last executing test programs: 1m9.109815956s ago: executing program 4 (id=7436): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0xf000, 0x0, &(0x7f0000a1f000/0xf000)=nil) mremap(&(0x7f0000873000/0xd000)=nil, 0xd000, 0x3000, 0x6, &(0x7f000084c000/0x3000)=nil) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1c, 0xe) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x3, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xd1e4, 0x40, 0x0, 0x4, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x5c, 0x0, @fd_index=0xffffffff, 0xab, 0x0, 0x57, 0x3, 0x1}) io_uring_enter(r3, 0x15f1, 0xff9c, 0x69, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1m8.784233877s ago: executing program 4 (id=7438): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) 1m8.616113294s ago: executing program 4 (id=7441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) socketpair(0x1d, 0x3, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x88060, 0x34) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.345072873s ago: executing program 3 (id=7489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="004bd856e2910b6ecb960000000000a88b3645004adc00640009000000"], 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = getpid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1m3.562514787s ago: executing program 4 (id=7496): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b8", 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x22000088) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f821311929ffffffb703000008000000b7040000000000008500000059000000958ca10e06170f5e705d171b2d45ed842801000000b4ae10f8e337083852e084b78e97374078f427060ed0e47a3eaa81"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x18, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r8, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mark_victim\x00', r7, 0x0, 0x8}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 1m3.43061999s ago: executing program 3 (id=7499): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r1, r1, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) 1m3.265690496s ago: executing program 4 (id=7502): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x4, @private1, 0x8}, {0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffff9}, 0x1, {[0x101, 0x3, 0x9, 0x2, 0x7, 0x91, 0x4, 0x8850]}}, 0x5c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettaction={0x4c, 0x32, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b0}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) 1m2.514130208s ago: executing program 3 (id=7509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="004bd856e2910b6ecb960000000000a88b3645004adc00640009000000"], 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = getpid() r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1m1.501728665s ago: executing program 3 (id=7513): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b8", 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r3 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x22000088) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f821311929ffffffb703000008000000b7040000000000008500000059000000958ca10e06170f5e705d171b2d45ed842801000000b4ae10f8e337083852e084b78e97374078f427060ed0e47a3eaa81"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x18, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(r8, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mark_victim\x00', r7, 0x0, 0x8}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 1m1.048070029s ago: executing program 3 (id=7516): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x5e, @dev={0xac, 0x14, 0x14, 0x32}, 0x4e20, 0x2, 'wlc\x00', 0x2, 0x10a, 0x6e}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x3, 0x0, 0x0, 0x1d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108000027875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x3a7, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8c082) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r3, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x3c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a8b4e00d9603dda1af1ea800000000d3e600000000ffff00000000000014a2648f00", "2809e8dbe108038997bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acecffffffffffffff00", "0000000000000008000000000000b60500874028161db2214e00", [0xc00, 0x3]}}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400002cf2669c000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800) 1m0.707929731s ago: executing program 3 (id=7520): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x40000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000b1401002dbd7000ffdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$kcm(0x29, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174) 1m0.707684881s ago: executing program 32 (id=7520): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x40000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f0000000300)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000b1401002dbd7000ffdbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r6, 0x4000}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$kcm(0x29, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/174) 58.036061607s ago: executing program 4 (id=7535): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001600)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x4, 0xfc, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="554e3bb6", 0x0, 0x5, 0x0, 0x203, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='fsi_master_gpio_poll_response_busy\x00', r5}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 58.002337931s ago: executing program 33 (id=7535): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000001600)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0x4, 0xfc, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="554e3bb6", 0x0, 0x5, 0x0, 0x203, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='fsi_master_gpio_poll_response_busy\x00', r5}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r6, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.360283112s ago: executing program 1 (id=8238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x2, 0xc2000000000000, 0x3, 0x0}) unshare(0x6a040000) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0x2, 0x0, 0xf, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_NAME(0xf, &(0x7f0000001440)='kmem_cache_free\x00') ptrace$pokeuser(0x6, r2, 0x0, 0x8000000000000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYRES8=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) shutdown(r6, 0x1) flistxattr(r1, &(0x7f0000001480)=""/220, 0xdc) 4.029197794s ago: executing program 2 (id=8244): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="cc0021"], 0x84) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3.466734127s ago: executing program 1 (id=8248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 3.378848436s ago: executing program 1 (id=8250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.110840862s ago: executing program 1 (id=8253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x2, 0xc2000000000000, 0x3, 0x0}) unshare(0x6a040000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0x2, 0x0, 0xf, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_NAME(0xf, &(0x7f0000001440)='kmem_cache_free\x00') ptrace$pokeuser(0x6, r2, 0x0, 0x8000000000000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYRES8=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r6, 0x1) flistxattr(r1, &(0x7f0000001480)=""/220, 0xdc) socket(0x10, 0x803, 0x0) 2.956146827s ago: executing program 2 (id=8254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400056b20008001340000003"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.806236941s ago: executing program 2 (id=8255): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r1, r1, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) 2.327895257s ago: executing program 0 (id=8263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f00000008c0), &(0x7f0000000880)=r7}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2.244233415s ago: executing program 0 (id=8265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="004bd856e2910b6ecb960000000000a88b3645004adc00640009000000"], 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = getpid() r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 1.811760676s ago: executing program 6 (id=8267): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0x8, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x340008c4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xe02, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x5, &(0x7f0000000480)=[{0x3, 0xad, 0x2, 0x47}, {0x3, 0x2, 0x2}, {0x6, 0x7, 0x5, 0x5}, {0x200, 0x3, 0xa, 0x1}, {0xbcf, 0x70, 0xe, 0x7}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000003710a1000000000000070100000000ffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x8014) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8991, &(0x7f0000000040)={'pim6reg0\x00', @ifru_names='bond_slave_1\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x400002, 0x74, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x8000, 0x3e, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x0, 0x0, 0x3, 0x4, 0x0, @private1, @mcast1, 0x0, 0x0, 0xa, 0xc0}}) 1.591787447s ago: executing program 6 (id=8268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair(0x1d, 0x3, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xce) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x88060, 0x34) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.580865579s ago: executing program 1 (id=8269): getpgrp(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x120) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0xffffffffffffffff, &(0x7f00000003c0)={0x101, 0x9, 0xbd1, 0x80000000, 0x8000000000000000, 0x9, 0xffffffff00000000, 0x8001, 0xe297}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x238}}, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in=@initdev, @in6}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)) 1.314891014s ago: executing program 2 (id=8271): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x2, 0xc2000000000000, 0x3, 0x0}) unshare(0x6a040000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0x2, 0x0, 0xf, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_NAME(0xf, &(0x7f0000001440)='kmem_cache_free\x00') ptrace$pokeuser(0x6, r1, 0x0, 0x8000000000000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYRES8=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) shutdown(r5, 0x1) flistxattr(r0, &(0x7f0000001480)=""/220, 0xdc) socket(0x10, 0x803, 0x0) 1.311372644s ago: executing program 0 (id=8272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 1.240115631s ago: executing program 0 (id=8273): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 1.216749103s ago: executing program 5 (id=8274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000880)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000001680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='ext4_ext_show_extent\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(0x0, 0x0) 1.187994396s ago: executing program 0 (id=8275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x0, 0x2, 0xc2000000000000, 0x3, 0x0}) unshare(0x6a040000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0x2, 0x0, 0xf, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_NAME(0xf, &(0x7f0000001440)='kmem_cache_free\x00') ptrace$pokeuser(0x6, r2, 0x0, 0x8000000000000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000340)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYRES8=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) shutdown(r6, 0x1) flistxattr(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) 1.027130902s ago: executing program 5 (id=8276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.013722093s ago: executing program 6 (id=8277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000001708000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x49090) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffe00000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 987.784875ms ago: executing program 6 (id=8278): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 908.217273ms ago: executing program 6 (id=8279): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 673.912976ms ago: executing program 5 (id=8280): r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8003, 0x27a}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 635.466329ms ago: executing program 1 (id=8281): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@nodelalloc}]}, 0x81, 0x637, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x6, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r5, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r5, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000340)) sigaltstack(0x0, 0x0) 611.278351ms ago: executing program 6 (id=8282): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x210) 550.399337ms ago: executing program 5 (id=8283): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x81, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010026bd7000feffffff7f000001000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000080000000000000101200100000000000000000000000000022b010000043500000a000200"], 0xec}, 0x1, 0x0, 0x0, 0x801}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r9, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff) creat(&(0x7f0000000300)='./file0\x00', 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) 515.49284ms ago: executing program 5 (id=8284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) 479.554804ms ago: executing program 2 (id=8285): setresuid(0xee00, 0xee00, 0x0) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0xf5ea, 0x3180, 0x8003, 0x27a}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) 321.467529ms ago: executing program 5 (id=8286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000880)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000001680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='ext4_ext_show_extent\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x44800) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 668.74µs ago: executing program 0 (id=8287): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, 0x0}, 0x20) 0s ago: executing program 2 (id=8288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000001708000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x49090) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffe00000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) kernel console output (not intermixed with test programs): g to 1000 [ 600.149538][T28334] loop1: detected capacity change from 0 to 512 [ 600.161522][T28359] loop2: detected capacity change from 0 to 1024 [ 600.178355][T28334] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 600.222533][T28359] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7580: bad orphan inode 134217728 [ 600.254400][T28334] EXT4-fs (loop1): 1 truncate cleaned up [ 600.309158][T28358] loop0: detected capacity change from 0 to 512 [ 600.317111][T28362] loop5: detected capacity change from 0 to 512 [ 600.339324][T28358] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 600.342679][T28370] siw: device registration error -23 [ 600.360849][T28362] EXT4-fs (loop5): 1 orphan inode deleted [ 600.375731][T28362] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.376749][T28358] EXT4-fs (loop0): 1 truncate cleaned up [ 600.535810][T28380] lo speed is unknown, defaulting to 1000 [ 600.593610][T28384] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7588: bad orphan inode 134217728 [ 600.698771][T28390] siw: device registration error -23 [ 600.897517][T28402] siw: device registration error -23 [ 601.076535][T28410] siw: device registration error -23 [ 601.103723][T28412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.118814][T28416] sctp: [Deprecated]: syz.1.7601 (pid 28416) Use of int in max_burst socket option. [ 601.118814][T28416] Use struct sctp_assoc_value instead [ 601.190400][T28419] siw: device registration error -23 [ 601.200008][T28412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.252454][T28412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.453250][T28412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.580277][T28430] siw: device registration error -23 [ 601.643672][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.676721][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.711792][T22718] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.747942][T22718] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.757867][T28437] lo speed is unknown, defaulting to 1000 [ 601.821273][T28444] lo speed is unknown, defaulting to 1000 [ 601.828215][T28442] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7605: bad orphan inode 134217728 [ 601.867847][T28451] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7611: bad orphan inode 134217728 [ 601.919018][T28448] siw: device registration error -23 [ 601.927552][T28450] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 601.982588][T28450] EXT4-fs (loop6): 1 truncate cleaned up [ 602.052281][T28458] Cannot find add_set index 0 as target [ 602.659417][T28479] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.724755][T28479] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.779850][T28479] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.948901][T28479] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.056809][T28489] sctp: [Deprecated]: syz.1.7627 (pid 28489) Use of int in max_burst socket option. [ 603.056809][T28489] Use struct sctp_assoc_value instead [ 603.218633][T28492] siw: device registration error -23 [ 604.030118][T22718] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.053576][T22718] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.079281][T22718] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.099502][T22718] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.147755][T28509] program syz.2.7633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.181170][T28513] lo speed is unknown, defaulting to 1000 [ 604.226024][T28513] set_capacity_and_notify: 5 callbacks suppressed [ 604.226046][T28513] loop5: detected capacity change from 0 to 1024 [ 604.320767][T28513] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7634: bad orphan inode 134217728 [ 604.378483][T28528] siw: device registration error -23 [ 604.598569][T28536] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.662567][T28536] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.772909][T28536] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.872033][T28536] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.523815][T28552] loop0: detected capacity change from 0 to 1024 [ 605.539266][T28550] lo speed is unknown, defaulting to 1000 [ 605.732400][T28552] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7647: bad orphan inode 134217728 [ 605.957475][T28559] loop1: detected capacity change from 0 to 512 [ 606.038899][T28559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 606.127380][T28559] EXT4-fs (loop1): 1 truncate cleaned up [ 606.157922][T28567] lo speed is unknown, defaulting to 1000 [ 606.193372][T28569] loop5: detected capacity change from 0 to 1024 [ 606.215348][T28569] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7653: bad orphan inode 134217728 [ 606.323807][T28576] lo speed is unknown, defaulting to 1000 [ 606.392393][T28578] loop1: detected capacity change from 0 to 1024 [ 606.396289][T28574] lo speed is unknown, defaulting to 1000 [ 606.418343][T28578] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.7655: bad orphan inode 134217728 [ 606.462659][ T364] Bluetooth: hci0: Frame reassembly failed (-84) [ 606.533439][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 606.533457][ T29] audit: type=1326 audit(1766466955.219:30518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.575407][ T29] audit: type=1326 audit(1766466955.219:30519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.599301][ T29] audit: type=1326 audit(1766466955.219:30520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.623252][ T29] audit: type=1326 audit(1766466955.219:30521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.646855][ T29] audit: type=1326 audit(1766466955.219:30522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.671114][ T29] audit: type=1326 audit(1766466955.229:30523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.694883][ T29] audit: type=1326 audit(1766466955.229:30524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.718804][ T29] audit: type=1326 audit(1766466955.229:30525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.743227][ T29] audit: type=1326 audit(1766466955.229:30526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.766979][ T29] audit: type=1326 audit(1766466955.229:30527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28584 comm="syz.0.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 606.803841][T28587] Cannot find add_set index 0 as target [ 606.907373][T28593] loop0: detected capacity change from 0 to 1024 [ 606.937171][T28593] EXT4-fs: inline encryption not supported [ 606.943111][T28593] EXT4-fs: Ignoring removed orlov option [ 606.948774][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.962425][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.971281][T28593] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 606.974999][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.993022][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.002088][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7658'. [ 607.058913][T28598] program syz.1.7662 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.120280][T28602] program syz.5.7665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.224513][T28605] loop1: detected capacity change from 0 to 512 [ 607.240700][T28612] siw: device registration error -23 [ 607.256527][T28605] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 607.275396][T28618] program syz.5.7672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.286728][T28605] EXT4-fs (loop1): 1 truncate cleaned up [ 607.393586][T28623] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.398129][T28621] lo speed is unknown, defaulting to 1000 [ 607.432707][T28626] loop2: detected capacity change from 0 to 1024 [ 607.441069][T28623] loop0: detected capacity change from 0 to 512 [ 607.477922][T28626] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7674: bad orphan inode 134217728 [ 607.488829][T28625] loop5: detected capacity change from 0 to 512 [ 607.490781][T28623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 607.521134][T28623] EXT4-fs (loop0): 1 truncate cleaned up [ 607.522860][T28625] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7675: bg 0: block 248: padding at end of block bitmap is not set [ 607.545050][T28625] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7675: Failed to acquire dquot type 1 [ 607.558099][T28625] EXT4-fs (loop5): 1 truncate cleaned up [ 607.565608][T28625] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.593880][T28625] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7675: Failed to acquire dquot type 1 [ 607.721479][T28641] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.840274][T28641] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.901560][T28641] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.952036][T28641] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.029570][ T1535] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.043870][ T1535] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.058511][T22718] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.081391][T22718] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.136881][T28695] siw: device registration error -23 [ 608.243057][T28710] siw: device registration error -23 [ 608.271026][T28712] Cannot find add_set index 0 as target [ 608.477723][T28712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7684'. [ 608.501946][T28712] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 608.519540][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 608.526458][T28714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7685: bg 0: block 248: padding at end of block bitmap is not set [ 608.541815][ T4020] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 608.552724][T28714] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7685: Failed to acquire dquot type 1 [ 608.564832][T28714] EXT4-fs (loop2): 1 truncate cleaned up [ 608.571508][T28714] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.592754][T28714] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7685: Failed to acquire dquot type 1 [ 608.661354][T28732] lo speed is unknown, defaulting to 1000 [ 608.728353][T28739] siw: device registration error -23 [ 608.841157][T28732] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7690: bad orphan inode 134217728 [ 609.432842][T28819] set_capacity_and_notify: 2 callbacks suppressed [ 609.432859][T28819] loop2: detected capacity change from 0 to 512 [ 609.473344][T28821] FAULT_INJECTION: forcing a failure. [ 609.473344][T28821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.486131][T28819] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.486749][T28821] CPU: 0 UID: 0 PID: 28821 Comm: syz.5.7705 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 609.486832][T28821] Tainted: [W]=WARN [ 609.486840][T28821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.486852][T28821] Call Trace: [ 609.486858][T28821] [ 609.486866][T28821] __dump_stack+0x1d/0x30 [ 609.486895][T28821] dump_stack_lvl+0x95/0xd0 [ 609.486917][T28821] dump_stack+0x15/0x1b [ 609.486971][T28821] should_fail_ex+0x265/0x280 [ 609.486995][T28821] should_fail+0xb/0x20 [ 609.487014][T28821] should_fail_usercopy+0x1a/0x20 [ 609.487054][T28821] fpu__restore_sig+0x12d/0xaa0 [ 609.487077][T28821] ? x86_task_fpu+0x36/0x60 [ 609.487181][T28821] ? should_fail_ex+0xdb/0x280 [ 609.487208][T28821] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 609.487286][T28821] x64_sys_call+0x274a/0x3000 [ 609.487309][T28821] do_syscall_64+0xca/0x2b0 [ 609.487349][T28821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.487378][T28821] RIP: 0033:0x7fb71939f747 [ 609.487396][T28821] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 609.487413][T28821] RSP: 002b:00007fb717dff038 EFLAGS: 00000246 [ 609.487430][T28821] RAX: 0000000000000013 RBX: 00007fb7195f5fa0 RCX: 00007fb71939f749 [ 609.487513][T28821] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 609.487578][T28821] RBP: 00007fb717dff090 R08: 0000000000000000 R09: 0000000000000000 [ 609.487591][T28821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.487604][T28821] R13: 00007fb7195f6038 R14: 00007fb7195f5fa0 R15: 00007ffefca2ccd8 [ 609.487623][T28821] [ 609.548126][T28828] lo speed is unknown, defaulting to 1000 [ 609.555144][T28819] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.647000][T28828] loop5: detected capacity change from 0 to 1024 [ 609.660491][T28819] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7704: mark_inode_dirty error [ 609.690817][T28828] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7706: bad orphan inode 134217728 [ 609.692088][T28819] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.726768][T28831] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.738980][T28831] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7704: mark_inode_dirty error [ 609.751676][T28831] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.764221][T28831] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.7704: mark_inode_dirty error [ 609.776829][T28831] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.791509][T28831] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.7704: mark_inode_dirty error [ 609.833311][T28819] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.7704: corrupted inode contents [ 609.934312][T28837] lo speed is unknown, defaulting to 1000 [ 609.978212][T28837] loop2: detected capacity change from 0 to 1024 [ 610.026722][T28837] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7708: bad orphan inode 134217728 [ 610.042542][T28837] EXT4-fs mount: 67 callbacks suppressed [ 610.042555][T28837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.062029][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.183296][T28840] loop1: detected capacity change from 0 to 512 [ 610.301641][T28840] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7709: bg 0: block 248: padding at end of block bitmap is not set [ 610.344423][T28840] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.7709: Failed to acquire dquot type 