last executing test programs:

2m3.911316587s ago: executing program 2 (id=663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800230000000000000000004a580006ce12000056f093e4490b852fffff8bb155cffcad4d9574644f5bd2feb6e583bb4d23934be807db05e66566be3acd535521badcf40aec17b39ab6281452671facdfc2a58c48c2625db9c9d613fe743dfafbeb4ddefc47ad9c4fd4f284f3f7e43e2ac6c0e8bc03d0c9f0b36232b1a000da44a327", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

2m3.866165109s ago: executing program 2 (id=665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff0000080000000008001800"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO910Vd4feW1khbtTNLYNrioFURXBbXuY0wmIWSSCZlJ24QiKX4AQUQFV67cCH4AQfoRRCjoXkQU0VYXLtSRmdxpa5xJAqa5OPP7wek9556Z+Z/TyZy5557L3AC61omIuBwRPRFxJiIG0/25NMX6Rqo/7t7dm1P1lEStdvX7JJJ0X/O1knR7MH1af0S89HzEq8mf41ZW1+YnS6XiclouVBeWCpXVtbNzC5Ozxdni4tjY6IXxi+Pnx0d2ra+Xnv367Tc+eO7SJ09c/3Li29Ov1Zs1kNY93I/dtNH1vsb/RVNvRCw/imAZ6En705d1QwAA2JEjEfGviPh/4/h/MHoaR3MAAABAJ6k9PRC/JBE1AAAAoGPlGtfAJrl8er3vQORy+fzGNbxH4kCuVK5UH58pryxOb1wrOxR9uZm5UnEkvVZ4KPqSenm0kX9QPrepPBYRhyPircH9jXJ+qlyazvrkBwAAAHSJg5vm/z8Nbsz/AQAAgA4zlHUDAAAAgEfO/B8AAAA6n/k/AAAAdLQXrlypp1rz/tfT11ZX5svXzk4XK/P5hZWp/FR5eSk/Wy7PNn6zb2G71yuVy0tPxuLKjUK1WKkWKqtrEwvllcXqROO+3hNF94kGAACAvXf4f7e/SCJi/an9jVS3L60zV4fOlsu6AUBmerJuAJCZ3qwbAGTGHB9Itqnvb1fx6e63BQAAeDSG/2P9H7qV9X/oXtb/oXtZ/4fuZY4PWP8HAIDON9BISS6frgUORC6Xz0ccatwWoC+ZmSsVRyLinxHx+WDfP+rl0awbDQAAAAAAAAAAAAAAAAAAAAAAAAB/M7VaEjUAAACgo0XkvknS+38ND54a2Hx+YF/y82BjGxHX37v6zo3JanV5tL7/h/v7q++m+89lcQYDAAAA2Kw5T2/O4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgN927e3OqmfYy7nfPRMRQq/i90d/Y9kdfRBz4MYneh56XRETPLsRfvxURR1vFT+rNiqG0FZvj5yJif8bxD+5CfOhmt+vjz+VWn79cnGhsW3/+etP0V7Uf/3L3x7+eNuPfoR3GOHbno0Lb+LcijvW2Hn+a8ZM28U/uMP4rL6+ttaurvR8x3PL7J/lDrEJ1YalQWV07O7cwOVucLS6OjY1eGL84fn58pDAzVyqm/7aM8eZ/P/5tq/4faBN/aJv+n9ph/3+9c+Puv7eIf/pk6/f/6Bbx638Tj6XfA/X64WZ+fSP/sOMffnZ8q/5Pt+n/du//6R32/8yLr3+1w4cCAHugsro2P1kqFZdlZGRk7meyHpkAAIDd9uCgP+uWAAAAAAAAAAAAAAAAAAAAQPfai58Ty7qPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA78XsAAAD//7cw1BU=")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x8, 0x2, 0x401}, 0x10)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

2m3.731791811s ago: executing program 2 (id=667):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2m3.708408421s ago: executing program 2 (id=668):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x189f6d4)

2m3.614684723s ago: executing program 2 (id=669):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@ifindex, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r5 = socket(0x40000000015, 0x5, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r6, &(0x7f0000000fc0), 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb854}, 0x1c)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00')
socket$vsock_stream(0x28, 0x1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1})
setpriority(0x2, 0x0, 0xd2f4)
preadv(r8, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x0, 0x9, 0x4, 0x10001, 0x0, 0x7, 0x5}, &(0x7f0000000140)=0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)

2m3.468553216s ago: executing program 2 (id=670):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r2 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
acct(&(0x7f0000000180)='./file0/../file0\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10)
setuid(0xee01)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)

2m3.450785657s ago: executing program 32 (id=670):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r2 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r2, 0x1b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
acct(&(0x7f0000000180)='./file0/../file0\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10)
setuid(0xee01)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0)

17.986912639s ago: executing program 0 (id=3151):
prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r2 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
mq_notify(r2, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xcc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

17.957726859s ago: executing program 0 (id=3152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

17.921103379s ago: executing program 0 (id=3153):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86", 0x11}, {&(0x7f0000000380)="b70000000000000000000500000000000000000479f300876976765a6f79225fd716b58fe6858b", 0x27}], 0x2)

17.305311072s ago: executing program 0 (id=3166):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000000000"], 0xb8}}, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote, r4}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)
r5 = dup2(r2, r3)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$cont(0x1f, r6, 0x1, 0xfffffffffffffffc)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r7)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x12)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x24000051}, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

16.714891133s ago: executing program 0 (id=3172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)

16.408109889s ago: executing program 0 (id=3176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
ioperm(0x0, 0xd, 0x4000000000000020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r4 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r5, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8)
dup2(r5, r6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
fcntl$setown(r5, 0x8, r4)
tkill(r4, 0x13)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = memfd_secret(0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r9}, 0x50)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847832383d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)

