cb100bb4e5c62276286cf78d84683b39aed61903cc9b85b4401fc0a9e73c2356bbd6d6c7576b9be65e03c3e9b36039f6886cfebb8712585e1cb176234d7641a807b42ae664004b2c4969ed115918781a1ce686777e163ab2dcdcee350b9ef3509b7112c288ff7058e4e11e293199713f48799f93691d839bd1a1aba3dc47821581d8c468457148d334d6b6430f6ee22c18a72d53423385be7c1dba1354eb48d1d5198544ff123f5a67939dcf6b06fcb4ce227fd6e3310b4d8797af0afb88fc4900888431ee0494e2e589a54958c222dc1ed937089898963f9fb953380e213afc8b3ccad467e6cd1309115b06a0665a34b168358b5be0101c6e6a488401d2a0dbcd981ea350fad092b5c12bc6c5fdd2a67f5e7857f3b8079d710c3948a588a40a1804b263f27b0f7e7e793b55f3303a71bc75eb8232a222b8eefb0763b0e2c44419327c20e13ec04d575a4aae831db0434f0065a46b91e043cb373c2f0559181a2290ec21ecba49a035002e0f709bbcc041c1e9912d3e800d351d889d0056d94a7d6f0abd768d5b477e28264c245ace6cac8a1c34a314a8b7833e48e33da7f816650200567e9c7d9357b12dc83777faa1bb3fdded97a0f7fb797bbfb501021ae8abb84d1a91dfd03d54551262645a689bba9cea42f451a031d6c389a378ee50b6751d94d898fc64db6ccad51fb05cad2bc827aee62f2547a21d02eb764848d95d167dff768b20cc71f1e9d78cf59fc9b7e547f4b8d4960ee7bd68f584101f5b7bb7482637e3bcd0908bd4b50445894d09ea9d36a0ca6f3eb500a38956b92b92f52dc0fd0771600db99c2f8744a0ad6431e6ac0ac9cc1770e5e6c86f4a4c6ce07c545bb54b6a8e0708b0c3c5c0984093c6f13c94b8bd726e8abff6aa164b93f27797178840fcc824de10f9073cfd394c62b67b2b91d0cfeb77f8f54c73c36603d520d7708135ee40f220714fa2fbb5c215fdeb797e6db94f5a6f45e639672bc89512ce0165ed07f8dbdd97a5f04e724163614a4cb637157ba2dffff9efa9e670e9737e052fb43c24d5088c0798115a1b685da271d70c1ebbe1f827dd290af82d83454e6badf86f7faf35bbd1567d45fda7809654e3a8976e5408a0f3d314f1e9ca3f6a78e3bd6978f47063b24d4632fc7a55ef51bfd079fb7049df0cc3267f85d945b4729e87978348c65ba92abc145f445e624c58e8827c7c23e4b38916408932ca04505bc49ca925a7128e34471e125fdaccb2a803712b7914e90b6a493c4babcaa3a08634ccf1ec03fa4c9d478605afec829abbe31f8113da185cb71ec27d6694329c0dd0901d43d242a3cf9173aa52d6867bdc1316320c295ca155fc13d0e4a6e90d6639b759845b9e5556d523eb0956fc5f2fa36e152ef96634a54628bdbfd36c08c244935cf9ca064c1e4a77531d7390b3a9435cf3a814516f443f0971806b5df9ef7489b1129226ef15a10499e9c2233b034ef06bf92bf470d358982da960cdb0e5c379d5c2aa1b03582d7d8ca36629ac6c345e9b4fb7f9062a3c96e87197e9c7e9bc3455683b1efebc1fd3ab4e00f39aa2c3cf3aa14ab1d2f273957175c15ed9d779b5f36e66fb70a829e0f86f79bfbd24f1d284678e9c969f53a39acaa801049565d402b74dcaed51f39645354801436af67281f1908d5005c9d97c326fe98a0b1bf1d81d42615cfd6582f463139ffc68244076040c418cef3b72efffad8bd1e66a1a1ee2cfee1d39968fdac1213aa2cad8a841197b05b5a0e9c79a8321df3d5bf7c84d262700a232de928b733bfefdd892300b55ee167a0f854d4d74f4e311e998844e141963f36bfa011f6e6ce5dc67a8c3e42158786056416999acb7c488290b47cc4890d0e4bf469afb8ff4ac84e8fa3e1bb5c1a40aad3f9e6600226c5960a95933a3dbbe92178557fe461408c1d30878154d8f194808b44d56f19c6ca19311427e705c1c085037713df20c1641816ee709fc0f59ce859a12aa37daf1a27a8d6ac6f4cb41eadcd2501defb9f9c1d40f61444b96598d13d1796f8beabb9fca0279ba484d39b70d19281ddb95bb42728e986dfc01f5ea733eefb4be6863fbc005ce661d169a76d40e4ed1cacb6034d457959333cbda586676e13aa565c1c1d696c9954514c7a3fc27ee768705bb9a207b79db273e84b8c1f45cf91fa6d70bce69af74dd9791e60b83309f24fa70c024ffca907871bbb8ef7ecbe6c558794b151e02483fbfadcf35792d73f0a916f32c972175c5aec5762be70359cefbfc6fc97b5637e5bb0dc2542592bbda90d5159cbd9c0248f54b02d121f6d86aa30df8355db98ba8747e2eea0d4e361814d86fef837c3ba965ccef61e8641a9ec0bcfb05fb44a9b31713b2fc0327b51161865ed7d828b97eeed16b2772bbc1b5d980e37d0964c97f6a9515ade77dc7707f845d63993d1a05f91f2c2aa38b9edf396e93bb278107d4f7729e1353365e2e7e2587ed938936f5baac3ac978a9187acbcff699a85a4de1feb92c4cfcbc1783a6a82cb74918bb25d265cd6cd5a421e6708fc7b61154961e889b811e44e8c00cbfa3402f0fe0b3801e2481217d722f4dafcb562a3f1ead5f668ef44e7e598d0700fb4324be601bc444744eb9fd14b094cfe672ebf5e4489cc651f855be727794ccf9d502f987ab26fc351d48a17307afbea2beae200cb11cabe8b6fdd34165444f8074a0f942dae321d4d47053a6faeddc9d017b374fc5cc7a4a8b36fbe3f40e4b44a4f64316f96b5722c1f19a6927d77ebae707310ccc953c80e9f07e7101d5bd9a54ebf61fb25898b39ecafa3e6e64dc20186fa617ad76210270639be17eaaf57bf002a2307d162ec6f83825fe6e381f20a015575a7e0136a5880d1a9598d2738ca405faeca5e33a8ccdfdc66c48013e46732e310460085f8972e794f37fb6a1b301554e7f509713730ebf0df8a7286fba6445fe75fdc91b94f990704f3dfbade3a0aec0d352793abff46b30b8fef2c9c2d2daed53a52f8be77075a7749bb54f6a07ee64d10b87207f12edb1b7921d6cd8c73fb26d6443b8e341a079419701207ec6bd79b18422d764d835c8ba06bebd9a9693a241819a90f00a4e9dc696a404d0ca999dac157492f075733a54b2ef0bbb0e204c7bfcb4791a76e6835644b7ad9457a5a43354c1e03f520be757dba5e3b5d0b2a581c726d6c79dab183156823c4c109bece2c11343116358c8b6803e66f180eb464ce4952ae0c3fb5fdb10d0bf7df8793e11d86dd3a1ccfbc8db4a7152570aad69c36c10795039b47a8ddcc7869baa0d6b4b095a288bb4167332d2b825356e29d75553480ab18662f66c27254ef7a7f7cf346bb876555e713988c908cba47d49080db45032670cf127473ba59bf5791bf3a879779459544619c95a0c4516201842faef9422a29e56d671c451c1ac08d61f66ee83683904be13a88e46cd77a806dc2611ebb0ccb3568f55c207b901bf54f3be05c60fdea907634e5b668a77bbc07de549dcc58a4534e5b1e97ee9e1bd07a7f8a1f9ea9663185a8b0502596c4278b1554f00aa973c254c4c9b2b255856c9f48064e8fbab37f151131f33203ec747ebb1af3b5dcf485e3cbcc4cb830be7c4023fb73cb7ebd15d6587b38e8ba78529860aa614edbd924b6dcab1080ca74300cc1c1c04c3171a34f2e9f1b9e89e0a502419c22b5d98ef50f7f1dcc8341637105a546c810e02eaac6165a54646ee0dff514d36a25dfe637807d15a3d956fa97736aef0efdc0065d25e70487aec0e23ab1f53b1d9010740e8399980fcbf476c6e98939203073162ac4f7d9a330c25f2064c1d30091862c9750e50a33c2a6e2669da2ea04caba537e30f8d488bc98bdbaca899ed91ae7f54517bff03aad191651f91896c6a5bd878f7eb78cf5557b02070750c3c5adc2b36dc5af18c2681202abb293678276582cd05e0530a59c6bbebf80b761af5d905fad5b7e8b72304ead764f40126412cd34382b3eeacd087912b343ffef330562ed255b3a93e6023e24d295ddacc875440c879a2486f94bddc59e8819343f2cc61c23366496c2e05f93af632e62c063cc0f0b706772f43b9b5027d5d3eea9662d2fd4987713565c43e684b102aba09432afa2c545243ad959f1c133ba2bf6a3f16b4e0603b37cf15961b8ff629aed965b61db31b0c52a5312e7043c4ecdb9cb58d93591876a3e82bb41dc13ab7d6a65f77d402fdd8596ee0a7b72f768e7ed2b3b7975f2b4b32e38043a6cf55211182eb02c66e1ad60c49c1f1aaa71a811e8f0cf92e4e69b0ca90015f8740d6648fa493e1ea4a84e9385a9d292706e23b2229f318d85c5aa25ac45b850fdfb7113c29d4820c5d23124f429bbfaa554a3dddebcc720729339c6d95b14599d32ce1f7dec7b9472ce0b9ac98cc655bff7eaddb761f916615c63e7495ec14a64e68e67c3e9e03521447857d8c6ccd4126a8e1228ad6851f2c73ca43b24fa07904bd147aa281332f62d03a00c10d4968ee56b73fa8c7d67667f6055a5055d8a0e82f58a783815a4ba7c952f4206d", 0x1000}, 0x1006) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) accept4$packet(r0, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14, 0x80800) sendmsg$can_bcm(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x1d, r1}, 0x10, &(0x7f0000001840)={&(0x7f00000017c0)={0x3, 0x10, 0xffffffff, {0x0, 0x7530}, {}, {0x2, 0xab7, 0x40, 0x8}, 0x1, @canfd={{0x1, 0xffff, 0xffffffff, 0x100}, 0x3, 0x1, 0x0, 0x0, "a102f1c445d1b50fe0693bd309fe95a11e6de02db9f6208535f6d440f8ec964668d1983a50d80db1c483db554399d809fdffa9817744313527ce234e5d1907d2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x200448c1) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x600000000000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1853.031911] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1853.039195] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x4}}, 0x2e) 09:53:38 executing program 4 (fault-call:2 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x100000000000000, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)={0x2, 0x0, [{0x2, 0xbe, &(0x7f0000000100)=""/190}, {0x5000, 0xd0, &(0x7f00000001c0)=""/208}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}, 0x4}}, 0x2e) [ 1853.592705] FAULT_INJECTION: forcing a failure. [ 1853.592705] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.629471] CPU: 1 PID: 19957 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1853.636871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1853.646234] Call Trace: [ 1853.648862] dump_stack+0x244/0x39d [ 1853.652519] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1853.657739] ? debug_smp_processor_id+0x1c/0x20 [ 1853.662432] ? perf_trace_lock+0x14d/0x7a0 [ 1853.666706] should_fail.cold.4+0xa/0x17 [ 1853.670807] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1853.675953] ? save_stack+0xa9/0xd0 [ 1853.679600] ? kasan_kmalloc+0xc7/0xe0 [ 1853.683505] ? kasan_slab_alloc+0x12/0x20 [ 1853.687665] ? kmem_cache_alloc+0x12e/0x730 [ 1853.692000] ? __alloc_file+0xa8/0x470 [ 1853.695929] ? find_held_lock+0x36/0x1c0 [ 1853.700037] ? execlists_cancel_requests+0x768/0x950 [ 1853.705176] ? perf_trace_sched_process_exec+0x860/0x860 [ 1853.710643] ? check_preemption_disabled+0x48/0x280 [ 1853.715680] __should_failslab+0x124/0x180 [ 1853.719933] should_failslab+0x9/0x14 [ 1853.723747] kmem_cache_alloc+0x2be/0x730 [ 1853.727933] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1853.732975] selinux_file_alloc_security+0xb4/0x190 [ 1853.738013] security_file_alloc+0x4c/0xa0 [ 1853.742320] __alloc_file+0x12a/0x470 [ 1853.746153] ? file_free_rcu+0xd0/0xd0 [ 1853.750071] ? find_held_lock+0x36/0x1c0 [ 1853.754156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1853.759720] ? check_preemption_disabled+0x48/0x280 [ 1853.764750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1853.770326] alloc_empty_file+0x72/0x170 [ 1853.774418] path_openat+0x170/0x5150 [ 1853.778234] ? lock_is_held_type+0x210/0x210 [ 1853.782665] ? perf_trace_lock+0x7a0/0x7a0 [ 1853.786921] ? zap_class+0x640/0x640 [ 1853.790669] ? path_lookupat.isra.43+0xc00/0xc00 [ 1853.795442] ? unwind_get_return_address+0x61/0xa0 [ 1853.800391] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1853.805425] ? expand_files.part.8+0x571/0x9a0 [ 1853.810088] ? find_held_lock+0x36/0x1c0 [ 1853.814184] ? __alloc_fd+0x347/0x6e0 [ 1853.818017] ? lock_downgrade+0x900/0x900 [ 1853.822213] ? kasan_check_read+0x11/0x20 [ 1853.826375] ? do_raw_spin_unlock+0xa7/0x330 [ 1853.830797] ? do_raw_spin_trylock+0x270/0x270 [ 1853.835407] ? __lock_is_held+0xb5/0x140 [ 1853.839504] ? __check_object_size+0xb1/0x782 [ 1853.844057] ? _raw_spin_unlock+0x2c/0x50 [ 1853.848227] ? __alloc_fd+0x347/0x6e0 [ 1853.852074] do_filp_open+0x255/0x380 [ 1853.855890] ? may_open_dev+0x100/0x100 [ 1853.859897] ? get_unused_fd_flags+0x122/0x1a0 [ 1853.864519] ? __alloc_fd+0x6e0/0x6e0 [ 1853.868347] do_sys_open+0x568/0x700 [ 1853.872099] ? filp_open+0x80/0x80 [ 1853.875659] ? trace_hardirqs_off_caller+0x310/0x310 [ 1853.880780] ? do_sys_ftruncate+0x449/0x550 [ 1853.885127] __x64_sys_open+0x7e/0xc0 [ 1853.888949] do_syscall_64+0x1b9/0x820 [ 1853.892847] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1853.898246] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1853.903187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1853.908052] ? trace_hardirqs_on_caller+0x310/0x310 [ 1853.913082] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1853.918115] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1853.923158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1853.928036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1853.933255] RIP: 0033:0x4111a1 [ 1853.936460] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1853.955383] RSP: 002b:00007f4115f86a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1853.963103] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004111a1 [ 1853.970385] RDX: 00007f4115f86afa RSI: 0000000000000002 RDI: 00007f4115f86af0 [ 1853.977679] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1853.984954] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1853.992230] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}, 0x4}}, 0x2e) 09:53:39 executing program 4 (fault-call:2 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000001, 0x41}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:39 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:39 executing program 1: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:39 executing program 1: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x4}}, 0x2e) [ 1854.760864] FAULT_INJECTION: forcing a failure. [ 1854.760864] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.813160] CPU: 1 PID: 19975 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1854.820548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1854.829908] Call Trace: [ 1854.832525] dump_stack+0x244/0x39d [ 1854.836185] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1854.841421] ? debug_smp_processor_id+0x1c/0x20 [ 1854.846158] ? perf_trace_lock+0x14d/0x7a0 [ 1854.850415] should_fail.cold.4+0xa/0x17 [ 1854.854485] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1854.859597] ? lock_is_held_type+0x210/0x210 [ 1854.864021] ? check_preemption_disabled+0x48/0x280 [ 1854.869077] ? zap_class+0x640/0x640 [ 1854.872796] ? debug_smp_processor_id+0x1c/0x20 [ 1854.877469] ? perf_trace_lock+0x14d/0x7a0 [ 1854.881718] ? find_held_lock+0x36/0x1c0 [ 1854.885792] ? __lock_is_held+0xb5/0x140 [ 1854.889883] ? perf_trace_sched_process_exec+0x860/0x860 [ 1854.895348] __should_failslab+0x124/0x180 [ 1854.899612] should_failslab+0x9/0x14 [ 1854.903435] kmem_cache_alloc_trace+0x2d7/0x750 [ 1854.908124] ? check_preemption_disabled+0x48/0x280 [ 1854.913167] __kthread_create_on_node+0x137/0x540 [ 1854.918038] ? loop_get_status64+0x140/0x140 [ 1854.922467] ? kthread_parkme+0xb0/0xb0 [ 1854.926465] ? __lockdep_init_map+0x105/0x590 [ 1854.930962] ? __lockdep_init_map+0x105/0x590 [ 1854.935463] ? loop_get_status64+0x140/0x140 [ 1854.939882] kthread_create_on_node+0xb1/0xe0 [ 1854.944382] ? __kthread_create_on_node+0x540/0x540 [ 1854.949406] ? kasan_check_read+0x11/0x20 [ 1854.953566] lo_ioctl+0x7f6/0x1d60 [ 1854.957118] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1854.961013] blkdev_ioctl+0x98e/0x21b0 [ 1854.964922] ? blkpg_ioctl+0xc10/0xc10 [ 1854.968840] ? avc_ss_reset+0x190/0x190 [ 1854.972827] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1854.977769] ? kasan_check_read+0x11/0x20 [ 1854.981921] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1854.987201] ? rcu_softirq_qs+0x20/0x20 [ 1854.991222] ? perf_trace_sched_process_exec+0x860/0x860 [ 1854.996689] block_ioctl+0xee/0x130 [ 1855.000324] ? blkdev_fallocate+0x400/0x400 [ 1855.004651] do_vfs_ioctl+0x1de/0x1790 [ 1855.008549] ? ioctl_preallocate+0x300/0x300 [ 1855.012968] ? selinux_file_mprotect+0x620/0x620 [ 1855.017731] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1855.022766] ? kmem_cache_free+0x23b/0x290 [ 1855.027015] ? putname+0xf7/0x130 [ 1855.030503] ? do_syscall_64+0x9a/0x820 [ 1855.034488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1855.040033] ? security_file_ioctl+0x94/0xc0 [ 1855.044464] ksys_ioctl+0xa9/0xd0 [ 1855.047923] __x64_sys_ioctl+0x73/0xb0 [ 1855.051826] do_syscall_64+0x1b9/0x820 [ 1855.055718] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1855.061107] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1855.066053] ? trace_hardirqs_on_caller+0x310/0x310 [ 1855.071107] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1855.076145] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1855.082812] ? __switch_to_asm+0x40/0x70 [ 1855.086887] ? __switch_to_asm+0x34/0x70 [ 1855.090958] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1855.095821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1855.101010] RIP: 0033:0x4573d7 [ 1855.104212] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1855.123113] RSP: 002b:00007f4115f65a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1855.130823] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1855.138095] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1855.145367] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1855.152637] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 09:53:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1855.159920] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x4}}, 0x2e) [ 1855.252538] IPVS: ftp: loaded support on port[0] = 21 09:53:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x1f, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0xffffffffffffffff, 0x1, 'wrr\x00', 0x0, 0x100002, 0x1}, 0x2c) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x2, 0x5, 0x100000000, "45b432f293d2a36b93f323cc118c736f0dcfb4f3481a8a57c77e57e0fc02c0571fc759d149f1e8c395f4bf60b7c4c200adafd850f6fc1c4c41444122997c73", 0x39}, 0x60) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000200)=0x2a5d, 0x1) 09:53:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x16, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x4}}, 0x2e) 09:53:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}, 0x4}}, 0x2e) [ 1855.667909] IPVS: ftp: loaded support on port[0] = 21 [ 1857.409848] device bridge_slave_1 left promiscuous mode [ 1857.415472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.500048] device bridge_slave_0 left promiscuous mode [ 1857.505491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.842183] team0 (unregistering): Port device team_slave_1 removed [ 1859.852978] team0 (unregistering): Port device team_slave_0 removed [ 1859.863576] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1859.923834] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1859.980119] bond0 (unregistering): Released all slaves [ 1860.506000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.512697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.520820] device bridge_slave_0 entered promiscuous mode [ 1860.568845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.577781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.585639] device bridge_slave_1 entered promiscuous mode [ 1860.598963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.619293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.626702] device bridge_slave_0 entered promiscuous mode [ 1860.651507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1860.700912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.707391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.718699] device bridge_slave_1 entered promiscuous mode [ 1860.745964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1860.788577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1860.903204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1860.981304] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1861.054420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1861.077724] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1861.146343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1861.159337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1861.186287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1861.216514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1861.229944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1861.304419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1861.319571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1861.409898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1861.416747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1861.471223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1861.478683] team0: Port device team_slave_0 added [ 1861.582681] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1861.591650] team0: Port device team_slave_1 added [ 1861.654938] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1861.662481] team0: Port device team_slave_0 added [ 1861.682709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1861.731183] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1861.738596] team0: Port device team_slave_1 added [ 1861.769386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1861.800504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1861.817872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1861.825368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1861.841942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1861.882188] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1861.890140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1861.900052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1861.918190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1861.991587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1861.998738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1862.008022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1862.058733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1862.066413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1862.083415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1862.594801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.601245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.607925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.614368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.621712] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1862.930829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.937229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.943976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.950408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.957837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1863.138933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1863.146244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1864.499842] device