1 [ 610.404333][T28840] EXT4-fs (loop1): 1 truncate cleaned up [ 610.410462][T28860] Cannot find add_set index 0 as target [ 610.423668][T28840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.436341][T28840] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.448139][T28840] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.7709: Failed to acquire dquot type 1 [ 610.538675][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.596414][T28853] loop6: detected capacity change from 0 to 32768 [ 610.627472][T28862] loop0: detected capacity change from 0 to 1024 [ 610.627606][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.634764][T28862] EXT4-fs: inline encryption not supported [ 610.648883][T28862] EXT4-fs: Ignoring removed orlov option [ 610.659040][T28862] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 610.679930][T28853] loop6: p1 p3 < p5 p6 > [ 610.684303][T28853] loop6: partition table partially beyond EOD, truncated [ 610.692666][T28862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.720283][T28860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7716'. [ 610.755254][T28860] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 610.796574][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 610.796759][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 610.807658][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 610.818086][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 610.901166][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.216415][T28893] program syz.5.7729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.281121][T28895] lo speed is unknown, defaulting to 1000 [ 611.319909][T28898] loop5: detected capacity change from 0 to 1024 [ 611.335694][T28898] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7730: bad orphan inode 134217728 [ 611.376459][T28898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.646284][T28914] siw: device registration error -23 [ 611.697300][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 611.697316][ T29] audit: type=1326 audit(1766466960.379:30825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.729071][ T29] audit: type=1326 audit(1766466960.409:30826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.752758][ T29] audit: type=1326 audit(1766466960.409:30827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.776837][ T29] audit: type=1326 audit(1766466960.409:30828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.800559][ T29] audit: type=1326 audit(1766466960.409:30829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.804310][T28922] loop2: detected capacity change from 0 to 512 [ 611.825256][ T29] audit: type=1326 audit(1766466960.509:30830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.854442][ T29] audit: type=1326 audit(1766466960.509:30831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.861526][T28922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.878241][ T29] audit: type=1326 audit(1766466960.509:30832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.930744][ T29] audit: type=1326 audit(1766466960.519:30833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.954663][ T29] audit: type=1326 audit(1766466960.519:30834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28917 comm="syz.6.7739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 611.986512][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.086983][T28932] loop6: detected capacity change from 0 to 256 [ 612.110849][T28929] loop5: detected capacity change from 0 to 512 [ 612.128249][T28929] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 612.148476][T28929] EXT4-fs (loop5): 1 truncate cleaned up [ 612.157605][T28932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7742'. [ 612.160846][T28929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.259619][T28941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7744'. [ 612.273181][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.464673][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.498238][T28951] lo speed is unknown, defaulting to 1000 [ 612.584034][T28959] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 612.601062][T28959] EXT4-fs (loop5): 1 truncate cleaned up [ 612.608230][T28959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.671843][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.887583][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7753'. [ 612.916954][T28970] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.931471][T28970] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.970971][T28975] lo speed is unknown, defaulting to 1000 [ 612.981736][T28970] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.014787][T28975] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7757: bad orphan inode 134217728 [ 613.026091][T28975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.040771][T28970] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.099473][ T53] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.110296][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.119392][ T2782] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.128303][ T2782] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.148639][ T2782] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.182744][T28980] lo speed is unknown, defaulting to 1000 [ 613.257026][T28987] lo speed is unknown, defaulting to 1000 [ 613.318323][T28987] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.7760: bad orphan inode 134217728 [ 613.329886][T28987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.482213][T28994] EXT4-fs: inline encryption not supported [ 613.488187][T28994] EXT4-fs: Ignoring removed orlov option [ 613.498549][T28994] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 613.521286][T28994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.555708][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.612469][T29002] Cannot find add_set index 0 as target [ 613.722219][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.808035][T29007] siw: device registration error -23 [ 613.823697][T29011] lo speed is unknown, defaulting to 1000 [ 613.870830][T29017] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7768: bad orphan inode 134217728 [ 613.984666][T29017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.057413][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.067510][ T3595] loop5: p1 p3 < p5 p6 > [ 614.072036][ T3595] loop5: partition table partially beyond EOD, truncated [ 614.377156][T29015] loop5: p1 p3 < p5 p6 > [ 614.381591][T29015] loop5: partition table partially beyond EOD, truncated [ 614.400731][T29024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 614.412934][T29024] EXT4-fs (loop2): 1 truncate cleaned up [ 614.419403][T29024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.462942][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.476622][T29027] set_capacity_and_notify: 8 callbacks suppressed [ 614.476638][T29027] loop5: detected capacity change from 0 to 1024 [ 614.497435][T29029] sctp: [Deprecated]: syz.2.7774 (pid 29029) Use of int in max_burst socket option. [ 614.497435][T29029] Use struct sctp_assoc_value instead [ 614.510133][T29027] EXT4-fs: inline encryption not supported [ 614.518047][T29027] EXT4-fs: Ignoring removed orlov option [ 614.554995][T29027] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 614.573088][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 614.584419][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 614.598833][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 614.609758][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 614.644013][T29027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.646148][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 614.662059][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 614.767485][ T4020] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 614.890870][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.272114][T29039] lo speed is unknown, defaulting to 1000 [ 615.319520][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 615.389565][ T4020] Bluetooth: hci1: command 0x1003 tx timeout [ 615.556592][T29047] Cannot find add_set index 0 as target [ 616.179936][T29059] loop5: detected capacity change from 0 to 32768 [ 616.219926][ T3595] loop5: p1 p3 < p5 p6 > [ 616.224346][ T3595] loop5: partition table partially beyond EOD, truncated [ 616.240034][T29059] loop5: p1 p3 < p5 p6 > [ 616.244544][T29059] loop5: partition table partially beyond EOD, truncated [ 616.345154][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 616.356348][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 616.368365][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 616.370899][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 616.399300][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 616.399655][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 616.410420][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 616.429943][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 616.449106][T29071] Cannot find add_set index 0 as target [ 616.508897][T29052] loop2: detected capacity change from 0 to 512 [ 616.532724][T29052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7780: bg 0: block 248: padding at end of block bitmap is not set [ 616.560020][T29052] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7780: Failed to acquire dquot type 1 [ 616.578923][T29052] EXT4-fs (loop2): 1 truncate cleaned up [ 616.590782][T29052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.621041][T29052] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.647655][T29052] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7780: Failed to acquire dquot type 1 [ 616.718873][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.729249][T29071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7788'. [ 616.772416][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 616.772430][ T29] audit: type=1326 audit(1766466965.459:31130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29076 comm="syz.6.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 616.872739][ T29] audit: type=1326 audit(1766466965.559:31131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29074 comm="syz.6.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 616.901479][ T29] audit: type=1326 audit(1766466965.589:31132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29074 comm="syz.6.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 616.935522][T29084] siw: device registration error -23 [ 616.971762][T29086] lo speed is unknown, defaulting to 1000 [ 617.022603][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 617.030403][T29088] loop2: detected capacity change from 0 to 512 [ 617.065498][T29088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 617.077574][T29088] EXT4-fs (loop2): 1 truncate cleaned up [ 617.090686][T29088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.131230][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.162541][ T29] audit: type=1326 audit(1766466965.849:31133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.162665][T29092] loop6: detected capacity change from 0 to 512 [ 617.210384][T29099] program syz.5.7798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.221873][T29092] EXT4-fs (loop6): 1 orphan inode deleted [ 617.229565][ T29] audit: type=1326 audit(1766466965.849:31134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.231352][T29092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.253328][ T29] audit: type=1326 audit(1766466965.879:31135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.289023][ T29] audit: type=1326 audit(1766466965.879:31136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.312683][ T29] audit: type=1326 audit(1766466965.879:31137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.336264][ T29] audit: type=1326 audit(1766466965.879:31138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.350218][T29092] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.360575][ T29] audit: type=1326 audit(1766466965.879:31139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29098 comm="syz.5.7798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 617.537097][T29114] lo speed is unknown, defaulting to 1000 [ 617.572382][T29114] loop5: detected capacity change from 0 to 1024 [ 617.630478][T29114] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7803: bad orphan inode 134217728 [ 617.648694][T29114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.728505][T29119] IPv6: Can't replace route, no match found [ 617.735053][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.742539][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7804'. [ 617.758865][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.793092][T29121] loop1: detected capacity change from 0 to 512 [ 617.808073][T29121] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.841327][T29121] EXT4-fs (loop1): 1 truncate cleaned up [ 617.847470][T29121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.893317][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.024650][T29134] loop1: detected capacity change from 0 to 512 [ 618.070698][T29134] EXT4-fs (loop1): 1 orphan inode deleted [ 618.077470][T29134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.107141][T29134] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.123945][T29137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.144088][T29137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7810'. [ 618.179313][T29144] siw: device registration error -23 [ 618.293081][T29148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.354732][T29148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.382838][T29146] loop2: detected capacity change from 0 to 32768 [ 618.413981][T29148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.431022][T29146] loop2: p1 p3 < p5 p6 > [ 618.435399][T29146] loop2: partition table partially beyond EOD, truncated [ 618.447267][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.472156][T29148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.524105][T29152] lo speed is unknown, defaulting to 1000 [ 618.570441][ T53] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.582535][ T53] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.595433][ T53] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.607296][ T53] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.657587][T29159] Cannot find add_set index 0 as target [ 618.726691][T29164] program syz.2.7820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.805832][T29167] lo speed is unknown, defaulting to 1000 [ 618.849037][T29169] loop2: detected capacity change from 0 to 1024 [ 618.890256][T29169] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7821: bad orphan inode 134217728 [ 618.925579][T29169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.079588][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 619.086280][ T4020] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 619.171952][T29176] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7824: bg 0: block 248: padding at end of block bitmap is not set [ 619.194669][T29176] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7824: Failed to acquire dquot type 1 [ 619.209790][T29176] EXT4-fs (loop5): 1 truncate cleaned up [ 619.216036][T29176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.234479][T29176] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.247502][T29162] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7819: bg 0: block 248: padding at end of block bitmap is not set [ 619.265514][T29176] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7824: Failed to acquire dquot type 1 [ 619.317835][T29162] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7819: Failed to acquire dquot type 1 [ 619.338670][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.357927][T29162] EXT4-fs (loop6): 1 truncate cleaned up [ 619.384673][T29162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.404915][T29162] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.415531][T29190] lo speed is unknown, defaulting to 1000 [ 619.430997][T29162] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7819: Failed to acquire dquot type 1 [ 619.470753][T29191] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7827: bad orphan inode 134217728 [ 619.482144][T29191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.660735][T29186] set_capacity_and_notify: 3 callbacks suppressed [ 619.660766][T29186] loop1: detected capacity change from 0 to 32768 [ 619.719352][T29196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.733737][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.743305][T29186] loop1: p1 p3 < p5 p6 > [ 619.747660][T29186] loop1: partition table partially beyond EOD, truncated [ 619.772370][T29196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.809241][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.832103][T29202] Cannot find add_set index 0 as target [ 619.841805][T29196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.848435][ T3010] loop1: p1 p3 < p5 p6 > [ 619.856387][ T3010] loop1: partition table partially beyond EOD, truncated [ 619.865189][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.915654][T29204] loop5: detected capacity change from 0 to 1024 [ 619.924207][T29196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.934474][T29204] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 619.962854][T29204] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 619.995363][T29204] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 620.019699][T29204] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 620.019699][T29204] [ 620.030606][T29204] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 620.043255][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 620.046487][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 620.070472][T29204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 620.108765][T29204] netlink: 'syz.5.7831': attribute type 1 has an invalid length. [ 620.116924][T29213] loop2: detected capacity change from 0 to 1024 [ 620.127363][T29213] EXT4-fs: inline encryption not supported [ 620.133341][T29213] EXT4-fs: Ignoring removed orlov option [ 620.139694][T29213] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 620.140780][T29204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.157708][ T2202] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.172164][T29215] bond1: (slave veth0_to_bond): making interface the new active one [ 620.181913][T29213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.181977][T29215] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 620.210202][ T2202] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.227677][ T2202] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.243859][ T2202] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.252544][T29204] bond1: entered promiscuous mode [ 620.257568][T29204] veth0_to_bond: entered promiscuous mode [ 620.263458][T29204] bond1: entered allmulticast mode [ 620.268577][T29204] veth0_to_bond: entered allmulticast mode [ 620.309022][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.321285][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.491430][T29219] lo speed is unknown, defaulting to 1000 [ 620.498834][T29221] loop1: detected capacity change from 0 to 1024 [ 620.540528][T29221] EXT4-fs: inline encryption not supported [ 620.546599][T29221] EXT4-fs: Ignoring removed orlov option [ 620.644175][T29235] loop2: detected capacity change from 0 to 1024 [ 620.681644][T29221] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 620.720891][T29235] EXT4-fs: inline encryption not supported [ 620.721822][T29229] loop0: detected capacity change from 0 to 32768 [ 620.726782][T29235] EXT4-fs: Ignoring removed orlov option [ 620.804275][T29221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.840478][ T3595] loop0: p1 p3 < p5 p6 > [ 620.844857][ T3595] loop0: partition table partially beyond EOD, truncated [ 620.857920][T29235] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 620.971340][T29229] loop0: p1 p3 < p5 p6 > [ 620.975796][T29229] loop0: partition table partially beyond EOD, truncated [ 621.089635][T29235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.171921][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.335843][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.368455][T29251] loop1: detected capacity change from 0 to 1024 [ 621.429234][T29251] EXT4-fs: inline encryption not supported [ 621.435212][T29251] EXT4-fs: Ignoring removed orlov option [ 621.445517][T29251] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 621.455718][T29259] FAULT_INJECTION: forcing a failure. [ 621.455718][T29259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 621.469092][T29259] CPU: 1 UID: 0 PID: 29259 Comm: syz.2.7847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 621.469144][T29259] Tainted: [W]=WARN [ 621.469217][T29259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.469230][T29259] Call Trace: [ 621.469237][T29259] [ 621.469245][T29259] __dump_stack+0x1d/0x30 [ 621.469269][T29259] dump_stack_lvl+0x95/0xd0 [ 621.469290][T29259] dump_stack+0x15/0x1b [ 621.469310][T29259] should_fail_ex+0x265/0x280 [ 621.469380][T29259] should_fail_alloc_page+0xf2/0x100 [ 621.469403][T29259] __alloc_frozen_pages_noprof+0x109/0x360 [ 621.469437][T29259] alloc_pages_mpol+0xb3/0x260 [ 621.469529][T29259] folio_alloc_mpol_noprof+0x39/0x80 [ 621.469554][T29259] shmem_get_folio_gfp+0x3cf/0xd50 [ 621.469627][T29259] shmem_fault+0xf6/0x250 [ 621.469725][T29259] __do_fault+0xbc/0x200 [ 621.469743][T29259] handle_mm_fault+0xd9c/0x2c60 [ 621.469773][T29259] ? _raw_spin_lock+0x52/0xa0 [ 621.469795][T29259] ? __pte_offset_map_lock+0x1d9/0x240 [ 621.469899][T29259] __get_user_pages+0x1024/0x1ed0 [ 621.469975][T29259] faultin_page_range+0x107/0x4e0 [ 621.470057][T29259] madvise_do_behavior+0x1a0/0xa20 [ 621.470082][T29259] ? 0xffffffff81000000 [ 621.470095][T29259] ? __rcu_read_unlock+0x4f/0x70 [ 621.470201][T29259] do_madvise+0x10e/0x190 [ 621.470274][T29259] __x64_sys_madvise+0x64/0x80 [ 621.470294][T29259] x64_sys_call+0x1c6b/0x3000 [ 621.470314][T29259] do_syscall_64+0xca/0x2b0 [ 621.470360][T29259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.470383][T29259] RIP: 0033:0x7f3c8a54f749 [ 621.470400][T29259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.470419][T29259] RSP: 002b:00007f3c88faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 621.470464][T29259] RAX: ffffffffffffffda RBX: 00007f3c8a7a5fa0 RCX: 00007f3c8a54f749 [ 621.470481][T29259] RDX: 0000000000000017 RSI: 0000000000c00304 RDI: 0000200000000000 [ 621.470495][T29259] RBP: 00007f3c88faf090 R08: 0000000000000000 R09: 0000000000000000 [ 621.470508][T29259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.470519][T29259] R13: 00007f3c8a7a6038 R14: 00007f3c8a7a5fa0 R15: 00007ffefd1271b8 [ 621.470536][T29259] [ 621.705884][T29251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.742925][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.779605][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 621.779657][ T29] audit: type=1326 audit(1766466970.469:31687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 621.818055][ T29] audit: type=1326 audit(1766466970.499:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 621.818894][T29266] FAULT_INJECTION: forcing a failure. [ 621.818894][T29266] name failslab, interval 1, probability 0, space 0, times 0 [ 621.842381][ T29] audit: type=1326 audit(1766466970.499:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 621.854412][T29266] CPU: 1 UID: 0 PID: 29266 Comm: syz.5.7853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 621.854522][T29266] Tainted: [W]=WARN [ 621.854529][T29266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.854543][T29266] Call Trace: [ 621.854551][T29266] [ 621.854561][T29266] __dump_stack+0x1d/0x30 [ 621.854590][T29266] dump_stack_lvl+0x95/0xd0 [ 621.854611][T29266] dump_stack+0x15/0x1b [ 621.854677][T29266] should_fail_ex+0x265/0x280 [ 621.854700][T29266] should_failslab+0x8c/0xb0 [ 621.854723][T29266] __kmalloc_cache_noprof+0x65/0x4c0 [ 621.854748][T29266] ? alloc_mnt_ns+0x76/0x250 [ 621.854830][T29266] alloc_mnt_ns+0x76/0x250 [ 621.854876][T29266] __se_sys_fsmount+0x449/0x690 [ 621.854900][T29266] __x64_sys_fsmount+0x43/0x50 [ 621.854922][T29266] x64_sys_call+0x1d56/0x3000 [ 621.855018][T29266] do_syscall_64+0xca/0x2b0 [ 621.855052][T29266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.855075][T29266] RIP: 0033:0x7fb71939f749 [ 621.855114][T29266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.855132][T29266] RSP: 002b:00007fb717dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 621.855152][T29266] RAX: ffffffffffffffda RBX: 00007fb7195f5fa0 RCX: 00007fb71939f749 [ 621.855188][T29266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 621.855201][T29266] RBP: 00007fb717dff090 R08: 0000000000000000 R09: 0000000000000000 [ 621.855221][T29266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.855234][T29266] R13: 00007fb7195f6038 R14: 00007fb7195f5fa0 R15: 00007ffefca2ccd8 [ 621.855253][T29266] [ 622.047367][ T29] audit: type=1326 audit(1766466970.499:31690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 622.071022][ T29] audit: type=1326 audit(1766466970.499:31691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 622.079024][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7854'. [ 622.095123][ T29] audit: type=1326 audit(1766466970.499:31692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 622.095154][ T29] audit: type=1326 audit(1766466970.499:31693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb71939df90 code=0x7ffc0000 [ 622.151479][ T29] audit: type=1326 audit(1766466970.499:31694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb71939e1ff code=0x7ffc0000 [ 622.175154][ T29] audit: type=1326 audit(1766466970.499:31695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 622.199688][ T29] audit: type=1326 audit(1766466970.549:31696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29265 comm="syz.5.7853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb71939e15c code=0x7ffc0000 [ 622.224321][T29272] siw: device registration error -23 [ 622.244732][T29273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29273 comm=syz.5.7854 [ 622.298028][T29279] loop5: detected capacity change from 0 to 512 [ 622.310336][T29279] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 622.381135][T29279] EXT4-fs (loop5): 1 truncate cleaned up [ 622.387464][T29279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.427578][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.431265][T29287] lo speed is unknown, defaulting to 1000 [ 622.672676][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 622.686567][T29292] loop2: detected capacity change from 0 to 1024 [ 622.713895][T29292] EXT4-fs: inline encryption not supported [ 622.719865][T29292] EXT4-fs: Ignoring removed orlov option [ 622.727825][T29292] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 622.755249][T29293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7862'. [ 622.766488][T29292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.820232][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.312685][T29313] loop6: detected capacity change from 0 to 512 [ 623.331191][T29313] EXT4-fs (loop6): 1 orphan inode deleted [ 623.337346][T29313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.349613][T29313] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.704644][T29327] Cannot find add_set index 0 as target [ 623.819830][T29327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7874'. [ 623.882989][T29334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7877'. [ 623.923332][T29332] EXT4-fs: inline encryption not supported [ 623.929195][T29332] EXT4-fs: Ignoring removed orlov option [ 623.947062][T29332] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 623.960336][T29337] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 623.961605][T29332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.008363][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.165834][T29344] FAULT_INJECTION: forcing a failure. [ 624.165834][T29344] name failslab, interval 1, probability 0, space 0, times 0 [ 624.178623][T29344] CPU: 1 UID: 0 PID: 29344 Comm: syz.2.7879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 624.178656][T29344] Tainted: [W]=WARN [ 624.178663][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.178741][T29344] Call Trace: [ 624.178749][T29344] [ 624.178757][T29344] __dump_stack+0x1d/0x30 [ 624.178779][T29344] dump_stack_lvl+0x95/0xd0 [ 624.178815][T29344] dump_stack+0x15/0x1b [ 624.178832][T29344] should_fail_ex+0x265/0x280 [ 624.178916][T29344] should_failslab+0x8c/0xb0 [ 624.178938][T29344] __kmalloc_cache_noprof+0x65/0x4c0 [ 624.178960][T29344] ? audit_log_d_path+0x8d/0x150 [ 624.178987][T29344] audit_log_d_path+0x8d/0x150 [ 624.179020][T29344] audit_log_d_path_exe+0x42/0x70 [ 624.179052][T29344] audit_log_task+0x1e9/0x250 [ 624.179085][T29344] ? kstrtouint+0x76/0xc0 [ 624.179107][T29344] audit_seccomp+0x61/0x100 [ 624.179136][T29344] ? __seccomp_filter+0x832/0x1260 [ 624.179221][T29344] __seccomp_filter+0x843/0x1260 [ 624.179248][T29344] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 624.179366][T29344] ? vfs_write+0x7e8/0x960 [ 624.179387][T29344] ? __rcu_read_unlock+0x4f/0x70 [ 624.179408][T29344] ? __fget_files+0x184/0x1c0 [ 624.179439][T29344] __secure_computing+0x82/0x150 [ 624.179544][T29344] syscall_trace_enter+0xcf/0x1e0 [ 624.179564][T29344] do_syscall_64+0xa4/0x2b0 [ 624.179597][T29344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.179681][T29344] RIP: 0033:0x7f3c8a54f749 [ 624.179756][T29344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.179775][T29344] RSP: 002b:00007f3c88faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 624.179796][T29344] RAX: ffffffffffffffda RBX: 00007f3c8a7a5fa0 RCX: 00007f3c8a54f749 [ 624.179810][T29344] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000000 [ 624.179824][T29344] RBP: 00007f3c88faf090 R08: 0000000000000000 R09: 0000000000000000 [ 624.179838][T29344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.179911][T29344] R13: 00007f3c8a7a6038 R14: 00007f3c8a7a5fa0 R15: 00007ffefd1271b8 [ 624.179928][T29344] [ 624.402023][T29348] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7881'. [ 624.454750][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7881'. [ 624.476878][T29352] Cannot find add_set index 0 as target [ 624.484294][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7881'. [ 624.712241][T29365] set_capacity_and_notify: 2 callbacks suppressed [ 624.712258][T29365] loop1: detected capacity change from 0 to 1024 [ 624.740178][T29365] EXT4-fs: inline encryption not supported [ 624.746103][T29365] EXT4-fs: Ignoring removed orlov option [ 624.769498][ T4020] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.775822][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 624.799337][T29365] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 624.867354][T29371] loop2: detected capacity change from 0 to 1024 [ 624.878283][T29371] EXT4-fs: inline encryption not supported [ 624.884282][T29371] EXT4-fs: Ignoring removed orlov option [ 624.890340][T29371] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 625.005479][T29380] program syz.1.7891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.030434][T29383] netlink: 83 bytes leftover after parsing attributes in process `syz.6.7894'. [ 625.046819][T29385] loop5: detected capacity change from 0 to 512 [ 625.059542][T29385] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 625.069864][T29385] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7892: bg 0: block 255: padding at end of block bitmap is not set [ 625.086409][T29383] netlink: 'syz.6.7894': attribute type 1 has an invalid length. [ 625.094237][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7894'. [ 625.106282][T29385] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 625.116710][T29385] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7892: invalid indirect mapped block 1 (level 1) [ 625.138904][T29385] EXT4-fs (loop5): 1 truncate cleaned up [ 625.241156][T29404] sctp: [Deprecated]: syz.2.7903 (pid 29404) Use of int in max_burst socket option. [ 625.241156][T29404] Use struct sctp_assoc_value instead [ 625.264174][T29401] loop1: detected capacity change from 0 to 1024 [ 625.282361][T29401] EXT4-fs: inline encryption not supported [ 625.289506][T29401] EXT4-fs: Ignoring removed orlov option [ 625.297320][T29401] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 625.522092][T29412] IPv6: Can't replace route, no match found [ 625.651066][T29420] program syz.1.7907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.737696][T29424] loop1: detected capacity change from 0 to 512 [ 625.823818][T29424] EXT4-fs: inline encryption not supported [ 625.829816][T29424] EXT4-fs: Ignoring removed bh option [ 625.843213][T29424] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.026150][T29433] siw: device registration error -23 [ 626.066181][T29440] lo speed is unknown, defaulting to 1000 [ 626.127894][T29446] Cannot find add_set index 0 as target [ 626.138144][T29445] Cannot find add_set index 0 as target [ 626.152014][T29447] wireguard0: entered promiscuous mode [ 626.157752][T29447] wireguard0: entered allmulticast mode [ 626.170279][T29450] FAULT_INJECTION: forcing a failure. [ 626.170279][T29450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.183462][T29450] CPU: 1 UID: 0 PID: 29450 Comm: syz.2.7919 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 626.183548][T29450] Tainted: [W]=WARN [ 626.183554][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.183566][T29450] Call Trace: [ 626.183573][T29450] [ 626.183582][T29450] __dump_stack+0x1d/0x30 [ 626.183608][T29450] dump_stack_lvl+0x95/0xd0 [ 626.183692][T29450] dump_stack+0x15/0x1b [ 626.183713][T29450] should_fail_ex+0x265/0x280 [ 626.183735][T29450] should_fail+0xb/0x20 [ 626.183751][T29450] should_fail_usercopy+0x1a/0x20 [ 626.183771][T29450] _copy_from_iter+0xcf/0xe70 [ 626.183829][T29450] ? __alloc_skb+0x396/0x4b0 [ 626.183849][T29450] ? __alloc_skb+0x228/0x4b0 [ 626.183896][T29450] netlink_sendmsg+0x471/0x6b0 [ 626.183958][T29450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.184009][T29450] __sock_sendmsg+0x145/0x180 [ 626.184030][T29450] ____sys_sendmsg+0x31e/0x4a0 [ 626.184058][T29450] ___sys_sendmsg+0x17b/0x1d0 [ 626.184152][T29450] __x64_sys_sendmsg+0xd4/0x160 [ 626.184185][T29450] x64_sys_call+0x17ba/0x3000 [ 626.184289][T29450] do_syscall_64+0xca/0x2b0 [ 626.184322][T29450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.184342][T29450] RIP: 0033:0x7f3c8a54f749 [ 626.184431][T29450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.184447][T29450] RSP: 002b:00007f3c88faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.184464][T29450] RAX: ffffffffffffffda RBX: 00007f3c8a7a5fa0 RCX: 00007f3c8a54f749 [ 626.184475][T29450] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 626.184486][T29450] RBP: 00007f3c88faf090 R08: 0000000000000000 R09: 0000000000000000 [ 626.184499][T29450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.184513][T29450] R13: 00007f3c8a7a6038 R14: 00007f3c8a7a5fa0 R15: 00007ffefd1271b8 [ 626.184607][T29450] [ 626.430267][T29445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7917'. [ 626.463835][T29454] loop2: detected capacity change from 0 to 512 [ 626.507267][T29454] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.525757][T29454] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.7920: corrupted xattr block 33: invalid header [ 626.540342][T29454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 626.549419][T29454] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.7920: corrupted xattr block 33: invalid header [ 626.573461][T29446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7918'. [ 626.598715][T29454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 626.611294][T29454] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.7920: corrupted xattr block 33: invalid header [ 626.625224][T29454] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 626.715078][T29469] loop5: detected capacity change from 0 to 1024 [ 626.727614][T29469] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 626.739193][T29469] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 626.752567][T29469] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 626.763442][T29469] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 626.763442][T29469] [ 626.774986][T29469] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 626.911628][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 626.911649][ T29] audit: type=1326 audit(1766466975.599:32144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 626.951598][T29469] netlink: 'syz.5.7926': attribute type 1 has an invalid length. [ 626.978074][T29471] siw: device registration error -23 [ 627.003208][T29469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.014035][ T29] audit: type=1326 audit(1766466975.629:32145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.037819][ T29] audit: type=1326 audit(1766466975.629:32146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.061621][ T29] audit: type=1326 audit(1766466975.629:32147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.085418][ T29] audit: type=1326 audit(1766466975.629:32148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.109182][ T29] audit: type=1326 audit(1766466975.629:32149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.133133][ T29] audit: type=1326 audit(1766466975.629:32150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.156778][ T29] audit: type=1326 audit(1766466975.629:32151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.180463][ T29] audit: type=1326 audit(1766466975.629:32152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.204165][ T29] audit: type=1326 audit(1766466975.629:32153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29468 comm="syz.5.7926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 627.228242][T29481] bond1: (slave veth0_to_bond): Releasing active interface [ 627.235799][T29481] veth0_to_bond: left promiscuous mode [ 627.241422][T29481] veth0_to_bond: left allmulticast mode [ 627.253198][T29481] bond2: (slave veth0_to_bond): making interface the new active one [ 627.266550][T29481] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 627.278135][T29482] bond2: entered promiscuous mode [ 627.280136][T29490] IPv6: Can't replace route, no match found [ 627.283217][T29482] veth0_to_bond: entered promiscuous mode [ 627.294931][T29482] bond2: entered allmulticast mode [ 627.300105][T29482] veth0_to_bond: entered allmulticast mode [ 627.409268][T29495] smc: net device hsr0 applied user defined pnetid SYZ2 [ 627.410710][T29494] siw: device registration error -23 [ 627.421977][T29495] smc: net device hsr0 erased user defined pnetid SYZ2 [ 627.452246][T29498] loop5: detected capacity change from 0 to 1024 [ 627.459910][T29498] EXT4-fs: inline encryption not supported [ 627.465819][T29498] EXT4-fs: Ignoring removed orlov option [ 627.476906][T29498] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 627.548996][T29510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.557523][T29510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.572611][T29510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.580406][T29510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.617037][T29512] siw: device registration error -23 [ 627.621259][T29516] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 627.652244][T29516] netlink: 'syz.1.7939': attribute type 21 has an invalid length. [ 627.683928][T29518] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.741379][T29518] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.747161][T29515] Process accounting resumed [ 627.781403][T29518] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.807909][T29527] IPv6: Can't replace route, no match found [ 627.821905][T29518] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.990739][ T364] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.003801][ T364] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.016210][ T364] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.025053][ T364] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.596446][T29539] siw: device registration error -23 [ 628.938203][T29550] wireguard0: entered promiscuous mode [ 628.943808][T29550] wireguard0: entered allmulticast mode [ 629.721564][T29579] lo speed is unknown, defaulting to 1000 [ 629.736134][T29581] lo speed is unknown, defaulting to 1000 [ 629.799748][T29582] loop0: detected capacity change from 0 to 1024 [ 629.989778][T29582] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7962: bad orphan inode 134217728 [ 630.045833][T29594] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.157679][T29594] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.185145][T29599] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.242301][T29599] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.255617][T29594] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.271873][T29599] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.322188][T29594] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.372559][T29599] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.429629][ T1535] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.443506][ T2202] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.456161][ T2202] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.469223][ T2202] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.703877][T29626] lo speed is unknown, defaulting to 1000 [ 630.754802][T29627] loop6: detected capacity change from 0 to 1024 [ 630.781112][T29627] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7978: bad orphan inode 134217728 [ 631.586143][T29642] lo speed is unknown, defaulting to 1000 [ 631.622523][T29642] loop1: detected capacity change from 0 to 1024 [ 631.638762][T29642] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.7982: bad orphan inode 134217728 [ 631.695798][T29646] siw: device registration error -23 [ 631.879498][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 631.885748][ T4020] Bluetooth: hci0: command 0x1003 tx timeout [ 631.895058][T29657] loop0: detected capacity change from 0 to 128 [ 631.901941][T29657] EXT4-fs: test_dummy_encryption option not supported [ 631.907495][ T3595] udevd[3595]: incorrect ext4 checksum on /dev/loop0 [ 632.050582][T29660] siw: device registration error -23 [ 632.105775][T29668] loop1: detected capacity change from 0 to 1024 [ 632.112810][T29668] EXT4-fs: Ignoring removed orlov option [ 632.222138][T29672] lo speed is unknown, defaulting to 1000 [ 632.267401][T29672] loop6: detected capacity change from 0 to 1024 [ 632.281034][T29672] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7993: bad orphan inode 134217728 [ 632.386023][T22718] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.405830][T22718] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.449209][T22718] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.460266][T22718] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.495619][T29682] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 632.611327][T29692] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 632.690378][T29698] siw: device registration error -23 [ 632.713830][T29700] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 632.808174][T29699] Process accounting resumed [ 633.879359][T29712] loop5: detected capacity change from 0 to 1024 [ 633.891394][T29712] EXT4-fs: Ignoring removed orlov option [ 634.058272][T29715] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 634.247006][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 634.247022][ T29] audit: type=1326 audit(1766466982.929:32336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.277297][ T29] audit: type=1326 audit(1766466982.929:32337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.301078][ T29] audit: type=1326 audit(1766466982.929:32338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.324891][ T29] audit: type=1326 audit(1766466982.929:32339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.348602][ T29] audit: type=1326 audit(1766466982.929:32340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.372528][ T29] audit: type=1326 audit(1766466982.929:32341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.396591][ T29] audit: type=1326 audit(1766466982.929:32342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.420737][ T29] audit: type=1326 audit(1766466982.929:32343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.444395][ T29] audit: type=1326 audit(1766466982.939:32344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.468278][ T29] audit: type=1326 audit(1766466982.939:32345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29718 comm="syz.6.8011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 634.592182][T29741] siw: device registration error -23 [ 634.670951][T29735] loop5: detected capacity change from 0 to 512 [ 634.681877][T29746] sctp: [Deprecated]: syz.2.8022 (pid 29746) Use of int in max_burst socket option. [ 634.681877][T29746] Use struct sctp_assoc_value instead [ 634.698532][T29735] EXT4-fs (loop5): 1 orphan inode deleted [ 634.708054][T29735] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.743961][T29750] loop1: detected capacity change from 0 to 1024 [ 634.752953][T29752] Cannot find add_set index 0 as target [ 634.775440][T29750] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 634.833015][T29750] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 634.894002][T29750] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 634.911354][T29750] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 634.911354][T29750] [ 634.922117][T29750] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 635.076338][T29764] netlink: 'syz.1.8021': attribute type 1 has an invalid length. [ 635.136089][T29764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 635.203885][T29750] bond3: (slave veth0_to_bond): making interface the new active one [ 635.311838][T29750] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 635.323641][T29761] bond3: entered promiscuous mode [ 635.328703][T29761] veth0_to_bond: entered promiscuous mode [ 635.334572][T29761] bond3: entered allmulticast mode [ 635.339818][T29761] veth0_to_bond: entered allmulticast mode [ 635.430775][T29776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.476749][T29780] siw: device registration error -23 [ 635.482516][T29781] loop5: detected capacity change from 0 to 256 [ 635.493259][T29776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.523370][T29781] __nla_validate_parse: 1 callbacks suppressed [ 635.523387][T29781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8032'. [ 635.592588][T29786] sctp: [Deprecated]: syz.6.8035 (pid 29786) Use of int in max_burst socket option. [ 635.592588][T29786] Use struct sctp_assoc_value instead [ 635.696790][T29776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.716582][T29791] IPv6: Can't replace route, no match found [ 635.752665][T29776] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.912516][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.930384][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.950244][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.967183][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.064792][T29802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 636.097414][T29802] netlink: 'syz.1.8040': attribute type 21 has an invalid length. [ 636.209073][T29805] IPv6: Can't replace route, no match found [ 636.217222][T29801] Process accounting resumed [ 636.537621][T29814] loop2: detected capacity change from 0 to 512 [ 636.558595][T29823] IPv6: Can't replace route, no match found [ 636.559085][T22718] Bluetooth: hci0: Frame reassembly failed (-84) [ 636.606470][T29814] EXT4-fs (loop2): 1 orphan inode deleted [ 636.637324][T29814] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.703975][T29837] sctp: [Deprecated]: syz.6.8054 (pid 29837) Use of int in max_burst socket option. [ 636.703975][T29837] Use struct sctp_assoc_value instead [ 637.370504][T29858] loop0: detected capacity change from 0 to 1024 [ 637.377955][T29858] EXT4-fs: inline encryption not supported [ 637.384111][T29858] EXT4-fs: Ignoring removed orlov option [ 637.391328][T29858] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 637.394911][T29860] lo speed is unknown, defaulting to 1000 [ 637.468840][T29860] loop2: detected capacity change from 0 to 1024 [ 637.479067][T29860] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8063: bad orphan inode 134217728 [ 638.321230][T29883] loop1: detected capacity change from 0 to 128 [ 638.341619][T29883] EXT4-fs: test_dummy_encryption option not supported [ 638.361675][ T3595] udevd[3595]: incorrect ext4 checksum on /dev/loop1 [ 638.619947][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 638.973689][T29895] loop1: detected capacity change from 0 to 1024 [ 638.994245][T29895] EXT4-fs: inline encryption not supported [ 639.000191][T29895] EXT4-fs: Ignoring removed orlov option [ 639.029985][T29895] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 639.068779][T14877] Bluetooth: hci0: Frame reassembly failed (-84) [ 639.103745][T29913] loop6: detected capacity change from 0 to 1024 [ 639.146611][T29913] EXT4-fs: Ignoring removed orlov option [ 639.214464][T29901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8078'. [ 639.223553][T29901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8078'. [ 639.257327][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 639.257340][ T29] audit: type=1326 audit(1766466987.939:32712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.287851][T29901] loop0: detected capacity change from 0 to 512 [ 639.293257][T29924] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 639.297164][ T29] audit: type=1326 audit(1766466987.979:32713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.327263][ T29] audit: type=1326 audit(1766466987.979:32714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.351294][ T29] audit: type=1326 audit(1766466987.979:32715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.375472][ T29] audit: type=1326 audit(1766466987.979:32716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.399057][ T29] audit: type=1326 audit(1766466987.979:32717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.423254][ T29] audit: type=1326 audit(1766466987.979:32718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.447313][ T29] audit: type=1326 audit(1766466987.979:32719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.469976][T29901] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.8078: bg 0: block 248: padding at end of block bitmap is not set [ 639.471609][ T29] audit: type=1326 audit(1766466987.979:32720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.510105][ T29] audit: type=1326 audit(1766466987.979:32721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29912 comm="syz.6.8083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 639.512213][T29901] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8078: Failed to acquire dquot type 1 [ 639.546559][T29928] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 639.555664][T29901] EXT4-fs (loop0): 1 truncate cleaned up [ 639.569393][T29928] netlink: 'syz.2.8087': attribute type 21 has an invalid length. [ 639.585544][T29901] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.609358][T29934] IPv6: Can't replace route, no match found [ 639.616679][T29901] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8078: Failed to acquire dquot type 1 [ 639.642788][T29926] Process accounting resumed [ 639.698117][T29940] FAULT_INJECTION: forcing a failure. [ 639.698117][T29940] name failslab, interval 1, probability 0, space 0, times 0 [ 639.711236][T29940] CPU: 1 UID: 0 PID: 29940 Comm: syz.6.8091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 639.711302][T29940] Tainted: [W]=WARN [ 639.711310][T29940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.711321][T29940] Call Trace: [ 639.711329][T29940] [ 639.711338][T29940] __dump_stack+0x1d/0x30 [ 639.711363][T29940] dump_stack_lvl+0x95/0xd0 [ 639.711390][T29940] dump_stack+0x15/0x1b [ 639.711407][T29940] should_fail_ex+0x265/0x280 [ 639.711427][T29940] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 639.711452][T29940] should_failslab+0x8c/0xb0 [ 639.711472][T29940] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 639.711549][T29940] ? shmem_alloc_inode+0x34/0x50 [ 639.711572][T29940] ? kstrtouint_from_user+0x9f/0xf0 [ 639.711592][T29940] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 639.711619][T29940] shmem_alloc_inode+0x34/0x50 [ 639.711728][T29940] alloc_inode+0x40/0x170 [ 639.711748][T29940] new_inode+0x1d/0xe0 [ 639.711770][T29940] shmem_get_inode+0x246/0x750 [ 639.711845][T29940] __shmem_file_setup+0x113/0x210 [ 639.711870][T29940] shmem_file_setup+0x3b/0x50 [ 639.711922][T29940] __se_sys_memfd_create+0x2f7/0x6b0 [ 639.711955][T29940] __x64_sys_memfd_create+0x31/0x40 [ 639.712059][T29940] x64_sys_call+0x28cb/0x3000 [ 639.712080][T29940] do_syscall_64+0xca/0x2b0 [ 639.712185][T29940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.712235][T29940] RIP: 0033:0x7f1d7212f749 [ 639.712252][T29940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.712271][T29940] RSP: 002b:00007f1d70b96d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 639.712294][T29940] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f1d7212f749 [ 639.712306][T29940] RDX: 00007f1d70b96dec RSI: 0000000000000000 RDI: 00007f1d721b4960 [ 639.712318][T29940] RBP: 0000200000000000 R08: 00007f1d70b96b07 R09: 0000000000000000 [ 639.712330][T29940] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 639.712410][T29940] R13: 00007f1d70b96dec R14: 00007f1d70b96df0 R15: 00007ffc2ace0cb8 [ 639.712430][T29940] [ 639.720330][T29943] siw: device registration error -23 [ 639.953562][T29952] loop6: detected capacity change from 0 to 1024 [ 639.961721][T29952] EXT4-fs: inline encryption not supported [ 639.967649][T29952] EXT4-fs: Ignoring removed orlov option [ 639.994631][T29952] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 640.057986][T29952] EXT4-fs mount: 45 callbacks suppressed [ 640.058003][T29952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.113333][T29970] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 640.113925][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.263418][T29987] loop0: detected capacity change from 0 to 1024 [ 640.271355][T29987] EXT4-fs: inline encryption not supported [ 640.277403][T29987] EXT4-fs: Ignoring removed orlov option [ 640.291577][T29987] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 640.312423][T29987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.376302][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.416542][T30000] EXT4-fs: inline encryption not supported [ 640.423130][T30000] EXT4-fs: Ignoring removed orlov option [ 640.433394][T30000] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 640.447420][T30002] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 640.462783][T30000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.519957][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.879604][T30031] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 640.958522][T30037] ..