last executing test programs: 2m30.876853394s ago: executing program 4 (id=4873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x3}]}, {0x0, [0x30, 0x0, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x2f, 0x0, 0x1, 0x7fffffff, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x0, 0x1, 0x8) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x80000001, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x12) pselect6(0x40, &(0x7f0000000080)={0x4e0, 0x100, 0xfffffffffffffffa, 0x3, 0x8, 0x401, 0x3, 0x2}, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000680)={[{@hide}, {@map_acorn}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@map_normal}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='.-&+G\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 2m30.546480309s ago: executing program 4 (id=4882): getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) r4 = geteuid() lsetxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="02000000010006000000000002000600", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="040004000000000008000400", @ANYRES32=r0, @ANYBLOB="08000600", @ANYRES32=r1, @ANYBLOB="1000020001000000200006000000ecff"], 0x44, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0xfffffffffffffee3}, 0x1, 0x0, 0x0, 0x101a3a7fc930474f}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 2m30.100488845s ago: executing program 4 (id=4895): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1180, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @multicast1}, {0x1, @multicast}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r2, r1, 0x0) 2m30.060230545s ago: executing program 4 (id=4896): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delneigh={0x30, 0x11, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0xb2, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4044004) fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) 2m29.830633309s ago: executing program 4 (id=4898): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfc, "0062ba7d820000000001001f820dac4eb71f11"}) r2 = syz_open_pts(r1, 0x0) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 2m29.458165514s ago: executing program 4 (id=4903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = io_uring_setup(0x6200, &(0x7f0000000080)={0x0, 0xbcbb, 0x200, 0x3, 0x2c3}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611063000000000063012f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="40000000020203000000000000000000020000012c000280060003400002000014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m29.457840404s ago: executing program 32 (id=4903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = io_uring_setup(0x6200, &(0x7f0000000080)={0x0, 0xbcbb, 0x200, 0x3, 0x2c3}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611063000000000063012f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="40000000020203000000000000000000020000012c000280060003400002000014000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m43.135949647s ago: executing program 1 (id=5541): getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) geteuid() lsetxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', 0x0, 0x44, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0xfffffffffffffee3}, 0x1, 0x0, 0x0, 0x101a3a7fc930474f}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 1m42.971271279s ago: executing program 1 (id=5543): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000001240)='\b\x00\xed\x97\x1c\xe0\xbd\xd80\xb1\xf8\xb9\xd3\x0e\r\xb9\xb9e\xb9\xa3`\xb2-s\xc7\xaa\x89\\\xa0\x12\xd6<\xc4)\xe9\xb0\x17\xeb\xbc\xd9VhG\x12\x1a9\x10\x99S\x93\xa9h@kOe\xd57\x01ql1\xd2\xcc+\xba\xddt\xc1\x1e&y\x11)\x88\xc7\xd8\xfcW\xaa\x14\xd9\v\x80\xc7x.\xf9\xe3\x8f\x11v\xc1\xb0.Ll\b&B\xb0\xdd\xfd\xf8\xd2UXd\f\xb8\xfe<\x8d}\xe6W\xd852\xb7\x0f\xd7C\x99\x01L\n\xdd\xcfQ\xa3p\xd3z\xb1\xb7\xde(\xee\x86Y=\xe2`\x92\xdb\xa6vb\xea\x8e\x100i[\x99\xad\x8c\x12^\x8dJ\x8c;(\x1eR]\x19ZEZ\xf1\xbb\x9bf-\x94\x94\xcev\xac\x99\x99\xd0a\xe18\xe7\xaa\xb7\xc75\xdeAbQ\x9e\x99\x9c\xb5\xfbhf\xb3\x8c+\xdcw\xed\x81m\x84l\x8e>~_\xe1\x10S\tUGs\xe8\x94\xcdcaBr\x8e\x00\x10\x1cW\a\xca\x9d\xbc\xa7\xd0\xc92\xe7C\xad\xde\xd28\a\x17\xa9\xb2\\G\xb0@S\x0f\x9c\x01\x0f\xbf\xf4Nm\xff_v\xc1R\x17k\x04\x8a\xb2\x91\xc79\xe6i\xb0\x18]+`6u|\x8auZ\xde\bP\xc0\xe9\x81\xc8\b%\x99\v]d\x032\x83_d\xd7\xfc\xf4') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[], 0x32600) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="39000000031401002dc17000000000000900000000f97a3000000000080041007368e4ff130433006c6f0000000000000000000000000000c8bc2c38c1c04428a6c0dacdd62acc6fdcd1e8e36f73b5cfbf522fca6195d9b6667c618fed5a75b08280027ce1d55a2c62cec98184c902c2f7d1987fbc5a3db08f2793e9716c15d3c29b1dbe43"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r10}, 0x18) 1m42.081882032s ago: executing program 1 (id=5553): unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d70a0ce48f40f27f6a0affff0020000071103300"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0xfea7) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f0b000/0x4000)=nil, 0x4000) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x1, 0x801, 0x1, 0x0, 0x0, 0x337b, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="95000000000000001837001f6a00"/24], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m41.837611385s ago: executing program 1 (id=5556): openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1m40.967440767s ago: executing program 1 (id=5568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) io_uring_setup(0x78c4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xfffc, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000001c0)) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xf3a, 0x0) recvfrom$inet(r5, &(0x7f0000000000)=""/2, 0x2, 0x2140, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 1m40.687234161s ago: executing program 1 (id=5570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000001100)=0x6, 0x4) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioperm(0x0, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x2f, 0x1, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x80000003, 0x7fa, 0xd6c, 0x5, 0x73ef}, 0x14) socket(0x11, 0x800000003, 0x0) (async) r2 = socket(0x11, 0x800000003, 0x0) syz_usbip_server_init(0x5) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000200)='./bus\x00', 0x10) (async) creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c0002", 0x1b}], 0x1, 0x0, 0x0, 0x39c}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) (async) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='\x00\x00\x00', 0x3}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='\x00\x00\x00', 0x3}], 0x1) preadv2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x6, 0x4, 0xe) (async) preadv2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x6, 0x4, 0xe) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3ff, 0x1ff, 0x7ff, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x4, 0x4) 1m40.645268552s ago: executing program 33 (id=5570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000001100)=0x6, 0x4) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioperm(0x0, 0x4, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x2f, 0x1, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x80000003, 0x7fa, 0xd6c, 0x5, 0x73ef}, 0x14) socket(0x11, 0x800000003, 0x0) (async) r2 = socket(0x11, 0x800000003, 0x0) syz_usbip_server_init(0x5) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000200)='./bus\x00', 0x10) (async) creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c0002", 0x1b}], 0x1, 0x0, 0x0, 0x39c}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) (async) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x30, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='\x00\x00\x00', 0x3}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='\x00\x00\x00', 0x3}], 0x1) preadv2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x6, 0x4, 0xe) (async) preadv2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1, 0x6, 0x4, 0xe) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3ff, 0x1ff, 0x7ff, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x4, 0x4) 3.885384565s ago: executing program 0 (id=7052): listen(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000440)=0x0) io_submit(r2, 0x2, &(0x7f00000008c0)=[&(0x7f00000006c0)={0x810, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000200)="cc10a5f50a8f78a199", 0x9, 0x4, 0x0, 0xf04165e29300fdf8, r0}]) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.832205366s ago: executing program 2 (id=7053): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000b40)=ANY=[], 0x457f) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000009f48067c8c82625b2eb26597040000000000020000000000007f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0xffffffff, 0x4, &(0x7f00000002c0)=""/4, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x20000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18) dup2(r5, r5) syz_io_uring_setup(0xe43, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x3, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x70, 0x10, 0x20, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x7f}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x11}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2aa2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.633017929s ago: executing program 2 (id=7056): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040), 0x0, 0x52b, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8020000000000002, 0x3a, '\x00'/10, 0x3a, '', 0x3a, './file2'}, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3.358785723s ago: executing program 2 (id=7058): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001200000000ffffffff00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$eJzs3U9sI1cZAPBvZpO1k6YkhR4AFbqUwoKqtRNvG1W9UE4VQpUQPXLYhsSJothxFDulCXvIHrkjUaknOHHmgMQBqSfuSBzgxqUckAqsQA0SByOPx7vOH2/S3dhu499PGs2b9zzzvbejec963swLYGLdiIjDiLgeEW9HxHyen+RbvN7dOp/7+P7d1aP7d1eTaLff+meSlXfyou+cjqfyaxYj4odvRPw4ORH0TxHN/YOtlVqtuptnlVv1nXJz/+DWZn1lo7pR3a5UlpeWF1+9/Url0tr6fP03H81ExO9/95UP/3j47Z92qjWXl/W34zJ1mz79IE7HVER8fxjBxuBa3p7rj3PyY53EZUoj4vMR8UL2/M/HtexuHnf8Nn1nhLUDAIah3Z6P9nz/MQBw1aXZHFiSlvK5gLlI01KpO4f3bMymtUaz9dJ6Y297rTtXthDT6fpmrbqYzxUuxHSyvjlVXcrSveNatXLi+HZEPBMRPy/MZMel1UZtbZxffABggj11Yvz/T6E7/gMAV1zxYbIwznoAAKNTHHcFAICRM/4DwOQx/gPA5DH+A8DkMf4DwOQx/gPARPnBm292tvZR/v7rtXf297Ya79xaqza3SvW91dJqY3entNFobGTv7Kmfd71ao7Gz9HLsvVtuVZutcnP/4E69sbfdupO91/tOdXokrQIAHuWZ5z/4SxIRh6/NZFv0ve//3LH6uWHXDhimdNwVAMbm2rgrAIzN6dW+gEnxCebjZ4ZZD2B8+pbovdeXXTyVOOm9C10+tW4ofPrc/NITzP8Dn2nm/2FyPd78v+/ycBWY/4fJ1W4n1vwHgAljjh9Izinv//1/sd13cOL3f/+fGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEkyl21JWsrXAp+LNC2VIp6OiIWYTtY3a9XFiPhcRPy5MF3oHC9FhHWDAOCzLP17kq//dXP+xbmTpdcL/y1k+4j4yftv/eLdlVZrdynievKvB/mt9/L8yjjqDwCcpzdO98bxno/v313tbaOsz0ff7S4u2ol7lG/dkqmYyvbFbK5h9t9JftyVXNJao4f3IuKLZ7U/yeZGFvKVT0/G78R+eqTx02Px06ysu+/8W3zhEuoCk+aDTv/z+lnPXxo3sv3Zz38x66GeXK//OzrV/6UP+r9rA/q/G8cvtTAwxst/+N6pzPZ8t+xexJenIo56F+/rf3rxkwHxX7xgG//63FdfGFTW/mXEzTir/cmxWOVWfafc3D+4tVlf2ahuVLcrleWl5cVXb79SKWdz1OXeTPVp/3gtGbi8daf9swPiF89p/zcu2P5f/e/tH33tEfG/9fWz7/+zj4jfGRO/ecH4K7O/LQ4q68RfG9D+8+7/SxeM/+HfDtYu+FEAYASa+wdbK7VadfdUYjv/LaCXM33GZz5BIn2y0y+cSCIOhxziYaLw65+9MapYQ0zEaIO+HxHjbrLEeYlx90zAsD186MddEwAAAAAAAAAAAAAAYJBR/DnRuNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1fX/AAAA//+zq8/P") creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r6, 0x4b45, 0x3) 3.046086617s ago: executing program 3 (id=7063): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffff7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff31d71d2263202b06b70000c08b5ea4d61f405345a0a8eb1960fb44a6ea9b9095f6821285b330104dc6d8b5394c7cd85cba228d37eaf050a19b0e69e5b2c6b22b283facb24ea39a5e766d96ca6957747abb769644d00f846791c7a31e67293e4e6c0f392f89af18f4d228f9207fdc1f1b5dec48429a245f4f5b9e0c6afcbd7862c504e7db2c8feaf4b9faf5b9890faf347cd76286aea7d5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = io_uring_setup(0x7618, &(0x7f0000000580)={0x0, 0x7e84, 0x440, 0xfffffffe, 0x1c4}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000500)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000540), 0x0) 2.883920839s ago: executing program 0 (id=7066): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a81c1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x4000000000000000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2.319333957s ago: executing program 2 (id=7069): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040), 0x0, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8020000000000002, 0x3a, '\x00'/10, 0x3a, '', 0x3a, './file2'}, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.945666443s ago: executing program 0 (id=7072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.893348513s ago: executing program 6 (id=7074): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r4, 0x4b45, 0x3) 1.850505944s ago: executing program 3 (id=7075): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000080), 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 1.742599265s ago: executing program 3 (id=7076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r2 = syz_io_uring_setup(0x4cd, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00'}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.733883196s ago: executing program 2 (id=7077): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) socket(0x1d, 0x2, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1ba1, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x7fffffffffffffff, 0x2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x7619, 0x3ff}, 0x8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4) 1.733238416s ago: executing program 6 (id=7078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r3, 0x118, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r6 = inotify_init1(0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x43e, &(0x7f0000000fc0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x9, 0xa, 0x0, 0x1f}, 0x7, 0x1, 0x11, 0x0, 0x0, 0xc, 0xc, 0x16, 0x7, 0x5ac, {0x8, 0x9, 0x0, 0x3, 0xfffffffd, 0x3}}}}]}, 0x78}}, 0x40004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, r10}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r7, 0x1f, 0x0, @void}, 0x10) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) close(r6) 1.646067477s ago: executing program 0 (id=7080): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001200000000ffffffff00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r6, 0x4b45, 0x3) 1.489490569s ago: executing program 6 (id=7081): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000040), 0x3, 0x4e4, &(0x7f0000002d40)="$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") r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000280)=""/228) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x22}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.488326829s ago: executing program 5 (id=7082): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340), 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd7}}, './file0\x00'}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6, 0x0, 0x300}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={r3, 0xffff6721}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)={r3, 0x5, 