bridge_slave_1 left promiscuous mode [ 1864.505455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.550231] device bridge_slave_0 left promiscuous mode [ 1864.555741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.890397] team0 (unregistering): Port device team_slave_1 removed [ 1865.901346] team0 (unregistering): Port device team_slave_0 removed [ 1865.911618] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1865.974648] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1866.049782] bond0 (unregistering): Released all slaves [ 1868.225813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.245149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.400177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1868.413824] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1868.569854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1868.576032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1868.584028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1868.595143] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1868.601732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1868.611200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1868.760770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1868.783885] 8021q: adding VLAN 0 to HW filter on device team0 09:53:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x4}}, 0x2e) 09:53:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '\x00'}) dup3(r0, r0, 0x80000) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:54 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = gettid() r1 = accept4(0xffffffffffffffff, &(0x7f0000002680)=@ax25, &(0x7f0000002700)=0x80, 0x80800) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000002740)={0xbf, @multicast1, 0x4e22, 0x1, 'sh\x00', 0xb, 0x401, 0x18}, 0x2c) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:54 executing program 4 (fault-call:2 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:54 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1869.855564] FAULT_INJECTION: forcing a failure. [ 1869.855564] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.914569] CPU: 0 PID: 20537 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1869.921954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1869.921964] Call Trace: [ 1869.921994] dump_stack+0x244/0x39d [ 1869.922022] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1869.922062] ? debug_smp_processor_id+0x1c/0x20 [ 1869.947435] ? perf_trace_lock+0x14d/0x7a0 [ 1869.951711] should_fail.cold.4+0xa/0x17 [ 1869.955800] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1869.960933] ? zap_class+0x640/0x640 [ 1869.960953] ? print_usage_bug+0xc0/0xc0 [ 1869.968720] ? find_held_lock+0x36/0x1c0 [ 1869.972804] ? __lock_is_held+0xb5/0x140 [ 1869.976895] ? reweight_entity+0x10f0/0x10f0 [ 1869.981326] ? perf_trace_sched_process_exec+0x860/0x860 [ 1869.986815] __should_failslab+0x124/0x180 [ 1869.991086] should_failslab+0x9/0x14 [ 1869.994900] kmem_cache_alloc+0x2be/0x730 [ 1869.999077] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1870.004116] __kernfs_new_node+0x127/0x8d0 [ 1870.008404] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1870.013177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1870.018728] ? lock_is_held_type+0x210/0x210 [ 1870.023170] ? debug_smp_processor_id+0x1c/0x20 [ 1870.027858] ? perf_trace_lock+0x14d/0x7a0 [ 1870.032105] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1870.037228] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1870.042340] ? zap_class+0x640/0x640 [ 1870.046065] ? lock_is_held_type+0x210/0x210 [ 1870.046080] ? print_usage_bug+0xc0/0xc0 [ 1870.046096] ? zap_class+0x640/0x640 [ 1870.046114] ? enqueue_task_fair+0x24d/0xa50 09:53:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x4}}, 0x2e) 09:53:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x5f7, 0x8000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1870.062696] ? find_held_lock+0x36/0x1c0 [ 1870.066781] kernfs_new_node+0x95/0x120 [ 1870.070781] kernfs_create_dir_ns+0x4d/0x160 [ 1870.075218] internal_create_group+0x5fc/0xd80 [ 1870.079829] ? remove_files.isra.1+0x190/0x190 [ 1870.084423] ? up_write+0x7b/0x220 [ 1870.087977] ? down_write_nested+0x130/0x130 [ 1870.092398] ? down_read+0x120/0x120 [ 1870.096171] sysfs_create_group+0x1f/0x30 [ 1870.100338] lo_ioctl+0x1307/0x1d60 [ 1870.104014] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1870.107940] blkdev_ioctl+0x98e/0x21b0 09:53:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x28, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1870.111843] ? blkpg_ioctl+0xc10/0xc10 [ 1870.115748] ? avc_ss_reset+0x190/0x190 [ 1870.119737] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1870.124695] ? kasan_check_read+0x11/0x20 [ 1870.128861] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1870.134160] ? rcu_softirq_qs+0x20/0x20 [ 1870.138191] ? perf_trace_sched_process_exec+0x860/0x860 [ 1870.143673] block_ioctl+0xee/0x130 [ 1870.147323] ? blkdev_fallocate+0x400/0x400 [ 1870.151665] do_vfs_ioctl+0x1de/0x1790 [ 1870.155573] ? ioctl_preallocate+0x300/0x300 [ 1870.160014] ? selinux_file_mprotect+0x620/0x620 [ 1870.164823] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1870.169858] ? kmem_cache_free+0x23b/0x290 [ 1870.169881] ? putname+0xf7/0x130 [ 1870.169902] ? do_syscall_64+0x9a/0x820 [ 1870.169927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1870.169955] ? security_file_ioctl+0x94/0xc0 [ 1870.169973] ksys_ioctl+0xa9/0xd0 [ 1870.177653] __x64_sys_ioctl+0x73/0xb0 [ 1870.177674] do_syscall_64+0x1b9/0x820 [ 1870.177690] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1870.177728] ? syscall_return_slowpath+0x5e0/0x5e0 09:53:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x4}}, 0x2e) [ 1870.213132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1870.218005] ? trace_hardirqs_on_caller+0x310/0x310 [ 1870.223073] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1870.228138] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1870.233192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1870.238069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1870.243267] RIP: 0033:0x4573d7 [ 1870.243293] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:53:55 executing program 0: clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget(0x3, 0x6, 0x84) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f00000000c0)=""/115) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:53:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x100050, r1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0xfffffffeffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x4b, 0x4) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1870.243303] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.243319] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1870.243334] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1870.265417] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1870.265428] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1870.265438] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x4}}, 0x2e) 09:53:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1870.415483] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:55 executing program 4 (fault-call:2 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:55 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100000001, 0x20000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x6, 0x4) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) sendmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="93598094ee1b1c7578cf6f71c7fcfb4fd0546fc72f525f9e78a5818b533b44f59efc3d425bac45e6080e3e6393ad7dd17de41ead17fe46c35a932746794c5da31526325cca7503f9490e5723f3582c3354beaca8550409bee303df0d1cf66dc471ff1358e530c79b951791a976da45dc476ccd67096d5959f1e8223aef7ca690baa9e79c26d4b1bd15f7ec934640b419e1c79dd27df78757b06573a9857cac1730d200112fa57db502cdf79af9639f6db30f149f53fd3a358e94e63de0", 0xbd}, {&(0x7f00000002c0)="898fd28dd265dbf1d7c4e935131fdf5cd9c8a169cb27ee90fbd956c3a47313182883de0a60643a110a923d47a6c00ba3ba5149f07c076381f202d4b8b1d619e88c9217a6975a09c75640aeb0350e2668f39406f356d2c15f987ff447e226d282921a3cf9689ee440b78cd18b77377ef5af2d3e27248c318d0bf700941dc74193ba621010c64767acaeb06bd41fce6f37102b6b53bb43a81e36c743817bd8958d7f4fdb7295846edf8a7c0effc7bacdebabd25ebd", 0xb4}], 0x3, &(0x7f00000003c0)=[{0xa8, 0x111, 0x0, "cc07eccb1a3ca8e76b727b45518781f5dae12d1b62d054d4a80951f1e026b6acce9f40414c7eaca6010079914543a28a5e3f6725a136215d9ebb88b1ae840e481b58f0b33d39e0932a8dac0105f0d4cbe8e64347193bc6807baa125c791bcaf683f5409fb30affb95e197354efb54ca985a90d3df3c694d085bb9c8b0cbe352bc179777975a54f72b320b03f38f8be7d179ee244"}, {0x38, 0x102, 0xffffffffffffffc0, "94248c48cdb2dc6edae0de48f593195e38db22944125edef7c5dea340f59ad753d741b"}, {0x1010, 0x109, 0xfffffffffffffffd, "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"}], 0x10f0, 0x4}, 0x1}, {{&(0x7f00000014c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001540)="2db6e6c57d805fa65635119fd0b01a6f1a715a21c39cb518acdfddc8b11671dcb2f1aa0b189cc508d56f324175b1e93e04ee64a2fdd215dcf28441c30447ea9e3f962d4d91271bac3d072721665d419d4766756d2d435147102fd7ec1e264ba183dde6c6fbe0814bf30f78", 0x6b}, {&(0x7f00000015c0)="9636f5fdce3c5e12b7940b9ffa83b822e0349f79a97dbffdb6ce8204c6745d29a55a15d48047eb8190736c2b2afe919480dcd007c0a744823c88dbcbe17647a8c9b4222decd1c180c733f74e2908c9c8ef3e9fa4bb02de787e02650e79529a81f0c86aab2d5db1a297300c7ad1c49be68574dad54df2ca0a8639b9922dd5a8c4b4021cad5ef9e7791fda40552f8f56140d39af6b760b9ee3d50f0d39e8914423e3ffacead80c22df37edc4e1106c3f5d3b4e8add1edb51658e1c1b2a1798a91c6b0e3b750cc646c97a5294a89d415c77ef922583281710ff688ae4dbc484934a7ee2312a0123a27fc9e018627fe3de149a23c5", 0xf3}, {&(0x7f00000016c0)="556339b36802e9f0c3972ae6971f6e57ad3a33a628492ff71a591f5ce9094cb685fa92f82145062a7e727b21921bc92c764d4e200ae2639bae86b6d3d62c20fd0eace209067c5a2e7c4e71ea73d4bce89c6adce4f1c25a0a05a9fa24999e770ad15e26540af5e8d222b6ffd4ca25ab67bdb1a7de94a12aff8fc704bd6554336f10c6928396569575f7dbdf6d094cc99302c6747b85a138b05590830db782a2896e1b4516229b260414afb5e6927db626e9303a39accfae24b476bbe6b1cbb2e437ca7fdbe36ad575a6c27fc29666568c744108722889a590c2bccb73a1", 0xdd}, {&(0x7f00000017c0)="340647bb3f74a7a1cf7884777ffb2217d1dce186f6abf4c9a7f0b6ac9918ef7ea30125201629014f93f883b5951f8407790b7be59246ca9a073574dcd8412b86f3724308165a8aa5a90398244a4dab49899bd7847c63080a716811bbb7c0695a5492fa8b273104caf8f024fe3a4c9a4d4160f4f239dd697854c8eff4c75a9bb7c81eb5d0f46a90fffe9ce0f02168dbd61c89f231f40578a0f402eb9f4d74a36b64747f29e35a16872934221991e59b1ef1a13afeafc054260a77b8af75caf40e163e4f504667187f581f44a63ba354640a", 0xd1}, {&(0x7f00000018c0)="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", 0x1000}], 0x5, 0x0, 0x0, 0xc4}, 0x4}], 0x2, 0x1) 09:53:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x25, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:55 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = gettid() r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:53:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1870.662499] FAULT_INJECTION: forcing a failure. [ 1870.662499] name failslab, interval 1, probability 0, space 0, times 0 09:53:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, 0x4}}, 0x2e) [ 1870.705165] CPU: 0 PID: 20612 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1870.712547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1870.721930] Call Trace: [ 1870.724557] dump_stack+0x244/0x39d [ 1870.728227] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1870.733451] ? debug_smp_processor_id+0x1c/0x20 [ 1870.738154] ? perf_trace_lock+0x14d/0x7a0 [ 1870.742436] should_fail.cold.4+0xa/0x17 [ 1870.746538] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1870.751668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1870.757266] ? check_preemption_disabled+0x48/0x280 [ 1870.762313] ? debug_smp_processor_id+0x1c/0x20 [ 1870.767051] ? perf_trace_lock+0x14d/0x7a0 [ 1870.771325] ? zap_class+0x640/0x640 [ 1870.775086] ? find_held_lock+0x36/0x1c0 [ 1870.779222] ? __lock_is_held+0xb5/0x140 [ 1870.783317] ? f2fs_direct_IO+0x1438/0x1a90 [ 1870.787669] ? perf_trace_sched_process_exec+0x860/0x860 [ 1870.793136] ? find_held_lock+0x36/0x1c0 [ 1870.793174] __should_failslab+0x124/0x180 [ 1870.801773] should_failslab+0x9/0x14 [ 1870.801791] kmem_cache_alloc+0x2be/0x730 [ 1870.801809] ? find_held_lock+0x36/0x1c0 [ 1870.801831] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1870.801857] __kernfs_new_node+0x127/0x8d0 [ 1870.801879] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1870.827915] ? kasan_check_write+0x14/0x20 [ 1870.832190] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1870.837161] ? __kernfs_new_node+0x697/0x8d0 [ 1870.841607] ? wait_for_completion+0x8a0/0x8a0 [ 1870.846222] ? zap_class+0x640/0x640 [ 1870.849970] ? kasan_check_write+0x14/0x20 09:53:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x31, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1870.854235] ? __lock_is_held+0xb5/0x140 [ 1870.858318] ? wait_for_completion+0x8a0/0x8a0 [ 1870.862945] ? mutex_unlock+0xd/0x10 [ 1870.866682] ? kernfs_activate+0x21a/0x2c0 [ 1870.870973] kernfs_new_node+0x95/0x120 [ 1870.874978] __kernfs_create_file+0x5a/0x340 [ 1870.879416] sysfs_add_file_mode_ns+0x222/0x530 [ 1870.884118] internal_create_group+0x3df/0xd80 [ 1870.888746] ? remove_files.isra.1+0x190/0x190 [ 1870.893348] ? up_write+0x7b/0x220 [ 1870.896917] ? down_write_nested+0x130/0x130 [ 1870.901344] ? down_read+0x120/0x120 [ 1870.905110] sysfs_create_group+0x1f/0x30 [ 1870.909289] lo_ioctl+0x1307/0x1d60 [ 1870.912941] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1870.916854] blkdev_ioctl+0x98e/0x21b0 [ 1870.920761] ? blkpg_ioctl+0xc10/0xc10 [ 1870.924675] ? avc_ss_reset+0x190/0x190 [ 1870.928674] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1870.933624] ? kasan_check_read+0x11/0x20 [ 1870.937812] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1870.943126] ? rcu_softirq_qs+0x20/0x20 [ 1870.947181] ? perf_trace_sched_process_exec+0x860/0x860 [ 1870.952666] block_ioctl+0xee/0x130 09:53:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x6, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1870.956315] ? blkdev_fallocate+0x400/0x400 [ 1870.960658] do_vfs_ioctl+0x1de/0x1790 [ 1870.964569] ? ioctl_preallocate+0x300/0x300 [ 1870.964596] ? selinux_file_mprotect+0x620/0x620 [ 1870.964621] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1870.964642] ? kmem_cache_free+0x23b/0x290 [ 1870.973826] ? putname+0xf7/0x130 [ 1870.973846] ? do_syscall_64+0x9a/0x820 [ 1870.973870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1870.973892] ? security_file_ioctl+0x94/0xc0 [ 1871.000546] ksys_ioctl+0xa9/0xd0 [ 1871.004020] __x64_sys_ioctl+0x73/0xb0 [ 1871.007942] do_syscall_64+0x1b9/0x820 [ 1871.011844] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1871.017228] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1871.022185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1871.027060] ? trace_hardirqs_on_caller+0x310/0x310 [ 1871.032097] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1871.037158] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1871.042214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1871.047093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1871.052294] RIP: 0033:0x4573d7 09:53:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x22, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x2}) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) fchownat(r1, &(0x7f0000000100)='./file0\x00', r2, r3, 0x1000) 09:53:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1871.055506] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1871.074449] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.074467] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1871.074475] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1871.074483] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1871.074490] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1871.074498] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1871.161064] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:56 executing program 4 (fault-call:2 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x404000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) tkill(r0, 0x2e) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000002c0)=0x4) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000300)={0x3, 0x0, [{0x9b3, 0x0, 0x1}, {0xae7, 0x0, 0x40}, {0x783, 0x0, 0x5}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000240)={0x7ff, 0xffffffffffff0000, 0x8, {r3, r4+10000000}, 0x6, 0x2}) 09:53:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:56 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0xab4, @ipv4={[], [], @remote}, 0x40}}, 0x9ebf, 0x7, 0x3, "e93113b9a2bf8cf81748944a0ae4607bd90a47ed185f1b8e9dab060bc9ad3612efd20fb5313a57119b63cfe069ff4884447add05464fbd44d3eb852d1008c0d0bac161e077cdd1ea531dc5220b15c655"}, 0xd8) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e24, @rand_addr=0x7fffffff}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000100)=0x78) clock_gettime(0x0, &(0x7f0000000280)) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x6, 0x30}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={r2, 0xcc, &(0x7f0000000380)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xfffffffffffffff8, @mcast2, 0x9}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x2, @mcast2}, @in6={0xa, 0x4e22, 0x38d8, @mcast1}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x200}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x401}]}, &(0x7f00000004c0)=0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x0, 0x0) 09:53:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x4}}, 0x2e) 09:53:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2f, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'lo\x00', 0x1}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000100)=""/226, &(0x7f0000000040)=0xe2) 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2200100, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0xff, @multicast2, 0x4e22, 0x1, 'sh\x00', 0x3, 0x1, 0x31}, 0x2c) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x4, 0x9030}, 0x1, 0x0, 0x1ff, {0x1, 0x80}, 0xfffffffffffffffe, 0x400}) [ 1871.368555] FAULT_INJECTION: forcing a failure. [ 1871.368555] name failslab, interval 1, probability 0, space 0, times 0 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x5, 0x4) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1871.409636] CPU: 1 PID: 20688 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1871.417083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1871.426464] Call Trace: [ 1871.429092] dump_stack+0x244/0x39d [ 1871.432747] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1871.437960] ? debug_smp_processor_id+0x1c/0x20 [ 1871.442658] ? perf_trace_lock+0x14d/0x7a0 [ 1871.446918] should_fail.cold.4+0xa/0x17 [ 1871.451009] ? fault_create_debugfs_attr+0x1f0/0x1f0 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000000c0)='\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) wait4(r1, 0x0, 0x7ffffffe, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) fsetxattr(r0, &(0x7f0000000180)=@random={'user.', '\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) [ 1871.456148] ? perf_trace_lock+0x14d/0x7a0 [ 1871.460405] ? lock_release+0xa00/0xa00 [ 1871.464410] ? perf_trace_sched_process_exec+0x860/0x860 [ 1871.469878] ? lock_is_held_type+0x210/0x210 [ 1871.474304] ? check_preemption_disabled+0x48/0x280 [ 1871.479348] ? zap_class+0x640/0x640 [ 1871.483123] ? find_held_lock+0x36/0x1c0 [ 1871.487212] ? __lock_is_held+0xb5/0x140 [ 1871.491295] ? ipvlan_add_addr+0x218/0x510 [ 1871.495571] ? perf_trace_sched_process_exec+0x860/0x860 [ 1871.501054] ? kernfs_activate+0x21a/0x2c0 [ 1871.505320] __should_failslab+0x124/0x180 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) write$apparmor_current(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="737461636b030000000000000070726f637573657200"], 0x16) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) [ 1871.509599] should_failslab+0x9/0x14 [ 1871.513422] kmem_cache_alloc+0x2be/0x730 [ 1871.517586] ? lock_downgrade+0x900/0x900 [ 1871.521773] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1871.526815] __kernfs_new_node+0x127/0x8d0 [ 1871.531086] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1871.535870] ? zap_class+0x640/0x640 [ 1871.539614] ? __lock_is_held+0xb5/0x140 [ 1871.543701] ? wait_for_completion+0x8a0/0x8a0 [ 1871.548347] ? mutex_unlock+0xd/0x10 [ 1871.552115] ? kernfs_activate+0x21a/0x2c0 [ 1871.556370] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1871.561260] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1871.566818] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1871.571458] kernfs_new_node+0x95/0x120 [ 1871.575473] __kernfs_create_file+0x5a/0x340 [ 1871.579914] sysfs_add_file_mode_ns+0x222/0x530 [ 1871.584621] internal_create_group+0x3df/0xd80 [ 1871.589242] ? remove_files.isra.1+0x190/0x190 [ 1871.593842] ? up_write+0x7b/0x220 [ 1871.597413] ? down_write_nested+0x130/0x130 [ 1871.601843] ? down_read+0x120/0x120 [ 1871.605595] sysfs_create_group+0x1f/0x30 09:53:56 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xc406, 0x400) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) [ 1871.609762] lo_ioctl+0x1307/0x1d60 [ 1871.609785] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1871.609803] blkdev_ioctl+0x98e/0x21b0 [ 1871.609821] ? blkpg_ioctl+0xc10/0xc10 [ 1871.609839] ? avc_ss_reset+0x190/0x190 [ 1871.609859] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1871.609890] ? kasan_check_read+0x11/0x20 [ 1871.609905] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1871.609921] ? rcu_softirq_qs+0x20/0x20 [ 1871.609961] ? perf_trace_sched_process_exec+0x860/0x860 [ 1871.609984] block_ioctl+0xee/0x130 [ 1871.609999] ? blkdev_fallocate+0x400/0x400 [ 1871.610018] do_vfs_ioctl+0x1de/0x1790 [ 1871.610051] ? ioctl_preallocate+0x300/0x300 [ 1871.610073] ? selinux_file_mprotect+0x620/0x620 [ 1871.661018] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1871.661050] ? kmem_cache_free+0x23b/0x290 [ 1871.661072] ? putname+0xf7/0x130 [ 1871.674143] ? do_syscall_64+0x9a/0x820 [ 1871.690851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1871.696436] ? security_file_ioctl+0x94/0xc0 [ 1871.700871] ksys_ioctl+0xa9/0xd0 [ 1871.704357] __x64_sys_ioctl+0x73/0xb0 [ 1871.708269] do_syscall_64+0x1b9/0x820 [ 1871.712195] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1871.712218] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1871.712234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1871.712255] ? trace_hardirqs_on_caller+0x310/0x310 [ 1871.722581] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1871.722600] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1871.722621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1871.737521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1871.737536] RIP: 0033:0x4573d7 [ 1871.737553] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1871.737568] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.775320] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1871.775331] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1871.775339] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1871.775347] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1871.775354] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1871.847098] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:57 executing program 4 (fault-call:2 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x4}}, 0x2e) 09:53:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x60000102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) socket$inet(0x2, 0x6, 0x8) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x54) 09:53:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x14, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:57 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x32) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) wait4(r1, &(0x7f0000000300), 0xc, &(0x7f0000000340)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000280), 0x10) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000400)) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@setneightbl={0x50, 0x43, 0x200, 0x70bd28, 0x25dfdbfb, {0x1c}, [@NDTA_NAME={0x24, 0x1, 'procvmnet1trustedsecurity}ppp0\x00'}, @NDTA_NAME={0x10, 0x1, ')vboxnet1\x00'}, @NDTA_THRESH2={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0xc845) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x12, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x4}}, 0x2e) 09:53:57 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x5, 0x12000) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)=0x0) wait4(r1, 0x0, 0xd, 0x0) r2 = gettid() r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) tkill(r2, 0x2e) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x72, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x88f5, 0xbd4b, 0x568, 0x0, 0xffffffffffffffff, 0xffff}, 0x2c) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) [ 1872.055692] IPVS: ftp: loaded support on port[0] = 21 [ 1872.073479] FAULT_INJECTION: forcing a failure. [ 1872.073479] name failslab, interval 1, probability 0, space 0, times 0 09:53:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1872.146925] CPU: 1 PID: 20754 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1872.154314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.163676] Call Trace: [ 1872.163707] dump_stack+0x244/0x39d [ 1872.163735] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1872.163764] ? debug_smp_processor_id+0x1c/0x20 [ 1872.163786] ? perf_trace_lock+0x14d/0x7a0 [ 1872.163836] should_fail.cold.4+0xa/0x17 [ 1872.188218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1872.193335] ? perf_trace_lock+0x14d/0x7a0 [ 1872.193354] ? lock_release+0xa00/0xa00 [ 1872.193370] ? perf_trace_sched_process_exec+0x860/0x860 [ 1872.193390] ? lock_is_held_type+0x210/0x210 [ 1872.193407] ? check_preemption_disabled+0x48/0x280 [ 1872.193426] ? zap_class+0x640/0x640 [ 1872.193454] ? find_held_lock+0x36/0x1c0 [ 1872.193482] ? __lock_is_held+0xb5/0x140 [ 1872.207145] ? perf_trace_sched_process_exec+0x860/0x860 [ 1872.207162] ? kernfs_activate+0x21a/0x2c0 [ 1872.207193] __should_failslab+0x124/0x180 [ 1872.207216] should_failslab+0x9/0x14 [ 1872.207268] kmem_cache_alloc+0x2be/0x730 [ 1872.224488] ? lock_downgrade+0x900/0x900 [ 1872.224512] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1872.224536] __kernfs_new_node+0x127/0x8d0 [ 1872.224561] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1872.224579] ? zap_class+0x640/0x640 [ 1872.224607] ? __lock_is_held+0xb5/0x140 [ 1872.238350] ? wait_for_completion+0x8a0/0x8a0 [ 1872.238407] ? mutex_unlock+0xd/0x10 [ 1872.238422] ? kernfs_activate+0x21a/0x2c0 [ 1872.238441] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1872.238459] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1872.238477] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1872.246503] kernfs_new_node+0x95/0x120 [ 1872.246527] __kernfs_create_file+0x5a/0x340 [ 1872.246550] sysfs_add_file_mode_ns+0x222/0x530 [ 1872.246578] internal_create_group+0x3df/0xd80 [ 1872.246606] ? remove_files.isra.1+0x190/0x190 [ 1872.254883] ? up_write+0x7b/0x220 [ 1872.254900] ? down_write_nested+0x130/0x130 [ 1872.254916] ? down_read+0x120/0x120 [ 1872.254965] sysfs_create_group+0x1f/0x30 [ 1872.254984] lo_ioctl+0x1307/0x1d60 [ 1872.255008] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1872.264250] blkdev_ioctl+0x98e/0x21b0 [ 1872.264273] ? blkpg_ioctl+0xc10/0xc10 [ 1872.264293] ? avc_ss_reset+0x190/0x190 [ 1872.264314] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1872.264331] ? kasan_check_read+0x11/0x20 [ 1872.264347] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1872.264364] ? rcu_softirq_qs+0x20/0x20 [ 1872.272848] ? perf_trace_sched_process_exec+0x860/0x860 [ 1872.272878] block_ioctl+0xee/0x130 [ 1872.272894] ? blkdev_fallocate+0x400/0x400 09:53:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x4}}, 0x2e) 09:53:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x18, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1872.272913] do_vfs_ioctl+0x1de/0x1790 [ 1872.281546] ? ioctl_preallocate+0x300/0x300 [ 1872.281569] ? selinux_file_mprotect+0x620/0x620 [ 1872.281594] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1872.281611] ? kmem_cache_free+0x23b/0x290 [ 1872.281633] ? putname+0xf7/0x130 [ 1872.281661] ? do_syscall_64+0x9a/0x820 [ 1872.281685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1872.281705] ? security_file_ioctl+0x94/0xc0 [ 1872.294504] ksys_ioctl+0xa9/0xd0 [ 1872.294527] __x64_sys_ioctl+0x73/0xb0 [ 1872.294548] do_syscall_64+0x1b9/0x820 [ 1872.294564] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1872.294584] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1872.294604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1872.304719] ? trace_hardirqs_on_caller+0x310/0x310 [ 1872.304740] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1872.304760] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1872.304799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1872.304824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1872.304837] RIP: 0033:0x4573d7 [ 1872.304855] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1872.313230] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1872.313246] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1872.313256] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1872.313265] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1872.313274] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1872.313284] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1872.633854] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:57 executing program 4 (fault-call:2 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:57 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x4, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x30, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x4}}, 0x2e) 09:53:57 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_netfilter(r2, &(0x7f0000498000)={&(0x7f00000007c0), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x3, 0x1, 0x800000001, 0x0, 0x0, {}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000100)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:57 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) tkill(r0, 0x2e) sched_getscheduler(r0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x100000000000000}) [ 1872.790104] FAULT_INJECTION: forcing a failure. [ 1872.790104] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.809860] CPU: 1 PID: 20807 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1872.817095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1872.817275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1872.835033] Call Trace: [ 1872.837663] dump_stack+0x244/0x39d [ 1872.841344] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1872.846567] ? debug_smp_processor_id+0x1c/0x20 [ 1872.851267] ? perf_trace_lock+0x14d/0x7a0 [ 1872.855527] should_fail.cold.4+0xa/0x17 [ 1872.859610] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1872.864744] ? perf_trace_lock+0x14d/0x7a0 [ 1872.868995] ? lock_release+0xa00/0xa00 [ 1872.873014] ? perf_trace_sched_process_exec+0x860/0x860 [ 1872.878496] ? lock_is_held_type+0x210/0x210 [ 1872.882932] ? check_preemption_disabled+0x48/0x280 [ 1872.885761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 1872.887977] ? zap_class+0x640/0x640 [ 1872.888008] ? find_held_lock+0x36/0x1c0 [ 1872.888070] ? __lock_is_held+0xb5/0x140 [ 1872.888103] ? perf_trace_sched_process_exec+0x860/0x860 [ 1872.908355] ? kernfs_activate+0x21a/0x2c0 [ 1872.918036] __should_failslab+0x124/0x180 [ 1872.922303] should_failslab+0x9/0x14 [ 1872.926126] kmem_cache_alloc+0x2be/0x730 [ 1872.930295] ? lock_downgrade+0x900/0x900 [ 1872.934469] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1872.939529] __kernfs_new_node+0x127/0x8d0 [ 1872.943787] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1872.948558] ? zap_class+0x640/0x640 [ 1872.952290] ? __lock_is_held+0xb5/0x140 [ 1872.952309] ? wait_for_completion+0x8a0/0x8a0 [ 1872.952355] ? mutex_unlock+0xd/0x10 [ 1872.952372] ? kernfs_activate+0x21a/0x2c0 [ 1872.968945] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1872.973795] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1872.973810] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1872.973834] kernfs_new_node+0x95/0x120 [ 1872.973855] __kernfs_create_file+0x5a/0x340 [ 1872.973876] sysfs_add_file_mode_ns+0x222/0x530 [ 1872.973916] internal_create_group+0x3df/0xd80 [ 1873.001693] ? remove_files.isra.1+0x190/0x190 [ 1873.006291] ? up_write+0x7b/0x220 [ 1873.009847] ? down_write_nested+0x130/0x130 [ 1873.014265] ? down_read+0x120/0x120 [ 1873.018003] sysfs_create_group+0x1f/0x30 [ 1873.022178] lo_ioctl+0x1307/0x1d60 [ 1873.025832] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1873.029757] blkdev_ioctl+0x98e/0x21b0 [ 1873.033667] ? blkpg_ioctl+0xc10/0xc10 09:53:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='wrr\x00', 0x3) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x4}}, 0x2e) 09:53:58 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101080, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:53:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x3, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1873.037566] ? avc_ss_reset+0x190/0x190 [ 1873.041548] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1873.046508] ? kasan_check_read+0x11/0x20 [ 1873.050674] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1873.055964] ? rcu_softirq_qs+0x20/0x20 [ 1873.059990] ? perf_trace_sched_process_exec+0x860/0x860 [ 1873.065494] block_ioctl+0xee/0x130 [ 1873.069143] ? blkdev_fallocate+0x400/0x400 [ 1873.073484] do_vfs_ioctl+0x1de/0x1790 [ 1873.077402] ? ioctl_preallocate+0x300/0x300 [ 1873.081849] ? selinux_file_mprotect+0x620/0x620 [ 1873.086629] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1873.091684] ? kmem_cache_free+0x23b/0x290 [ 1873.095938] ? putname+0xf7/0x130 [ 1873.099417] ? do_syscall_64+0x9a/0x820 [ 1873.103430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.108985] ? security_file_ioctl+0x94/0xc0 [ 1873.113428] ksys_ioctl+0xa9/0xd0 [ 1873.116904] __x64_sys_ioctl+0x73/0xb0 [ 1873.120812] do_syscall_64+0x1b9/0x820 [ 1873.124715] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1873.130096] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1873.135051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.139913] ? trace_hardirqs_on_caller+0x310/0x310 [ 1873.144943] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1873.149994] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1873.155086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.159962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1873.165162] RIP: 0033:0x4573d7 [ 1873.168375] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1873.187285] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.195003] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1873.202287] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1873.202298] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1873.202308] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1873.202318] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 09:53:58 executing program 4 (fault-call:2 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0xfffffffffffffffe, 0x80080) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x13, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:58 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000000c0)={0x80000000, 0x2000000, 0x5}) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) fcntl$lock(r1, 0x0, &(0x7f00000001c0)={0x2, 0x1, 0x7fff, 0x2, r0}) 09:53:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x4}}, 0x2e) [ 1873.324093] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 09:53:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x61, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0xfffffffffffffffa, 0x0, {"88850aa910bdfd84e454ef6868430d96"}, 0x200, 0x0, 0x2}, @ib={0x1b, 0x0, 0x7, {"43d7523317960494db1c13550188f9c1"}, 0x2, 0xfffffffffffffffb, 0x95}}}, 0x118) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) signalfd4(r0, &(0x7f0000000440)={0x3}, 0x8, 0x80000) capget(&(0x7f00000003c0)={0x200f1526, r2}, &(0x7f0000000400)={0x3ff, 0x4, 0x1, 0x3ff, 0x0, 0x1}) r3 = gettid() tkill(r3, 0x2e) capget(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @rand_addr=0x4fb0b5d2}, 0x3}, @in6={0xa, 0x4e20, 0xfff, @mcast2, 0x9}, @in6={0xa, 0x4e22, 0x9, @local, 0x81}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x7}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23}], 0xa0) [ 1873.498252] FAULT_INJECTION: forcing a failure. [ 1873.498252] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.510157] CPU: 0 PID: 20865 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #145 [ 1873.517526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.526922] Call Trace: [ 1873.529538] dump_stack+0x244/0x39d [ 1873.533193] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1873.538413] should_fail.cold.4+0xa/0x17 [ 1873.542500] ? __kernel_text_address+0xd/0x40 [ 1873.547023] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1873.552157] ? __save_stack_trace+0x8d/0xf0 [ 1873.556504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.562071] ? check_preemption_disabled+0x48/0x280 [ 1873.567114] ? debug_smp_processor_id+0x1c/0x20 [ 1873.571822] ? perf_trace_lock+0x14d/0x7a0 [ 1873.576088] ? lock_is_held_type+0x210/0x210 [ 1873.580516] ? print_usage_bug+0xc0/0xc0 [ 1873.584590] ? sysfs_create_group+0x1f/0x30 [ 1873.588948] ? zap_class+0x640/0x640 [ 1873.592678] ? mark_held_locks+0x130/0x130 [ 1873.596940] ? print_usage_bug+0xc0/0xc0 [ 1873.601070] __should_failslab+0x124/0x180 [ 1873.605342] should_failslab+0x9/0x14 [ 1873.609166] kmem_cache_alloc+0x47/0x730 [ 1873.613264] radix_tree_node_alloc.constprop.19+0x1f7/0x370 [ 1873.619028] idr_get_free+0x7a4/0xf70 [ 1873.622878] ? radix_tree_iter_tag_clear+0x90/0x90 [ 1873.627845] ? __save_stack_trace+0x8d/0xf0 [ 1873.632198] ? save_stack+0xa9/0xd0 [ 1873.635816] ? save_stack+0x43/0xd0 [ 1873.639457] ? kasan_kmalloc+0xc7/0xe0 [ 1873.643355] ? kasan_slab_alloc+0x12/0x20 [ 1873.647492] ? kmem_cache_alloc+0x12e/0x730 [ 1873.651819] ? __kernfs_new_node+0x127/0x8d0 [ 1873.656229] ? __kernfs_create_file+0x5a/0x340 [ 1873.660798] ? sysfs_add_file_mode_ns+0x222/0x530 [ 1873.665638] ? internal_create_group+0x3df/0xd80 [ 1873.670381] ? sysfs_create_group+0x1f/0x30 [ 1873.674718] ? lo_ioctl+0x1307/0x1d60 [ 1873.678508] ? blkdev_ioctl+0x98e/0x21b0 [ 1873.682553] ? block_ioctl+0xee/0x130 [ 1873.686340] ? ksys_ioctl+0xa9/0xd0 [ 1873.689954] ? __x64_sys_ioctl+0x73/0xb0 [ 1873.694007] ? do_syscall_64+0x1b9/0x820 [ 1873.698065] ? find_held_lock+0x36/0x1c0 [ 1873.702121] idr_alloc_u32+0x1d4/0x3a0 [ 1873.706005] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1873.710833] ? lock_acquire+0x1ed/0x520 [ 1873.714796] ? __kernfs_new_node+0x14e/0x8d0 [ 1873.719210] ? __lock_is_held+0xb5/0x140 [ 1873.723265] idr_alloc_cyclic+0x166/0x350 [ 1873.727423] ? idr_alloc+0x1b0/0x1b0 [ 1873.731140] ? __radix_tree_preload+0x1f7/0x280 [ 1873.735824] __kernfs_new_node+0x1ee/0x8d0 [ 1873.740110] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1873.744854] ? zap_class+0x640/0x640 [ 1873.748559] ? __lock_is_held+0xb5/0x140 [ 1873.752611] ? wait_for_completion+0x8a0/0x8a0 [ 1873.757188] ? mutex_unlock+0xd/0x10 [ 1873.760887] ? kernfs_activate+0x21a/0x2c0 [ 1873.765127] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1873.769964] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1873.774537] kernfs_new_node+0x95/0x120 [ 1873.778513] __kernfs_create_file+0x5a/0x340 [ 1873.782934] sysfs_add_file_mode_ns+0x222/0x530 [ 1873.787594] internal_create_group+0x3df/0xd80 [ 1873.792219] ? remove_files.isra.1+0x190/0x190 [ 1873.796787] ? up_write+0x7b/0x220 [ 1873.800315] ? down_write_nested+0x130/0x130 [ 1873.804711] ? down_read+0x120/0x120 [ 1873.808420] sysfs_create_group+0x1f/0x30 [ 1873.812591] lo_ioctl+0x1307/0x1d60 [ 1873.816211] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1873.820092] blkdev_ioctl+0x98e/0x21b0 [ 1873.823969] ? blkpg_ioctl+0xc10/0xc10 [ 1873.827869] ? avc_ss_reset+0x190/0x190 [ 1873.831848] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1873.836761] ? kasan_check_read+0x11/0x20 [ 1873.840915] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1873.846193] ? rcu_softirq_qs+0x20/0x20 [ 1873.850177] ? perf_trace_sched_process_exec+0x860/0x860 [ 1873.855621] block_ioctl+0xee/0x130 [ 1873.859236] ? blkdev_fallocate+0x400/0x400 [ 1873.863549] do_vfs_ioctl+0x1de/0x1790 [ 1873.867459] ? ioctl_preallocate+0x300/0x300 [ 1873.871871] ? selinux_file_mprotect+0x620/0x620 [ 1873.876632] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1873.881638] ? kmem_cache_free+0x23b/0x290 [ 1873.885865] ? putname+0xf7/0x130 [ 1873.889311] ? do_syscall_64+0x9a/0x820 [ 1873.893278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1873.898811] ? security_file_ioctl+0x94/0xc0 [ 1873.903227] ksys_ioctl+0xa9/0xd0 [ 1873.906674] __x64_sys_ioctl+0x73/0xb0 [ 1873.910550] do_syscall_64+0x1b9/0x820 [ 