16.35680597s ago: executing program 33 (id=3176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
ioperm(0x0, 0xd, 0x4000000000000020)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r4 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r5, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8)
dup2(r5, r6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
fcntl$setown(r5, 0x8, r4)
tkill(r4, 0x13)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
r9 = memfd_secret(0x80000)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r9}, 0x50)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847832383d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)

3.0667419s ago: executing program 4 (id=3386):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
semget$private(0x0, 0x3, 0x642) (fail_nth: 4)

2.184850627s ago: executing program 4 (id=3399):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/106, 0x6a}, 0x8b}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
write$binfmt_script(r3, &(0x7f0000000a00)={'#! ', './file0', [], 0xa, "458a579acf97cdbc02b1468914a9c27ec4b2a3e881651bea907997a416a6f5b4eb7652ae931a2fa8dfc9fc4b7c7273de586abbe85a006aa9b952205ae905c5771d02b6f51b45e5e7c0a0eeeceb48d09eb95d70d8fbc04205d8e07317a439f0f372f09b180b95c45a7d580abddfa84bebf2d8d03774ac96fc55917596123eb17eb1cebcc66d900bee4c5d9caac696"}, 0x99)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x100000000}, 0x18)
acct(0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6}, 0x10)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00')
setreuid(0xee01, 0xee01)
fchown(r9, 0xee01, 0x0)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)

1.908819313s ago: executing program 1 (id=3406):
socket$packet(0x11, 0x2, 0x300)
socket(0x2, 0x80805, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x402)
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r1, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
sendfile(r5, r6, 0x0, 0x80000000007)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)

1.894707383s ago: executing program 6 (id=3407):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1, @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000440), &(0x7f0000000540)=0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0)
read(r5, &(0x7f0000000040)=""/190, 0xbe)

1.874709923s ago: executing program 6 (id=3408):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x107}, 0x18)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})

1.813351885s ago: executing program 6 (id=3409):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000440), &(0x7f0000000540)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0)
read(r3, &(0x7f0000000040)=""/190, 0xbe)

1.795627905s ago: executing program 6 (id=3410):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1})
fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x43}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80498, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x1800000, 0x1, 0xac, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
poll(0x0, 0x0, 0x90f0)
open(&(0x7f0000000000)='.\x00', 0x240a01, 0x120)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100633c77fbac141410e934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xf80d}, 0x50)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6}, 0x10)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.676756637s ago: executing program 1 (id=3411):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008088, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000})
io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)

1.456460462s ago: executing program 1 (id=3413):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18)

1.217868516s ago: executing program 5 (id=3416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

1.217182536s ago: executing program 4 (id=3417):
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
syz_read_part_table(0x618, &(0x7f0000002200)="$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")
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8001)
creat(&(0x7f0000000100)='./bus\x00', 0x8c)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x2200, 0x0, 0x0)

1.214741296s ago: executing program 1 (id=3418):
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14000000)
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_open_dev$usbmon(0x0, 0x7, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x0, @private0, 0xe44}, {0xa, 0x4e24, 0x1, @mcast2, 0x8000}, 0xffffffffffffffff, {[0x10001, 0x80000000, 0x7ff, 0x3b71, 0x7f, 0x44a5a087, 0xc94, 0x3]}}, 0x5c)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c08000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18)
memfd_create(&(0x7f0000000140)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