0xc9, "8a46b675c9ab17f09d21f0cce5078b8796008b253ef1fbb33d76b0e78c38036694b517e20b72485bb6ab1bd7f05cbd136fe54d810e3400323f8cc131f674d557f7f46ce43324d2eb67e30a6f58262eb922d4d1136ee3ed7bd68319e6e5a8baca2f7f183645da896b91bd67957da36fb9be7e639b66f1771cc56808f2fa9481e12a1ec8d0828f78581614b69e1ebdf015b88412fb9351806b9f130457a54842d5eb25a9efffc8b9efb9e0757aa65ede82c29126d564ec588a2f2ed591269dd08d56f4f86a925f25c54d"}, 0xd1) 1.373262781s ago: executing program 3 (id=7083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000001040)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) (fail_nth: 2) 1.360575591s ago: executing program 6 (id=7084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x33, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) (fail_nth: 2) 1.271268102s ago: executing program 3 (id=7085): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x4000000000000000}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 907.973317ms ago: executing program 6 (id=7086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 887.923727ms ago: executing program 5 (id=7087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) (fail_nth: 2) 623.820112ms ago: executing program 5 (id=7088): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040), 0x0, 0x52b, &(0x7f0000000f40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff00000) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x8020000000000002, 0x3a, '\x00'/10, 0x3a, '', 0x3a, './file2'}, 0x31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 622.789752ms ago: executing program 0 (id=7089): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f0000000400)={[{@bsdgroups}]}, 0x1, 0x51c, &(0x7f0000001300)="$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") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r4, 0x4b45, 0x3) 609.421481ms ago: executing program 2 (id=7090): bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xb37905ec1203c65) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000000c0)='thermal_temperature\x00', 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x9c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6d57bbc}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfed4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x56c}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff6146}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000050}, 0xaf952d0d6ca966ec) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x2, 0x0, 0x1a, @local, @dev={0xfe, 0x80, '\x00', 0x76}, 0x10, 0x7, 0x2, 0x6}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x804, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=r']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 524.299533ms ago: executing program 3 (id=7091): unshare(0x2c020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="d70a0ce48f40f27f6a0affff0020000071103300"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0xfea7) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f0b000/0x4000)=nil, 0x4000) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x1, 0x801, 0x1, 0x0, 0x0, 0x337b, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="95000000000000001837001f6a00"/24], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r8}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 428.469474ms ago: executing program 5 (id=7092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x4cd, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 158.435908ms ago: executing program 0 (id=7093): bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xb37905ec1203c65) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000000c0)='thermal_temperature\x00', 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x9c, r9, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6d57bbc}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfed4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x56c}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff6146}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000050}, 0xaf952d0d6ca966ec) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x2, 0x0, 0x1a, @local, @dev={0xfe, 0x80, '\x00', 0x76}, 0x10, 0x7, 0x2, 0x6}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x804, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=r']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 143.885688ms ago: executing program 5 (id=7094): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000040), 0x3, 0x4e4, &(0x7f0000002d40)="$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") r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000280)=""/228) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x22}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_clone(0x80000, &(0x7f0000000080)="c38e3fda62a2b6ac08591d19921f0a6fd956bd6ef04f41a1e3648fd6b3eed8d6f1dad2c42d311d96fdce9cfa810192e31b4bcf274f7d3241b6069879e63fd7757b986fd3c70fb066", 0x48, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)="e99cccb4ca9d86ca9a6d16d634799def72de5f6232626a98e2aa") r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 66.485109ms ago: executing program 6 (id=7095): listen(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000440)=0x0) io_submit(r2, 0x2, &(0x7f00000008c0)=[&(0x7f00000006c0)={0x810, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x9}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000200)="cc10a5f50a8f78a199", 0x9, 0x4, 0x0, 0xf04165e29300fdf8, r0}]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 5 (id=7096): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) kernel console output (not intermixed with test programs): 0 to 1024 [ 464.849436][T22534] EXT4-fs: Ignoring removed oldalloc option [ 464.856937][T22534] EXT4-fs: Ignoring removed orlov option [ 464.863560][T22534] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 464.885968][T22533] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 464.917328][T22534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.950497][T22533] 9pnet: Could not find request transport: r [ 465.131599][T22546] loop0: detected capacity change from 0 to 512 [ 465.185151][T22546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 465.192239][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 465.201990][T22546] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.6608: bad orphan inode 13 [ 465.222529][T22546] ext4_test_bit(bit=12, block=18) = 1 [ 465.228164][T22546] is_bad_inode(inode)=0 [ 465.232426][T22546] NEXT_ORPHAN(inode)=2130706432 [ 465.237484][T22546] max_ino=32 [ 465.240716][T22546] i_nlink=1 [ 465.268362][T22546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.301926][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 465.301944][ T29] audit: type=1326 audit(1747496973.636:24752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.332534][ T29] audit: type=1326 audit(1747496973.636:24753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.367404][T19433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.374143][ T29] audit: type=1326 audit(1747496973.636:24754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.400223][ T29] audit: type=1326 audit(1747496973.636:24755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.424152][ T29] audit: type=1326 audit(1747496973.636:24756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.447842][ T29] audit: type=1326 audit(1747496973.636:24757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.471528][ T29] audit: type=1326 audit(1747496973.636:24758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.495465][ T29] audit: type=1326 audit(1747496973.636:24759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.519785][ T29] audit: type=1326 audit(1747496973.636:24760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.544106][ T29] audit: type=1326 audit(1747496973.636:24761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.0.6608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 465.615104][T22553] loop5: detected capacity change from 0 to 512 [ 465.670473][T22553] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 465.699591][T22549] loop6: detected capacity change from 0 to 1024 [ 465.709919][T22555] netlink: 'syz.0.6612': attribute type 6 has an invalid length. [ 465.745245][T22555] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 465.799583][T21246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.856437][T22555] 9pnet: Could not find request transport: r [ 465.865439][T22549] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.901778][T22565] loop3: detected capacity change from 0 to 512 [ 465.906460][T22549] EXT4-fs: Ignoring removed nobh option [ 465.918343][T22549] EXT4-fs: Ignoring removed bh option [ 465.933984][T22565] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 466.057327][T22567] netlink: 'syz.5.6618': attribute type 6 has an invalid length. [ 466.084667][T22567] syz!: rxe_newlink: already configured on team_slave_0 [ 466.235926][T22549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.378338][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.401906][T22567] 9pnet: Could not find request transport: r [ 466.547283][T22587] loop5: detected capacity change from 0 to 512 [ 466.562936][T22584] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 466.579409][T22587] EXT4-fs (loop5): orphan cleanup on readonly fs [ 466.600949][T22414] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.625064][T22414] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.651481][T22587] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.6623: bad orphan inode 13 [ 466.675590][T22414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.740618][T22587] ext4_test_bit(bit=12, block=18) = 1 [ 466.746183][T22587] is_bad_inode(inode)=0 [ 466.750443][T22587] NEXT_ORPHAN(inode)=2130706432 [ 466.755478][T22587] max_ino=32 [ 466.759008][T22587] i_nlink=1 [ 466.798010][T22587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.882531][T22414] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.973061][T17220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.019950][T22608] loop6: detected capacity change from 0 to 512 [ 467.057758][T22610] loop3: detected capacity change from 0 to 512 [ 467.075702][T22608] EXT4-fs (loop6): orphan cleanup on readonly fs [ 467.082396][T22608] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6641: bad orphan inode 13 [ 467.116993][T22616] loop0: detected capacity change from 0 to 512 [ 467.137588][T22608] ext4_test_bit(bit=12, block=18) = 1 [ 467.143103][T22608] is_bad_inode(inode)=0 [ 467.147427][T22608] NEXT_ORPHAN(inode)=2130706432 [ 467.152354][T22608] max_ino=32 [ 467.155673][T22608] i_nlink=1 [ 467.159586][T22608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.203626][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.220881][T22618] loop5: detected capacity change from 0 to 512 [ 467.238445][T22618] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 467.254265][T22610] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 467.267518][T22616] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 467.319096][T22623] loop2: detected capacity change from 0 to 1024 [ 467.337036][T22623] EXT4-fs: Ignoring removed oldalloc option [ 467.365564][T22623] EXT4-fs: Ignoring removed orlov option [ 467.388012][T22623] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 467.546354][T22623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.568568][T22628] netlink: 'syz.3.6637': attribute type 6 has an invalid length. [ 467.597187][T22639] loop6: detected capacity change from 0 to 512 [ 467.616932][T22639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 467.629734][T22639] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 467.680299][T22649] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 467.756348][T22644] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.769004][T22628] 9pnet: Could not find request transport: r [ 467.940589][T22644] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.988761][T22659] loop3: detected capacity change from 0 to 512 [ 468.019133][T22659] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 468.313264][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.509723][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 468.523619][T22644] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.636786][T22644] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.684109][T22677] __nla_validate_parse: 20 callbacks suppressed [ 468.684132][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6652'. [ 468.704522][T22679] loop6: detected capacity change from 0 to 512 [ 468.731193][T22644] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.750384][T22679] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 468.854492][T22684] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 468.888775][T22644] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.937171][T22689] loop2: detected capacity change from 0 to 512 [ 468.946049][T22689] EXT4-fs (loop2): orphan cleanup on readonly fs [ 468.954753][T22644] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.963243][T22689] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6657: bad orphan inode 13 [ 468.995491][T22689] ext4_test_bit(bit=12, block=18) = 1 [ 469.000930][T22689] is_bad_inode(inode)=0 [ 469.005158][T22689] NEXT_ORPHAN(inode)=2130706432 [ 469.010083][T22689] max_ino=32 [ 469.013389][T22689] i_nlink=1 [ 469.024570][T22689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 469.063598][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.142073][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6656'. [ 469.152133][T22687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6656'. [ 469.162389][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6656'. [ 469.234373][T22691] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 469.245171][T22687] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6656'. [ 469.255482][T22687] netlink: 'syz.6.6656': attribute type 6 has an invalid length. [ 469.352068][T22644] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.380245][T22698] loop2: detected capacity change from 0 to 1024 [ 469.387182][T22698] EXT4-fs: Ignoring removed oldalloc option [ 469.400809][T22694] 9pnet: Could not find request transport: r [ 469.410959][T22698] EXT4-fs: Ignoring removed orlov option [ 469.455657][T22698] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 469.486615][T22698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.639692][T22707] loop3: detected capacity change from 0 to 1024 [ 469.674323][T22707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.700294][T22707] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 469.749680][T22707] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 469.765435][T22707] EXT4-fs (loop3): mount failed [ 469.771292][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6662'. [ 469.781561][T22710] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.870174][T22710] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.890013][T22717] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 469.946693][T22710] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.038688][T22716] 9pnet: Could not find request transport: r [ 470.062506][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.096522][T22710] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.158752][T22731] loop2: detected capacity change from 0 to 512 [ 470.188804][T22710] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.200502][T22710] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.211302][T22731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 470.212524][T22710] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.229886][T22710] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.234742][T22731] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6668: bad orphan inode 13 [ 470.413182][T22731] ext4_test_bit(bit=12, block=18) = 1 [ 470.418660][T22731] is_bad_inode(inode)=0 [ 470.422901][T22731] NEXT_ORPHAN(inode)=2130706432 [ 470.427974][T22731] max_ino=32 [ 470.431179][T22731] i_nlink=1 [ 470.460975][T22741] loop0: detected capacity change from 0 to 512 [ 470.461334][T22731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.481710][T22741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.496649][T22741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.512338][T22741] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.555604][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 470.555621][ T29] audit: type=1326 audit(1747496978.896:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.585613][ T29] audit: type=1326 audit(1747496978.896:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.609335][ T29] audit: type=1326 audit(1747496978.896:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.633127][ T29] audit: type=1326 audit(1747496978.896:25086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.656921][ T29] audit: type=1326 audit(1747496978.896:25087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.680793][ T29] audit: type=1326 audit(1747496978.896:25088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.704584][ T29] audit: type=1326 audit(1747496978.896:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.728287][ T29] audit: type=1326 audit(1747496978.896:25090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.752796][ T29] audit: type=1326 audit(1747496978.896:25091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.762310][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6674'. [ 470.776548][ T29] audit: type=1326 audit(1747496978.896:25092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22730 comm="syz.2.