1873.914430] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1873.919796] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1873.924713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.929544] ? trace_hardirqs_on_caller+0x310/0x310 [ 1873.934549] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1873.939573] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1873.944581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1873.949417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1873.954594] RIP: 0033:0x4573d7 [ 1873.957774] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1873.976660] RSP: 002b:00007f4115f86a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.984360] RAX: ffffffffffffffda RBX: 0000000020000168 RCX: 00000000004573d7 [ 1873.991630] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 09:53:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x4}}, 0x2e) [ 1873.998891] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 1874.006161] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1874.013431] R13: 0000000000000001 R14: 00000000004d8bd0 R15: 0000000000000005 [ 1874.098901] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2, r1}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x8, 0x9}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}, 0x4}}, 0x2e) 09:53:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x11, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) wait4(r0, 0x0, 0x7ffffffd, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x401, 0x103) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x20, 0x44a800) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000240)=""/105) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) renameat2(r2, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x3) 09:53:59 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x4, 0xfc, 0x8, 0x0, 0x100000000000}) 09:53:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x62, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x4}}, 0x2e) 09:53:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:53:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='wrr\x00', 0x3) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea00050006000000001000000200000020000000f357ca805290386c5129b6dc5059fdcc038268280c49f245ec5bd0d2d594ef8622c413dd7274efe51b8fff5da68e727add00fc0fbf1335b31c4f99f1d6c6fac873b8f0c5907a832d2813a59c1a0606cfdb253dfa07ec929f11ac1da953e002bcad0b8204968c13fb26388585e62977f86104d3a9a61595c00ef9b0b202ec62d43f26a19b91762f80448f866a18328a589e1a97e06db98ed56a79fc112b2a779cfcdf3c994843e133a7a478bdf300da7028630b302e85d3f1474c7eb93bb7b685f544b720be7c2d46d68c43ad89deff3700d5f19269c447136a79c33261bac284fb9a74be931c47829f87"], 0x202) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xffffffffffffff7f) syz_open_dev$vcsn(0x0, 0x20, 0x400020000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x400000000000000, 0x0, 'wrr\x00', 0x0, 0x100000}, 0x2c) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 0: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x103) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x7fffffff, 0x4, 0x1, 0x0, 0x1, 0x3, 0x1, 0x9, 0x0, 0x1, 0x8a6}, 0xb) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x1, 0x30, 0x2, 0x1}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x9, 0x7ff, 0x202, 0x0, 0x3, 0x5, 0xfff, 0x6, r3}, &(0x7f0000000240)=0x20) [ 1874.532072] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:53:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='%xt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:53:59 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x800, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x499, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={r2, 0x39, 0xc000000000000000}, 0x8) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x2, 0x7f}, 0x2) 09:53:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0x8, 0x7}, {0xffffffffffffffff, 0xe1f3}, 0x6, 0x6, 0xfffffffffffffffb}) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:53:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}, 0x4}}, 0x2e) 09:53:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x32, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20400, 0x0) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x20000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000}, 0xdcd6eb3c516781eb) r1 = gettid() wait4(r1, 0x0, 0x2, &(0x7f0000000100)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2b, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x802, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {0x0}, {}]}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x10001, 0x7}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x2, 0x67d, 0x1e0f457a, 0x10000, 0x0, 0x0, 0x281, 0x708807ffa27576be, 0x1ffe, 0xea7, 0x10000, 0x7fff, 0x1758, 0x1, 0x8001, 0x0, 0x3, 0x0, 0x9, 0x5, 0x400, 0x3f0, 0x4d, 0x3, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0xffffffff00000000, 0x100000001, 0x7, 0x8, 0x2, 0x3f, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x1, 0x2, 0xd73c, 0x3, 0xfff, 0x7, 0xffff}, r0, 0xd, r1, 0x8) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r2, 0x2}) 09:54:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}, 0x4}}, 0x2e) 09:54:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)=',xt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2e, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x20) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x4}}, 0x2e) 09:54:00 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:00 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x400, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='5xt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x24, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x4}}, 0x2e) 09:54:00 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7, 0x4040) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000001c0)=0x3) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9b, 0x800) fstat(r2, &(0x7f0000000100)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x20000, 0x0) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:00 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x21, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x566a, 0x68680) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x4, 0x400, 0x1ff, 0x20, 0xf9f, r0}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3) 09:54:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4}}, 0x2e) 09:54:01 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x4}}, 0x2e) 09:54:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='\nxt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xd, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x10001, 0x40) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)={0x8, 0x0, [{0x2be, 0x0, 0x7bc}, {0xbff, 0x0, 0x1}, {0xaef, 0x0, 0x5}, {0x0, 0x0, 0x4}, {0xbf7, 0x0, 0xca}, {0x3a5, 0x0, 0x9}, {0x0, 0x0, 0x87}, {0x2e5, 0x0, 0x1ff}]}) pwrite64(r1, &(0x7f00000000c0)="3c0c2925d650def9f350682f099d893e01508cbdef900b3e537572", 0x1b, 0x0) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:01 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}, 0x4}}, 0x2e) 09:54:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7, 0x18}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 09:54:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x19, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='"xt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:01 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:01 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) wait4(r0, 0x0, 0x21000000, 0x0) r1 = gettid() tkill(r1, 0x2e) process_vm_writev(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)=""/223, 0xdf}], 0x7, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001800)={0x0, 0x3b6c00000000000}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000001880)={r3, 0x8}, 0x8) accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80000) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000017c0)) acct(0x0) 09:54:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2d, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x4}}, 0x2e) 09:54:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:01 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, 0x4}}, 0x2e) 09:54:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='e\nt2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:02 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xa, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ptrace$cont(0x18, r0, 0x4, 0x8) accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffe5f) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, r0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:02 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}, 0x4}}, 0x2e) 09:54:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x29, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='e%t2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:02 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:02 executing program 0: clone(0x4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x4}}, 0x2e) 09:54:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x4, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r0, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) dup3(r2, r1, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x81, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0xa17, 0xff, [], &(0x7f00000000c0)={0x9b0954, 0xfffffffffffff61e, [], @value64=0x7}}) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:02 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:02 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = memfd_create(&(0x7f0000000040)="21757365728e76626f786e65743073656c66402576626f786e6574306367726f757000", 0x3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={r1, 0x80000, r2}) r3 = gettid() tkill(r3, 0x2e) capget(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)) 09:54:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ex\n2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}, 0x4}}, 0x2e) 09:54:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xc, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xf, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:03 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x4) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x787}}, 0x24) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3, r0}) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x10) capget(&(0x7f0000000000)={0x199a0330, r1}, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffff929, 0x8000000}) 09:54:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x4}}, 0x2e) 09:54:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:03 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x4ed7e20d) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x0, 0x0, 0x0, "4dbcd792aa9d"}}) r2 = gettid() openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x101300, 0x0) tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) r3 = userfaultfd(0x80000) fsetxattr$security_selinux(r3, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x22, 0x1) 09:54:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ex"2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x15, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}, 0x4}}, 0x2e) 09:54:03 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6}) 09:54:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:03 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}, 0x4}}, 0x2e) 09:54:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x23, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ex%2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:03 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x2e) bind$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x0, 0x2, 0x1, 0x3, 0x6, 0x4}}, 0x8) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) 09:54:03 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x10, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}, 0x4}}, 0x2e) 09:54:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x40) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ex,2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:04 executing program 5: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x4}}, 0x2e) 09:54:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:04 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() getpriority(0x0, r0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000100)) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:04 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0xb, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, 0x4}}, 0x2e) 09:54:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x10000000000, 0x0, &(0x7f00000000c0)="6a58c9179bf049845812d8a1080df4d4d5ebe1af8df2f9bab49f9db7677078b9378ca442734b8838389572a141a8ac2e4ede654ca064e2e54d45e22766098ae21d12c7f0d7ae1e49a06f2ad398645d8e18b56085fc801f9ae48705bf6b2edb66af02a5e350b75ff3e499a3c705efdddd77", 0x71) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext\n\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:04 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x4}}, 0x2e) 09:54:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x17, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:05 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140), 0x4) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x10d800) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000000c0)=0x11, 0x4) 09:54:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x4}}, 0x2e) 09:54:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext%\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:05 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2a, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:05 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000040)=0x60, 0x800) fcntl$setown(r1, 0x8, r0) 09:54:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:05 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}, 0x4}}, 0x2e) 09:54:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='extX\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:05 executing program 0: clone(0xff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x101, 0x1, 'queue1\x00', 0x5}) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x7, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:05 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x2c, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x4}}, 0x2e) 09:54:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext1\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x1, 0x0, 0x2, 0x4, "d68806cd97ab4098e1d17b89d1244e325e2261a3b405710e6c310c0501a8cb50c102fd21f9ab452d37f348e19396d4df08073c150480b80cb24a137e0abf242f300433608f2c3c943475beb6e77d4b4c85ac3182bf9ddd0cfa0988434c7281a34ebd4e1aa23949b355ce28a8c422cb77d512eef2cca1ef6477f4e894503c57307a6835cf3c5fda4f66c2c3a2ca3e175c53671aa5c3b9860011668afb8b525bef3dc4855a0125adb09fcb"}, 0xba) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:06 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x6, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x4}}, 0x2e) 09:54:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:06 executing program 0: clone(0x3102082002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) wait4(r0, 0x0, 0x7ffffffc, 0x0) r1 = gettid() tkill(r1, 0x2e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x381001, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x6004, &(0x7f0000000140), 0xd, r3, 0xe}) mq_timedsend(r3, &(0x7f0000000240)="2f7693f6cfd4cdbf1de936e70d62c3af2e015929534399f3deb97902c97159d852539b1826c8c812047e4cc6550000b64c71533f0794f73a925fc396e2f933678599951f8d75b1de3cc7fe1fdbb8ea9c48c9767ce2791f5be9b1c4cc61474505bb95091f75d1a43d0ba83818c44e3e9fd81e7656020b9093df96196261127e49d277d38c6b3abec235294f6901d1c5db3cfd6b593e219f24d388f2270a57e4ad65536abf80fb9e7a4677e381", 0xac, 0x20, &(0x7f0000000040)) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x400000, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) write$P9_RVERSION(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="130052cb789c2d6b16c7000600395032303030"], 0x13) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) gettid() 09:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}, 0x4}}, 0x2e) 09:54:06 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2t', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x2, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x4}}, 0x2e) 09:54:06 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@empty, @broadcast}, &(0x7f0000000100)=0xc) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x200000000000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2L', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:06 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:06 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x9e, 0x6, 0x7fff, 0x5, 0x10, 0x535}) 09:54:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x4}}, 0x2e) 09:54:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x600000000000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:07 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:07 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x2000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x4}}, 0x2e) 09:54:07 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:07 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)='vmnet0,\x00'}, 0x30) getpid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)={0x0, 0x0}) wait4(r1, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) ftruncate(r0, 0x40401) [ 1882.283608] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4}}, 0x2e) 09:54:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x100000000000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:07 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1882.401993] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:07 executing program 0: clone(0x1fffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x400) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x2) signalfd(r1, &(0x7f0000000040)={0x4}, 0x8) accept4(r1, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x10000}) 09:54:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}, 0x4}}, 0x2e) 09:54:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x1000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:07 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:07 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0x58, 0x3, 0x7}}, 0x14) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, 0x4}}, 0x2e) 09:54:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x6000000, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1882.751562] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:08 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1882.863063] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:08 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000000c0)={{0x0, 0x0, 0x400080000, 0x3, 0x100000001}, 0x0, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0xbe9, 0xffff, 0x7ff, 0x100}) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x600, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, 0x4}}, 0x2e) 09:54:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:08 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) [ 1883.176451] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:08 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0xa002) ioctl$TCSBRK(r1, 0x5409, 0x8b) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x10001, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) lseek(r1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000000c0)={0x7, {0xfff, 0x100, 0x5, 0x8}}) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}, 0x4}}, 0x2e) 09:54:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1883.312367] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:08 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:08 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40080, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @multicast2}, &(0x7f0000000100)=0x8) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r2 = geteuid() getresgid(&(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) fstat(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001800)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001900)=0xe8) lstat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)=0x0) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000001f40)=[0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00]) getresuid(&(0x7f0000001f80), &(0x7f0000001fc0)=0x0, &(0x7f0000002000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040)={0x0, 0x0, 0x0}, &(0x7f0000002080)=0xc) fstat(r0, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() r18 = geteuid() lstat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a80)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000002b80)=0xe8) getgroups(0x8, &(0x7f0000002bc0)=[0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0x0]) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() getresuid(&(0x7f0000003040)=0x0, &(0x7f0000003080), &(0x7f00000030c0)) stat(&(0x7f0000003100)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000033c0)={0x0, 0x0, 0x0}, &(0x7f0000003400)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003840)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000003940)=0xe8) r29 = getgid() sendmmsg$unix(r0, &(0x7f00000039c0)=[{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000480)="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", 0x1000}], 0x1, &(0x7f0000001b80)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r1, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r6, r7}, @cred={0x20, 0x1, 0x2, r1, r8, r9}, @cred={0x20, 0x1, 0x2, r1, r10, r11}], 0x108, 0x40}, {&(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d40)="aee91ba06b9c5bf9e6cf4a3fb11dfa75ae57670986930dd8637d3ecedd022ed97fc318ae9119767330402535518931cda51d0e9e01f823519f", 0x39}, {&(0x7f0000001d80)="24210f0ef8cfe83c36517bfd89c5c5006d6b7002dcb515d154b0500ec6c44347cddf495845cb2f27c48c972c42c5535684ac1e7bc406c75819cf611651e91795208b3f44fd3466b64d826ffbb57a673a0838248fc53c555d7a0731652bd2e20a2863c2f9e903d5ce5543d94dca5e1eb7598aa0f9c0a4ac44894b39a80353b8a862fe9d651d3b5a8c22fdc36866b6292db8669827526099ff4f7fdeab626293387fbb3452e638d0775d002565ed43ca4ee0430a470af7", 0xb6}], 0x2, &(0x7f0000002200)=[@cred={0x20, 0x1, 0x2, r1, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r14, r15}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r16, r17}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r18, r19}], 0xf0, 0x4}, {&(0x7f0000002300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002380)="d7b6d3ba3f22bf70dd7e0bcebcc19840eae2442156309e3f0b5a6c16787000", 0x1f}, {&(0x7f00000023c0)="58c384776ef3cd544d45996030a3fecc0f61bb4eb4de9efb338d661746", 0x1d}], 0x2, &(0x7f0000002440)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x28, 0x4000000}, {&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002500)="571bf513e71cf2992cefe5bb9dc038afad56816514c9943d7fbc3a16c47ff2ca2731f097d824279ef357cb6158ab029d3208f5dc36487fea9451fc51499f8dfc6fa747aa52f5d251cde05d40a5cb162a7c5273a24dfaf5096fb92427cdf9f3a57b8e9db9bc3a1eb1bdd55d87cd6879f9f3735db0b0cdc2bdd0c4a939eaf7f5", 0x7f}, {&(0x7f0000002580)="0f851839b052981c383033", 0xb}, {&(0x7f00000025c0)="50f7b5f4c37142e55bb476dc482e43b5e7ccc38e4bd5ec88286a9031863520c6d9ae061add0c190908adee5de1055fb1f0c397ebc5edf8757292e58ebfdde4e96ed0d8a42ed764825de32a4a695805363bc58aa70b697de8898b74376a8f7becaf79264ca19919799c2f1f4421163e054049a2d555865ff3eb2a5551b6bf6518e156b95a3122777fbb2ab24d2253ea666714eea8b77563938cff9ae6", 0x9c}, {&(0x7f0000002680)="2a49e265427d11f59ffbf37d314f9c76507d", 0x12}, {&(0x7f00000026c0)="e72d61ae34d3a8540fdaf58a7ecdfb245f4378458a0c1f38dab2f2ee6bba50d76b2316f3438bd2f7b72b80ec20fc79ee58d6ceb6c3e6f08289aff123", 0x3c}, {&(0x7f0000002700)="d0512017c4220d6e62045694f528b18fbf5100e89d0c1d61fe44db985c7fb996c7cd2c745fae899b9f85aef9b5592bdaa645f30c2fd7d7d47b6cb14b91f5b0df10c3ec4bc43ccf67a42dfc8fe18fa836b38d79841c8951273f00a609bb8f549b7afed6fcc77e3ba294c91fd26789c733aa7ec23d3827ab4be515e89b4aa97111673784de3acfcdce5e507b83557eb149890672df23776399491e0b0daab142865d59fe32d93a09de90eb1e", 0xab}, {&(0x7f00000027c0)="7f5a1bd04284e7d65f3e587f5bae298e9c9bfb862858e1e5f24a35519e843452590bf6ef968f40cadd8714017e594da673e0e24152dca5356fc7bcf91362a044ec1f65a1ff6195b07ea29776aaf5a71d119452138075c20e8f48492e8b4d232c3218e118d00bab161f5fb7029252039d705ce1b52452b67d695d06c95b0515aef35ce3c2c236e419d2b1699879537443f6e496e163a5c904345ea1e3e5aa3f04526190dd85aa1b89e508519c234b6bec9e2e4fec3dcb1c39c2815adfe5435ab345495eec41bb587bf417ebc3", 0xcc}, {&(0x7f00000028c0)="334c557e7f6b4a65a3b8ddd11a36ae74f8af8bee73518ee6e8be2bb063af2d7418159c0e77ffe851b55df2592602f47b7b8ae6b434bd808fbd655448e8f154c23c572666844e2a0d724b97a8e7fb475ea2b4e93c95a0a1f41104366b4c8fa3c47df52f607c4e8a7a6b202e3dd367973ba360ce1205b9d198cfe7bcea10e379c9b43295d7da0492ee954b641bbe89d43e8a83531263082070b58bc098e5a4dccb993f6f000e797f3f7fbe746e91f81dd0d09895bb252d6adcc2", 0xb9}, {&(0x7f0000002980)="b9bb4970cfffcbc707d8b6796fecc9689519667371bce53d6db01969b0f5b7e851d408e77bb023b2b0f44acc29f7480da73019741c7c5e", 0x37}], 0x9, &(0x7f0000002c00)=[@cred={0x20, 0x1, 0x2, r1, r20, r21}], 0x20, 0x800}, {&(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002cc0)="67bb58dd8a7001a428c18752b9bd30ad918345f0cfb41b20c173da71c1", 0x1d}, {&(0x7f0000002d00)="e7cfe42276c77f35d35c7101de046a4c49e012487d2abd271037920ca2ad78a808975b46490f4e65195eeb694dd3a3e4776db263db257eda3abbe9056300c1113669d82f24a4355e969eba4a1c06d276edeb45c443b17bd60d02d29f4c8a5a9b4b1b5c8e5cef646cc7696e66f8128340128ac18485050ff8bee27228f8f93ee5739ef8351994", 0x86}, {&(0x7f0000002dc0)="bca061ec88af4aa0f934b6e4785e13a4a28c594297a089213b8df0b6702dced9c244bb3c92802d16ed310525c9a4d5fe16559f569b19172e2da5cdf786699dd585da9fb0bea1ff7cf85e7e5b4b9eb5685418553424377dd9428b72c91875f1274789fff4e24bbd2a3c748c2ae0ee801072262a0a968f4be440f83ea05ba28f714f5ac2", 0x83}, {&(0x7f0000002e80)="c7361443fd3713d6f634bbae275fd05e914f3e5c8dd364dff2e491c74f71f6f560995c5a979d6f76d2b4446c5eb4e57c8bdfbecb5518c562137bdcb0fa0a996c0da1da2e56255305b2ac2019266a4a44a6dd8527e92412c3818fdf9aa28608756a7fc4e510c1f2c63f715a5704b15d2e41c9e7c94b07d9177301de5328b3b9912389506991758894a0b502fb201f61f7", 0x90}], 0x4, &(0x7f00000031c0)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r1, r22, r23}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r1, r24, r25}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0xe0, 0x4000000}, {&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000003340)="bbc7d1604c003d5ef1502d5104fcc45dc10dc22ba4d8496a23699092af6b145c1cf239e4089e149f933b96251be5920d0e25af9b0933e52386554d71", 0x3c}], 0x1, &(0x7f0000003440)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r1, r26, r27}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x70, 0xc5a522eb3e1f7a65}, {&(0x7f00000034c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003540)="f2d7e52c88820eb7ca50428714aecbd951801a75a2fa084c54eeff9e16f634c72a460ea00801", 0x26}, {&(0x7f0000003580)="03c6f4f84078fed2f2f709e36c2eb60f55bcd633803e8d47426c42654b52f359cc6f90179d6ee9907e0ca8830bbc10e9a509c39684edfd98b696d3abf190243ff379776149eafebb550d3f577adba480fe7f022928cacfb393c13519452cabeab6a5b20aa561753c7a9da04d7f8c4419c970b1ad698474fb283e99917e63c4f61f2412ba65a1bbaa30774d06644ff6acc25773e1187e5e6a365769218234b8f39abd93bd4681c88965e6cbe37da109f3d31e6480715c33445f4ad95c72a79e96e10c250bba778a54df21647ad1636ad398", 0xd1}, {&(0x7f0000003680)="e6ef5096836ca2bcb9a5e23b5e944b5796b7636b99b56a5371a7207a4ce02121b634d44ebbffde5ab3bbfa13945f59f61aa791f56b10f66a5408bfbf4404a44820f43290f67c477375e1b74ab00bbed253a09f8488852a0c6a9bcc28de0e7e0f669352b8eac47854e0fc3e491f4d99ff4b2bf3f8aefd13344eb49a2b517891f766ddf8812741455378f8f5dd9b909f542dbfc29bfcc357a29440e577d841e9de5c955660aa6fb8a6ec3b63741a1b396218800cf3e0a32b04eb18813f572bcfa61d08e09bbce22332247bb0a12a11e08ef12a11a4a7f11f3a82ce35f5528c0e", 0xdf}, {&(0x7f0000003780)="7e8ce627f48e0f2179525df787f51221c847a07c3c13417a46b3367548bc30d65c1d62ee461315db9750f71f847c51c05d71ea61f29f62d6496b136db26e4fc18bfaf820a538f8858859", 0x4a}], 0x4, &(0x7f0000003980)=[@cred={0x20, 0x1, 0x2, r1, r28, r29}], 0x20, 0x24000854}], 0x7, 0x84) tkill(r1, 0x40) r30 = gettid() tkill(r30, 0x2e) capget(&(0x7f0000000000)={0x19980330, r30}, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x7, 0x2, 0x3, 0x104b, 0x2, 0x49e1cc30, {0x0, @in6={{0xa, 0x4e21, 0x9, @empty, 0x10001}}, 0x2, 0x60d, 0x1, 0x3, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r31, 0x9}, &(0x7f00000002c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r32, 0x0, 0x2, 0x4}}, 0x20) 09:54:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x4}}, 0x2e) 09:54:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1883.670250] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x4}}, 0x2e) 09:54:08 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1883.735246] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:09 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x1f, 0x2, 0x1ff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() r3 = msgget(0x1, 0x80) msgctl$MSG_INFO(r3, 0xc, &(0x7f00000000c0)=""/70) tkill(r2, 0x2e) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f00000001c0)={r1, r0, 0x2}) ptrace$poke(0x4, r2, &(0x7f0000000040), 0x10040000000000) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) 09:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:09 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x4}}, 0x2e) 09:54:09 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000200)={0xa0, 0x0, 0x5, {{0x0, 0x3, 0x10001, 0x2, 0x0, 0x100000000, {0x3, 0x2, 0x2000000, 0xa5, 0x9, 0x2, 0x40, 0x3ffc000000, 0xe5, 0x7fffffff, 0x400, r2, r3, 0x4, 0xb1}}, {0x0, 0x1}}}, 0xa0) tkill(0xffffffffffffffff, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) [ 1884.148322] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1884.227020] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:09 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:09 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000000c0)='-eth0\x00', 0xffffffffffffffff}, 0x30) wait4(r0, 0x0, 0x80000003, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x121400, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, 0x6, {0x81, 0x5, 0x0, {0x4, 0x3, 0x3, 0x6, 0x7, 0x2bd, 0xcc1, 0x7881, 0x1, 0x6, 0x2, r3, r4, 0xf7f, 0x9}}}, 0x78) 09:54:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, 0x4}}, 0x2e) 09:54:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:09 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000001140)={0x31, 0x3}) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000001100)={0x18, 0x20, &(0x7f0000000100)="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", {0x0, 0x0, 0x4f565559, 0x3, 0x16, 0x4, 0xb, 0x9}}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000001180)) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$setopts(0x40fc, r1, 0x100, 0x3) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) 09:54:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, 0x4}}, 0x2e) [ 1884.597816] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0), 0x8) truncate(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000180)='-27.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=t\np,00']) [ 1884.727710] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:09 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x4}}, 0x2e) 09:54:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:10 executing program 0: clone(0x3102002001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000180)={0x37, 0x6, 0x0, {0x3, 0x4, 0xe, 0x0, '/dev/snapshot\x00'}}, 0x37) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000000c0)) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) 09:54:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) [ 1884.969652] 9pnet: Could not find request transport: t [ 1884.969652] p 09:54:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}, 0x4}}, 0x2e) 09:54:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1885.179846] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1885.272829] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x141000, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) write$selinux_context(r0, &(0x7f00000001c0)='system_u:object_r:tmp_t:s0\x00', 0x1b) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() timer_create(0x8000000000000007, &(0x7f0000000300)={0x0, 0x25, 0x2, @tid=r1}, &(0x7f0000000340)) tkill(r1, 0x2d) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x101000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}, 0x81}}, 0x7, 0xea, 0x1ff, "63e855b1af6361bd1f5995bb7d6957b7af1c6ab08dc49fb0eb0de952b90dc7896572cbffc9d4e688b44ec755d2252487e78fc55957c729db5873a737f35ca2df63f44445cb21ed5f4893d745c1a4e2df"}, 0xd8) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x3, 0x8, 0xffff, 0x4c9], 0x4, 0x9, 0x7, 0x8, 0x1, 0xffff, {0x1, 0x401, 0x80, 0x80, 0x4, 0x0, 0x8, 0xd7d, 0x7, 0x89d, 0x5954597e, 0x1, 0x10000, 0x9, "0f353115370868ff7641130eefbe72062cbd24cfea39138faf058ac5a6ca85ea"}}) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x4}}, 0x2e) 09:54:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x100000000000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 09:54:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = dup(0xffffffffffffff9c) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0x401, 0x1}}, 0x28) tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 09:54:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}, 0x4}}, 0x2e) 09:54:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x1000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x100000000000005}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, 0x0, 0x0, &(0x7f000001ef80)=[{0x18, 0x0, 0x7, "4410051100ef000097"}], 0x18}, 0x0) [ 1885.708886] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:10 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f00000000c0)={@dev, @remote}, &(0x7f0000000100)=0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{r1, r2/1000+30000}, 0x16, 0x800, 0x5}, {{}, 0x3, 0x1e8f6db8, 0x3f}, {{0x0, 0x7530}, 0x15, 0xfffffffffffffffc, 0x1}, {{r3, r4/1000+30000}, 0x17, 0x5, 0x8001}, {{0x0, 0x7530}, 0x1, 0x5, 0x81}], 0x78) r5 = gettid() tkill(r5, 0x2e) capget(&(0x7f0000000000)={0x19980330, r5}, &(0x7f0000000080)) 09:54:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}, 0x4}}, 0x2e) [ 1885.811425] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:11 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)="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") fcntl$setstatus(r0, 0x4, 0x67fc) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x80000000) 09:54:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x600, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:11 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000eaffffff"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x98) r2 = gettid() tkill(r2, 0x2e) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000080)) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x400000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0)=0xe486, &(0x7f0000000100)=0x4) 09:54:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}, 0x4}}, 0x2e) [ 1886.138788] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:11 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1886.275893] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:11 executing program 0: clone(0x3102002001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x2, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}, 0x4}}, 0x2e) 09:54:11 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x6, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:11 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x80003, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000800), &(0x7f0000000840)=0x4) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x658, 0x228, 0xf0, 0x0, 0xf0, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0xf0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, [], 0x21}, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'nr0\x00', 'bond0\x00', {0xff}, {0xff}, 0xff, 0x9, 0x7, 0x12cec9ca607b8962}, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @broadcast}, @ipv4=@broadcast, 0x36, 0x2c, 0xffff}}}, {{@uncond, 0x0, 0xc8, 0xf0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0x0, 0xffffffff], 'ip6gretap0\x00', 'ip6gre0\x00', {}, {0xff}, 0x2f, 0xafe8, 0x7}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0x19}, @ipv4=@empty, 0x2f, 0x3, 0x2cb996b9}}}, {{@uncond, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@multicast1, 0x40, 0x11, 0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 09:54:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x4}}, 0x2e) [ 1886.609372] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:11 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1886.731120] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x200000000000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:11 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) tkill(r0, 0x2e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x1000, "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"}, &(0x7f0000001140)=0x1008) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000001180)={r2, @in6={{0xa, 0x4e24, 0x9, @ipv4={[], [], @multicast1}}}}, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000001240), &(0x7f00000012c0)=0x68) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x600000000000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:12 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x4}}, 0x2e) 09:54:12 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800001, 0x0, 0x5}) 09:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x6000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1887.099791] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3}}, 0x2e) 09:54:12 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:12 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x240, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x20, @mcast2, 0x8}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x7fff, 0x100, @ipv4={[], [], @multicast2}, 0x79}], 0x68) tkill(0x0, 0x26) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd86, 0x200000) r2 = geteuid() getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x5, 0x7f7c}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r3, 0xff}, 0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x10, {0x40, 0x1}, 0x80, r2, r5, 0x2, 0xf0de, 0x2, 0x11, 0x81, 0x8, 0x7, 0x3, 0x1000, 0xffffffff, 0x5, 0x8, 0x3ff, 0x4, 0x93}}, 0xa0) setpriority(0x0, 0x0, 0x74) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x3, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000400)="c61704f9de6f6806e4a6f7362e74819fd9144a70f199f29415d8e95e858763f096847af1fb92e4719e0889c818e1ce39a5fa2d5cd3ed6b2bafe3186381ce1945a8e6355a7df61bac779266b32f98112b126530a00e5aa8e9f548671098f688343dc1f4994722cc476200c727c94de5df62aaba519ea2ea4e5f41405092bb172e629b0d79ce76cf42491533d7ef5f20297473142af73fb2ef7b3588f0605593a51b40a8d2a4479ff37acdce4704fe1d87c14079c823605f784f3d0e86e8b150ca39f5533d204b2a38eb562c9913ff22274d6a9a63bddb6dbe6e42ef014f3bf119691959388c22f007c55fd9", 0xeb, 0x9}, {&(0x7f0000000500)="56b7b1f94a09bad8a85f17f0f9d55a7104b37de06a969d9a61860a6b80d4a23325dbef1bb259e821d4340d75f9c7828346a87b95df4bd3f41a9d8894e1901bd97208758432dd87114d02f973aae5dd371ed13d24a7b156cd278e4db826b145ef204bad603edc41b07a75fef2696b2c1733ff929b6c29b7508de0e6b44cb21d9a1b1e1bb7e44f197bce6a3f71955d58a940afc273681b98efef", 0x99, 0x1}, {&(0x7f00000005c0)="651d15a3a87b401995e3a9256804f47df9ef005f2a63ff57cd377752b6dc41e14b06eb6d1a12468ef1fe08e037a395ffd9c0b6c6a5a5d153207560c2fd0c1fe07ee87239befc10", 0x47, 0x5d15afe}, {&(0x7f0000000640)="a6682e847ea1436c9f3bfa5c7e5d26e55324be6e9ffb22d2d3594c65d171d286287a2812bb38dc2d62fc6df763504ccb9d147b472c374f9a612179b3bf51013b2e82b32f8ffcd10f8e200b2d194d1d1273dd3561a9115b62840457d542bb523fbe4b90d944f683d80cc0231f6b", 0x6d, 0x1}, {&(0x7f00000006c0)="04645f85a3ecc849e9feba1566228238e7a8ea7f9143807688259884308202a1ae136849a4e237978b16b1ff288357a243e64c0eaa3a588505149c2d9f18ffb05271672eaf78bef188233d80ca8c350e2f6fb2a60fbb8b99a402d7a2d8f6a89174974e556bb514ab758804184e4d6de1390fdbd7dd6b8bf2f533a2c40f1508e6f6630f38a3c35e0a85ed574d2abc4ef1d300df5621e06874c4cdd25e5d219db775def7d711ba7ba22f23a5c5d9cdf18db5a3f940599499c52ef4d131fe78b83699a4e92cf89bf1c135849c7603896aa7e03f3672c1af8b13167c2c6efa9dc4a330df38c329f73a6565a5700d1a393d0e5b89c3ed6fad", 0xf6, 0x1}], 0x800, &(0x7f0000000840)={[{@utf8='utf8'}, {@dmask={'dmask', 0x3d, 0x7}}, {@show_sys_files_yes='show_sys_files=yes'}, {@errors_recover='errors=recover'}, {@uid={'uid', 0x3d, r4}}], [{@fowner_gt={'fowner>', r4}}, {@subj_role={'subj_role', 0x3d, '/dev/dmmidi#\x00'}}]}) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) 09:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432ff", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty=0x2000000, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xa}}, 0x2e) 09:54:12 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x100000000000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:12 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @link_local}, &(0x7f0000000040)=0x80) r1 = syz_open_dev$rtc(&(0x7f0000000700)='/dev/rtc#\x00', 0x1, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rfkill\x00', 0x400, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x2102, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x1, 