1.135659018s ago: executing program 3 (id=3419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdc8}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff0180000000000000f9895a76493b3ad6c3b526047801000000000000070193b3f08d471c8431"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000980)={'tunl0\x00', <r2=>0x0, 0x0, 0x1, 0xfffffff7, 0x6, {{0x33, 0x4, 0x0, 0x12, 0xcc, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @local, {[@ssrr={0x89, 0x1b, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @loopback, @empty, @multicast1]}, @rr={0x7, 0xb, 0xed, [@dev={0xac, 0x14, 0x14, 0x27}, @local]}, @noop, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x6, 0x2}, {0x5, 0x4, "0906"}, {0x0, 0x12, "edf7cd7fbbe0162692197573549b8dbc"}]}, @timestamp_addr={0x44, 0x24, 0x66, 0x1, 0x6, [{@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x80000000}, {@remote, 0x4}]}, @timestamp={0x44, 0x18, 0x94, 0x0, 0x3, [0x3, 0x2, 0x5, 0x9, 0x86]}, @noop, @cipso={0x86, 0x36, 0x0, [{0x6, 0xf, "950e0d3b6d62090bb0d3d3b290"}, {0x1, 0x8, "1bb27d0f1b86"}, {0x5, 0x5, "14acc3"}, {0x1, 0xe, "349747c893913f024b589708"}, {0x0, 0x6, "66a3dc18"}]}]}}}}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x2147, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002001007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000edeb5a4c5d0000850000001000000085000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x21, 0x4, 0x0, 0x0, 0xa2, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffff8, 0xffff}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup(r5)
creat(&(0x7f00000003c0)='./file0\x00', 0x4c)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
setpgid(0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="38cec9040000001076f1a202a15c02eda3fd9c00370429bd8600fcdbdf25000000a3", @ANYRES32=r8, @ANYBLOB="890c040000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000003900)=ANY=[@ANYBLOB="a0170000", @ANYRES16=0x0, @ANYBLOB="040027bd7000fedbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="c0081d800c00008005000c0001000000240300800400040005000700210000000400040006000500fd000000fc020d804400028014000300060088b70000ff0101802100090007000600010060000000090002000203064136000000050006000000000005000600010000000500070000000000580002800c0002004f1b0e480b5525221700020027113e334e2b53111f380e39063c033b350f54001c0001001b361205136003090330030b01001818160b001b48246c041400030001800100f8ff0000000807000700070064000280330002002b0e020e102a290f08360032261b2e5444141022444f2c48194c261833521746324e444144384d2155394a30174c080007000200492735000500070001000000140003000900fdff01000000000197a4a90c02000500070002000000880000801800020011393551511344141813413a3348524e57571a1905000400020000000500060001000000150001000b6f010516126c3f1b1b16030200030924000000050006000100000005000600010000001b00010060300b0901030c180b031203050209480c06121660043000050006000200000010000100481b166c0106091b0b160c036800018005000400020000003d000200291200384808045057033b201f230a4d382149082903062a412a4e08365615260c402242173f0b1b1f0b401a10404832161f0a0914553d5725000000140005000e0004000200050002008003340002000500060000000000400000800f0001003601041803300b48603604000500060002000000140003000400020080000700000108000a000000050004000200000005000400020000000c000380050004000000000020000380140003000500f7ff070010000400070000feffff05000700020000009c0003804b0002000d43443951083b20550e1f39352b1d4f20084336370f234f49301a1a3853200626193c464f2436534b0e2b134e004d10044040412512324720324a4c3614432b070504201e1b17001f000100ec6b48001b363630040409160624360c6c470612481b950603012e0005000600000000001000020045113f201121413e2b282e361400030000800800ff7ffaff7000008020ff290f0c00020000000080000000002c00008005000800c7000000050008005b0000000500090001000000060005001600000005000c000000000034000080050009000000000005000600000000000c000200010000000000000005000700bf000000050008004e00000004000400e4020080c0000d806c0002801400050000000600080006000600ecf705000800050004000100000009000100002405066c000000050004000100000005000600000000001a00020006512a3c2648280c00453e174616201820314f292f23000014000500010100020200450003000001010000003c000380160001003003020136020b0b02030916366c606c060000000500060001000000050004000000000005000600010000000500060002000000140001800500040000000000050007000200000004000400050007005000000008020d80380001800b000100183660020016120014000300090006003f000900010000800004ee00140005000f00000400c00600040001040200300030000180220001000e300c06361824043024241806360224600616096c01120204600660180900000500040002000000280003801400030004000600641bff010100070009000100050007000000000005000700020000001c0002800500060001000000050007000100000005000600010000000c0000800500070000000000f0000380140003000000090062000900020098000a000b005100020043502123233b45554250272b090a3138060512ad052b04151a54280443032b12490922324d0d54452e0a3e0d052c073005272c28403e32563d043f0527365528350d0710230b224c44184a0436000000140003000500090000000600070000e003000600140003000800020000000600040081000008e07f14000300d510040002001000070004000400040020000100030316180c300606030c300216050248601b0303600c02600c600b300500070001000000200001004802360b60020b12246c04360916000312090b1630026402050600035c000180480002000d2c52253a053f20203126161351504947530b290c174b26394410294c342537214050182f4f253955090419082c4501384b093a131e27454d44474144494e48254d3955050004000200000005000700000000000400040005000c00010000001c0000800c00030007000000000000000500060001000000040004002c02008005000700bd0000001c000d8018000380140003000400040024000000000109000b000e000c0003004c57076d0000000005000b00010000000c0002000800000000000000040004000500090000000000d0010d8028000080050004000100000014000500e03f0900ff000d000200040003000d0005000700010000000c0001800500070000000000640002801400050002000008cd45000005000500006005004c00020041483f283949384b2a321e474621201b2135093b1a2c06143d0a141f292c481521240a1c2c22413215500f3e48263e07200627083a1f3e1c212708062a341c37371f0247101f47457800038005000600020000001a000100631804360204010b166005010c04030b0001030a000900005000020029074b1e1b19133a041e27380f3d191e3f123c24161e110d501219530d412846283c21494a384f4f181a381439064a0f06291a5100351d0917121845104606385648354d10331e2813080a0fb000038015000100170c026005010206181b1d4c6c0430240200000005000600000000000500070001000000180002002b4a20463a54431940000039541149330831012605000600000000000d000100090336036c2460300c000000140005000700090004000700000107009b06030005000700000000002400020011241306370d4f314b324c043c4a463e121819560f303818051b57401046461214000500090003000100030005000600008007000c000080050007000200000005000a0001000000b4001d800c000080050007007600000014000080050007007400000005000800970000009000008006000500220000007c000d8044000380050004000100000035000200551b042d1050400653551d0614411f311e011a3f502f2720094c4c1c382ea02c373c202c4c0d4a0c38284d4c4f05544705000000280002800500040002000000050006000000000014000300070054260700040002000e00070007000c000180050007000000000005000b00010000003c061d80380000800c00020002000000000000000c000200020000000000000005000c000100000006000500aa0000000400040005000900000000003c0000800c000300020000000000000005000800a70000000c000200070000000000000005000700b000000005000