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 470.809580][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6674'. [ 470.820092][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.853915][T22745] bridge0: port 3(vlan2) entered blocking state [ 470.860438][T22745] bridge0: port 3(vlan2) entered disabled state [ 470.871589][T22745] vlan2: entered allmulticast mode [ 470.876796][T22745] bridge0: entered allmulticast mode [ 470.883084][T19433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.894979][T22745] vlan2: left allmulticast mode [ 470.900104][T22745] bridge0: left allmulticast mode [ 470.934831][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6673'. [ 470.947340][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6673'. [ 470.964579][T22756] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 470.965525][T22750] netlink: 'syz.2.6673': attribute type 6 has an invalid length. [ 471.016369][T22752] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 471.023945][T22750] 9pnet: Could not find request transport: r [ 471.063593][T22760] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 471.158374][T22758] 9pnet: Could not find request transport: r [ 471.385346][T22779] FAULT_INJECTION: forcing a failure. [ 471.385346][T22779] name failslab, interval 1, probability 0, space 0, times 0 [ 471.398125][T22779] CPU: 0 UID: 0 PID: 22779 Comm: syz.6.6685 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 471.398163][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 471.398179][T22779] Call Trace: [ 471.398188][T22779] [ 471.398210][T22779] __dump_stack+0x1d/0x30 [ 471.398245][T22779] dump_stack_lvl+0xe8/0x140 [ 471.398268][T22779] dump_stack+0x15/0x1b [ 471.398288][T22779] should_fail_ex+0x265/0x280 [ 471.398412][T22779] should_failslab+0x8c/0xb0 [ 471.398520][T22779] __kmalloc_noprof+0xa5/0x3e0 [ 471.398545][T22779] ? security_prepare_creds+0x52/0x120 [ 471.398615][T22779] security_prepare_creds+0x52/0x120 [ 471.398704][T22779] prepare_creds+0x34a/0x4c0 [ 471.398729][T22779] copy_creds+0x8f/0x3f0 [ 471.398757][T22779] copy_process+0x658/0x1f90 [ 471.398872][T22779] ? kstrtouint+0x76/0xc0 [ 471.398913][T22779] ? __rcu_read_unlock+0x4f/0x70 [ 471.398944][T22779] kernel_clone+0x16c/0x5b0 [ 471.399048][T22779] ? vfs_write+0x75e/0x8d0 [ 471.399129][T22779] __x64_sys_clone+0xe6/0x120 [ 471.399172][T22779] x64_sys_call+0x2c59/0x2fb0 [ 471.399195][T22779] do_syscall_64+0xd0/0x1a0 [ 471.399221][T22779] ? clear_bhb_loop+0x40/0x90 [ 471.399315][T22779] ? clear_bhb_loop+0x40/0x90 [ 471.399343][T22779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.399371][T22779] RIP: 0033:0x7fafd76de969 [ 471.399454][T22779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.399478][T22779] RSP: 002b:00007fafd5d46fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 471.399580][T22779] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 471.399597][T22779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000600e7080 [ 471.399613][T22779] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 471.399629][T22779] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 471.399641][T22779] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 471.399664][T22779] [ 471.876200][T22800] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 471.917236][T22798] loop2: detected capacity change from 0 to 512 [ 471.945411][T22798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 471.958201][T22798] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.104612][T22811] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 472.158717][T22811] 9pnet: Could not find request transport: r [ 472.260428][T22828] loop3: detected capacity change from 0 to 512 [ 472.268391][T22823] vcan0: MTU too low for tipc bearer [ 472.273782][T22823] tipc: Enabling of bearer rejected, failed to enable media [ 472.284869][T22828] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 472.296050][T22823] loop0: detected capacity change from 0 to 128 [ 472.304406][T22823] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.317631][T22823] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.360071][T18826] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.391454][T22835] syz!: rxe_newlink: already configured on team_slave_0 [ 472.738444][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 473.197867][T22867] loop6: detected capacity change from 0 to 512 [ 473.268583][T22868] loop2: detected capacity change from 0 to 512 [ 473.275682][T22868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.301056][T22868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.400163][T22871] netlink: 'syz.0.6716': attribute type 1 has an invalid length. [ 473.429638][T22868] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 473.445659][T22868] EXT4-fs (loop2): 1 truncate cleaned up [ 473.452320][T22868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.471799][T22868] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 473.602275][T22867] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 473.683472][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.731803][T22887] loop2: detected capacity change from 0 to 512 [ 473.753613][T22890] loop6: detected capacity change from 0 to 1024 [ 473.761943][T22890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.771319][T22887] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 473.788209][T22887] EXT4-fs: error: could not find journal device path [ 473.802913][T22890] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 473.828036][T22890] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 473.835909][T22890] EXT4-fs (loop6): mount failed [ 473.891812][T22895] __nla_validate_parse: 5 callbacks suppressed [ 473.891828][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6724'. [ 474.044109][T22909] loop0: detected capacity change from 0 to 256 [ 474.085130][T22909] FAT-fs (loop0): Directory bread(block 64) failed [ 474.091794][T22909] FAT-fs (loop0): Directory bread(block 65) failed [ 474.109565][T22909] FAT-fs (loop0): Directory bread(block 66) failed [ 474.124136][T22909] FAT-fs (loop0): Directory bread(block 67) failed [ 474.130902][T22909] FAT-fs (loop0): Directory bread(block 68) failed [ 474.162304][T22909] FAT-fs (loop0): Directory bread(block 69) failed [ 474.176197][T22909] FAT-fs (loop0): Directory bread(block 70) failed [ 474.183092][T22909] FAT-fs (loop0): Directory bread(block 71) failed [ 474.205787][T22909] FAT-fs (loop0): Directory bread(block 72) failed [ 474.212532][T22909] FAT-fs (loop0): Directory bread(block 73) failed [ 474.322085][T22909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6730'. [ 474.332115][T22922] loop3: detected capacity change from 0 to 1024 [ 474.369283][T22922] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.417343][T22922] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 474.431534][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6737'. [ 474.454971][T22930] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.484857][T22922] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 474.510263][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6738'. [ 474.520675][T22922] EXT4-fs (loop3): mount failed [ 474.607429][T22930] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.637642][T22944] loop6: detected capacity change from 0 to 512 [ 474.655799][T22944] EXT4-fs (loop6): orphan cleanup on readonly fs [ 474.662987][T22944] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6742: bad orphan inode 13 [ 474.685865][T22930] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.703822][T22944] ext4_test_bit(bit=12, block=18) = 1 [ 474.710555][T22944] is_bad_inode(inode)=0 [ 474.716225][T22944] NEXT_ORPHAN(inode)=2130706432 [ 474.723027][T22944] max_ino=32 [ 474.726464][T22944] i_nlink=1 [ 474.840108][T22930] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.864596][T22944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 474.937348][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.962020][T22930] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.985105][T22930] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.994117][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6750'. [ 475.017159][T22930] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.067827][T22930] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.099794][T22967] bond4: entered promiscuous mode [ 475.104932][T22967] bond4: entered allmulticast mode [ 475.126554][T22967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.137340][T22967] bond4 (unregistering): Released all slaves [ 475.197259][T22969] loop6: detected capacity change from 0 to 512 [ 475.218241][T22974] loop5: detected capacity change from 0 to 1024 [ 475.225743][T22974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 475.225836][T22969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 475.234668][T22974] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.247206][T22969] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 475.295901][T22974] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 475.332829][T22974] EXT4-fs (loop5): mount failed [ 475.516300][T22989] loop3: detected capacity change from 0 to 512 [ 475.526913][T22996] syz!: rxe_newlink: already configured on team_slave_0 [ 475.527005][T22994] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6761'. [ 475.538524][T22997] loop0: detected capacity change from 0 to 1024 [ 475.556036][T22997] EXT4-fs: Ignoring removed oldalloc option [ 475.562072][T22997] EXT4-fs: Ignoring removed orlov option [ 475.568475][T22997] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 475.588494][T22989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 475.592279][T22990] 9pnet: Could not find request transport: r [ 475.601302][T22989] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 475.654695][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6762'. [ 475.679529][T22997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.742471][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 475.742487][ T29] audit: type=1326 audit(1747496984.076:25252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.772700][ T29] audit: type=1326 audit(1747496984.076:25253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.796647][ T29] audit: type=1326 audit(1747496984.076:25254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.820525][ T29] audit: type=1326 audit(1747496984.076:25255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.820996][T23015] syz!: rxe_newlink: already configured on team_slave_0 [ 475.845771][ T29] audit: type=1326 audit(1747496984.076:25256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.845824][ T29] audit: type=1326 audit(1747496984.076:25257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.845863][ T29] audit: type=1326 audit(1747496984.076:25258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.845901][ T29] audit: type=1326 audit(1747496984.076:25259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.845972][ T29] audit: type=1326 audit(1747496984.076:25260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.846065][ T29] audit: type=1326 audit(1747496984.076:25261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23009 comm="syz.2.