0x80000) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/qat_adf_ctl\x00', 0xc0040, 0x0) r7 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f00000008c0), 0x10, 0x800) r8 = open(&(0x7f0000000900)='./file0\x00', 0x222081, 0x2) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uinput\x00', 0x802, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) pipe2$9p(&(0x7f0000000980)={0xffffffffffffffff}, 0x4000) r12 = accept4$unix(0xffffffffffffff9c, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e, 0x80000) r13 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000a80), 0x80000) r14 = accept$packet(0xffffffffffffff9c, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b00)=0x14) r15 = socket$kcm(0x29, 0x7, 0x0) r16 = getpid() lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000c40)=0xc) r19 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0}, &(0x7f0000000cc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000d80)={0x0}, &(0x7f0000000dc0)=0xc) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r24 = getegid() sendmsg$unix(r0, &(0x7f0000000fc0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000001c0)="a5a53c59f6f388727657433843dff5e5273ea0298ddff468de3d35837b5d0b3daf842d621b113bd2be98369e44cc904636715a4c9a07894f2fca913fe96867c83c4c798171343514cca2b7a60be0a704f87f0bcddf1060f00351ea0b6df0d2388e0b69e4887c8ae45df1bebcd2be87859d0e42166e29c897bd837b299033f3df371ba7a2022191372fc508b587f8a41d898aba1a4a", 0x95}, {&(0x7f0000000280)="11a2b36c0fafc1857b281638a268214961a6c2ead2d728224245744bd7fe2354b9c38c8bc332d8a8dc097e5b9747bb136f205f7add17718be072158a497a1b5e94791eb3dd5a355b873bcca93100d3fadf3f261449ef227dd4533e04ac055240e0143c162f560465202e9a992c4e3294ff65f240592f6d89da9b281465b717a7ddd63266af0382ecea8b9e25cd7aa73e51ddf74aea9ee04324586fadf35e92b15be431bacec7cf", 0xa7}, {&(0x7f0000000340)="d9a3f07d3e20da467b91686cbf0a0c2298872cab8dbb1ae13ee54623df58576ae6397c58ce5278278f6bd6f926e167febd0ff34307238860c96194c96718f9355d9782233d730c4687", 0x49}, {&(0x7f00000003c0)="a0d51947f77e7f6eac842d6367ccc59c018a14ec99f2be0d4e002cfffa0196cbfeb3597c076d5982d1950e2f792147f475e097213c4b5d927ac584dc6852649023655e8003bfb52ce1804264f1917855cfa825855c4282e46cdc93191694b666c5dd3bc7713f6ae08ce7105c6b950ee6b4c6aeb48b022da33fb8a686844a30689313c0aaf28808daece021f3199089d254a7c33682a6c2cce83f7ac6167820c35d8669f95b7e7f149a95632af865b938e237b0197553f3072559d15e9fa98ad13dec702cf1237eaf39e9c0dbe15f6e180265af487c8f7bb51d03125e1a82", 0xde}, {&(0x7f00000004c0)="0697f793741970c0", 0x8}, {&(0x7f0000000500)="aa0bc8e136d6669560d8212f16c6bcbefe0e2d240f9e895381f79f0b736d3e9e8670fcdea6dc2193c968b3b5827926e40a72ad6ca1fa0a1fb978021efe5152170b67f269048dbec26090e9e4672e87cdec4ce0ce7a12efd937ab7425293848ff05f98558705b81052206e0476410454a1a79891c735932df9fa632788c7d7f4785254478ec400552ff14a78c2aee8ed3463e6c3609f70b22ff620150f8f97b3311487c0910701d3f0689cfc4ee", 0xad}, {&(0x7f00000005c0)="6df7a7fa5e3519d8c0cb20dd2a7db99879f4d2561ee4c135a28d7f530e7ad4893e4155dbb6b78aef1d21584647056d0d75ce008e375e1a0ac51e71b044384eb31c3b8edca2dc00d75ce246925dfad945c4c9854628f292351c61efc1af128b87f895a9a8255b2ed5425437b3e071aaee79ccd5fc5604e863f77174de2c4db4b92f", 0x81}], 0x7, &(0x7f0000000ec0)=[@rights={0x30, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7]}, @rights={0x30, 0x1, 0x1, [r8, r9, r10, r11, r12, r13, r14]}, @rights={0x18, 0x1, 0x1, [r15]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}], 0xd8, 0x4040000}, 0x4000000) wait4(0x0, 0x0, 0x80000000, 0x0) r25 = gettid() tkill(r25, 0x2e) capget(&(0x7f0000000000)={0x19980330, r25}, &(0x7f0000000080)) 09:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432ff", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:12 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4}}, 0x2e) 09:54:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x1000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x6000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x7ffffffd, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4c}}, 0x2e) 09:54:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x600, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) ptrace$getsig(0x4202, r0, 0x1, &(0x7f0000000040)) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, 0x0, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:13 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x74}}, 0x2e) 09:54:13 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x90a00, 0x0) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000001c0)) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x4010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, r3, 0x4}], 0xd4, 0x0, &(0x7f0000000240)="5cadf4067a50f4e2821eb35f7cdbdd0bce49fbf0741227de0319c18a7bda6c9b02c0d0d563591c4cbc3c0939041bf471a948d839adaa471c9998f9c8f21d7f8b833101ae886a79f39bbe9179229d3ad5af4703c0370e966292e6ba91e6995feba06d189d3dd34f9efcd9ab8b6f3ae58f3cabc78ec68e7a33ef84042b9c7bc4428d84436ac692c5827ca3627abf45179892d57003d0f6f8f82664e715a145d2a77aa9bc2270575e8f29072c1dc8bf3d6cd5b49126920c59553455a309861db895f3e7f31d8743418ba6635d62b3285a3458fc29ce"}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)) [ 1888.413694] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:13 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, 0x0, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1888.505402] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x6, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:13 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xca0, 0x400) fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x1000}, 0x28, 0x3) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4c00000000000000}}, 0x2e) 09:54:13 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, 0x0, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x200000000000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:14 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='-\x00', 0xffffffffffffffff}, 0x30) wait4(r0, 0x0, 0x80100020, 0x0) r1 = gettid() waitid(0x3, r0, 0x0, 0x20000003, &(0x7f0000000140)) tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7a00000000000000}}, 0x2e) [ 1888.911920] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:14 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x600000000000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1889.062287] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:14 executing program 0: clone(0x4003102081ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:14 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x300000000000000}}, 0x2e) 09:54:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x2000000, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:14 executing program 0: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) wait4(r0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:14 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x2, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1889.423971] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:14 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x14800, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="81b8dd8b1b7a92ed6c17eb4e2b35cd781064c5f056b7ca137ee5ebe18afe0ecfa5ee760dbdfbdeed0e85a5cb4fa2457d1346a9cfdf8b68e08d73ce8622d3bd67c1b17a9ce8b3152dac4b2cf94641c25aa85a355a67b7deba6baaa2fafe6edc2b7e51ce0c25bb4c8fd440cd5a54e66da0e10974dca624eb4e6e9a9c2bd943836248bacef45d530a9dc35a90308e02b4e80397fccf06b5f4293670a0b432334bef0a492f0c9371c420b35757063bab") tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7000000}}, 0x2e) [ 1889.560884] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x5}}, 0x2e) 09:54:14 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x8, 0xef7, 0x2, 0xaa7, 0x2, 0x5}) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) 09:54:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6800}}, 0x2e) 09:54:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) readahead(r0, 0x2e, 0x9) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0xfff, 0x4) tkill(r1, 0x2e) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)) pipe2(&(0x7f0000000100), 0x4000) [ 1890.025319] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1890.124534] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6c00}}, 0x2e) 09:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432fc", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffffb, 0x400100) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) getpeername(r1, &(0x7f00000001c0)=@nl, &(0x7f0000000240)=0x80) 09:54:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:15 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpgrp(0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa82) inotify_rm_watch(r1, r2) wait4(r0, 0x0, 0x400000080000003, 0x0) r3 = gettid() tkill(r3, 0x2e) capget(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000100)=0x9) 09:54:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x5000000}}, 0x2e) 09:54:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432ff", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0xa000000}}, 0x2e) 09:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4c00}}, 0x2e) [ 1891.015908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.029295] bridge0: port 1(bridge_slave_0) entered disabled state 09:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x600000000000000}}, 0x2e) [ 1891.418359] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1891.574815] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0xa}}, 0x2e) 09:54:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x2, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6c}}, 0x2e) 09:54:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1892.400528] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:17 executing program 5: accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6c00000000000000}}, 0x2e) 09:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x200000000000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1892.469245] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x6000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:17 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432ff", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7400000000000000}}, 0x2e) 09:54:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x2000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:17 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1892.840509] device bridge_slave_1 left promiscuous mode [ 1892.846101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.951115] device bridge_slave_0 left promiscuous mode [ 1892.958345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.009998] IPVS: ftp: loaded support on port[0] = 21 [ 1893.122180] team0 (unregistering): Port device team_slave_1 removed [ 1893.152252] team0 (unregistering): Port device team_slave_0 removed [ 1893.165045] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1893.208008] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1893.292742] bond0 (unregistering): Released all slaves [ 1894.417936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.424633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.433403] device bridge_slave_0 entered promiscuous mode [ 1894.499026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.505698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1894.513903] device bridge_slave_1 entered promiscuous mode [ 1894.567381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1894.623264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1894.785171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1894.841025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1895.041546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1895.050476] team0: Port device team_slave_0 added [ 1895.097464] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1895.105021] team0: Port device team_slave_1 added [ 1895.137292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1895.178286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1895.232921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1895.240291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1895.258646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1895.288522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1895.605184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.611622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.618262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.624732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.632800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1896.419395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1896.771539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.869646] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1896.976159] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1896.982622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1896.991266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1897.083726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1897.681548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.693217] bridge0: port 1(bridge_slave_0) entered disabled state 09:54:22 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x81, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0xa17, 0xff, [], &(0x7f00000000c0)={0x9b0954, 0xfffffffffffff61e, [], @value64=0x7}}) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x200000000000000}}, 0x2e) 09:54:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x600, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1897.804899] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x2000000}}, 0x2e) 09:54:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:23 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() tkill(r0, 0x2e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x81, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0xa17, 0xff, [], &(0x7f00000000c0)={0x9b0954, 0xfffffffffffff61e, [], @value64=0x7}}) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)) 09:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x6, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1897.896971] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:23 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(0xffffffffffffffff, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4000000}}, 0x2e) 09:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x100000000000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x4}}, 0x2e) 09:54:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1898.187225] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x2}}, 0x2e) 09:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x600000000000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432fd", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) 09:54:23 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4c000000}}, 0x2e) 09:54:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x1000000, 'wrr\x00', 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)) [ 1898.601741] FAULT_INJECTION: forcing a failure. [ 1898.601741] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.663898] CPU: 1 PID: 23160 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #145 [ 1898.671581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1898.680956] Call Trace: [ 1898.683566] dump_stack+0x244/0x39d [ 1898.687257] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1898.692465] ? debug_smp_processor_id+0x1c/0x20 [ 1898.697181] ? perf_trace_lock+0x14d/0x7a0 [ 1898.701436] should_fail.cold.4+0xa/0x17 [ 1898.705511] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1898.710620] ? perf_trace_lock+0x14d/0x7a0 [ 1898.714894] ? check_preemption_disabled+0x48/0x280 [ 1898.719931] ? lock_is_held_type+0x210/0x210 [ 1898.724368] ? find_held_lock+0x36/0x1c0 [ 1898.728461] ? perf_trace_sched_process_exec+0x860/0x860 [ 1898.733918] ? drm_unbind_agp+0x20/0x20 [ 1898.737907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1898.743459] __should_failslab+0x124/0x180 [ 1898.747725] should_failslab+0x9/0x14 [ 1898.751534] __kmalloc+0x2e0/0x760 [ 1898.755106] ? avc_ss_reset+0x190/0x190 [ 1898.759128] ? drm_ioctl+0x48d/0xb00 [ 1898.762860] drm_ioctl+0x48d/0xb00 [ 1898.766405] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1898.771263] ? drm_ioctl_kernel+0x330/0x330 [ 1898.775607] ? perf_trace_sched_process_exec+0x860/0x860 [ 1898.781078] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1898.786022] ? drm_ioctl_kernel+0x330/0x330 [ 1898.790352] do_vfs_ioctl+0x1de/0x1790 [ 1898.794256] ? ioctl_preallocate+0x300/0x300 [ 1898.799193] ? selinux_file_mprotect+0x620/0x620 [ 1898.804013] ? __sb_end_write+0xd9/0x110 [ 1898.808097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1898.813646] ? fput+0x130/0x1a0 [ 1898.816938] ? do_syscall_64+0x9a/0x820 [ 1898.820929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1898.826473] ? security_file_ioctl+0x94/0xc0 [ 1898.830893] ksys_ioctl+0xa9/0xd0 [ 1898.834354] __x64_sys_ioctl+0x73/0xb0 [ 1898.838253] do_syscall_64+0x1b9/0x820 [ 1898.842151] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1898.847528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1898.852462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1898.857314] ? trace_hardirqs_on_caller+0x310/0x310 [ 1898.862340] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1898.867405] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1898.872437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1898.877299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1898.882493] RIP: 0033:0x457569 [ 1898.885707] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1898.904615] RSP: 002b:00007fce82e60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:54:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6800000000000000}}, 0x2e) [ 1898.912331] RAX: ffffffffffffffda RBX: 00007fce82e60c90 RCX: 0000000000457569 [ 1898.919616] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1898.926892] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1898.934167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce82e616d4 [ 1898.941441] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 09:54:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "7772720200", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, 0x0) 09:54:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x6c000000}}, 0x2e) 09:54:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:24 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:24 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1899.450862] FAULT_INJECTION: forcing a failure. [ 1899.450862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1899.462719] CPU: 1 PID: 23194 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #145 [ 1899.467972] FAULT_INJECTION: forcing a failure. [ 1899.467972] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.470136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1899.470143] Call Trace: [ 1899.470174] dump_stack+0x244/0x39d [ 1899.470202] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1899.470241] should_fail.cold.4+0xa/0x17 [ 1899.506259] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1899.511419] ? mark_held_locks+0x130/0x130 [ 1899.515689] ? mark_held_locks+0x130/0x130 [ 1899.519942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1899.525509] ? check_preemption_disabled+0x48/0x280 [ 1899.530560] ? debug_smp_processor_id+0x1c/0x20 [ 1899.535253] ? perf_trace_lock+0x14d/0x7a0 [ 1899.539508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1899.545059] ? should_fail+0x22d/0xd01 [ 1899.548978] ? lock_is_held_type+0x210/0x210 [ 1899.553423] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1899.558543] ? perf_trace_lock+0x14d/0x7a0 [ 1899.562799] __alloc_pages_nodemask+0x366/0xea0 [ 1899.567485] ? lock_is_held_type+0x210/0x210 [ 1899.571919] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1899.576998] ? find_held_lock+0x36/0x1c0 [ 1899.581130] ? trace_hardirqs_off+0xb8/0x310 [ 1899.585567] cache_grow_begin+0xa5/0x8c0 [ 1899.589657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1899.595228] __kmalloc+0x69e/0x760 [ 1899.598798] ? avc_ss_reset+0x190/0x190 [ 1899.602794] ? drm_ioctl+0x48d/0xb00 [ 1899.606529] drm_ioctl+0x48d/0xb00 [ 1899.610094] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1899.614988] ? drm_ioctl_kernel+0x330/0x330 [ 1899.619337] ? perf_trace_sched_process_exec+0x860/0x860 [ 1899.624817] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1899.629771] ? drm_ioctl_kernel+0x330/0x330 [ 1899.634115] do_vfs_ioctl+0x1de/0x1790 [ 1899.638019] ? ioctl_preallocate+0x300/0x300 [ 1899.642443] ? selinux_file_mprotect+0x620/0x620 [ 1899.642471] ? __sb_end_write+0xd9/0x110 [ 1899.642492] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1899.656861] ? fput+0x130/0x1a0 [ 1899.660158] ? do_syscall_64+0x9a/0x820 [ 1899.664160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1899.669712] ? security_file_ioctl+0x94/0xc0 [ 1899.674140] ksys_ioctl+0xa9/0xd0 [ 1899.677616] __x64_sys_ioctl+0x73/0xb0 [ 1899.681535] do_syscall_64+0x1b9/0x820 [ 1899.685435] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1899.690811] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1899.695753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1899.700609] ? trace_hardirqs_on_caller+0x310/0x310 [ 1899.705641] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1899.710700] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1899.715744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1899.720616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1899.725820] RIP: 0033:0x457569 [ 1899.729036] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1899.747967] RSP: 002b:00007fce82e60c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1899.755696] RAX: ffffffffffffffda RBX: 00007fce82e60c90 RCX: 0000000000457569 [ 1899.762977] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1899.770277] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1899.777568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce82e616d4 [ 1899.784842] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 [ 1899.792161] CPU: 0 PID: 23196 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1899.799550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1899.808907] Call Trace: [ 1899.811526] dump_stack+0x244/0x39d [ 1899.815185] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1899.820396] ? debug_smp_processor_id+0x1c/0x20 [ 1899.825091] ? perf_trace_lock+0x14d/0x7a0 [ 1899.829368] should_fail.cold.4+0xa/0x17 [ 1899.833480] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1899.838613] ? perf_trace_lock+0x14d/0x7a0 [ 1899.842861] ? check_preemption_disabled+0x48/0x280 [ 1899.847896] ? lock_is_held_type+0x210/0x210 [ 1899.852354] ? find_held_lock+0x36/0x1c0 [ 1899.856464] ? perf_trace_sched_process_exec+0x860/0x860 [ 1899.861923] ? drm_unbind_agp+0x20/0x20 [ 1899.865907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1899.871460] __should_failslab+0x124/0x180 [ 1899.875724] should_failslab+0x9/0x14 [ 1899.879534] __kmalloc+0x2e0/0x760 [ 1899.883088] ? avc_ss_reset+0x190/0x190 [ 1899.887094] ? drm_ioctl+0x48d/0xb00 [ 1899.890820] drm_ioctl+0x48d/0xb00 [ 1899.894397] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1899.899273] ? drm_ioctl_kernel+0x330/0x330 [ 1899.903640] ? perf_trace_sched_process_exec+0x860/0x860 [ 1899.909114] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1899.914077] ? drm_ioctl_kernel+0x330/0x330 [ 1899.918423] do_vfs_ioctl+0x1de/0x1790 [ 1899.922325] ? ioctl_preallocate+0x300/0x300 [ 1899.926778] ? selinux_file_mprotect+0x620/0x620 [ 1899.931553] ? __sb_end_write+0xd9/0x110 [ 1899.935629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1899.941258] ? fput+0x130/0x1a0 [ 1899.944546] ? do_syscall_64+0x9a/0x820 [ 1899.948531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1899.954096] ? security_file_ioctl+0x94/0xc0 [ 1899.958516] ksys_ioctl+0xa9/0xd0 [ 1899.961980] __x64_sys_ioctl+0x73/0xb0 [ 1899.965875] do_syscall_64+0x1b9/0x820 [ 1899.969775] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1899.975143] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1899.980090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1899.984949] ? trace_hardirqs_on_caller+0x310/0x310 [ 1899.989971] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1899.994994] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1900.000023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1900.004879] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1900.010076] RIP: 0033:0x457569 [ 1900.013274] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1900.032201] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.039910] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 09:54:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x1000000}}, 0x2e) 09:54:25 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1900.047184] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1900.054468] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1900.061736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1900.069007] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 09:54:25 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7a00}}, 0x2e) 09:54:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) [ 1900.258756] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1900.365830] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff0000541b, &(0x7f0000000080)) 09:54:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "7772720600", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1900.410650] FAULT_INJECTION: forcing a failure. [ 1900.410650] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.480504] CPU: 1 PID: 23226 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1900.487924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1900.497285] Call Trace: [ 1900.499903] dump_stack+0x244/0x39d [ 1900.503567] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1900.508816] ? debug_smp_processor_id+0x1c/0x20 [ 1900.513537] ? perf_trace_lock+0x14d/0x7a0 [ 1900.517815] should_fail.cold.4+0xa/0x17 [ 1900.521901] ? fault_create_debugfs_attr+0x1f0/0x1f0 09:54:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x3}}, 0x2e) 09:54:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1900.527022] ? debug_smp_processor_id+0x1c/0x20 [ 1900.531723] ? perf_trace_sched_process_exec+0x860/0x860 [ 1900.537190] ? zap_class+0x640/0x640 [ 1900.540933] ? zap_class+0x640/0x640 [ 1900.544691] ? find_held_lock+0x36/0x1c0 [ 1900.548773] ? __lock_is_held+0xb5/0x140 [ 1900.552878] ? keyspan_usa67_send_setup+0x1318/0x1440 [ 1900.558130] ? perf_trace_sched_process_exec+0x860/0x860 [ 1900.563593] ? perf_trace_sched_process_exec+0x860/0x860 [ 1900.569112] __should_failslab+0x124/0x180 [ 1900.573385] should_failslab+0x9/0x14 [ 1900.577212] kmem_cache_alloc_trace+0x2d7/0x750 [ 1900.581896] ? drm_modeset_lock+0x178/0x5c0 [ 1900.586239] drm_atomic_state_alloc+0xb8/0x110 [ 1900.590845] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1900.596223] __setplane_atomic+0x2a3/0x330 [ 1900.600479] setplane_internal+0x127/0x370 [ 1900.600517] ? __setplane_internal+0x5e0/0x5e0 [ 1900.600547] ? mutex_unlock+0xd/0x10 [ 1900.613088] ? __drm_mode_object_find+0xb8/0x210 [ 1900.617869] drm_mode_setplane+0x567/0x830 [ 1900.622123] ? drm_is_current_master+0x51/0x140 [ 1900.626845] drm_ioctl_kernel+0x278/0x330 [ 1900.631017] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1900.635880] ? drm_setversion+0x8b0/0x8b0 [ 1900.640050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1900.645636] ? _copy_from_user+0xdf/0x150 [ 1900.649846] drm_ioctl+0x57e/0xb00 [ 1900.653402] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1900.658275] ? drm_ioctl_kernel+0x330/0x330 [ 1900.662652] ? perf_trace_sched_process_exec+0x860/0x860 [ 1900.668251] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1900.673209] ? drm_ioctl_kernel+0x330/0x330 [ 1900.677566] do_vfs_ioctl+0x1de/0x1790 09:54:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff00004b49, &(0x7f0000000080)) [ 1900.681475] ? ioctl_preallocate+0x300/0x300 [ 1900.685908] ? selinux_file_mprotect+0x620/0x620 [ 1900.690705] ? __sb_end_write+0xd9/0x110 [ 1900.694805] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1900.700363] ? fput+0x130/0x1a0 [ 1900.703657] ? do_syscall_64+0x9a/0x820 [ 1900.703691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1900.703712] ? security_file_ioctl+0x94/0xc0 [ 1900.713240] ksys_ioctl+0xa9/0xd0 [ 1900.713262] __x64_sys_ioctl+0x73/0xb0 [ 1900.713281] do_syscall_64+0x1b9/0x820 [ 1900.713312] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1900.713330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1900.713344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1900.713367] ? trace_hardirqs_on_caller+0x310/0x310 [ 1900.749195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1900.754250] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1900.759309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1900.764207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1900.769418] RIP: 0033:0x457569 [ 1900.772645] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1900.791582] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1900.799792] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1900.807118] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1900.814410] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1900.821700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1900.828989] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 09:54:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x400000000000000}}, 0x2e) 09:54:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:26 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff00005451, &(0x7f0000000080)) 09:54:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1901.033012] IPVS: ftp: loaded support on port[0] = 21 [ 1901.099880] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1901.136244] device bridge_slave_1 left promiscuous mode [ 1901.149946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.161027] FAULT_INJECTION: forcing a failure. [ 1901.161027] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.186669] CPU: 0 PID: 23265 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1901.194115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.203487] Call Trace: [ 1901.203521] dump_stack+0x244/0x39d [ 1901.203543] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1901.203569] ? debug_smp_processor_id+0x1c/0x20 [ 1901.203590] ? perf_trace_lock+0x14d/0x7a0 [ 1901.203616] should_fail.cold.4+0xa/0x17 [ 1901.219705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1901.219728] ? debug_smp_processor_id+0x1c/0x20 [ 1901.219751] ? perf_trace_sched_process_exec+0x860/0x860 [ 1901.243260] ? zap_class+0x640/0x640 [ 1901.246996] ? zap_class+0x640/0x640 [ 1901.250744] ? find_held_lock+0x36/0x1c0 [ 1901.254861] ? __lock_is_held+0xb5/0x140 [ 1901.258954] ? perf_trace_sched_process_exec+0x860/0x860 [ 1901.264423] ? perf_trace_sched_process_exec+0x860/0x860 [ 1901.269934] __should_failslab+0x124/0x180 [ 1901.274194] should_failslab+0x9/0x14 [ 1901.277990] kmem_cache_alloc_trace+0x2d7/0x750 [ 1901.282654] ? drm_modeset_lock+0x178/0x5c0 [ 1901.286976] drm_atomic_state_alloc+0xb8/0x110 [ 1901.291554] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1901.296913] __setplane_atomic+0x2a3/0x330 [ 1901.301141] setplane_internal+0x127/0x370 [ 1901.305377] ? __setplane_internal+0x5e0/0x5e0 [ 1901.309980] ? mutex_unlock+0xd/0x10 [ 1901.313699] ? __drm_mode_object_find+0xb8/0x210 [ 1901.318465] drm_mode_setplane+0x567/0x830 [ 1901.322696] ? drm_is_current_master+0x51/0x140 [ 1901.327365] drm_ioctl_kernel+0x278/0x330 [ 1901.331508] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1901.336344] ? drm_setversion+0x8b0/0x8b0 [ 1901.340486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1901.346015] ? _copy_from_user+0xdf/0x150 [ 1901.350159] drm_ioctl+0x57e/0xb00 [ 1901.353707] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1901.358563] ? drm_ioctl_kernel+0x330/0x330 [ 1901.362888] ? perf_trace_sched_process_exec+0x860/0x860 [ 1901.368350] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1901.373284] ? drm_ioctl_kernel+0x330/0x330 [ 1901.377602] do_vfs_ioctl+0x1de/0x1790 [ 1901.381501] ? ioctl_preallocate+0x300/0x300 [ 1901.385921] ? selinux_file_mprotect+0x620/0x620 [ 1901.390684] ? __sb_end_write+0xd9/0x110 [ 1901.394752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1901.400281] ? fput+0x130/0x1a0 [ 1901.403554] ? do_syscall_64+0x9a/0x820 [ 1901.407540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1901.413100] ? security_file_ioctl+0x94/0xc0 [ 1901.417518] ksys_ioctl+0xa9/0xd0 [ 1901.420981] __x64_sys_ioctl+0x73/0xb0 [ 1901.424874] do_syscall_64+0x1b9/0x820 [ 1901.428764] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1901.434137] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1901.439082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1901.443946] ? trace_hardirqs_on_caller+0x310/0x310 [ 1901.448965] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1901.454006] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1901.459016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1901.463857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1901.469037] RIP: 0033:0x457569 [ 1901.472228] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1901.491130] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.498872] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1901.506138] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1901.513407] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1901.520672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1901.527940] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 [ 1901.551125] device bridge_slave_0 left promiscuous mode [ 1901.552515] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1901.556661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.665851] team0 (unregistering): Port device team_slave_1 removed [ 1901.676644] team0 (unregistering): Port device team_slave_0 removed [ 1901.691250] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1901.733732] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1901.795372] bond0 (unregistering): Released all slaves [ 1902.654146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.660802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.668557] device bridge_slave_0 entered promiscuous mode [ 1902.722717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.729348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.736906] device bridge_slave_1 entered promiscuous mode [ 1902.791481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1902.842148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1902.993313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1903.045053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1903.274921] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1903.282478] team0: Port device team_slave_0 added [ 1903.313859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1903.321258] team0: Port device team_slave_1 added [ 1903.360166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1903.412734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1903.457486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1903.464645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1903.472820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1903.520882] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1903.528106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1903.544638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1903.838668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.845065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1903.851810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.858157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.865645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1903.879664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1904.902453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1905.012579] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1905.108402] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1905.114759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1905.122466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1905.232755] 8021q: adding VLAN 0 to HW filter on device team0 09:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "777272000000000000000200", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x3000000}}, 0x2e) 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff40086602, &(0x7f0000000080)) 09:54:31 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432f5", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) [ 1905.961740] FAULT_INJECTION: forcing a failure. [ 1905.961740] name failslab, interval 1, probability 0, space 0, times 0 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1906.018774] CPU: 0 PID: 23549 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1906.026164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.035536] Call Trace: [ 1906.038161] dump_stack+0x244/0x39d [ 1906.041831] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1906.047055] ? debug_smp_processor_id+0x1c/0x20 [ 1906.051757] ? perf_trace_lock+0x14d/0x7a0 [ 1906.056022] should_fail.cold.4+0xa/0x17 [ 1906.060116] ? fault_create_debugfs_attr+0x1f0/0x1f0 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffc0189436, &(0x7f0000000080)) 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1906.065243] ? __kernel_text_address+0xd/0x40 [ 1906.069776] ? unwind_get_return_address+0x61/0xa0 [ 1906.074758] ? zap_class+0x640/0x640 [ 1906.078511] ? find_held_lock+0x36/0x1c0 [ 1906.082594] ? __lock_is_held+0xb5/0x140 [ 1906.086681] ? perf_trace_sched_process_exec+0x860/0x860 [ 1906.092145] ? zap_class+0x640/0x640 [ 1906.095921] __should_failslab+0x124/0x180 [ 1906.100187] should_failslab+0x9/0x14 [ 1906.104017] __kmalloc+0x2e0/0x760 [ 1906.107582] ? __lock_is_held+0xb5/0x140 [ 1906.111656] ? drm_atomic_state_init+0x171/0x3b0 [ 1906.116433] drm_atomic_state_init+0x171/0x3b0 [ 1906.121039] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1906.126107] ? __drm_atomic_state_free+0xf0/0xf0 [ 1906.130891] drm_atomic_state_alloc+0xd0/0x110 [ 1906.135508] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1906.140906] __setplane_atomic+0x2a3/0x330 [ 1906.145162] setplane_internal+0x127/0x370 [ 1906.149440] ? __setplane_internal+0x5e0/0x5e0 [ 1906.154091] ? mutex_unlock+0xd/0x10 [ 1906.157838] ? __drm_mode_object_find+0xb8/0x210 [ 1906.162619] drm_mode_setplane+0x567/0x830 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffc020660b, &(0x7f0000000080)) [ 1906.166877] ? drm_is_current_master+0x51/0x140 [ 1906.171567] drm_ioctl_kernel+0x278/0x330 [ 1906.175735] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1906.180600] ? drm_setversion+0x8b0/0x8b0 [ 1906.184767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1906.190320] ? _copy_from_user+0xdf/0x150 [ 1906.194499] drm_ioctl+0x57e/0xb00 [ 1906.198050] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1906.202932] ? drm_ioctl_kernel+0x330/0x330 [ 1906.207288] ? perf_trace_sched_process_exec+0x860/0x860 [ 1906.212763] ? __mutex_unlock_slowpath+0x197/0x8c0 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1906.217748] ? drm_ioctl_kernel+0x330/0x330 [ 1906.222099] do_vfs_ioctl+0x1de/0x1790 [ 1906.226016] ? ioctl_preallocate+0x300/0x300 [ 1906.230449] ? selinux_file_mprotect+0x620/0x620 [ 1906.235235] ? __sb_end_write+0xd9/0x110 [ 1906.239340] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1906.244893] ? fput+0x130/0x1a0 [ 1906.248209] ? do_syscall_64+0x9a/0x820 [ 1906.252218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1906.257791] ? security_file_ioctl+0x94/0xc0 [ 1906.262222] ksys_ioctl+0xa9/0xd0 [ 1906.265695] __x64_sys_ioctl+0x73/0xb0 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff00005450, &(0x7f0000000080)) [ 1906.269600] do_syscall_64+0x1b9/0x820 [ 1906.273500] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1906.278879] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1906.283842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1906.288710] ? trace_hardirqs_on_caller+0x310/0x310 [ 1906.293750] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1906.298804] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1906.303863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1906.308731] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1906.313936] RIP: 0033:0x457569 [ 1906.317150] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1906.336067] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.343813] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1906.351119] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1906.358400] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1906.365679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1906.372972] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 09:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "777272000000000000000100", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1, &(0x7f00000015c0), 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x48000000}}, 0x2e) 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff00005460, &(0x7f0000000080)) 09:54:31 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432ff", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x700}}, 0x2e) 09:54:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000080)) 09:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, 0x0, 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "777272000000000000000600", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "7772720000000100", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff80087601, &(0x7f0000000080)) [ 