c00000000000500060001000000b001008005000c000100000005000800bc00000005000a0001000000050009000100000005000b00000000007c010d80ac00028005000700000000000500060002000000420002000c32112a0c0609350b2c3b4e2e113008171d3a360811013927430d4c10410a183d060c1036214807050d13572b271e1d2d37412a4f230c531e015448280f000016000200191e3331093c4a1f013509294b4e0c28061c000014000500020058ca08000300010007d005000700140005000800040000000700611704000a005000140003009b01ff0f040008002000060004006aff5400018047000200062011003f37363f4f504f0237100d5543454843054c1f4a384b39513f3029530039363830190f185024525736034f3c3e4a0a10544e26264d3e40374d060f292a3045000600010030480000200002801400030004000100d004810009000000f7ff01f805000700000000003000008005000700020000000500060002000000050007000100000014000500070000000900950a001005000600ff0328000380140005000002c000030058000800000003000800050004000100000005000400020000000500080038000000540000800c0002000200000000000000050006000100000005000700900000000c00020001000080000000000500090000000000040004000c0003000b0000000000000005000b000000000005000b0001000000a003008005000b000000000006000500e60000000500090001000000050007007a000000d8020d80140003800500070001000000050007000100000090000080050007000200000005000400000000001f0001004805050448010f03360943481802361b327e016c24600c0319030c00050004001500000005000700020000000500040000000000050006000000000014000300ff0fd2ba04000400ffff010000000000140003008100000010110001040008000900000814000500040001000002070005000600050001005c000180050004000200000014000500000007000400020002000c0009000000170002001128273705074541014401081303013fbc380c00050007000100000014000300080010000002080004000100020007000500040002000000e800018005000600010000004600020050533311422e2d2d450729442249013f293809482217220f4d39063e490814304e283d254045310056404c3629191919112139290756042a390338201d0110574353000005000400010000004200020019213a003e454c1706293b29342206213b0938054b011a3405460838274f281411513127482e190c260a4231011a1821201737520c482b41110d39534235000014000300060005000700010002000800180d0c0014000500010002000004090092033b74010003000500060000000000170001001b480903034406060c050312480b0c302460050040000180140003007c0801000900c60c010008000500390014000300000006000080ff0000080200010003001400030009005f00090002009a0200327bf32a02340003800500060000000000140005000200080063000500060003000900000114000500020b04000001af1f180c0300ff7f0000780000803e0002001f09000e2d3832222a2a200c243e28064650290b2d31054454564618443115093e2f101f0f34330c1a46311a261c002f461f4140454f2928184e000005000600010000000500060002000000220001000430030c6c090b16000c011201061205004806096c0b041b0a1808056c0b0000040004000400040005000c000000000094000d80900001800500040002000000280002000b20375727520d0008351739513d1f3a464b473c210e553f4a2b0110382f02463d28373c1400050006000008ff7ffbff0000000401000d00470002000132360d000c3b010d012543140823440a374346171b131b2c420a2e38200825043b134b3b144042063c44332b5052383a0303530f1d4f4e32534c3a2d400e0a4c4806002000008005000900010000000500060000000000040004000500090000000000e0001d80d00000800c00030001040000000000000c000200010100000000000005000c000000000005000a000100000005000a00010000000c000300060000000000000088000d80140000800500060001000000050007000200000028000280050006000200000019000100066036090b0412360b500124063612031b0b05124a00000048000280050006000100000028000200301f490b001d2e2e1439193839443f000605130c4e04543c244a104133020c361812344c140003000400018000800200cd0d10000004040006000500f5000000080000800400040004000080f4061d80d40100800500090000000000b0010d807c0003800500040000000000070001000518160014000500090005000800ae89feff0f007f000300140003000700320000010a00050070620400030014000300490002008c000300040007000000070005000600020000000a000100091b05241b18000005000600020000000500040002000000050007000200000018000280140005002ded010009000f0009000400a8ff8000540001800500060001000000050004007200000014000500fb5af9ff27fb0700d6f005000900900605000700010000001400030007000700400000fe0500050003006000100002001020524c00303613390e300f7000008005000400000000000500070001000000140003000200060001010600fd240500050005000500070000000000140003000700ff0fc70707000300040009000e9a05000700020000000500060001000000140005000c000300070001000400010003000000050006000000000020000180050001000100000014000300faff0200060f070004000a00a800ffff200002801400030006000c003f8e04000900ff0300c00100050006000100000014000080050006000000000005000700010000000c00030008000000000000000c000300801600000000000020000080050009000000000005000800360000000c000300ff00000080000000dc000080b8000d805400008014000300780b070008000c000e0001000300030014000500040005000100000007005c94f8ff01001400050001000400ac160600680004007f000800140005000300020005000300ff030800400008000c00018005000400020000005400028005000600010000002c0002002506032a561150231d40571818572c49473e261d1353152152303623020f1132452f0d0832210512140005000600060018000500a20006000092040005000600010000000400040005000c000000000005000b00010000000c000200ff0f0000000000004c000080050008007400000005000700ce00000005000c000200000005000b000100000005000b0000000000060005007400000005000c0002000000050007001f00000005000b0001000000f401008068000d806400018005000600000000004d0002003c13492e2f51422b1e05220a344d1e2d4f145568303a2d531c212019004d1136274c18403d02053f0c23460a172839030b3a4f03162400513b4935292c233b0805064c3b1b06230007000000050007000200000034010d8050000180050006000100000005000400010000000500040000000000050004000000000005000600000000000500070002000000050006000000000014000500612e04000900080007000600080008003400038011000200044910434109301e49205526140000000600020016490000140005000a000600d60c010106000400050009000c0002800500060001000000840001802400010030040112050204010506020b6b5236021805121b090560161202360b05031b1814000300ff07d43dfe60010003000600fcffff0145000200142d54173f0d37181f0315080928110c524a17201d2a44032a25324e142b4343143b35192c4c43413a0a3311473813364b103150261c5543333302481414101f480000001c000080050004000000000005000400010000000500060000000000050006000000000005000a00010000001c000d800c00018005000700020000000c000280050006000100000005000c004f00000005000700b60000000c00030084420000000000000c00020001000000000000008c010080060005000b0000000c000300080000000000000005000900000000000c000200080000000000000005000c000100000005000a000100000010010d805c0003804100020030010c2b0040512729555755342336414b002a3f10320108233f350701210811462321553302032a1c124a1037464f1819480e0b2c13233e070c062a0400e4935db5da60338a000206000300020004000c000600500002801900020041250a204d081b1a16181700360751553a234d103900000014000500000402000000b44f00c0ffff01010700140005000900070003000700830008000900070005000400020000003000018024000100160c1216060b121b120b60090930043009126c0b12166c030506066c0109046c0500040000000000040001802c0002801400050095000900ff0f05000200010004000800140005006a000100080009000700ff0fee0ad40038000d8034000180140005000300000005000300f03801000804aca414000500d55e09000800ce0062c9000009000a00050006000100000005000b000100000040000080050009000100000005000b00010000000c00020001000000000000000c00020004000000000000000c000300000000000000000005000800460000001400008005000c000000000006000500c8000000"], 0x17a0}}, 0x1)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0)