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 475.931942][T23018] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 476.011930][T23014] 9pnet: Could not find request transport: r [ 476.078351][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 476.233254][T23031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6773'. [ 476.243917][T21246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 476.266118][T23039] loop3: detected capacity change from 0 to 512 [ 476.282872][T23036] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 476.312265][T23039] EXT4-fs (loop3): 1 orphan inode deleted [ 476.325728][T19433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.335539][T23036] 9pnet: Could not find request transport: r [ 476.338377][T23039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.374251][T23039] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.410648][T21246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.457058][T23048] loop2: detected capacity change from 0 to 512 [ 476.476696][T23048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 476.489531][T23048] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 476.578781][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 476.669082][T23081] loop6: detected capacity change from 0 to 1024 [ 476.677693][T23081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 476.689208][T23081] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 476.712063][T23080] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 476.722441][T23084] loop5: detected capacity change from 0 to 1024 [ 476.729293][T23084] EXT4-fs: Ignoring removed oldalloc option [ 476.738177][T23084] EXT4-fs: Ignoring removed orlov option [ 476.744492][T23081] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 476.751916][T23081] EXT4-fs (loop6): mount failed [ 476.758487][T23084] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 476.816335][T23084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.860763][T23096] 9pnet: Could not find request transport: r [ 476.916894][T23106] xt_CT: No such helper "snmp_trap" [ 476.925714][T23103] xt_CT: No such helper "snmp_trap" [ 477.093376][T23125] loop2: detected capacity change from 0 to 1024 [ 477.106479][T23131] lo: entered promiscuous mode [ 477.111333][T23131] lo: entered allmulticast mode [ 477.118000][T23125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.127471][T23125] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.141886][T23125] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 477.147311][T23134] FAULT_INJECTION: forcing a failure. [ 477.147311][T23134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.149866][T23125] EXT4-fs (loop2): mount failed [ 477.162625][T23134] CPU: 0 UID: 0 PID: 23134 Comm: syz.6.6809 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 477.162660][T23134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 477.162675][T23134] Call Trace: [ 477.162682][T23134] [ 477.162691][T23134] __dump_stack+0x1d/0x30 [ 477.162716][T23134] dump_stack_lvl+0xe8/0x140 [ 477.162823][T23134] dump_stack+0x15/0x1b [ 477.162847][T23134] should_fail_ex+0x265/0x280 [ 477.162893][T23134] should_fail+0xb/0x20 [ 477.162932][T23134] should_fail_usercopy+0x1a/0x20 [ 477.162974][T23134] _copy_from_user+0x1c/0xb0 [ 477.163004][T23134] copy_from_sockptr_offset+0x66/0xa0 [ 477.163114][T23134] do_ipt_set_ctl+0x5c8/0x820 [ 477.163160][T23134] nf_setsockopt+0x196/0x1b0 [ 477.163189][T23134] ip_setsockopt+0x102/0x110 [ 477.163236][T23134] raw_setsockopt+0xbd/0x150 [ 477.163276][T23134] sock_common_setsockopt+0x66/0x80 [ 477.163310][T23134] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 477.163394][T23134] __sys_setsockopt+0x181/0x200 [ 477.163422][T23134] __x64_sys_setsockopt+0x64/0x80 [ 477.163448][T23134] x64_sys_call+0x2bd5/0x2fb0 [ 477.163477][T23134] do_syscall_64+0xd0/0x1a0 [ 477.163515][T23134] ? clear_bhb_loop+0x40/0x90 [ 477.163543][T23134] ? clear_bhb_loop+0x40/0x90 [ 477.163571][T23134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.163599][T23134] RIP: 0033:0x7fafd76de969 [ 477.163621][T23134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.163757][T23134] RSP: 002b:00007fafd5d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.163782][T23134] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 477.163841][T23134] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 477.163857][T23134] RBP: 00007fafd5d47090 R08: 0000000000000398 R09: 0000000000000000 [ 477.163873][T23134] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.163889][T23134] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 477.163914][T23134] [ 477.197434][T23131] netlink: 'syz.0.6808': attribute type 7 has an invalid length. [ 477.293696][T23140] infiniband syz2: set active [ 477.299053][T23131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6808'. [ 477.303599][T23140] infiniband syz2: added veth0_to_bond [ 477.436096][T23150] loop3: detected capacity change from 0 to 512 [ 477.436675][T23140] RDS/IB: syz2: added [ 477.443190][T23148] FAULT_INJECTION: forcing a failure. [ 477.443190][T23148] name failslab, interval 1, probability 0, space 0, times 0 [ 477.448175][T23140] smc: adding ib device syz2 with port count 1 [ 477.459351][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.2.6813 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 477.459393][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 477.459411][T23148] Call Trace: [ 477.459421][T23148] [ 477.459432][T23148] __dump_stack+0x1d/0x30 [ 477.459461][T23148] dump_stack_lvl+0xe8/0x140 [ 477.459487][T23148] dump_stack+0x15/0x1b [ 477.459549][T23148] should_fail_ex+0x265/0x280 [ 477.459593][T23148] should_failslab+0x8c/0xb0 [ 477.459634][T23148] __kmalloc_noprof+0xa5/0x3e0 [ 477.459720][T23148] ? unregister_netdevice_many_notify+0x4cf/0x16a0 [ 477.459752][T23148] ? unlist_netdevice+0x2cc/0x320 [ 477.459789][T23148] unregister_netdevice_many_notify+0x4cf/0x16a0 [ 477.459848][T23148] unregister_netdevice_queue+0x1f5/0x220 [ 477.459878][T23148] ipip6_tunnel_ctl+0x28e/0xc40 [ 477.459916][T23148] ip_tunnel_siocdevprivate+0x74/0xe0 [ 477.460088][T23148] ipip6_tunnel_siocdevprivate+0x259/0xdd0 [ 477.460126][T23148] ? full_name_hash+0x92/0xe0 [ 477.460155][T23148] ? strcmp+0x22/0x50 [ 477.460187][T23148] ? netdev_name_node_lookup+0xa4/0xd0 [ 477.460246][T23148] dev_ifsioc+0x8f8/0xaa0 [ 477.460277][T23148] dev_ioctl+0x78d/0x960 [ 477.460305][T23148] sock_ioctl+0x593/0x610 [ 477.460340][T23148] ? __pfx_sock_ioctl+0x10/0x10 [ 477.460437][T23148] __se_sys_ioctl+0xcb/0x140 [ 477.460468][T23148] __x64_sys_ioctl+0x43/0x50 [ 477.460504][T23148] x64_sys_call+0x19a8/0x2fb0 [ 477.460546][T23148] do_syscall_64+0xd0/0x1a0 [ 477.460576][T23148] ? clear_bhb_loop+0x40/0x90 [ 477.460656][T23148] ? clear_bhb_loop+0x40/0x90 [ 477.460725][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.460753][T23148] RIP: 0033:0x7fcbbc10e969 [ 477.460774][T23148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.460804][T23148] RSP: 002b:00007fcbba777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.460832][T23148] RAX: ffffffffffffffda RBX: 00007fcbbc335fa0 RCX: 00007fcbbc10e969 [ 477.460849][T23148] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000003 [ 477.460865][T23148] RBP: 00007fcbba777090 R08: 0000000000000000 R09: 0000000000000000 [ 477.460951][T23148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.460967][T23148] R13: 0000000000000000 R14: 00007fcbbc335fa0 R15: 00007ffcbc61f588 [ 477.460992][T23148] [ 477.499447][T23150] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 477.503839][T23140] smc: ib device syz2 port 1 has pnetid [ 477.758173][T17220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.895634][T23165] loop5: detected capacity change from 0 to 512 [ 477.947600][T23165] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 478.005247][T23167] loop6: detected capacity change from 0 to 512 [ 478.014472][T23167] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 478.099712][T23170] loop2: detected capacity change from 0 to 1024 [ 478.109329][T23170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 478.118305][T23170] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 478.145963][T23170] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 478.152513][T23170] EXT4-fs (loop2): mount failed [ 478.156783][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6826'. [ 478.196932][T23180] FAULT_INJECTION: forcing a failure. [ 478.196932][T23180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.210639][T23180] CPU: 0 UID: 0 PID: 23180 Comm: syz.6.6826 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 478.210749][T23180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 478.210763][T23180] Call Trace: [ 478.210772][T23180] [ 478.210804][T23180] __dump_stack+0x1d/0x30 [ 478.210826][T23180] dump_stack_lvl+0xe8/0x140 [ 478.210845][T23180] dump_stack+0x15/0x1b [ 478.210866][T23180] should_fail_ex+0x265/0x280 [ 478.210907][T23180] should_fail+0xb/0x20 [ 478.210964][T23180] should_fail_usercopy+0x1a/0x20 [ 478.210987][T23180] _copy_to_user+0x20/0xa0 [ 478.211009][T23180] simple_read_from_buffer+0xb5/0x130 [ 478.211041][T23180] proc_fail_nth_read+0x100/0x140 [ 478.211070][T23180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.211096][T23180] vfs_read+0x19d/0x6f0 [ 478.211200][T23180] ? __rcu_read_unlock+0x4f/0x70 [ 478.211220][T23180] ? __fget_files+0x184/0x1c0 [ 478.211257][T23180] ksys_read+0xda/0x1a0 [ 478.211377][T23180] __x64_sys_read+0x40/0x50 [ 478.211409][T23180] x64_sys_call+0x2d77/0x2fb0 [ 478.211435][T23180] do_syscall_64+0xd0/0x1a0 [ 478.211534][T23180] ? clear_bhb_loop+0x40/0x90 [ 478.211567][T23180] ? clear_bhb_loop+0x40/0x90 [ 478.211595][T23180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.211622][T23180] RIP: 0033:0x7fafd76dd37c [ 478.211699][T23180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.211721][T23180] RSP: 002b:00007fafd5d47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.211740][T23180] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76dd37c [ 478.211752][T23180] RDX: 000000000000000f RSI: 00007fafd5d470a0 RDI: 0000000000000007 [ 478.211764][T23180] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 478.211776][T23180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 478.211787][T23180] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 478.211808][T23180] [ 478.227760][T23185] SELinux: Context Ü is not valid (left unmapped). [ 478.635956][T23196] loop2: detected capacity change from 0 to 512 [ 478.635998][T23193] syz!: rxe_newlink: already configured on team_slave_0 [ 478.669991][T23196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 478.682856][T23196] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.888241][T23211] loop6: detected capacity change from 0 to 512 [ 478.908016][T23211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 478.920730][T23211] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.002687][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 479.088617][T23193] 9pnet: Could not find request transport: r [ 479.220766][T23224] loop3: detected capacity change from 0 to 512 [ 479.260228][T23224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 479.286893][T23224] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6839: bad orphan inode 13 [ 479.362054][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 479.383554][T23229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6841'. [ 479.436505][T23235] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.446984][T23224] ext4_test_bit(bit=12, block=18) = 1 [ 479.452484][T23224] is_bad_inode(inode)=0 [ 479.456813][T23224] NEXT_ORPHAN(inode)=2130706432 [ 479.461789][T23224] max_ino=32 [ 479.465078][T23224] i_nlink=1 [ 479.494495][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6843'. [ 479.505152][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6843'. [ 479.513810][T23239] loop5: detected capacity change from 0 to 512 [ 479.516042][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6843'. [ 479.522188][T23224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.580282][T21246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.582871][T23236] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 479.598204][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6843'. [ 479.608976][T23231] netlink: 'syz.6.6843': attribute type 6 has an invalid length. [ 479.626416][T23235] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.657155][T23239] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 479.705678][T23239] EXT4-fs (loop5): mount failed [ 479.708215][T23251] loop2: detected capacity change from 0 to 1024 [ 479.718387][T23235] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.732074][T23231] 9pnet: Could not find request transport: r [ 479.746266][T23251] EXT4-fs: Ignoring removed oldalloc option [ 479.752327][T23251] EXT4-fs: Ignoring removed orlov option [ 479.771839][T23250] bond4: entered promiscuous mode [ 479.777096][T23250] bond4: entered allmulticast mode [ 479.803313][T23251] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 479.821627][T23250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 479.868777][T23251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.911811][T23250] bond4 (unregistering): Released all slaves [ 479.953026][T23235] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.027798][T23235] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.080486][T23235] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.093400][T23261] loop3: detected capacity change from 0 to 1024 [ 480.102889][T23261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.114446][T23235] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.122988][T23261] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 480.130259][T23235] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.134502][T23261] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 480.168788][T23261] EXT4-fs (loop3): mount failed [ 480.180915][T23263] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 480.216873][T23267] loop0: detected capacity change from 0 to 512 [ 480.236791][T23267] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 480.319554][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6856'. [ 480.333846][T23269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6856'. [ 480.344734][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6856'. [ 480.364712][T23269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6856'. [ 480.375155][T23269] netlink: 'syz.3.6856': attribute type 6 has an invalid length. [ 480.405529][T23269] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 480.485341][T23277] loop6: detected capacity change from 0 to 512 [ 480.510964][T23277] EXT4-fs (loop6): orphan cleanup on readonly fs [ 480.542905][T23269] 9pnet: Could not find request transport: r [ 480.576154][T23277] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6858: bad orphan inode 13 [ 480.588546][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.648607][T23277] ext4_test_bit(bit=12, block=18) = 1 [ 480.654092][T23277] is_bad_inode(inode)=0 [ 480.658271][T23277] NEXT_ORPHAN(inode)=2130706432 [ 480.663204][T23277] max_ino=32 [ 480.666516][T23277] i_nlink=1 [ 480.690265][T23277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 480.728783][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.748841][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 480.748859][ T29] audit: type=1326 audit(1747496989.086:25437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.782632][ T29] audit: type=1326 audit(1747496989.116:25438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.806256][ T29] audit: type=1326 audit(1747496989.116:25439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.830123][ T29] audit: type=1326 audit(1747496989.116:25440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.854303][ T29] audit: type=1326 audit(1747496989.116:25441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.878176][ T29] audit: type=1326 audit(1747496989.116:25442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.902508][ T29] audit: type=1326 audit(1747496989.116:25443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.926376][ T29] audit: type=1326 audit(1747496989.116:25444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.950765][ T29] audit: type=1326 audit(1747496989.116:25445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 480.974794][ T29] audit: type=1326 audit(1747496989.116:25446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23283 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcbbc10e969 code=0x7ffc0000 [ 481.131426][T23290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41853 sclass=netlink_route_socket pid=23290 comm=syz.3.6861 [ 481.179891][T23284] loop2: detected capacity change from 0 to 512 [ 481.218549][T23284] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 481.250286][T23298] loop5: detected capacity change from 0 to 1024 [ 481.258312][T23298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.310888][T23284] EXT4-fs (loop2): 1 truncate cleaned up [ 481.317062][T23284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.354912][T23307] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.364818][T23298] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.376897][T23284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.416379][T23307] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.418232][T23298] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 481.458391][T23298] EXT4-fs (loop5): mount failed [ 481.483385][T23311] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6867'. [ 481.496930][T23307] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.546774][T23313] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 481.576150][T23307] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.642227][T23320] loop2: detected capacity change from 0 to 1024 [ 481.657313][T23320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.670594][T23320] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 481.712918][T23307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.725484][T23307] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.738104][T23307] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.750520][T23307] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.772117][T23320] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 481.814338][T23320] EXT4-fs (loop2): mount failed [ 482.091764][T23349] loop3: detected capacity change from 0 to 512 [ 482.105826][T23349] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 482.144509][T23355] FAULT_INJECTION: forcing a failure. [ 482.144509][T23355] name failslab, interval 1, probability 0, space 0, times 0 [ 482.157388][T23355] CPU: 0 UID: 0 PID: 23355 Comm: syz.2.6884 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 482.157421][T23355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 482.157438][T23355] Call Trace: [ 482.157445][T23355] [ 482.157455][T23355] __dump_stack+0x1d/0x30 [ 482.157482][T23355] dump_stack_lvl+0xe8/0x140 [ 482.157533][T23355] dump_stack+0x15/0x1b [ 482.157555][T23355] should_fail_ex+0x265/0x280 [ 482.157643][T23355] ? rtnl_newlink+0x5c/0x12d0 [ 482.157674][T23355] should_failslab+0x8c/0xb0 [ 482.157712][T23355] __kmalloc_cache_noprof+0x4c/0x320 [ 482.157741][T23355] rtnl_newlink+0x5c/0x12d0 [ 482.157843][T23355] ? page_counter_cancel+0xe1/0x1e0 [ 482.157929][T23355] ? __rcu_read_unlock+0x4f/0x70 [ 482.157956][T23355] ? __rcu_read_unlock+0x4f/0x70 [ 482.158035][T23355] ? __refill_stock+0x96/0xd0 [ 482.158066][T23355] ? cgroup_rstat_updated+0xa3/0x510 [ 482.158105][T23355] ? refill_stock+0xa0/0x120 [ 482.158207][T23355] ? __refill_stock+0x96/0xd0 [ 482.158276][T23355] ? __memcg_slab_free_hook+0xb7/0x1c0 [ 482.158317][T23355] ? __kfree_skb+0x109/0x150 [ 482.158334][T23355] ? __rcu_read_unlock+0x4f/0x70 [ 482.158354][T23355] ? avc_has_perm_noaudit+0x1b1/0x200 [ 482.158375][T23355] ? selinux_capable+0x1f9/0x270 [ 482.158408][T23355] ? security_capable+0x83/0x90 [ 482.158483][T23355] ? ns_capable+0x7d/0xb0 [ 482.158509][T23355] ? __pfx_rtnl_newlink+0x10/0x10 [ 482.158535][T23355] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 482.158562][T23355] netlink_rcv_skb+0x123/0x220 [ 482.158658][T23355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 482.158740][T23355] rtnetlink_rcv+0x1c/0x30 [ 482.158767][T23355] netlink_unicast+0x5a1/0x670 [ 482.158804][T23355] netlink_sendmsg+0x58b/0x6b0 [ 482.158824][T23355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.158846][T23355] __sock_sendmsg+0x145/0x180 [ 482.158917][T23355] ____sys_sendmsg+0x31e/0x4e0 [ 482.158982][T23355] ___sys_sendmsg+0x17b/0x1d0 [ 482.159097][T23355] __x64_sys_sendmsg+0xd4/0x160 [ 482.159128][T23355] x64_sys_call+0x2999/0x2fb0 [ 482.159159][T23355] do_syscall_64+0xd0/0x1a0 [ 482.159188][T23355] ? clear_bhb_loop+0x40/0x90 [ 482.159210][T23355] ? clear_bhb_loop+0x40/0x90 [ 482.159314][T23355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.159386][T23355] RIP: 0033:0x7fcbbc10e969 [ 482.159407][T23355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.159452][T23355] RSP: 002b:00007fcbba777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.159473][T23355] RAX: ffffffffffffffda RBX: 00007fcbbc335fa0 RCX: 00007fcbbc10e969 [ 482.159485][T23355] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 482.159498][T23355] RBP: 00007fcbba777090 R08: 0000000000000000 R09: 0000000000000000 [ 482.159559][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.159575][T23355] R13: 0000000000000000 R14: 00007fcbbc335fa0 R15: 00007ffcbc61f588 [ 482.159598][T23355] [ 482.520550][T23359] loop6: detected capacity change from 0 to 512 [ 482.558339][T23359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 482.571356][T23359] ext4 filesystem being mounted at /294/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 482.625557][T23358] netlink: 'syz.3.6885': attribute type 6 has an invalid length. [ 482.663722][T23358] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.727044][T23358] 9pnet: Could not find request transport: r [ 482.753150][T23376] loop0: detected capacity change from 0 to 1024 [ 482.781442][T23376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.789177][T23379] loop5: detected capacity change from 0 to 512 [ 482.810219][T23379] EXT4-fs (loop5): orphan cleanup on readonly fs [ 482.836046][T23379] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.6892: bad orphan inode 13 [ 482.871314][T23379] ext4_test_bit(bit=12, block=18) = 1 [ 482.876885][T23379] is_bad_inode(inode)=0 [ 482.881106][T23379] NEXT_ORPHAN(inode)=2130706432 [ 482.886063][T23379] max_ino=32 [ 482.889285][T23379] i_nlink=1 [ 482.905195][T23376] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 482.944693][T23379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.011093][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 483.027360][T23384] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 483.067064][T23376] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 483.073623][T23376] EXT4-fs (loop0): mount failed [ 483.123873][T23389] loop3: detected capacity change from 0 to 512 [ 483.163639][T23391] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 483.184439][T23389] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 483.201690][T23395] hub 2-0:1.0: USB hub found [ 483.206795][T23395] hub 2-0:1.0: 8 ports detected [ 483.243621][T23397] bond2: entered promiscuous mode [ 483.248931][T23397] bond2: entered allmulticast mode [ 483.262530][T23397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.279229][T23388] loop5: detected capacity change from 0 to 512 [ 483.311133][T23388] EXT4-fs: Ignoring removed nobh option [ 483.334117][T23397] bond2 (unregistering): Released all slaves [ 483.427920][T23388] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.6895: corrupted inode contents [ 483.450450][T23388] EXT4-fs (loop5): Remounting filesystem read-only [ 483.460616][T23388] EXT4-fs (loop5): 1 truncate cleaned up [ 483.468490][T23388] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.480067][T12744] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 483.490972][T12744] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 483.501882][T12744] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 483.646831][T23419] loop6: detected capacity change from 0 to 512 [ 483.746206][T23425] loop3: detected capacity change from 0 to 512 [ 483.764429][T23419] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.765660][T23425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 483.876646][T23425] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6906: bad orphan inode 13 [ 483.888426][T23419] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.6902: corrupted in-inode xattr: bad e_name length [ 483.919886][T23425] ext4_test_bit(bit=12, block=18) = 1 [ 483.925395][T23425] is_bad_inode(inode)=0 [ 483.929596][T23425] NEXT_ORPHAN(inode)=2130706432 [ 483.934578][T23425] max_ino=32 [ 483.937785][T23425] i_nlink=1 [ 483.945449][T23429] loop2: detected capacity change from 0 to 512 [ 483.981477][T23429] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 483.984965][T23419] EXT4-fs (loop6): Remounting filesystem read-only [ 484.043257][T23435] netlink: 'syz.0.6907': attribute type 6 has an invalid length. [ 484.055969][T23433] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 484.087194][T23433] 9pnet: Could not find request transport: r [ 484.172683][T23443] Cannot find add_set index 3 as target [ 484.203480][T23442] loop3: detected capacity change from 0 to 512 [ 484.252840][T23445] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 484.302087][T23442] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 484.364305][T23448] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.421676][T23451] __nla_validate_parse: 14 callbacks suppressed [ 484.421715][T23451] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6912'. [ 484.455426][T23454] bond4: entered promiscuous mode [ 484.460541][T23454] bond4: entered allmulticast mode [ 484.480312][T23454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.518777][T23454] bond4 (unregistering): Released all slaves [ 484.575806][T23448] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.686326][T23448] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.756512][T23448] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.812973][T23466] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 484.861733][T23448] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.878759][T23448] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.892093][T23466] 9pnet: Could not find request transport: r [ 484.898226][T23448] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.903753][T23448] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.919744][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6920'. [ 484.929513][T23473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6920'. [ 484.938925][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6920'. [ 484.966671][T23473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6920'. [ 484.975860][T23473] netlink: 'syz.5.6920': attribute type 6 has an invalid length. [ 484.990482][T23473] syz!: rxe_newlink: already configured on team_slave_0 [ 485.017220][T23478] dvmrp5: entered allmulticast mode [ 485.035627][T23478] dvmrp5: left allmulticast mode [ 485.037688][T23473] 9pnet: Could not find request transport: r [ 485.076559][T23487] loop2: detected capacity change from 0 to 164 [ 485.091912][T23487] ISOFS: unable to read i-node block [ 485.097399][T23487] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 485.097424][T23488] loop5: detected capacity change from 0 to 512 [ 485.125467][T23483] loop3: detected capacity change from 0 to 512 [ 485.142731][T23488] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 485.165723][T23483] EXT4-fs (loop3): orphan cleanup on readonly fs [ 485.213148][T23497] loop0: detected capacity change from 0 to 1024 [ 485.223603][T23497] EXT4-fs: Ignoring removed oldalloc option [ 485.253491][T23483] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6921: bad orphan inode 13 [ 485.266013][T23492] bond2: entered promiscuous mode [ 485.271184][T23492] bond2: entered allmulticast mode [ 485.276663][T23497] EXT4-fs: Ignoring removed orlov option [ 485.283030][T23497] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 485.338004][T23492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.429613][T23483] ext4_test_bit(bit=12, block=18) = 1 [ 485.435198][T23483] is_bad_inode(inode)=0 [ 485.439374][T23483] NEXT_ORPHAN(inode)=2130706432 [ 485.444276][T23483] max_ino=32 [ 485.447583][T23483] i_nlink=1 [ 485.453625][T23492] bond2 (unregistering): Released all slaves [ 485.510755][T23505] bond1: entered promiscuous mode [ 485.516069][T23505] bond1: entered allmulticast mode [ 485.541795][T23505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.642625][T23505] bond1 (unregistering): Released all slaves [ 485.658464][T23501] bond3: entered promiscuous mode [ 485.663635][T23501] bond3: entered allmulticast mode [ 485.675567][T23501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.686782][T23501] bond3 (unregistering): Released all slaves [ 485.817300][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 485.817320][ T29] audit: type=1400 audit(1747496994.156:26006): avc: denied { write } for pid=23514 comm="syz.6.6933" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 485.856057][T23515] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 485.873983][ T29] audit: type=1400 audit(1747496994.186:26007): avc: denied { open } for pid=23514 comm="syz.6.6933" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 485.898498][ T29] audit: type=1400 audit(1747496994.186:26008): avc: denied { read } for pid=23514 comm="syz.6.6933" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 485.924688][T23521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6931'. [ 486.017505][T23515] 9pnet: Could not find request transport: r [ 486.095469][T23526] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.137213][T23526] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.182868][T23537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6938'. [ 486.197652][T23526] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.228711][T23528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6936'. [ 486.237784][T23528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6936'. [ 486.246895][T23528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6936'. [ 486.269903][ T29] audit: type=1400 audit(1747496994.606:26009): avc: denied { ioctl } for pid=23536 comm="syz.5.6938" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 486.360652][T23535] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 486.384174][T23528] netlink: 'syz.3.6936': attribute type 6 has an invalid length. [ 486.405025][T23526] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.419599][T23542] veth0_macvtap: left promiscuous mode [ 486.447672][T23542] macvtap0: refused to change device tx_queue_len [ 486.463219][T23545] bond2: entered promiscuous mode [ 486.468462][T23545] bond2: entered allmulticast mode [ 486.470722][T23528] 9pnet: Could not find request transport: r [ 486.477405][T23545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.490434][T23545] bond2 (unregistering): Released all slaves [ 486.521575][T23526] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.535449][T23526] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.566544][T23526] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.588001][T23526] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.650049][ T29] audit: type=1326 audit(1747496994.986:26010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.721265][ T29] audit: type=1326 audit(1747496995.016:26011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.745192][ T29] audit: type=1326 audit(1747496995.016:26012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.769830][ T29] audit: type=1326 audit(1747496995.016:26013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.794219][ T29] audit: type=1326 audit(1747496995.016:26014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.817834][ T29] audit: type=1326 audit(1747496995.016:26015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23559 comm="syz.0.6946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0d07be969 