@ÿ: renamed from bond_slave_0 (while UP) [ 640.995536][T30037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8133'. [ 641.004625][T30037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8133'. [ 641.013616][T30037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8133'. [ 641.038724][T30042] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 641.050195][T30042] netlink: 'syz.2.8134': attribute type 21 has an invalid length. [ 641.089507][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 641.095580][ T4020] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 641.158338][T30046] set_capacity_and_notify: 1 callbacks suppressed [ 641.158432][T30046] loop5: detected capacity change from 0 to 1764 [ 641.184135][T30041] Process accounting resumed [ 641.210734][T30049] FAULT_INJECTION: forcing a failure. [ 641.210734][T30049] name failslab, interval 1, probability 0, space 0, times 0 [ 641.223422][T30049] CPU: 0 UID: 0 PID: 30049 Comm: syz.5.8137 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 641.223456][T30049] Tainted: [W]=WARN [ 641.223463][T30049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.223475][T30049] Call Trace: [ 641.223484][T30049] [ 641.223494][T30049] __dump_stack+0x1d/0x30 [ 641.223528][T30049] dump_stack_lvl+0x95/0xd0 [ 641.223574][T30049] dump_stack+0x15/0x1b [ 641.223590][T30049] should_fail_ex+0x265/0x280 [ 641.223612][T30049] should_failslab+0x8c/0xb0 [ 641.223721][T30049] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 641.223746][T30049] ? __d_alloc+0x37/0x340 [ 641.223800][T30049] __d_alloc+0x37/0x340 [ 641.223820][T30049] ? selinux_inode_permission+0x6be/0x7c0 [ 641.223847][T30049] d_alloc_parallel+0x54/0xcd0 [ 641.223891][T30049] ? security_inode_permission+0x4a/0xb0 [ 641.223912][T30049] ? lockref_get_not_dead+0x120/0x1c0 [ 641.223962][T30049] ? __rcu_read_unlock+0x4f/0x70 [ 641.223981][T30049] __lookup_slow+0x8c/0x250 [ 641.224052][T30049] lookup_slow+0x3c/0x60 [ 641.224079][T30049] path_lookupat+0x2f7/0x500 [ 641.224109][T30049] ? _parse_integer+0x27/0x40 [ 641.224131][T30049] filename_lookup+0x147/0x340 [ 641.224158][T30049] user_path_at+0x3e/0x130 [ 641.224182][T30049] __se_sys_inotify_add_watch+0x102/0x7b0 [ 641.224279][T30049] ? mutex_unlock+0x4f/0x90 [ 641.224332][T30049] ? fput+0x8f/0xc0 [ 641.224406][T30049] ? ksys_write+0x192/0x1a0 [ 641.224427][T30049] __x64_sys_inotify_add_watch+0x43/0x50 [ 641.224455][T30049] x64_sys_call+0xa6d/0x3000 [ 641.224534][T30049] do_syscall_64+0xca/0x2b0 [ 641.224565][T30049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.224589][T30049] RIP: 0033:0x7fb71939f749 [ 641.224606][T30049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.224623][T30049] RSP: 002b:00007fb717dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 641.224715][T30049] RAX: ffffffffffffffda RBX: 00007fb7195f5fa0 RCX: 00007fb71939f749 [ 641.224729][T30049] RDX: 0000000080000630 RSI: 0000200000000200 RDI: 0000000000000006 [ 641.224744][T30049] RBP: 00007fb717dff090 R08: 0000000000000000 R09: 0000000000000000 [ 641.224800][T30049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.224816][T30049] R13: 00007fb7195f6038 R14: 00007fb7195f5fa0 R15: 00007ffefca2ccd8 [ 641.224835][T30049] [ 641.475098][T30051] loop0: detected capacity change from 0 to 512 [ 641.924001][T30060] netlink: 'syz.5.8141': attribute type 5 has an invalid length. [ 641.950858][T30062] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 642.034716][T30068] loop5: detected capacity change from 0 to 1024 [ 642.050633][T30068] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 642.065545][T30068] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.082886][T30068] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 642.092756][T30068] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 642.092756][T30068] [ 642.103500][T30068] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 642.105030][T30071] Cannot find add_set index 0 as target [ 642.120324][T30068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.137955][T30068] netlink: 'syz.5.8144': attribute type 1 has an invalid length. [ 642.155162][T30068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.172816][T30068] bond2: (slave veth0_to_bond): Releasing active interface [ 642.180160][T30068] veth0_to_bond: left promiscuous mode [ 642.185724][T30068] veth0_to_bond: left allmulticast mode [ 642.194112][T30068] bond3: (slave veth0_to_bond): making interface the new active one [ 642.204893][T30068] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 642.226032][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.274193][T30075] lo speed is unknown, defaulting to 1000 [ 642.318303][T30075] loop5: detected capacity change from 0 to 1024 [ 642.349971][T30075] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.8147: bad orphan inode 134217728 [ 642.370971][T30075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.505430][T30088] sctp: [Deprecated]: syz.0.8150 (pid 30088) Use of int in max_burst socket option. [ 642.505430][T30088] Use struct sctp_assoc_value instead [ 642.532864][T30092] loop1: detected capacity change from 0 to 128 [ 642.539671][T30092] EXT4-fs: test_dummy_encryption option not supported [ 643.166143][T30103] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 643.191554][T30105] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 643.202405][T30106] FAULT_INJECTION: forcing a failure. [ 643.202405][T30106] name failslab, interval 1, probability 0, space 0, times 0 [ 643.202437][T30106] CPU: 0 UID: 0 PID: 30106 Comm: syz.1.8154 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.202537][T30106] Tainted: [W]=WARN [ 643.202545][T30106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.202558][T30106] Call Trace: [ 643.202565][T30106] [ 643.202573][T30106] __dump_stack+0x1d/0x30 [ 643.202608][T30106] dump_stack_lvl+0x95/0xd0 [ 643.202676][T30106] dump_stack+0x15/0x1b [ 643.202697][T30106] should_fail_ex+0x265/0x280 [ 643.202790][T30106] should_failslab+0x8c/0xb0 [ 643.202845][T30106] __kmalloc_noprof+0xb9/0x5a0 [ 643.202879][T30106] ? security_sk_alloc+0x52/0x120 [ 643.202905][T30106] security_sk_alloc+0x52/0x120 [ 643.202926][T30106] sk_prot_alloc+0xc2/0x190 [ 643.203002][T30106] sk_alloc+0x34/0x3d0 [ 643.203028][T30106] unix_create1+0xa5/0x400 [ 643.203058][T30106] unix_stream_connect+0x196/0xa00 [ 643.203105][T30106] ? selinux_netlbl_socket_connect+0x114/0x130 [ 643.203131][T30106] ? selinux_socket_connect+0x57/0x70 [ 643.203154][T30106] ? __pfx_unix_stream_connect+0x10/0x10 [ 643.203241][T30106] __sys_connect+0x1f2/0x2b0 [ 643.203315][T30106] __x64_sys_connect+0x3f/0x50 [ 643.203375][T30106] x64_sys_call+0x2e09/0x3000 [ 643.203460][T30106] do_syscall_64+0xca/0x2b0 [ 643.203493][T30106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.203520][T30106] RIP: 0033:0x7f72adcef749 [ 643.203536][T30106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.203553][T30106] RSP: 002b:00007f72ac736038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 643.203639][T30106] RAX: ffffffffffffffda RBX: 00007f72adf46090 RCX: 00007f72adcef749 [ 643.203653][T30106] RDX: 000000000000006e RSI: 0000200000000200 RDI: 0000000000000006 [ 643.203666][T30106] RBP: 00007f72ac736090 R08: 0000000000000000 R09: 0000000000000000 [ 643.203679][T30106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.203692][T30106] R13: 00007f72adf46128 R14: 00007f72adf46090 R15: 00007ffd16336fc8 [ 643.203710][T30106] [ 643.257055][T30105] netlink: 'syz.2.8156': attribute type 21 has an invalid length. [ 643.270192][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.398818][T30104] Process accounting resumed [ 643.483086][T30117] lo speed is unknown, defaulting to 1000 [ 643.513736][T30116] loop6: detected capacity change from 0 to 1024 [ 643.535188][T30120] loop2: detected capacity change from 0 to 1024 [ 643.601519][T30116] EXT4-fs: inline encryption not supported [ 643.601542][T30116] EXT4-fs: Ignoring removed orlov option [ 643.601949][T30116] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 643.625692][T30116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.640040][T30120] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8160: bad orphan inode 134217728 [ 643.668592][T30120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.682559][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.718268][T30130] loop6: detected capacity change from 0 to 1024 [ 643.727351][T30130] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 643.727503][T30130] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 643.744859][T30130] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 643.744996][T30130] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 643.744996][T30130] [ 643.745012][T30130] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 643.745525][T30130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.751077][T30130] netlink: 'syz.6.8164': attribute type 1 has an invalid length. [ 643.814411][T30130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.834227][T30130] bond1: entered promiscuous mode [ 643.834245][T30130] bond1: entered allmulticast mode [ 643.888209][T30134] loop0: detected capacity change from 0 to 1024 [ 643.895452][T30134] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 643.895506][T30134] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 643.905738][T30134] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 643.905930][T30134] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 643.905930][T30134] [ 643.905946][T30134] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 643.906404][T30134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 643.912370][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.917159][T30134] netlink: 'syz.0.8165': attribute type 1 has an invalid length. [ 643.923097][T30134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.959397][T30134] bond1: (slave veth0_to_bond): making interface the new active one [ 643.960663][T30134] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 643.962993][T30139] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 643.990600][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.132784][T30146] loop0: detected capacity change from 0 to 1024 [ 644.133611][T30144] lo speed is unknown, defaulting to 1000 [ 644.150325][T30146] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 644.161292][T30146] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 644.178998][T30146] JBD2: no valid journal superblock found [ 644.184792][T30146] EXT4-fs (loop0): Could not load journal inode [ 644.240183][T30148] lo speed is unknown, defaulting to 1000 [ 644.274057][T30146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=30146 comm=syz.0.8167 [ 644.303257][T30148] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.8170: bad orphan inode 134217728 [ 644.320938][T30148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.334939][T30144] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.8169: bad orphan inode 134217728 [ 644.356088][T30144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.370859][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.381244][T30146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.395338][T30146] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.406470][T30146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.610193][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.643507][T30166] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 644.661881][T30166] EXT4-fs (loop5): 1 truncate cleaned up [ 644.673324][T30166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.696923][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 644.696939][ T29] audit: type=1400 audit(1766466993.379:33101): avc: denied { audit_read } for pid=30165 comm="syz.5.8175" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 644.789196][T30173] wireguard0: entered promiscuous mode [ 644.794730][T30173] wireguard0: entered allmulticast mode [ 644.832047][ T29] audit: type=1400 audit(1766466993.519:33102): avc: denied { read } for pid=30165 comm="syz.5.8175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 644.871663][T30178] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 644.884872][T30178] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 644.899759][T30178] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 644.971775][T30178] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 644.971775][T30178] [ 644.982607][T30178] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 644.992348][T30178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 645.001557][ T29] audit: type=1326 audit(1766466993.689:33103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.6.8178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7212f749 code=0x7ffc0000 [ 645.035476][T30178] netlink: 'syz.0.8176': attribute type 1 has an invalid length. [ 645.044491][ T29] audit: type=1326 audit(1766466993.689:33104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.082781][ T29] audit: type=1326 audit(1766466993.689:33105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.107065][ T29] audit: type=1326 audit(1766466993.689:33106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.112153][T30178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.131962][ T29] audit: type=1326 audit(1766466993.689:33107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.162657][T30182] EXT4-fs (loop2): 1 orphan inode deleted [ 645.168916][T30182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.187981][ T29] audit: type=1326 audit(1766466993.719:33108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.211746][ T29] audit: type=1326 audit(1766466993.719:33109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.235455][ T29] audit: type=1326 audit(1766466993.719:33110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30177 comm="syz.0.8176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c68a2f749 code=0x7ffc0000 [ 645.259371][T30186] bond2: entered promiscuous mode [ 645.264596][T30186] bond2: entered allmulticast mode [ 645.270033][T30182] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.298712][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.339718][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.440236][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.521806][T30206] IPv6: Can't replace route, no match found [ 645.564442][T30208] lo speed is unknown, defaulting to 1000 [ 645.590978][T30211] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 645.604980][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.615440][T30208] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.8185: bad orphan inode 134217728 [ 645.646597][T30208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.666470][T30216] EXT4-fs: test_dummy_encryption option not supported [ 645.667982][T30214] sctp: [Deprecated]: syz.2.8187 (pid 30214) Use of int in max_burst socket option. [ 645.667982][T30214] Use struct sctp_assoc_value instead [ 645.690116][ T3595] udevd[3595]: incorrect ext4 checksum on /dev/loop1 [ 645.835532][T30219] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 645.849689][T30219] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 645.898575][T30224] lo speed is unknown, defaulting to 1000 [ 646.293132][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.307508][T30219] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 646.310718][T30228] set_capacity_and_notify: 9 callbacks suppressed [ 646.310734][T30228] loop6: detected capacity change from 0 to 1024 [ 646.315663][T30219] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 646.315663][T30219] [ 646.338930][T30219] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 646.361196][T30228] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.8191: bad orphan inode 134217728 [ 646.373571][T30228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.395086][T30219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 646.416547][T30219] netlink: 'syz.1.8189': attribute type 1 has an invalid length. [ 646.445851][T30219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.487033][T30219] bond4: entered promiscuous mode [ 646.492136][T30219] bond4: entered allmulticast mode [ 646.614805][T30246] siw: device registration error -23 [ 646.641767][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.697196][T30254] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 646.789279][T30256] Cannot find add_set index 0 as target [ 646.866991][T28087] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.878183][T30252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8197'. [ 646.912152][T30252] loop1: detected capacity change from 0 to 512 [ 646.946076][T30252] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8197: bg 0: block 248: padding at end of block bitmap is not set [ 646.970987][T30252] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8197: Failed to acquire dquot type 1 [ 646.994090][T30252] EXT4-fs (loop1): 1 truncate cleaned up [ 647.000717][T30252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.013464][T30252] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.018681][T30270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.031321][T30252] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8197: Failed to acquire dquot type 1 [ 647.063221][T30270] ..