1.113418108s ago: executing program 5 (id=3420):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x107}, 0x18)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})

1.03045329s ago: executing program 1 (id=3421):
fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14000000)
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_open_dev$usbmon(0x0, 0x7, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x0, @private0, 0xe44}, {0xa, 0x4e24, 0x1, @mcast2, 0x8000}, 0xffffffffffffffff, {[0x10001, 0x80000000, 0x7ff, 0x3b71, 0x7f, 0x44a5a087, 0xc94, 0x3]}}, 0x5c)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c08000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18)
memfd_create(&(0x7f0000000140)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) (fail_nth: 6)

1.0301193s ago: executing program 3 (id=3422):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x107}, 0x18)
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})

704.904916ms ago: executing program 1 (id=3423):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x17ffc, @mcast2, 0x2}, 0x1c)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x80)
ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xb, 0x9])
getpid()
futex(&(0x7f0000000140), 0x9, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)=0x1, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_cancel(0x0, 0x0, 0x0)

704.650966ms ago: executing program 4 (id=3424):
clock_nanosleep(0x9, 0xfcfd, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

677.484467ms ago: executing program 4 (id=3425):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
unshare(0x4000680)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote, <r4=>0x0}, &(0x7f0000000280)=0x14)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
setresuid(r5, r5, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@private=0xa010100, @in=@loopback, 0x4e22, 0x9ed9, 0x4e22, 0x0, 0x0, 0x80, 0x20, 0x33, r4, r5}, {0x3, 0x8, 0xfffffffffffffffb, 0x2, 0x7fffffff, 0x0, 0x200, 0x9}, {0xca, 0xa81, 0x5, 0x6}, 0x3, 0x6e6bb2, 0x5, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d4, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x3, 0x3, 0x8, 0x5, 0x8, 0x1}}, 0xe8)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2400, 0x200, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)={0xcc, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@generic="102f7bc30040c54325cc34699c6305bb456fb5007fffe759a3ef64aa82568d51e53d93c0058d909de82bfc8c8c142de4914f73614afde454e9c5a167e7ec68230175198199295811908478c527438838c202521e2e9dc84ed3e76db14d6068a9f00b6d5bd9f6ee1ebadfd55488461aa8156decf5021e217bb07c17fd7dce78ce96d43860528e84e9afad3e6b2f69c2abfd3389a623949505caeb608fe486fc2a5f4a2191fcdae04e19ec6ef351c4", @nested={0xc, 0xf1, 0x0, 0x1, [@nested={0x4, 0x22}, @nested={0x4, 0x1a}]}]}, 0xcc}, {&(0x7f0000000b00)={0x15ec, 0x15, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x69, 0x0, 0x0, @fd=r1}, @nested={0x3e2, 0xb1, 0x0, 0x1, [@generic="2cd26d6376c862744ddb81f07e70ee87a9b7de728ffbc95df7152b61678c1d975d5b7447aa1e18c0b45feedbd6923f112126a6db39f4605d5ddfe2fe7e0ac579611c1fe3db487444bf454619cbbc4108d820f05e8b625e23cd68a9491f04e2cf677ed00b154e5eef58f1", @nested={0x4, 0x7}, @generic="949fdb175d9f90d7e2d4db00344e77887be9ab343f4f9550cc01d28378a0ac9f8aab95737063f4c5735bc52553378a7c6bfc21cbe4ef59ec6b27e4e23b441160d35a4dcdb171eea83f19b1b103b279e00590a372fc17508bcf72c53de7c4288187849333545c5309067bc85a9109cea34995eba68cd9b2f9cce133e433d9076c0c7d94b9e88995e35b9ff127fdcb71f5c695886c2393234a68409942944d44e237c3a2b1abd0d44f1e82895d3413cf7a076f06448a03", @typed={0x8, 0xc0, 0x0, 0x0, @uid}, @nested={0x4, 