code=0x7ffc0000 [ 486.852731][T23562] loop0: detected capacity change from 0 to 1024 [ 486.862023][T23561] loop2: detected capacity change from 0 to 512 [ 486.864396][T23562] EXT4-fs: Ignoring removed oldalloc option [ 486.879528][T23562] EXT4-fs: Ignoring removed orlov option [ 486.885949][T23562] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 486.898084][T23561] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.058067][T23575] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 487.139476][T23576] loop6: detected capacity change from 0 to 512 [ 487.157441][T23576] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 487.235946][T23570] 9pnet: Could not find request transport: r [ 487.351977][T23589] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.383010][T23591] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 487.392443][T23589] bridge_slave_1 (unregistering): left allmulticast mode [ 487.399663][T23589] bridge_slave_1 (unregistering): left promiscuous mode [ 487.406957][T23589] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.436328][T23593] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 487.437529][T23595] netlink: 'syz.5.6957': attribute type 4 has an invalid length. [ 487.536636][T23597] netlink: 'syz.2.6958': attribute type 6 has an invalid length. [ 487.552740][T23597] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 487.604076][T23613] tmpfs: Unsupported parameter 'huge' [ 487.613659][T23597] 9pnet: Could not find request transport: r [ 487.726739][T23619] netlink: 'syz.5.6966': attribute type 6 has an invalid length. [ 487.741122][T23619] syz!: rxe_newlink: already configured on team_slave_0 [ 487.819845][T23619] 9pnet: Could not find request transport: r [ 487.825567][T23625] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 487.951681][T23640] loop0: detected capacity change from 0 to 1024 [ 487.963314][T23640] EXT4-fs: Ignoring removed oldalloc option [ 487.976788][T23640] EXT4-fs: Ignoring removed orlov option [ 487.983604][T23647] FAULT_INJECTION: forcing a failure. [ 487.983604][T23647] name failslab, interval 1, probability 0, space 0, times 0 [ 487.989349][T23644] bond2: entered promiscuous mode [ 487.996399][T23647] CPU: 1 UID: 0 PID: 23647 Comm: syz.6.6977 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 487.996440][T23647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 487.996458][T23647] Call Trace: [ 487.996466][T23647] [ 487.996477][T23647] __dump_stack+0x1d/0x30 [ 487.996510][T23647] dump_stack_lvl+0xe8/0x140 [ 487.996537][T23647] dump_stack+0x15/0x1b [ 487.996558][T23647] should_fail_ex+0x265/0x280 [ 487.996680][T23647] should_failslab+0x8c/0xb0 [ 487.996721][T23647] kmem_cache_alloc_node_noprof+0x57/0x320 [ 487.996750][T23647] ? __alloc_skb+0x101/0x320 [ 487.996843][T23647] __alloc_skb+0x101/0x320 [ 487.996891][T23647] netlink_alloc_large_skb+0xba/0xf0 [ 487.997029][T23647] netlink_sendmsg+0x3cf/0x6b0 [ 487.997059][T23647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.997127][T23647] __sock_sendmsg+0x145/0x180 [ 487.997211][T23647] ____sys_sendmsg+0x31e/0x4e0 [ 487.997243][T23647] ___sys_sendmsg+0x17b/0x1d0 [ 487.997291][T23647] __x64_sys_sendmsg+0xd4/0x160 [ 487.997324][T23647] x64_sys_call+0x2999/0x2fb0 [ 487.997374][T23647] do_syscall_64+0xd0/0x1a0 [ 487.997481][T23647] ? clear_bhb_loop+0x40/0x90 [ 487.997510][T23647] ? clear_bhb_loop+0x40/0x90 [ 487.997587][T23647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.997615][T23647] RIP: 0033:0x7fafd76de969 [ 487.997642][T23647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.997666][T23647] RSP: 002b:00007fafd5d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.997786][T23647] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 487.997803][T23647] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000003 [ 487.997821][T23647] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 487.997838][T23647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.997854][T23647] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 487.997947][T23647] [ 488.000162][T23640] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 488.001400][T23644] bond2: entered allmulticast mode [ 488.220664][T23644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.231883][T23644] bond2 (unregistering): Released all slaves [ 488.294636][T23656] loop5: detected capacity change from 0 to 512 [ 488.302254][T23656] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 488.316552][T23654] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.339706][T23654] 9pnet: Could not find request transport: r [ 488.460821][T23667] netlink: 'syz.6.6983': attribute type 6 has an invalid length. [ 488.477442][T23667] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 488.539185][T23667] 9pnet: Could not find request transport: r [ 488.718984][T23679] loop2: detected capacity change from 0 to 512 [ 488.749595][T23683] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 488.758440][T23679] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 488.765289][T23683] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 488.876854][T23691] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 488.889757][T23691] bond1 (unregistering): Released all slaves [ 488.916480][T23688] hsr_slave_0: left promiscuous mode [ 488.922289][T23688] hsr_slave_1: left promiscuous mode [ 488.958532][T23683] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 488.965125][T23683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.972730][T23683] vhci_hcd vhci_hcd.0: Device attached [ 488.990748][T23693] vhci_hcd: connection closed [ 488.991020][T18816] vhci_hcd: stop threads [ 489.000136][T18816] vhci_hcd: release socket [ 489.004638][T18816] vhci_hcd: disconnect device [ 489.075496][T23698] loop5: detected capacity change from 0 to 512 [ 489.091913][T23698] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 489.235294][T23700] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.270258][T23700] 9pnet: Could not find request transport: r [ 489.382571][T23709] ALSA: seq fatal error: cannot create timer (-19) [ 489.518912][T23709] loop5: detected capacity change from 0 to 164 [ 489.564829][T23709] Unable to read rock-ridge attributes [ 489.605187][T23720] netlink: 'syz.2.6999': attribute type 21 has an invalid length. [ 489.613732][T23720] netlink: 'syz.2.6999': attribute type 20 has an invalid length. [ 489.622759][T23720] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.681454][T23709] Unable to read rock-ridge attributes [ 489.693217][T23731] loop6: detected capacity change from 0 to 512 [ 489.702666][T23731] EXT4-fs (loop6): orphan cleanup on readonly fs [ 489.714950][T23731] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7003: bad orphan inode 13 [ 489.727206][T23730] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.736764][T23731] ext4_test_bit(bit=12, block=18) = 1 [ 489.742187][T23731] is_bad_inode(inode)=0 [ 489.746473][T23731] NEXT_ORPHAN(inode)=2130706432 [ 489.751349][T23731] max_ino=32 [ 489.754593][T23731] i_nlink=1 [ 489.800961][T23734] FAULT_INJECTION: forcing a failure. [ 489.800961][T23734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.814452][T23734] CPU: 1 UID: 0 PID: 23734 Comm: syz.3.7006 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 489.814498][T23734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 489.814512][T23734] Call Trace: [ 489.814518][T23734] [ 489.814524][T23734] __dump_stack+0x1d/0x30 [ 489.814607][T23734] dump_stack_lvl+0xe8/0x140 [ 489.814627][T23734] dump_stack+0x15/0x1b [ 489.814643][T23734] should_fail_ex+0x265/0x280 [ 489.814673][T23734] ? __pfx_perf_ioctl+0x10/0x10 [ 489.814744][T23734] should_fail+0xb/0x20 [ 489.814773][T23734] should_fail_usercopy+0x1a/0x20 [ 489.814794][T23734] _copy_from_user+0x1c/0xb0 [ 489.814864][T23734] memdup_user+0x5e/0xd0 [ 489.814885][T23734] strndup_user+0x68/0xb0 [ 489.814904][T23734] perf_ioctl+0x505/0x1530 [ 489.814942][T23734] ? ioctl_has_perm+0x2bb/0x2e0 [ 489.814982][T23734] ? do_vfs_ioctl+0x993/0x15b0 [ 489.815012][T23734] ? selinux_file_ioctl+0x2e3/0x370 [ 489.815090][T23734] ? __fget_files+0x184/0x1c0 [ 489.815118][T23734] ? __pfx_perf_ioctl+0x10/0x10 [ 489.815139][T23734] __se_sys_ioctl+0xcb/0x140 [ 489.815160][T23734] __x64_sys_ioctl+0x43/0x50 [ 489.815182][T23734] x64_sys_call+0x19a8/0x2fb0 [ 489.815264][T23734] do_syscall_64+0xd0/0x1a0 [ 489.815339][T23734] ? clear_bhb_loop+0x40/0x90 [ 489.815365][T23734] ? clear_bhb_loop+0x40/0x90 [ 489.815439][T23734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.815512][T23734] RIP: 0033:0x7f683a36e969 [ 489.815543][T23734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.815604][T23734] RSP: 002b:00007f68389d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.815686][T23734] RAX: ffffffffffffffda RBX: 00007f683a595fa0 RCX: 00007f683a36e969 [ 489.815702][T23734] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003 [ 489.815723][T23734] RBP: 00007f68389d7090 R08: 0000000000000000 R09: 0000000000000000 [ 489.815739][T23734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.815754][T23734] R13: 0000000000000000 R14: 00007f683a595fa0 R15: 00007ffe760a26f8 [ 489.815786][T23734] [ 490.080273][T23736] bond3: entered promiscuous mode [ 490.085475][T23736] bond3: entered allmulticast mode [ 490.101408][T23736] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.123799][T23736] bond3 (unregistering): Released all slaves [ 490.285009][T23747] bond4: entered promiscuous mode [ 490.290186][T23747] bond4: entered allmulticast mode [ 490.290471][T23743] loop2: detected capacity change from 0 to 512 [ 490.307731][T23747] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.323686][T23743] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 490.368018][T23747] bond4 (unregistering): Released all slaves [ 490.418583][T23756] bond1: entered promiscuous mode [ 490.423755][T23756] bond1: entered allmulticast mode [ 490.480186][T23756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.529785][T23756] bond1 (unregistering): Released all slaves [ 490.635744][T23763] __nla_validate_parse: 27 callbacks suppressed [ 490.635783][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7013'. [ 490.652792][T23763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7013'. [ 490.662383][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7013'. [ 490.676361][T23763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7013'. [ 490.687431][T23763] netlink: 'syz.3.7013': attribute type 6 has an invalid length. [ 490.759902][T23764] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 490.790318][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7014'. [ 490.801949][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7014'. [ 490.811968][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7014'. [ 490.825479][T23766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7014'. [ 490.835876][T23766] netlink: 'syz.6.7014': attribute type 6 has an invalid length. [ 490.856002][T23766] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 490.866939][T23763] 9pnet: Could not find request transport: r [ 490.917204][T23766] 9pnet: Could not find request transport: r [ 490.945956][T23773] loop5: detected capacity change from 0 to 512 [ 490.954189][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 490.954203][ T29] audit: type=1326 audit(1747496999.286:26370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 490.989835][T23773] EXT4-fs (loop5): orphan cleanup on readonly fs [ 490.996745][T23773] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7016: bad orphan inode 13 [ 491.008358][T23773] ext4_test_bit(bit=12, block=18) = 1 [ 491.013779][T23773] is_bad_inode(inode)=0 [ 491.018124][T23773] NEXT_ORPHAN(inode)=2130706432 [ 491.022987][T23773] max_ino=32 [ 491.026262][T23773] i_nlink=1 [ 491.031421][ T29] audit: type=1326 audit(1747496999.326:26371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.056602][ T29] audit: type=1326 audit(1747496999.366:26372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.080229][ T29] audit: type=1326 audit(1747496999.366:26373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.104307][ T29] audit: type=1326 audit(1747496999.366:26374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.128244][ T29] audit: type=1326 audit(1747496999.366:26375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.152285][ T29] audit: type=1326 audit(1747496999.366:26376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.176132][ T29] audit: type=1326 audit(1747496999.366:26377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.199866][ T29] audit: type=1326 audit(1747496999.366:26378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.223702][ T29] audit: type=1326 audit(1747496999.366:26379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23771 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683a36e969 code=0x7ffc0000 [ 491.277779][T23784] netlink: 'syz.2.7018': attribute type 1 has an invalid length. [ 491.344088][T23782] loop0: detected capacity change from 0 to 1024 [ 491.351957][T23786] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 491.361013][T23777] loop6: detected capacity change from 0 to 512 [ 491.362196][T23782] EXT4-fs: Ignoring removed nobh option [ 491.373316][T23782] EXT4-fs: Ignoring removed bh option [ 491.417775][T23777] ext4 filesystem being mounted at /322/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.559529][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7024'. [ 491.570571][T23802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7024'. [ 491.582762][T23811] netlink: 'syz.6.7027': attribute type 10 has an invalid length. [ 491.592406][T23811] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.600007][T23811] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.611971][T23802] syz!: rxe_newlink: already configured on team_slave_0 [ 491.619717][T23811] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.626978][T23811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.634584][T23811] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.641650][T23811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.653875][T23811] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 491.665798][T12744] ------------[ cut here ]------------ [ 491.672308][T12744] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 491.680713][T12744] WARNING: CPU: 0 PID: 12744 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1f0/0x200 [ 491.691416][T12744] Modules linked in: [ 491.695417][T12744] CPU: 0 UID: 0 PID: 12744 Comm: kworker/u8:23 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 491.708818][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 491.719038][T12744] Workqueue: bond0 bond_mii_monitor [ 491.724367][T12744] RIP: 0010:__linkwatch_sync_dev+0x1f0/0x200 [ 491.730396][T12744] Code: 95 50 d3 86 e8 91 13 26 fd c6 05 8f ee 87 02 01 90 48 c7 c7 74 28 5a 86 48 c7 c6 84 10 46 86 ba 38 00 00 00 e8 c1 3b d6 fc 90 <0f> 0b 90 90 e9 d6 fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 491.750125][T12744] RSP: 0018:ffffc90002cdbb70 EFLAGS: 00010246 [ 491.756315][T12744] RAX: 32f2adab2c81e500 RBX: ffff888118dd2000 RCX: ffff8881037a5280 [ 491.764609][T12744] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 491.772612][T12744] RBP: 0000000000000000 R08: 0001c90002cdb9ef