@ÿ: entered promiscuous mode [ 647.068443][T30270] bond_slave_1: entered promiscuous mode [ 647.105393][T30270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.127133][T30270] bond3: (slave macvlan2): making interface the new active one [ 647.138337][T30270] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 647.153458][T30273] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 647.166287][T30270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8204'. [ 647.179893][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.354949][T30289] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8210'. [ 647.634859][T30304] siw: device registration error -23 [ 647.872531][T30306] loop5: detected capacity change from 0 to 512 [ 647.893946][T30306] EXT4-fs (loop5): 1 orphan inode deleted [ 647.910021][T30306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.923059][T30306] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.097457][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.141372][T30326] loop1: detected capacity change from 0 to 128 [ 648.148256][T30326] EXT4-fs: test_dummy_encryption option not supported [ 648.157858][ T3595] udevd[3595]: incorrect ext4 checksum on /dev/loop1 [ 648.326928][T30333] siw: device registration error -23 [ 648.331131][T30334] siw: device registration error -23 [ 648.356221][T30338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 648.930813][T30371] lo speed is unknown, defaulting to 1000 [ 648.955580][T30374] loop1: detected capacity change from 0 to 1024 [ 648.990209][T30376] siw: device registration error -23 [ 649.025976][T30374] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.8238: bad orphan inode 134217728 [ 649.059832][T30374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.069204][T30381] lo speed is unknown, defaulting to 1000 [ 649.101443][T30383] siw: device registration error -23 [ 649.129926][T30384] loop5: detected capacity change from 0 to 1024 [ 649.156953][T30384] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.8242: bad orphan inode 134217728 [ 649.168300][T30384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.337617][T30389] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.8242: corrupted in-inode xattr: bad e_name length [ 649.553912][T30396] loop6: detected capacity change from 0 to 256 [ 649.560464][T30386] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 649.568824][T30386] ref_ctr decrement failed for inode: 0x9e1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119951b00 [ 649.592414][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8247'. [ 649.601965][T30386] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 649.610359][T30386] ref_ctr decrement failed for inode: 0x9e1 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119951b00 [ 649.645002][T30386] uprobe: syz.2.8244:30386 failed to unregister, leaking uprobe [ 649.755268][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.811273][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.898292][T30407] lo speed is unknown, defaulting to 1000 [ 649.931829][T30407] loop0: detected capacity change from 0 to 1024 [ 649.986279][T30410] loop5: detected capacity change from 0 to 1024 [ 649.994144][T30410] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 650.004746][T30410] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 650.013395][T30407] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.8251: bad orphan inode 134217728 [ 650.026534][T30410] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 650.034901][T30410] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 650.034901][T30410] [ 650.045748][T30410] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 650.055405][T30410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 650.055466][T30407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.069812][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 650.069826][ T29] audit: type=1326 audit(1766466998.759:33426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.116543][ T29] audit: type=1326 audit(1766466998.799:33427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.140272][ T29] audit: type=1326 audit(1766466998.799:33428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.163928][ T29] audit: type=1326 audit(1766466998.799:33429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.194009][ T29] audit: type=1326 audit(1766466998.879:33430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.209330][T30410] netlink: 'syz.5.8252': attribute type 1 has an invalid length. [ 650.218471][ T29] audit: type=1326 audit(1766466998.879:33431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.255729][T30416] loop1: detected capacity change from 0 to 1024 [ 650.274889][T30410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.278170][ T29] audit: type=1326 audit(1766466998.879:33432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.305705][ T29] audit: type=1326 audit(1766466998.879:33433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.329294][ T29] audit: type=1326 audit(1766466998.879:33434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.352812][ T29] audit: type=1326 audit(1766466998.879:33435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.5.8252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71939f749 code=0x7ffc0000 [ 650.378596][T30419] bond4: entered promiscuous mode [ 650.384054][T30419] bond4: entered allmulticast mode [ 650.396715][T30416] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.8253: bad orphan inode 134217728 [ 650.420882][T30416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.438925][T30414] lo speed is unknown, defaulting to 1000 [ 650.449958][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.544368][T30433] Cannot find add_set index 0 as target [ 650.756075][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.805311][T30442] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 650.826990][T30442] netlink: 'syz.0.8261': attribute type 21 has an invalid length. [ 650.881284][T30442] Process accounting resumed [ 650.930010][T30452] IPv6: Can't replace route, no match found [ 651.012570][T30455] EXT4-fs: Ignoring removed orlov option [ 651.038672][T30456] sctp: [Deprecated]: syz.0.8265 (pid 30456) Use of int in max_burst socket option. [ 651.038672][T30456] Use struct sctp_assoc_value instead [ 651.055329][T30455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.178899][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.621209][T30470] set_capacity_and_notify: 1 callbacks suppressed [ 651.621287][T30470] loop5: detected capacity change from 0 to 1024 [ 651.640684][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.652207][T30470] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 651.662037][T30470] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 651.684562][T30470] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 651.684632][T30469] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.694050][T30470] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 651.694050][T30470] [ 651.714120][T30470] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 651.743276][T30470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.768299][T30470] netlink: 'syz.5.8266': attribute type 1 has an invalid length. [ 651.778211][T30469] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.802368][T30470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.813711][T30470] bond5: entered promiscuous mode [ 651.818775][T30470] bond5: entered allmulticast mode [ 651.848506][T30469] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.880436][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.896239][T30474] lo speed is unknown, defaulting to 1000 [ 651.935012][T30469] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.950980][T30480] lo speed is unknown, defaulting to 1000 [ 652.017764][T30487] loop2: detected capacity change from 0 to 1024 [ 652.027099][T30491] loop5: detected capacity change from 0 to 1024 [ 652.034714][T30491] EXT4-fs: inline encryption not supported [ 652.041062][T30491] EXT4-fs: Ignoring removed orlov option [ 652.051513][T30491] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 652.070239][T30487] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.8271: bad orphan inode 134217728 [ 652.081070][T30491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.098868][T24328] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.105813][T30487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.107261][T24328] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.133858][T24328] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.150463][T24328] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.168804][T30493] lo speed is unknown, defaulting to 1000 [ 652.196625][T30497] loop0: detected capacity change from 0 to 1024 [ 652.208992][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.222843][T30497] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.8275: bad orphan inode 134217728 [ 652.242709][T30497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.625973][T30516] loop1: detected capacity change from 0 to 1024 [ 652.743198][T23069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.745506][T30516] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 652.763544][T30516] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 652.901384][T30516] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 652.930457][T30516] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 652.930457][T30516] [ 652.941277][T30516] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 652.965070][T30516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.125808][T30516] bond3: (slave veth0_to_bond): Releasing active interface [ 653.184447][T30516] veth0_to_bond: left promiscuous mode [ 653.190125][T30516] veth0_to_bond: left allmulticast mode [ 653.195614][T30532] loop5: detected capacity change from 0 to 1024 [ 653.204617][T30532] EXT4-fs: inline encryption not supported [ 653.210630][T30532] EXT4-fs: Ignoring removed orlov option [ 653.216886][T30532] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 653.229632][T24571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.241675][T23231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.250849][T30532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.250952][T23231] ================================================================== [ 653.272291][T23231] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 653.279776][T23231] [ 653.282097][T23231] write to 0xffffffff868eb9d8 of 88 bytes by task 30532 on cpu 0: [ 653.289890][T23231] prb_reserve+0x6e6/0xad0 [ 653.294311][T23231] vprintk_store+0x53c/0x830 [ 653.298988][T23231] vprintk_emit+0x15a/0x5c0 [ 653.303532][T23231] vprintk_default+0x26/0x30 [ 653.308203][T23231] vprintk+0x1d/0x30 [ 653.312088][T23231] _printk+0x79/0xa0 [ 653.315980][T23231] __ext4_msg+0x18f/0x1a0 [ 653.320407][T23231] ext4_fill_super+0x2f8c/0x37a0 [ 653.325344][T23231] get_tree_bdev_flags+0x291/0x300 [ 653.330535][T23231] get_tree_bdev+0x1f/0x30 [ 653.335489][T23231] ext4_get_tree+0x1c/0x30 [ 653.339905][T23231] vfs_get_tree+0x57/0x1d0 [ 653.344318][T23231] do_new_mount+0x24d/0x6a0 [ 653.348844][T23231] path_mount+0x4ab/0xb80 [ 653.353176][T23231] __se_sys_mount+0x28c/0x2e0 [ 653.357849][T23231] __x64_sys_mount+0x67/0x80 [ 653.362434][T23231] x64_sys_call+0x2cca/0x3000 [ 653.367206][T23231] do_syscall_64+0xca/0x2b0 [ 653.371979][T23231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.377953][T23231] [ 653.380266][T23231] read to 0xffffffff868eb9d8 of 8 bytes by task 23231 on cpu 1: [ 653.387882][T23231] _prb_read_valid+0x1c4/0x920 [ 653.392663][T23231] prb_read_valid+0x3c/0x60 [ 653.397188][T23231] console_unlock+0x13c/0x270 [ 653.401866][T23231] vprintk_emit+0x39f/0x5c0 [ 653.406371][T23231] vprintk_default+0x26/0x30 [ 653.410958][T23231] vprintk+0x1d/0x30 [ 653.414842][T23231] _printk+0x79/0xa0 [ 653.418729][T23231] __ext4_msg+0x18f/0x1a0 [ 653.423064][T23231] ext4_put_super+0x90/0x7d0 [ 653.427742][T23231] generic_shutdown_super+0xe6/0x210 [ 653.433026][T23231] kill_block_super+0x2a/0x70 [ 653.437695][T23231] ext4_kill_sb+0x42/0x80 [ 653.442012][T23231] deactivate_locked_super+0x75/0x1c0 [ 653.447393][T23231] deactivate_super+0x97/0xa0 [ 653.452084][T23231] cleanup_mnt+0x2a9/0x320 [ 653.456496][T23231] __cleanup_mnt+0x19/0x20 [ 653.460911][T23231] task_work_run+0x131/0x1a0 [ 653.465604][T23231] exit_to_user_mode_loop+0x1fe/0x740 [ 653.470970][T23231] do_syscall_64+0x1e1/0x2b0 [ 653.475648][T23231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.481530][T23231] [ 653.483847][T23231] value changed: 0x0000000000002f2b -> 0x0000000000004f2b [ 653.490942][T23231] [ 653.493279][T23231] Reported by Kernel Concurrency Sanitizer on: [ 653.499773][T23231] CPU: 1 UID: 0 PID: 23231 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 653.511313][T23231] Tainted: [W]=WARN [ 653.515110][T23231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.525153][T23231] ================================================================== [ 653.615390][T27958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.627251][T30544] IPv6: Can't replace route, no match found