0xc9}, @generic="bafe550d40436e635db2bd8af808f611b1e11438ba643d6ed8b514c4a4ec5cb327433490b1feb75d2d323573dc35de6f9df94bf66aee78e7261c8d64657f749ab8cc80b6a90fa30fbb46b168f4f9f180b32e9b05bcb309b80570756730a5bc39706745365b54ad73b487e50874", @generic="81a5f3238654c19f12173ba2785ee00b66308a9adda7cda0ccf5e8a2676add5524faa51f76c9d5e493977cb9c462fd895a91f3c218cf5a214419a43efbd967cd4cc55ce6e64abdbf9a665b0a25c1ef3a1d127d476342b683c677856c67e5fa19d8c871da00cd7466d906a343c3eab50c6cb453bee14b5ce7fa724837a70a24e7570ce22c9662e07e0ff36be7e42ecf39880b647f61afbbae231418a4dd2740b16c13a7c2cc6030578954a354931f33fb06162c52ab427b0491893ca92333bc7e7def22e812ea2111102f3b54bc0772472c5f8d489c922e33ee801a1a45e58e01b64f484f15b382313d3e8af37f394c08a3d4097297a706", @generic="bebcd3da82b12dd9a691f5cc155bae07232a20e26ff20950289d598966ad39dc4a3b831bd1e57653d201f29b71fcd21499cd422eda8768580622f1b0ab2f64049316e850994f7379fd00f4772d7367a60d7f3c62026f01c4a56038736442d8ffec686b5002c1a2ed6a70a803f7c2e7f17f94d460266fca46d5d402e5f69fa6c879a7492e985fe67e7d5ca98ab166d745540bb49f6528fa9a819141679431a90b40d1a8ac05e514ecd92a171f98856864af29e68341b988b70b3e36e606f281d912c6fea87a49c25cbc6b4225a2d50e99b0a052187b071c66dc35f08b5c72ea34858a", @generic="b8f6cf587cd4bfb8704a776451a9de5348000c5d89928417e0e3fac982fc754bfdeab80dc3d6d515df0554a762a92f8eaaf5626a5890ad29438ee37a0060ff510cec5447938cd1718cc9c640b0bbf7b58ab2f7097c1196ab2c42847d8ec633af8db5035ec3d5fb69"]}, @nested={0xff, 0x141, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0x107}, @generic="65c74b5c69f22d88471876a3c3b8d093e6ffb1b64a6a6f654c9ed8ca8a3623813d0946b8f2f1da40952c03acf6807b8450e41b6db1ed578067dbfe262e970515669297e622f791333c6ccda35efdedd1170fe19d1982f9910c0baa4ce0f9241cd5b1b3b5e7fe161b9eb79e0c9d4757d158aa7600d313fe927297d1096c66551c69b86a38f1c45b4eba2c906edc85621b4178ea90c05ca8ce29eac2dba034874f5da1", @generic="14160bb80652d9a76841feca9666ad0b99174a7c43b1be3a72ca383607d2477e6c799ce325ba055f0de4e0869549f96bd9fb461f3094c7e86bcc77fcc8123c5261be76f56bdc4ba9935e963f9e3f56b7e3"]}, @typed={0xd2, 0xb5, 0x0, 0x0, @binary="5062d43d9141b51ba74c53a54f26809831d3bdc52f7be3897376d8529ed515d9381ea2709157fd49072e8fca3a6a8da3962b6ceeda340d5977139c8dfbc1b2e78b6e7592b8b9da3f41ff2e836e81b6955989106201dc4063908b4f7d82a5773551676058ce93f10249f2a873cb660449129b657b72c5296805e4e39c6285f70f9ffb6d948fd3da2b02b377a727c416bd504cdd9d8565d9c416d740348c02c5baa3187768e6040ff0b55c7a474e4d051c7934aed1824ddea928e84119e250e3116dc972754c3a089f24a96ef754d3"}, @nested={0x101c, 0x2b, 0x0, 0x1, [@nested={0x4, 0x27}, @generic="a34774abe3344f7472130f260b6f824dca80bb50fe3ac1406e2ce94b194eb6db5350ad8b7d631ed7ceb6db3cb71bd01d1326a8701394550a1e3522e4cac74140118eb6b6fa55e06409c566ee220134665267faa808fb8ef60f17ad4de41c482fd6f93a72604b0f5a1e0c6ba0635ebe6db3edb69b13d1e935cc13fe4cb799a91a53e326495be26482572e80bbd6c5a46c6bbb8d80162ab0d5adbc3c0475a6119ec8d55f856067ec47a165c18d52edfc6bd2015a99b98d0dba5cfde048dd11daf2337d2213c5124c9ce462d426120874f2af5bd1af81971cff00ba04784aca6f39eceb46703f13718cc7e3e581c804e8e30b110c8aff8a610d3e6e624f989c7f220211bab0b2f2b2ae75f5a9eea2465f6e9c7ee8a8323292f0a3e365243c1627889fa4282492fc0557a61c38826264cbf98c128a2056b59926aa153447b553fff6d81886b655f41aea5317a1fcdf10e672d4d87721837252a8774518c8ad98f69f439e108e079f3a2c3666cf91aa2fc16e9ad4932390d81a74296e6e3fddf4a074895a3a0a4063f769cdfee6bb11e6148da3c75aff9bf9b8795b8f4c232b681da2b673ea1c4a50953e7943e8a9f350da1ef83fe9fc135c299e2e2dd336200aa7d7ab1300881d270ec44fb686f1aadfee1a55c308729047b7c4d135c9347ee09c66f5f84e79224dfd2149135669f3bd8f98a2f1d02a0ca198699c67de521657d8c20f0dc58431264f77cb8eba3fed1e0259e718e8fbe53ff57768180e2056894b6e5f51db62f0817f970d1d1714f5be630632c88c6a3e744de96814e6aaf8af9ed399b0bbf918aa88cf963553810cabc5a2d403685d278a7e80d3e511193264ea89b948835a56d2e6c4bc876b233730e6c120feee0fc8c8dfa9591fb1e9df610a15be48601086afafe92a04ab255aae12b39a31cb4d9e966d159ff0e2b1825326251c5a7d55547c5ec13ec27d6f2460cf7009b11cf217d847a4552690cdc53b80b11732b24a4723b747aa99cd3695de775ac461ae145a065cdbd74d023d8a53f942fe7c0c6355f4c90ef252f1a0fa224d0821837864a4d222aadd8617cc10045c576d01773092f8e93ace5df4314012c3aac369a77e113fe0ac74acd69851c71035d6092cad0d31dbdada3d3e2129cb7cfaca30015df90c818052119562de64f84ff17838cb7db00114cd4d95aeafe193aae4a53bbb8379b7c63df885eb1e8ccec7b38eb41b4fda39f4767cd4b46091d28608a1f1b68ce8c28aa822aba8395fb986654923800bce1f86c591a2144daa5a97274869b6c620d55aff5e4b607959a4eacc20e72041b881c12d41ecc1c269