R09: 0000000000000000 [ 491.780667][T12744] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 491.788696][T12744] R13: ffffffff85922cb0 R14: ffffffff85922cb0 R15: 0000000000000000 [ 491.796871][T12744] FS: 0000000000000000(0000) GS:ffff8882aee4e000(0000) knlGS:0000000000000000 [ 491.805945][T12744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.812698][T12744] CR2: 0000000020000000 CR3: 0000000118718000 CR4: 00000000003506f0 [ 491.820766][T12744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.828920][T12744] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 491.837050][T12744] Call Trace: [ 491.840361][T12744] [ 491.843503][T12744] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 491.849213][T12744] ethtool_op_get_link+0x15/0x50 [ 491.853610][T23812] 9pnet: Could not find request transport: r [ 491.854195][T12744] bond_check_dev_link+0x295/0x430 [ 491.854241][T12744] bond_mii_monitor+0x2da/0x1770 [ 491.854319][T12744] ? __list_add_valid_or_report+0x38/0xe0 [ 491.854351][T12744] ? __pwq_activate_work+0x1ad/0x290 [ 491.854392][T12744] ? try_to_wake_up+0x212/0x630 [ 491.854422][T12744] process_scheduled_works+0x4ce/0x9d0 [ 491.854517][T12744] worker_thread+0x582/0x770 [ 491.854556][T12744] ? schedule+0x5f/0xd0 [ 491.854598][T12744] kthread+0x489/0x510 [ 491.905149][T12744] ? finish_task_switch+0xad/0x2b0 [ 491.910453][T12744] ? __pfx_worker_thread+0x10/0x10 [ 491.915777][T12744] ? __pfx_kthread+0x10/0x10 [ 491.920379][T12744] ret_from_fork+0x4b/0x60 [ 491.924824][T12744] ? __pfx_kthread+0x10/0x10 [ 491.929692][T12744] ret_from_fork_asm+0x1a/0x30 [ 491.934634][T12744] [ 491.937678][T12744] ---[ end trace 0000000000000000 ]--- [ 491.944313][T23806] netlink: 'syz.0.7025': attribute type 6 has an invalid length. [ 491.982040][T23821] loop6: detected capacity change from 0 to 512 [ 491.993354][T23806] 9pnet: Could not find request transport: r [ 492.003129][T23821] EXT4-fs (loop6): orphan cleanup on readonly fs [ 492.022978][T23821] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7030: bad orphan inode 13 [ 492.040714][T23826] FAULT_INJECTION: forcing a failure. [ 492.040714][T23826] name failslab, interval 1, probability 0, space 0, times 0 [ 492.053540][T23826] CPU: 0 UID: 0 PID: 23826 Comm: syz.0.7031 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 492.053626][T23826] Tainted: [W]=WARN [ 492.053633][T23826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 492.053649][T23826] Call Trace: [ 492.053673][T23826] [ 492.053682][T23826] __dump_stack+0x1d/0x30 [ 492.053710][T23826] dump_stack_lvl+0xe8/0x140 [ 492.053736][T23826] dump_stack+0x15/0x1b [ 492.053758][T23826] should_fail_ex+0x265/0x280 [ 492.053839][T23826] should_failslab+0x8c/0xb0 [ 492.053879][T23826] kmem_cache_alloc_node_noprof+0x57/0x320 [ 492.053909][T23826] ? __alloc_skb+0x101/0x320 [ 492.053977][T23826] __alloc_skb+0x101/0x320 [ 492.054018][T23826] netlink_alloc_large_skb+0xba/0xf0 [ 492.054059][T23826] netlink_sendmsg+0x3cf/0x6b0 [ 492.054153][T23826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.054179][T23826] __sock_sendmsg+0x145/0x180 [ 492.054213][T23826] ____sys_sendmsg+0x31e/0x4e0 [ 492.054268][T23826] ___sys_sendmsg+0x17b/0x1d0 [ 492.054312][T23826] __x64_sys_sendmsg+0xd4/0x160 [ 492.054389][T23826] x64_sys_call+0x2999/0x2fb0 [ 492.054412][T23826] do_syscall_64+0xd0/0x1a0 [ 492.054443][T23826] ? clear_bhb_loop+0x40/0x90 [ 492.054468][T23826] ? clear_bhb_loop+0x40/0x90 [ 492.054531][T23826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.054558][T23826] RIP: 0033:0x7fa0d07be969 [ 492.054578][T23826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.054626][T23826] RSP: 002b:00007fa0cee27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.054651][T23826] RAX: ffffffffffffffda RBX: 00007fa0d09e5fa0 RCX: 00007fa0d07be969 [ 492.054665][T23826] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 492.054678][T23826] RBP: 00007fa0cee27090 R08: 0000000000000000 R09: 0000000000000000 [ 492.054694][T23826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.054710][T23826] R13: 0000000000000000 R14: 00007fa0d09e5fa0 R15: 00007ffe4f5cc3b8 [ 492.054734][T23826] [ 492.265943][T23821] ext4_test_bit(bit=12, block=18) = 1 [ 492.271415][T23821] is_bad_inode(inode)=0 [ 492.275631][T23821] NEXT_ORPHAN(inode)=2130706432 [ 492.280579][T23821] max_ino=32 [ 492.283803][T23821] i_nlink=1 [ 492.351329][T23842] FAULT_INJECTION: forcing a failure. [ 492.351329][T23842] name failslab, interval 1, probability 0, space 0, times 0 [ 492.364198][T23842] CPU: 1 UID: 0 PID: 23842 Comm: syz.6.7037 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 492.364328][T23842] Tainted: [W]=WARN [ 492.364334][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 492.364399][T23842] Call Trace: [ 492.364408][T23842] [ 492.364418][T23842] __dump_stack+0x1d/0x30 [ 492.364445][T23842] dump_stack_lvl+0xe8/0x140 [ 492.364469][T23842] dump_stack+0x15/0x1b [ 492.364487][T23842] should_fail_ex+0x265/0x280 [ 492.364653][T23842] should_failslab+0x8c/0xb0 [ 492.364691][T23842] kmem_cache_alloc_noprof+0x50/0x310 [ 492.364711][T23842] ? getname_flags+0x80/0x3b0 [ 492.364753][T23842] getname_flags+0x80/0x3b0 [ 492.364792][T23842] io_renameat_prep+0x105/0x1b0 [ 492.364829][T23842] io_submit_sqes+0x5cb/0x1000 [ 492.364880][T23842] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 492.364993][T23842] ? __rcu_read_unlock+0x4f/0x70 [ 492.365021][T23842] ? get_pid_task+0x96/0xd0 [ 492.365048][T23842] ? proc_fail_nth_write+0x12d/0x160 [ 492.365108][T23842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 492.365141][T23842] ? vfs_write+0x75e/0x8d0 [ 492.365174][T23842] ? __rcu_read_unlock+0x4f/0x70 [ 492.365200][T23842] ? __fget_files+0x184/0x1c0 [ 492.365289][T23842] ? fput+0x8f/0xc0 [ 492.365308][T23842] __x64_sys_io_uring_enter+0x78/0x90 [ 492.365341][T23842] x64_sys_call+0x28c8/0x2fb0 [ 492.365382][T23842] do_syscall_64+0xd0/0x1a0 [ 492.365476][T23842] ? clear_bhb_loop+0x40/0x90 [ 492.365504][T23842] ? clear_bhb_loop+0x40/0x90 [ 492.365531][T23842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.365557][T23842] RIP: 0033:0x7fafd76de969 [ 492.365576][T23842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.365676][T23842] RSP: 002b:00007fafd5d47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 492.365700][T23842] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 492.365717][T23842] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000005 [ 492.365774][T23842] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 492.365786][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.365798][T23842] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 492.365817][T23842] [ 492.368402][T23834] netlink: 'syz.0.7034': attribute type 10 has an invalid length. [ 492.488749][T23848] bond1: entered promiscuous mode [ 492.616845][T23848] bond1: entered allmulticast mode [ 492.622407][T23848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.650022][T23848] bond1 (unregistering): Released all slaves [ 492.667663][T23834] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.676613][T23834] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.691582][T23834] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.699404][T23834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.707404][T23834] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.714737][T23834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.727987][T23834] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 492.745769][T23855] netlink: 'syz.5.7041': attribute type 6 has an invalid length. [ 492.777697][T23855] syz!: rxe_newlink: already configured on team_slave_0 [ 492.845201][T23863] loop6: detected capacity change from 0 to 512 [ 492.857611][T23863] EXT4-fs (loop6): orphan cleanup on readonly fs [ 492.864862][T23863] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7044: bad orphan inode 13 [ 492.876870][T23863] ext4_test_bit(bit=12, block=18) = 1 [ 492.882371][T23863] is_bad_inode(inode)=0 [ 492.886610][T23863] NEXT_ORPHAN(inode)=2130706432 [ 492.891576][T23863] max_ino=32 [ 492.894836][T23863] i_nlink=1 [ 492.901577][T23855] 9pnet: Could not find request transport: r [ 492.952653][T23867] rxe_newlink: 1 callbacks suppressed [ 492.952684][T23867] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 492.978633][T23864] 9pnet: Could not find request transport: r [ 493.007445][T23874] loop5: detected capacity change from 0 to 512 [ 493.043323][T23874] EXT4-fs (loop5): 1 orphan inode deleted [ 493.057582][T23874] EXT4-fs mount: 37 callbacks suppressed [ 493.057598][T23874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.076761][T23874] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.077832][T12744] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 493.130195][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.137717][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.145350][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.155707][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.163153][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.170809][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.178627][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.186074][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.193670][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.201117][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.208620][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.216162][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.223578][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.231270][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x7 [ 493.238719][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.246268][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.253858][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.261309][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.262168][T23897] FAULT_INJECTION: forcing a failure. [ 493.262168][T23897] name failslab, interval 1, probability 0, space 0, times 0 [ 493.268725][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.268774][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.281423][T23897] CPU: 1 UID: 0 PID: 23897 Comm: syz.6.7054 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 493.281469][T23897] Tainted: [W]=WARN [ 493.281478][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 493.281496][T23897] Call Trace: [ 493.281506][T23897] [ 493.281516][T23897] __dump_stack+0x1d/0x30 [ 493.281546][T23897] dump_stack_lvl+0xe8/0x140 [ 493.281651][T23897] dump_stack+0x15/0x1b [ 493.281673][T23897] should_fail_ex+0x265/0x280 [ 493.281722][T23897] should_failslab+0x8c/0xb0 [ 493.281807][T23897] kmem_cache_alloc_node_noprof+0x57/0x320 [ 493.281843][T23897] ? dup_task_struct+0x70/0x6a0 [ 493.281880][T23897] dup_task_struct+0x70/0x6a0 [ 493.281914][T23897] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 493.281958][T23897] copy_process+0x399/0x1f90 [ 493.282021][T23897] ? strncpy_from_user+0x177/0x230 [ 493.282062][T23897] ? strncpy_from_user+0x1eb/0x230 [ 493.282104][T23897] kernel_clone+0x16c/0x5b0 [ 493.282139][T23897] ? bpf_probe_read_user_str+0x6c/0x70 [ 493.282225][T23897] __x64_sys_clone+0xe6/0x120 [ 493.282351][T23897] x64_sys_call+0x2c59/0x2fb0 [ 493.282386][T23897] do_syscall_64+0xd0/0x1a0 [ 493.282439][T23897] ? clear_bhb_loop+0x40/0x90 [ 493.282467][T23897] ? clear_bhb_loop+0x40/0x90 [ 493.282496][T23897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.282583][T23897] RIP: 0033:0x7fafd76de969 [ 493.282604][T23897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.282627][T23897] RSP: 002b:00007fafd5d46fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 493.282686][T23897] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 493.282703][T23897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 493.282720][T23897] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 493.282791][T23897] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 493.282808][T23897] R13: 0000000000000001 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 493.282834][T23897] [ 493.430888][T23904] loop2: detected capacity change from 0 to 512 [ 493.434531][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.464536][T23904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 493.471637][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.471662][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.482227][T23904] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7056: bad orphan inode 13 [ 493.487775][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.498453][T23904] ext4_test_bit(bit=12, block=18) = 1 [ 493.504361][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.507962][T23904] is_bad_inode(inode)=0 [ 493.515375][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.515411][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.523147][T23904] NEXT_ORPHAN(inode)=2130706432 [ 493.529612][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.537215][T23904] max_ino=32 [ 493.544613][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 493.545315][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 493.554749][T23904] i_nlink=1 [ 493.589420][T23907] netlink: 'syz.6.7057': attribute type 6 has an invalid length. [ 493.621962][T23904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 493.656087][T23906] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 493.699972][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.716407][T17220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.738033][T23903] 9pnet: Could not find request transport: r [ 493.829673][T23917] loop5: detected capacity change from 0 to 512 [ 493.843292][T23916] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 493.879665][T23917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 493.911977][T23917] ext4 filesystem being mounted at /432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 493.947216][T23919] loop2: detected capacity change from 0 to 512 [ 493.969631][T23919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 493.982447][T23919] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 494.050632][T17220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 494.735486][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 494.858184][T23950] FAULT_INJECTION: forcing a failure. [ 494.858184][T23950] name failslab, interval 1, probability 0, space 0, times 0 [ 494.871954][T23950] CPU: 0 UID: 0 PID: 23950 Comm: syz.5.7070 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 494.871996][T23950] Tainted: [W]=WARN [ 494.872004][T23950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 494.872021][T23950] Call Trace: [ 494.872030][T23950] [ 494.872040][T23950] __dump_stack+0x1d/0x30 [ 494.872066][T23950] dump_stack_lvl+0xe8/0x140 [ 494.872089][T23950] dump_stack+0x15/0x1b [ 494.872121][T23950] should_fail_ex+0x265/0x280 [ 494.872192][T23950] should_failslab+0x8c/0xb0 [ 494.872237][T23950] __kmalloc_noprof+0xa5/0x3e0 [ 494.872257][T23950] ? bpf_test_init+0xa9/0x160 [ 494.872353][T23950] bpf_test_init+0xa9/0x160 [ 494.872392][T23950] bpf_prog_test_run_nf+0x186/0x560 [ 494.872413][T23950] ? __rcu_read_unlock+0x4f/0x70 [ 494.872455][T23950] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 494.872519][T23950] bpf_prog_test_run+0x20a/0x390 [ 494.872626][T23950] __sys_bpf+0x3dc/0x790 [ 494.872671][T23950] __x64_sys_bpf+0x41/0x50 [ 494.872704][T23950] x64_sys_call+0x2478/0x2fb0 [ 494.872726][T23950] do_syscall_64+0xd0/0x1a0 [ 494.872758][T23950] ? clear_bhb_loop+0x40/0x90 [ 494.872803][T23950] ? clear_bhb_loop+0x40/0x90 [ 494.872863][T23950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.872889][T23950] RIP: 0033:0x7f2cd25ae969 [ 494.872906][T23950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.872928][T23950] RSP: 002b:00007f2cd0c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.872952][T23950] RAX: ffffffffffffffda RBX: 00007f2cd27d5fa0 RCX: 00007f2cd25ae969 [ 494.872968][T23950] RDX: 0000000000000015 RSI: 00002000000002c0 RDI: 000000000000000a [ 494.873061][T23950] RBP: 00007f2cd0c17090 R08: 0000000000000000 R09: 0000000000000000 [ 494.873073][T23950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.873087][T23950] R13: 0000000000000000 R14: 00007f2cd27d5fa0 R15: 00007ffe8a74bb98 [ 494.873112][T23950] [ 495.089577][T23952] loop2: detected capacity change from 0 to 512 [ 495.129203][T23952] EXT4-fs (loop2): orphan cleanup on readonly fs [ 495.140674][T23956] bond4: entered promiscuous mode [ 495.145782][T23956] bond4: entered allmulticast mode [ 495.151619][T23952] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7069: bad orphan inode 13 [ 495.165505][T23956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.174774][T23952] ext4_test_bit(bit=12, block=18) = 1 [ 495.180281][T23952] is_bad_inode(inode)=0 [ 495.184655][T23952] NEXT_ORPHAN(inode)=2130706432 [ 495.189545][T23952] max_ino=32 [ 495.193206][T23952] i_nlink=1 [ 495.197575][T23952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.207567][T23959] syz!: rxe_newlink: already configured on team_slave_0 [ 495.220452][T23962] loop6: detected capacity change from 0 to 512 [ 495.228445][T23956] bond4 (unregistering): Released all slaves [ 495.248317][T23962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 495.261230][T23962] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 495.311097][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.329870][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 495.336330][T23971] bond4: entered promiscuous mode [ 495.344090][T23971] bond4: entered allmulticast mode [ 495.350791][T23971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.370680][T23971] bond4 (unregistering): Released all slaves [ 495.428798][T23981] loop6: detected capacity change from 0 to 512 [ 495.436223][T23981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 495.468161][T23985] loop2: detected capacity change from 0 to 1024 [ 495.475169][T23985] EXT4-fs: Ignoring removed oldalloc option [ 495.481915][T23985] EXT4-fs: Ignoring removed orlov option [ 495.491971][T23981] EXT4-fs (loop6): 1 truncate cleaned up [ 495.499927][T23985] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 495.513758][T23981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.543842][T19454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.560551][T23985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.576757][T23987] loop0: detected capacity change from 0 to 512 [ 495.602577][T23987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 495.615289][T23987] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 495.626395][T23995] loop6: detected capacity change from 0 to 512 [ 495.659142][T23995] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 495.684747][T23997] FAULT_INJECTION: forcing a failure. [ 495.684747][T23997] name failslab, interval 1, probability 0, space 0, times 0 [ 495.697729][T23997] CPU: 0 UID: 0 PID: 23997 Comm: syz.3.7083 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 495.697799][T23997] Tainted: [W]=WARN [ 495.697809][T23997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 495.697825][T23997] Call Trace: [ 495.697832][T23997] [ 495.697842][T23997] __dump_stack+0x1d/0x30 [ 495.697868][T23997] dump_stack_lvl+0xe8/0x140 [ 495.697893][T23997] dump_stack+0x15/0x1b [ 495.697918][T23997] should_fail_ex+0x265/0x280 [ 495.698110][T23997] should_failslab+0x8c/0xb0 [ 495.698150][T23997] kmem_cache_alloc_node_noprof+0x57/0x320 [ 495.698177][T23997] ? __alloc_skb+0x101/0x320 [ 495.698262][T23997] __alloc_skb+0x101/0x320 [ 495.698302][T23997] netlink_alloc_large_skb+0xba/0xf0 [ 495.698390][T23997] netlink_sendmsg+0x3cf/0x6b0 [ 495.698418][T23997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.698454][T23997] __sock_sendmsg+0x145/0x180 [ 495.698520][T23997] ____sys_sendmsg+0x31e/0x4e0 [ 495.698551][T23997] ___sys_sendmsg+0x17b/0x1d0 [ 495.698592][T23997] __x64_sys_sendmsg+0xd4/0x160 [ 495.698616][T23997] x64_sys_call+0x2999/0x2fb0 [ 495.698659][T23997] do_syscall_64+0xd0/0x1a0 [ 495.698690][T23997] ? clear_bhb_loop+0x40/0x90 [ 495.698813][T23997] ? clear_bhb_loop+0x40/0x90 [ 495.698839][T23997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.698866][T23997] RIP: 0033:0x7f683a36e969 [ 495.698886][T23997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.698933][T23997] RSP: 002b:00007f68389d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.698957][T23997] RAX: ffffffffffffffda RBX: 00007f683a595fa0 RCX: 00007f683a36e969 [ 495.698973][T23997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 495.698988][T23997] RBP: 00007f68389d7090 R08: 0000000000000000 R09: 0000000000000000 [ 495.699066][T23997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.699078][T23997] R13: 0000000000000000 R14: 00007f683a595fa0 R15: 00007ffe760a26f8 [ 495.699126][T23997] [ 495.700214][T23999] FAULT_INJECTION: forcing a failure. [ 495.700214][T23999] name failslab, interval 1, probability 0, space 0, times 0 [ 495.922950][T23999] CPU: 1 UID: 0 PID: 23999 Comm: syz.6.7084 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 495.923039][T23999] Tainted: [W]=WARN [ 495.923054][T23999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 495.923065][T23999] Call Trace: [ 495.923093][T23999] [ 495.923103][T23999] __dump_stack+0x1d/0x30 [ 495.923135][T23999] dump_stack_lvl+0xe8/0x140 [ 495.923161][T23999] dump_stack+0x15/0x1b [ 495.923200][T23999] should_fail_ex+0x265/0x280 [ 495.923230][T23999] should_failslab+0x8c/0xb0 [ 495.923257][T23999] __kmalloc_noprof+0xa5/0x3e0 [ 495.923274][T23999] ? bpf_test_init+0xa9/0x160 [ 495.923305][T23999] bpf_test_init+0xa9/0x160 [ 495.923333][T23999] bpf_prog_test_run_nf+0x186/0x560 [ 495.923350][T23999] ? __rcu_read_unlock+0x4f/0x70 [ 495.923373][T23999] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 495.923470][T23999] bpf_prog_test_run+0x20a/0x390 [ 495.923500][T23999] __sys_bpf+0x3dc/0x790 [ 495.923563][T23999] __x64_sys_bpf+0x41/0x50 [ 495.923586][T23999] x64_sys_call+0x2478/0x2fb0 [ 495.923606][T23999] do_syscall_64+0xd0/0x1a0 [ 495.923642][T23999] ? clear_bhb_loop+0x40/0x90 [ 495.923667][T23999] ? clear_bhb_loop+0x40/0x90 [ 495.923752][T23999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.923851][T23999] RIP: 0033:0x7fafd76de969 [ 495.923865][T23999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.923882][T23999] RSP: 002b:00007fafd5d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.923919][T23999] RAX: ffffffffffffffda RBX: 00007fafd7905fa0 RCX: 00007fafd76de969 [ 495.923965][T23999] RDX: 0000000000000015 RSI: 00002000000002c0 RDI: 000000000000000a [ 495.923976][T23999] RBP: 00007fafd5d47090 R08: 0000000000000000 R09: 0000000000000000 [ 495.923992][T23999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.924008][T23999] R13: 0000000000000000 R14: 00007fafd7905fa0 R15: 00007ffd1a121f98 [ 495.924032][T23999] [ 496.164221][T24006] FAULT_INJECTION: forcing a failure. [ 496.164221][T24006] name failslab, interval 1, probability 0, space 0, times 0 [ 496.177072][T24006] CPU: 1 UID: 0 PID: 24006 Comm: syz.5.7087 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 496.177113][T24006] Tainted: [W]=WARN [ 496.177121][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 496.177136][T24006] Call Trace: [ 496.177145][T24006] [ 496.177154][T24006] __dump_stack+0x1d/0x30 [ 496.177180][T24006] dump_stack_lvl+0xe8/0x140 [ 496.177241][T24006] dump_stack+0x15/0x1b [ 496.177261][T24006] should_fail_ex+0x265/0x280 [ 496.177300][T24006] ? resv_map_alloc+0x57/0x190 [ 496.177323][T24006] should_failslab+0x8c/0xb0 [ 496.177400][T24006] __kmalloc_cache_noprof+0x4c/0x320 [ 496.177427][T24006] resv_map_alloc+0x57/0x190 [ 496.177457][T24006] hugetlbfs_get_inode+0x67/0x370 [ 496.177554][T24006] hugetlb_file_setup+0x192/0x3d0 [ 496.177581][T24006] ksys_mmap_pgoff+0x157/0x310 [ 496.177614][T24006] x64_sys_call+0x1602/0x2fb0 [ 496.177651][T24006] do_syscall_64+0xd0/0x1a0 [ 496.177732][T24006] ? clear_bhb_loop+0x40/0x90 [ 496.177826][T24006] ? clear_bhb_loop+0x40/0x90 [ 496.177852][T24006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.177877][T24006] RIP: 0033:0x7f2cd25ae969 [ 496.177928][T24006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.177950][T24006] RSP: 002b:00007f2cd0c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 496.178018][T24006] RAX: ffffffffffffffda RBX: 00007f2cd27d5fa0 RCX: 00007f2cd25ae969 [ 496.178033][T24006] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 496.178048][T24006] RBP: 00007f2cd0c17090 R08: ffffffffffffffff R09: 0000000000000000 [ 496.178063][T24006] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 496.178139][T24006] R13: 0000000000000000 R14: 00007f2cd27d5fa0 R15: 00007ffe8a74bb98 [ 496.178163][T24006] [ 496.409938][T24009] loop5: detected capacity change from 0 to 512 [ 496.426366][T24009] EXT4-fs (loop5): orphan cleanup on readonly fs [ 496.435774][T24009] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7088: bad orphan inode 13 [ 496.439796][T24004] bond1: entered promiscuous mode [ 496.447745][T24009] ext4_test_bit(bit=12, block=18) = 1 [ 496.451003][T24004] bond1: entered allmulticast mode [ 496.456476][T24009] is_bad_inode(inode)=0 [ 496.456489][T24009] NEXT_ORPHAN(inode)=2130706432 [ 496.456498][T24009] max_ino=32 [ 496.456505][T24009] i_nlink=1 [ 496.477995][T24004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.478786][T20651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.495406][T24009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.504644][T19433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 496.520595][T24004] bond1 (unregistering): Released all slaves [ 496.528477][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 496.528492][ T29] audit: type=1326 audit(1747497004.866:26815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.558869][ T29] audit: type=1326 audit(1747497004.866:26816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.582749][ T29] audit: type=1326 audit(1747497004.866:26817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.607283][T17220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.616546][ T29] audit: type=1326 audit(1747497004.866:26818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.640695][ T29] audit: type=1326 audit(1747497004.866:26819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.664586][ T29] audit: type=1326 audit(1747497004.866:26820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.688831][ T29] audit: type=1326 audit(1747497004.866:26821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.713963][ T29] audit: type=1326 audit(1747497004.866:26822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.738224][ T29] audit: type=1326 audit(1747497004.866:26823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.762714][ T29] audit: type=1326 audit(1747497004.866:26824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24008 comm="syz.5.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd25ae969 code=0x7ffc0000 [ 496.795343][T24021] loop0: detected capacity change from 0 to 512 [ 496.808951][T24021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 496.821860][T24021] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.889517][T19433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 496.906874][T24019] __nla_validate_parse: 18 callbacks suppressed [ 496.906913][T24019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7090'. [ 496.924209][T24019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7090'. [ 496.934419][T24019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7090'. [ 496.948391][T24027] loop5: detected capacity change from 0 to 512 [ 496.956305][T24019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7090'. [ 496.968005][T24019] netlink: 'syz.2.7090': attribute type 6 has an invalid length. [ 496.970722][T24027] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 497.021791][T24025] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 497.034495][T17220] ================================================================== [ 497.042645][T17220] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 497.050158][T17220] [ 497.052586][T17220] read-write to 0xffff8881195665d8 of 8 bytes by task 24030 on cpu 1: [ 497.060773][T17220] shmem_recalc_inode+0x36/0x1c0 [ 497.065785][T17220] shmem_get_folio_gfp+0x7a3/0xd40 [ 497.070940][T17220] shmem_write_begin+0xa8/0x190 [ 497.075863][T17220] generic_perform_write+0x181/0x490 [ 497.081190][T17220] shmem_file_write_iter+0xc5/0xf0 [ 497.086349][T17220] __kernel_write_iter+0x253/0x4c0 [ 497.091501][T17220] dump_user_range+0x5f4/0x8d0 [ 497.096296][T17220] elf_core_dump+0x1dc2/0x1f80 [ 497.101102][T17220] do_coredump+0x1836/0x1f40 [ 497.105727][T17220] get_signal+0xd85/0xf70 [ 497.110082][T17220] arch_do_signal_or_restart+0x97/0x480 [ 497.115665][T17220] irqentry_exit_to_user_mode+0x5e/0xa0 [ 497.121332][T17220] irqentry_exit+0x12/0x50 [ 497.125857][T17220] exc_general_protection+0x15b/0x1f0 [ 497.131344][T17220] asm_exc_general_protection+0x26/0x30 [ 497.137019][T17220] [ 497.139353][T17220] read to 0xffff8881195665d8 of 8 bytes by task 17220 on cpu 0: [ 497.146999][T17220] shmem_getattr+0x41/0x200 [ 497.151530][T17220] vfs_getattr_nosec+0x143/0x1e0 [ 497.156498][T17220] vfs_statx+0x11a/0x380 [ 497.160779][T17220] vfs_fstatat+0xe1/0x160 [ 497.165234][T17220] __se_sys_newfstatat+0x55/0x260 [ 497.170394][T17220] __x64_sys_newfstatat+0x55/0x70 [ 497.175459][T17220] x64_sys_call+0x2c22/0x2fb0 [ 497.180513][T17220] do_syscall_64+0xd0/0x1a0 [ 497.185054][T17220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.191089][T17220] [ 497.193420][T17220] value changed: 0x00000000000000dd -> 0x00000000000000de [ 497.200544][T17220] [ 497.202959][T17220] Reported by Kernel Concurrency Sanitizer on: [ 497.209148][T17220] CPU: 0 UID: 0 PID: 17220 Comm: syz-executor Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 497.223405][T17220] Tainted: [W]=WARN [ 497.227214][T17220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 497.237385][T17220] ================================================================== [ 497.259326][T24017] 9pnet: Could not find request transport: r [ 497.312350][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7093'. [ 497.322995][T24035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7093'. [ 497.332385][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7093'. [ 497.343050][T24035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7093'. [ 497.352668][T24035] netlink: 'syz.0.7093': attribute type 6 has an invalid length. [ 497.367999][T24035] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 497.404600][T24035] 9pnet: Could not find request transport: r