1906.881503] FAULT_INJECTION: forcing a failure. [ 1906.881503] name failslab, interval 1, probability 0, space 0, times 0 09:54:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) [ 1906.934040] CPU: 0 PID: 23618 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1906.941430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1906.950794] Call Trace: [ 1906.953414] dump_stack+0x244/0x39d [ 1906.957080] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1906.962299] ? debug_smp_processor_id+0x1c/0x20 [ 1906.966985] ? perf_trace_lock+0x14d/0x7a0 [ 1906.971266] should_fail.cold.4+0xa/0x17 [ 1906.975345] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1906.980480] ? save_stack+0x43/0xd0 09:54:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "7772720000000200", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1906.984153] ? kasan_kmalloc+0xc7/0xe0 [ 1906.988087] ? __kmalloc+0x15b/0x760 [ 1906.991818] ? drm_atomic_state_init+0x171/0x3b0 [ 1906.996577] ? drm_atomic_state_alloc+0xd0/0x110 [ 1907.001323] ? zap_class+0x640/0x640 [ 1907.005026] ? drm_mode_setplane+0x567/0x830 [ 1907.009438] ? drm_ioctl+0x57e/0xb00 [ 1907.013142] ? do_vfs_ioctl+0x1de/0x1790 [ 1907.017192] ? ksys_ioctl+0xa9/0xd0 [ 1907.020822] ? __x64_sys_ioctl+0x73/0xb0 [ 1907.024872] ? do_syscall_64+0x1b9/0x820 [ 1907.028927] ? find_held_lock+0x36/0x1c0 [ 1907.032978] ? __lock_is_held+0xb5/0x140 [ 1907.037037] ? perf_trace_sched_process_exec+0x860/0x860 [ 1907.042481] __should_failslab+0x124/0x180 [ 1907.046726] should_failslab+0x9/0x14 [ 1907.050528] __kmalloc+0x2e0/0x760 [ 1907.054056] ? __lock_is_held+0xb5/0x140 [ 1907.058120] ? drm_atomic_state_init+0x20b/0x3b0 [ 1907.062866] drm_atomic_state_init+0x20b/0x3b0 [ 1907.067441] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1907.072447] ? __drm_atomic_state_free+0xf0/0xf0 [ 1907.077201] drm_atomic_state_alloc+0xd0/0x110 [ 1907.081808] drm_atomic_helper_disable_plane+0x3a/0x200 [ 1907.087183] __setplane_atomic+0x2a3/0x330 [ 1907.091414] setplane_internal+0x127/0x370 [ 1907.095649] ? __setplane_internal+0x5e0/0x5e0 [ 1907.100229] ? mutex_unlock+0xd/0x10 [ 1907.103932] ? __drm_mode_object_find+0xb8/0x210 [ 1907.108681] drm_mode_setplane+0x567/0x830 [ 1907.112921] ? drm_is_current_master+0x51/0x140 [ 1907.117582] drm_ioctl_kernel+0x278/0x330 [ 1907.121722] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1907.126569] ? drm_setversion+0x8b0/0x8b0 [ 1907.130713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1907.136259] ? _copy_from_user+0xdf/0x150 [ 1907.140429] drm_ioctl+0x57e/0xb00 [ 1907.143983] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1907.148832] ? drm_ioctl_kernel+0x330/0x330 [ 1907.153156] ? perf_trace_sched_process_exec+0x860/0x860 [ 1907.158603] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1907.163534] ? drm_ioctl_kernel+0x330/0x330 [ 1907.167843] do_vfs_ioctl+0x1de/0x1790 [ 1907.171720] ? ioctl_preallocate+0x300/0x300 [ 1907.176123] ? selinux_file_mprotect+0x620/0x620 [ 1907.180890] ? __sb_end_write+0xd9/0x110 [ 1907.184948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1907.190476] ? fput+0x130/0x1a0 [ 1907.193753] ? do_syscall_64+0x9a/0x820 [ 1907.197726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1907.203253] ? security_file_ioctl+0x94/0xc0 [ 1907.207651] ksys_ioctl+0xa9/0xd0 [ 1907.211103] __x64_sys_ioctl+0x73/0xb0 [ 1907.214982] do_syscall_64+0x1b9/0x820 [ 1907.218857] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1907.224225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1907.229167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1907.234027] ? trace_hardirqs_on_caller+0x310/0x310 [ 1907.239037] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1907.244042] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1907.249093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1907.253956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1907.259143] RIP: 0033:0x457569 [ 1907.262345] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:54:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0xa00}}, 0x2e) 09:54:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, 0x0, 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1907.281231] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1907.288926] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1907.296186] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1907.303445] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1907.310732] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1907.318012] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 [ 1907.423941] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1907.501693] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities 09:54:32 executing program 5 (fault-call:2 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff4020940d, &(0x7f0000000080)) 09:54:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "7772720000000600", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7a}}, 0x2e) 09:54:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, 0x0, 0x0, 0x4}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)="65787432c0", &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc9, &(0x7f0000000080)) 09:54:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "777272000600", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1907.651316] FAULT_INJECTION: forcing a failure. [ 1907.651316] name failslab, interval 1, probability 0, space 0, times 0 09:54:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x7}}, 0x2e) [ 1907.779332] CPU: 1 PID: 23663 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1907.786743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1907.796107] Call Trace: [ 1907.798742] dump_stack+0x244/0x39d [ 1907.802388] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1907.807604] ? debug_smp_processor_id+0x1c/0x20 [ 1907.812281] ? perf_trace_lock+0x14d/0x7a0 [ 1907.816528] should_fail.cold.4+0xa/0x17 [ 1907.820604] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1907.825712] ? kasan_kmalloc+0xc7/0xe0 [ 1907.829605] ? zap_class+0x640/0x640 [ 1907.833330] ? drm_atomic_helper_disable_plane+0x3a/0x200 [ 1907.838873] ? __setplane_atomic+0x2a3/0x330 [ 1907.843284] ? setplane_internal+0x127/0x370 [ 1907.847699] ? do_vfs_ioctl+0x1de/0x1790 [ 1907.851762] ? ksys_ioctl+0xa9/0xd0 [ 1907.855390] ? __x64_sys_ioctl+0x73/0xb0 [ 1907.859457] ? do_syscall_64+0x1b9/0x820 [ 1907.863524] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1907.868907] ? zap_class+0x640/0x640 [ 1907.872636] ? find_held_lock+0x36/0x1c0 [ 1907.876738] ? __lock_is_held+0xb5/0x140 [ 1907.880850] ? perf_trace_sched_process_exec+0x860/0x860 [ 1907.886314] ? ww_mutex_lock_interruptible+0x41/0xb0 [ 1907.891428] __should_failslab+0x124/0x180 [ 1907.895699] should_failslab+0x9/0x14 [ 1907.899502] kmem_cache_alloc_trace+0x2d7/0x750 [ 1907.904181] ? drm_atomic_state_init+0x27a/0x3b0 [ 1907.908946] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1907.913975] vkms_plane_duplicate_state+0x49/0x120 [ 1907.918922] drm_atomic_get_plane_state+0x225/0x560 [ 1907.923952] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1907.929322] __setplane_atomic+0x2a3/0x330 [ 1907.933564] setplane_internal+0x127/0x370 [ 1907.937827] ? __setplane_internal+0x5e0/0x5e0 [ 1907.942427] ? mutex_unlock+0xd/0x10 [ 1907.946146] ? __drm_mode_object_find+0xb8/0x210 [ 1907.950908] drm_mode_setplane+0x567/0x830 [ 1907.955151] ? drm_is_current_master+0x51/0x140 [ 1907.959829] drm_ioctl_kernel+0x278/0x330 [ 1907.963984] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1907.968829] ? drm_setversion+0x8b0/0x8b0 [ 1907.973021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1907.978566] ? _copy_from_user+0xdf/0x150 [ 1907.982726] drm_ioctl+0x57e/0xb00 [ 1907.986272] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1907.991133] ? drm_ioctl_kernel+0x330/0x330 [ 1907.995471] ? perf_trace_sched_process_exec+0x860/0x860 [ 1908.000949] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1908.005910] ? drm_ioctl_kernel+0x330/0x330 [ 1908.010236] do_vfs_ioctl+0x1de/0x1790 [ 1908.014133] ? ioctl_preallocate+0x300/0x300 [ 1908.018553] ? selinux_file_mprotect+0x620/0x620 [ 1908.023325] ? __sb_end_write+0xd9/0x110 [ 1908.027400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1908.032944] ? fput+0x130/0x1a0 [ 1908.036232] ? do_syscall_64+0x9a/0x820 [ 1908.040245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1908.045789] ? security_file_ioctl+0x94/0xc0 [ 1908.050206] ksys_ioctl+0xa9/0xd0 [ 1908.053665] __x64_sys_ioctl+0x73/0xb0 [ 1908.057567] do_syscall_64+0x1b9/0x820 [ 1908.061459] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1908.066827] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1908.071760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1908.076608] ? trace_hardirqs_on_caller+0x310/0x310 [ 1908.081631] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1908.086655] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1908.091689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1908.096556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1908.101753] RIP: 0033:0x457569 [ 1908.104964] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:54:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1908.123864] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1908.131590] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1908.138859] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1908.146129] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1908.153410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1908.160688] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 09:54:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "77727200000000000000000200", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 09:54:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff40087602, &(0x7f0000000080)) 09:54:33 executing program 5 (fault-call:2 fault-nth:6): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 09:54:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x48}}, 0x2e) 09:54:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff80086601, &(0x7f0000000080)) 09:54:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x4800000000000000}}, 0x2e) 09:54:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000300)="000100009483000000000000c9030000ec00000001000800000000000000000000200000005d000a00010000000000006e5f02000000ffff53ef0100010504000000000000000000000001000008000000000000880000001ec7f69fa5c87a5796", 0x61, 0x400}], 0x0, 0x0) 09:54:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, "77727200000000000000000600", 0x0, 0x100000, 0x1000000}, 0xdcd6eb3c516781eb) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1908.565922] FAULT_INJECTION: forcing a failure. [ 1908.565922] name failslab, interval 1, probability 0, space 0, times 0 09:54:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1}, 0x20000800) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1908.641749] CPU: 0 PID: 23722 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1908.649157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1908.658546] Call Trace: [ 1908.661161] dump_stack+0x244/0x39d [ 1908.664828] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1908.670459] ? debug_smp_processor_id+0x1c/0x20 [ 1908.675188] ? perf_trace_lock+0x14d/0x7a0 [ 1908.679451] should_fail.cold.4+0xa/0x17 [ 1908.683554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1908.688690] ? save_stack+0x43/0xd0 [ 1908.692333] ? kasan_kmalloc+0xc7/0xe0 [ 1908.696249] ? kmem_cache_alloc_trace+0x152/0x750 [ 1908.701116] ? vkms_plane_duplicate_state+0x49/0x120 [ 1908.706236] ? drm_atomic_get_plane_state+0x225/0x560 [ 1908.711445] ? zap_class+0x640/0x640 [ 1908.715208] ? drm_mode_setplane+0x567/0x830 [ 1908.719639] ? drm_ioctl+0x57e/0xb00 [ 1908.723367] ? do_vfs_ioctl+0x1de/0x1790 [ 1908.727445] ? ksys_ioctl+0xa9/0xd0 [ 1908.731099] ? __x64_sys_ioctl+0x73/0xb0 [ 1908.735186] ? do_syscall_64+0x1b9/0x820 09:54:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) [ 1908.739267] ? find_held_lock+0x36/0x1c0 [ 1908.743349] ? __lock_is_held+0xb5/0x140 [ 1908.747444] ? perf_trace_sched_process_exec+0x860/0x860 [ 1908.752929] __should_failslab+0x124/0x180 [ 1908.757201] should_failslab+0x9/0x14 [ 1908.761019] kmem_cache_alloc_trace+0x2d7/0x750 [ 1908.765708] ? drm_atomic_state_init+0x27a/0x3b0 [ 1908.770984] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1908.776042] vkms_plane_duplicate_state+0x92/0x120 [ 1908.781022] drm_atomic_get_plane_state+0x225/0x560 [ 1908.786098] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1908.791502] __setplane_atomic+0x2a3/0x330 [ 1908.795803] setplane_internal+0x127/0x370 [ 1908.800191] ? __setplane_internal+0x5e0/0x5e0 [ 1908.804807] ? mutex_unlock+0xd/0x10 [ 1908.808532] ? __drm_mode_object_find+0xb8/0x210 [ 1908.813313] drm_mode_setplane+0x567/0x830 [ 1908.817566] ? drm_is_current_master+0x51/0x140 [ 1908.822256] drm_ioctl_kernel+0x278/0x330 [ 1908.826432] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1908.831292] ? drm_setversion+0x8b0/0x8b0 [ 1908.835461] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1908.841010] ? _copy_from_user+0xdf/0x150 [ 1908.845180] drm_ioctl+0x57e/0xb00 [ 1908.848739] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1908.853610] ? drm_ioctl_kernel+0x330/0x330 [ 1908.857964] ? perf_trace_sched_process_exec+0x860/0x860 [ 1908.863451] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1908.868400] ? drm_ioctl_kernel+0x330/0x330 [ 1908.872740] do_vfs_ioctl+0x1de/0x1790 [ 1908.876654] ? ioctl_preallocate+0x300/0x300 [ 1908.881109] ? selinux_file_mprotect+0x620/0x620 [ 1908.885900] ? __sb_end_write+0xd9/0x110 [ 1908.889983] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1908.895552] ? fput+0x130/0x1a0 [ 1908.898860] ? do_syscall_64+0x9a/0x820 [ 1908.902857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1908.908431] ? security_file_ioctl+0x94/0xc0 [ 1908.912854] ksys_ioctl+0xa9/0xd0 [ 1908.916330] __x64_sys_ioctl+0x73/0xb0 [ 1908.920234] do_syscall_64+0x1b9/0x820 [ 1908.924143] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1908.929533] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1908.934479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1908.939340] ? trace_hardirqs_on_caller+0x310/0x310 [ 1908.944385] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1908.949436] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1908.954494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1908.959366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1908.964570] RIP: 0033:0x457569 [ 1908.967772] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:54:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = syz_open_dev$sndpcmp(0x0, 0x6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x7fffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000004880)={'ip6gretap0\x00', @ifru_flags}) sendmsg(r1, &(0x7f0000002a40)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)}], 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000002ac0)={"6272696467653000000002b900"}) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002a80)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) dup3(r3, r2, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x1, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) 09:54:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x100000000000000}}, 0x2e) 09:54:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff00004b47, &(0x7f0000000080)) [ 1908.986680] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1908.994406] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1909.001697] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1909.008982] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1909.016265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1909.023580] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 [ 1909.154895] WARNING: CPU: 1 PID: 23722 at drivers/gpu/drm/vkms/vkms_plane.c:26 vkms_plane_duplicate_state+0x9f/0x120 [ 1909.165597] Kernel panic - not syncing: panic_on_warn set ... [ 1909.171494] CPU: 1 PID: 23722 Comm: syz-executor5 Not tainted 4.20.0-rc5+ #145 [ 1909.172791] kobject: 'loop2' (000000001e1bcbd7): kobject_uevent_env [ 1909.178865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1909.194611] Call Trace: [ 1909.197218] dump_stack+0x244/0x39d [ 1909.200877] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1909.206136] panic+0x2ad/0x55c [ 1909.209350] ? add_taint.cold.5+0x16/0x16 [ 1909.213524] ? __warn.cold.8+0x5/0x45 [ 1909.217344] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1909.222460] __warn.cold.8+0x20/0x45 [ 1909.225567] kobject: 'loop2' (000000001e1bcbd7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1909.226189] ? rcu_softirq_qs+0x20/0x20 [ 1909.226209] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1909.244714] report_bug+0x254/0x2d0 [ 1909.248364] do_error_trap+0x11b/0x200 [ 1909.252273] do_invalid_op+0x36/0x40 [ 1909.255997] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1909.261118] invalid_op+0x14/0x20 [ 1909.264585] RIP: 0010:vkms_plane_duplicate_state+0x9f/0x120 [ 1909.270335] Code: 00 0f 85 86 00 00 00 48 8b 3d ad 8f db 04 ba f8 00 00 00 be c0 80 60 00 e8 2e ec 76 fd 48 85 c0 49 89 c5 75 13 e8 91 e0 33 fd <0f> 0b 48 c7 c7 a0 26 7b 88 e8 b7 2c 1a fd e8 7e e0 33 fd 48 8d bb [ 1909.289285] RSP: 0018:ffff888147cf76f8 EFLAGS: 00010246 [ 1909.294672] RAX: 0000000000040000 RBX: ffff8881cdb5df00 RCX: ffffc90005e5a000 [ 1909.299988] kobject: 'loop0' (000000004f1050ae): kobject_uevent_env [ 1909.301963] RDX: 0000000000040000 RSI: ffffffff844bbb2f RDI: 0000000000000286 [ 1909.308388] kobject: 'loop0' (000000004f1050ae): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1909.315620] RBP: ffff888147cf7710 R08: ffff8881880a60c0 R09: ffffed103b5e5b5f [ 1909.315632] R10: ffffed103b5e5b5f R11: ffff8881daf2dafb R12: ffff8881d18d9680 [ 1909.315642] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888147cf7860 [ 1909.315681] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1909.315704] ? vkms_plane_duplicate_state+0x9f/0x120 [ 1909.315729] drm_atomic_get_plane_state+0x225/0x560 [ 1909.315756] drm_atomic_helper_disable_plane+0x7b/0x200 [ 1909.367542] __setplane_atomic+0x2a3/0x330 [ 1909.371805] setplane_internal+0x127/0x370 [ 1909.376066] ? __setplane_internal+0x5e0/0x5e0 [ 1909.380744] ? mutex_unlock+0xd/0x10 [ 1909.384476] ? __drm_mode_object_find+0xb8/0x210 [ 1909.389269] drm_mode_setplane+0x567/0x830 [ 1909.393521] ? drm_is_current_master+0x51/0x140 [ 1909.398216] drm_ioctl_kernel+0x278/0x330 [ 1909.402471] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1909.407331] ? drm_setversion+0x8b0/0x8b0 [ 1909.411504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1909.417052] ? _copy_from_user+0xdf/0x150 [ 1909.421228] drm_ioctl+0x57e/0xb00 [ 1909.424780] ? drm_mode_cursor_common+0x9e0/0x9e0 [ 1909.429643] ? drm_ioctl_kernel+0x330/0x330 [ 1909.433998] ? perf_trace_sched_process_exec+0x860/0x860 [ 1909.439471] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1909.444426] ? drm_ioctl_kernel+0x330/0x330 [ 1909.448763] do_vfs_ioctl+0x1de/0x1790 [ 1909.452692] ? ioctl_preallocate+0x300/0x300 [ 1909.457125] ? selinux_file_mprotect+0x620/0x620 [ 1909.461909] ? __sb_end_write+0xd9/0x110 [ 1909.465990] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1909.471543] ? fput+0x130/0x1a0 [ 1909.474864] ? do_syscall_64+0x9a/0x820 [ 1909.478858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1909.484413] ? security_file_ioctl+0x94/0xc0 [ 1909.488851] ksys_ioctl+0xa9/0xd0 [ 1909.492331] __x64_sys_ioctl+0x73/0xb0 [ 1909.496234] do_syscall_64+0x1b9/0x820 [ 1909.500142] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1909.505516] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1909.510452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1909.515307] ? trace_hardirqs_on_caller+0x310/0x310 [ 1909.520331] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1909.525358] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1909.530404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1909.535261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1909.540471] RIP: 0033:0x457569 [ 1909.543664] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1909.562569] RSP: 002b:00007f896b18dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.570295] RAX: ffffffffffffffda RBX: 00007f896b18dc90 RCX: 0000000000457569 [ 1909.577584] RDX: 0000000020000080 RSI: ffffffffffffffb7 RDI: 0000000000000003 [ 1909.584871] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1909.592156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f896b18e6d4 [ 1909.599428] R13: 00000000004be7f7 R14: 00000000004cebe0 R15: 0000000000000004 [ 1909.607834] Kernel Offset: disabled [ 1909.611684] Rebooting in 86400 seconds..