c5fafd937b00c7a725d507568a2b081bff120e193f239151057d0b25b83bfc87a91b85aa5643226297e0b619d9ab2b355200b5ff6bef7751702ad9be0914239ee19d09587ba85d0d6e259e3f751c0917c4047c0c9fc3b539119beec62f0a1dea23549757fd8b8dbb961767a294143be7ea6ebec4f2c5a620033063fb9d807840e265f9df7cbdf5c5f6ad10a471bd01c53172f319aa23aaf72ecb94a87b89206dfc9a41c1a3446d16199e7baca0ac0688a3a2b8aa296de2d3f18354f838730a20e6b5e09c89995a4552a20d849d2b3dac0032d8e404e1380c80cfa8bf36a0679d65eb4ef2b361f559b8889aac3c9bc3ec7df348e34281604ff06c9052e0580c3ffc78ee347e0fabc03954a73f5b1f25acf37f4281eed2d2ae6be15c727ac25beedc2011fc2908eb71fb5e9cbc0e979c079c6863e5bbddf2d24cc1e5623f33593ee9ed32814c0a85e4660f1bbc6f8c6849c4fef887add024bbcfade71cae997dd888ceb598feb69bfdde66c27e93f5469d9b3a874aa145ae440341b135d929f2b342aecf6cd84ccc03fbdb7d663828d47182e0e20542d1b2bed4e8ff01456cdf4fce53f56c7e4ef5cda10c51ab758b8d7cc56a9bb8f2353c5650e8fb70dde0bfc932670b60283bacc380662f2b908a3a1a56bcbf0d4a97cb361f2cdf4ca5c6f6baa6cb62d941feeeb98cd3e13d2214045fec576486bd3011f66d85d5305bec7c57966299839fc6fb18162e65163efee4db07af07a350cde9e4b4afd17bf3bbb0f832fb2133387bbb95391403071bb32214744269347d35d70bf7c1ef3fd15c42f79fc4b1cc9b82fec82c4b2030c3b98dfd29b50e1aa18dc306a69451087e31f52d44c292738775774991d6047247b7b47ceb96e8f4bc9008a07ae98c7aba8f7cefb821e5de8dc3a84625b95b8ae0055e45b4f7ae3b5c4f9e3c2dd599877b5cc7b50f8c385dada0de21e37228751e4e83a4544a5f942f338807698fd281b69276b0d05dc299447ff0d36eb88a908419c8a937f02bfe25cf5baff3e361cdab08ca1c804f9c3bcb3f5cc1e32fd15009a78b272c9ae40dfcebf51c85217c5cc6428201fa2e1907cb2b472b94e93176dc617420f94f0cc3f18199ed9b6b269e89481fca91e84c913caa133c86c1346ea63168b12b0be0251570873c65e1d339a7835087ffc2341c96738e8f93926d2cda9548bfeae7a8f34efcd1ef35bd9d0189d0f8897617ea8c294d4dfc5b4dd3ac27a4dee8ad864380465a23e32bed497e35a2a5919cfc9311fda80103fe17a69a12579719581c06a1bb8096f5080a1c9abe3a434833e679fa46e234054c49910913e3a68bb30713e52ed15cadcecb8fd70f9b270c7209e35d4bcb30666d2b0e6577fc2f12eb57a763dff2c4f31520ed64b977cc0a57075d044af2d2578b71499af57f7a4dfc6254df0c7dfe30aae33116bce8f7597a2106625cf2b89728d7ccf1e754bf486c95e60b3c0782981490590e569b2aa78705af35fe9d441953cb96b628c362758751f5962808e03368650dda359ceb0e7d8de42124032a140f461ff64eace23ddf6349f24da869fc1469c3c81857ecdf22836b47b94a15e71d9ad3dcff6dab00397dba3a5a133101ab2dc8c668d89d11e4ceba7cfb01f05df72ef5643257b71ad305311146d4b3f9c4ee5777f7544e36de09e9a223ba48c240283bdf534c386cfd41001a8709e9da999e510f3b0911ea4d457b9b5aa61bed84d33dd68ec31712a25afe9fee536bab4ff9a6c9f5f4ece833d03534278839e9ad70aace6918bd81020643ba53e92e002d25f9c4f7bc358ad935c0027feb9ee2a3d2594f64408d4ba4dab63696e4f92227fa5883835d058fa52e2f2b8b2cdbf0509e20de281e446298b303d4045a4d38fdb49841bff3e0e2c4238cc0d685cac4633ab61682c0c418a9619be00d1a20af358ba3e639d1addc6bf86a141e94d4fee645df9f298c77e52e2e475cc85237b15243395c241f383de8850ff7e56e4fb8c3e09c6ff8d08ac81cc4f4d0ec833e563ecb689ce883dfb6dd0822c884d563468c321a310c3f14391e86fc379ef4a97e80de29c4af4cd5ae84e8ce2a67d50545276c4a79b419f2be7191c6c2f67e8a46dbcd5173793455b40f366cfb48ef576ac3f594b8208d0d44053a72f1b4bd7d41f3c90b6908ac61f0677b00899d88ee7b49be2e0ca89d48e992ed1aefd4db996dad32aa68ea8c4d005587380101c74a674d3660cf80b36ff0e74d920e1d4f1ff1103e03da55f5299c69f6b74ec6d6b2d8aa474f8dc13a40dd451902993ed4b674a8945073ff791a3f3ab0c4f7d3c6b14986027d8a3af8191a725204a61ca02ce88f4054363b5434ffebdd6445fa0d6c8a7ce8fa61208694c08edd1c38ffc6a1b81ed0bad10be3df075600e618d417984d9c5dc2b749cbc0be1a26fb6f70eed177b04ffb3388f91f36bd8acdb581b3dcc61853ba29325a4c0f2c3f22293d99d7b172f033b351512bd68d2c0dc2c4e6db8275d03284ca304e29ba4148b2cffbe91c581a6d8b0c6ec4ec4eeedc95abfd80be6a2ea85eb540195e3268968792866387199bce6a16b988962f0d887595efc91e40eb09382b019ff05b532726556d729961f3ff55c46c9ca2c11d82ba975738cc61bb0c6cf312762ba2acb00b37f5d6dffea30c464af6c41a12051b8285dcb6594701e3b5b48dc5be19f0e65bdbcce8d844df8600e84088bf48a27d8fd3f7907d87b01e7c5480b6ccb2eeb268a048456a3f142aba55016959e31b9ef2bdc98a04f2d5e73d91d0fc8869f1e1f332f4c7ced93f44fb88f6a82cb7853b190444edb7bd8fef25c000df4d6504e79608b9652f0a52afde486a9734953c3607978d519a920e5f2b83db19479a81fdfa45023c1a4dde6d1b07a9e72b31dc09cc873342754e734b7acb20a7e2724a267b8a557b009c93f257ab8aef9d460093fe5d97cb8af3641483840878fa27f5d07ef41f36a4eb925e826c81b6af26c74f6f15acd7358ff6ac1fe2d1b1a1dd330f377714982c966c2414195403dda7a2354e932571209e2dafb4e492df56072df4f05e1e4a648cf169cd41018d1a4651f1e8222534350fa4af06b457306f0cdbb19bdef3e8a1bb8a8b74717e1c20c26a3d793f5220efb18ea2ebf495deae72e6b4dcc7733e33994248e6b7ac0f36382de8b4b9e43e4dd156ca7ef3a1101a7ebb2c57b9312c7cf712c52a79f4ffca2bc949e1a37543e11805b3d065dd2a2512b17436ce3845706a4ce06b0f63e26f47819ad111de4fd9780f95b6e6c86801522d4c79ba59aaf2c44aa7d473ea57646d4000a82f671c945457bd24b2f79a1cdd6929d09734493e7b261766d4afde052735b79465d0a1ac751e1729b3bbaa70f06e7a1f6bffc9304ffc82b98ea7beff90b9c9bb35f8d2025b3ecbd95533b335463d2ac8d4f7ad8bbb6c97c66d6c290e6490a38adf273c8b4f952a95cfe0f1e86e6d77475695bf95290efa737350faf28d8f9548f217bf4a5cc7f67e87e7aabfcd7375746f15311f93bdd4ece1b8b0f1b48e683ab97ecd86347df8fd737c6b28261f89c381a1bd822d5757b2be7b6059bdfc4aff4f4aaeb32c168e1aaa30c0b2b9dd32ea29e9df82f542bf08d1cf360e41b0a43100583d3745528a723b0beb4c602974cdc6d8ad2919bc0b1ead8ef41f868d4751bea8106881b36f67d45338bc6854d60861949627e60436068f4a2c2f581471c05ee9cedb4dda519b41edf77986242ffd96a2eaef8ae2391ed29ae6db4dfa3b0252ad7418a49b774dd93689304ab6355310b0f96f964d95776445d0fa36d93c8860a082a0efd0ef1ccee5675004340f98a916cc281eae189716869018b0bedd8df32dca4f8bd62edd4525f2d7269cc60d5c8b4455b781dc10d38ac5516203c1099ae036cf4c4372b87fc10fb81fa97ec65803e25a789e4b39ff0197b17a1808abe9b6d7cc27dd5e0c0aefeb6d346e9829f238eb693db78a0098c750831cf657723c4ad99111982eb39eb07ea8f4f58c6ca53f8cd77a8e38411e4a41247a49de2eb104267e7fe33afebfbea873dab3e50182eb24087a47dee85bd31d6386b2367a7ea575ae2c9ad49be3ba703ee0cc4a3ff9a35a39282d4660fe245c3efa20f541dce67b62ff209920e73b9c39099974f65bfda038624b6fea38319bf6714a5f64ba2d454dc65372486efe61ae6460aad4bca9dffdc70736c4cbadeb8e86bbc874684bc2414735d7cb52c0f680872bdd488cbd5e1a4c0d8fbc8403248291ef58fb052e8e9f94835a314387c00c8f8dcb9600476bf13ce309e025a8d07348c3345eed958e31efa2341a1af0ea061ff25f5e40a94b01da2150d15c05e279fccab68a41b2834831343611e843871df7926bc6886e696c4fe684106c4fa233365d2f46ea73c5c154728bacbd89736744030c5fd06f8754d6d796f97a2018667025b2344b319e501e096288191c85d641b9", @typed={0xc, 0xf9, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xc9}, @nested={0x4, 0x145}]}]}, 0x15ec}, {&(0x7f0000000600)={0x12c, 0x20, 0x331, 0x70bd2b, 0x25dfdbfd, "", [@generic="8154aa66399c437ac32d2ff501d502b5c35b69f20e346f39c64369acff9d24ed2afabf76", @generic="e5cc152b3782e85bc12c00d7c68df9d4a7585bde74babeace008394ba1aa099ac4fc80538c0bf8d7d809ff96f74fdd0816c2d7121685083ac90d45099cae95ea20b99c05a7be3db6afc19f04d17b07c1ddb5238849cccd3d5f9fac8bad543bee804daef615a73bae3135e3a0e9668d4cd4084ea56c379bdc08a90afb506aa0a2cd992bd9aa3eef39031f9f4256e9c2bda67bf2a38a240e562dc4f3beccad0feb06469d9fc041088f785909fe05575035d6ab516d1dc375e069caba0e175bd474b681c2d1666eff80c726983dbc02d90f850d151aac18c4ae5a1e79a19d0e012192a8f7954692b63a6dbda13be50272a5ddeeb9892d95"]}, 0x12c}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}], 0x40, 0x8000}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9}, &(0x7f0000000540), &(0x7f0000000580)=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r9, &(0x7f0000000780)}, 0x20)

611.992508ms ago: executing program 6 (id=3426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
r3 = dup2(r2, r2)
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000500030000010008000200000f0f00fe4286b987386d3c0c339b42d5433b5a70919b277c38e233af72cc56910f62713918e5ca4e31826577169dadde2b90890c39d3f76c0a1210d6b24aebf0f41d7401effd5b0d8a747f77bfdcf2f447d988833f2c63f81c32ca9ca2d32a99de4b3fe5d559ec829a197b7c5a0d2b013f3c9a83b4ee062e1a65e632f7dd24af6ceec1aef55855f9348e791d9dd7dbc80b539964b4bacca7195aa27e009b4852734b02e1c501dbd48d66027bbc05c1726cfac492427fc44a5cab079c2e6f288a4bc435de499880418e503f502f6164b172056bb39eeaf606b7"], 0xe8)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000003c0)={0x8, 0xffffffffffffffff, 'id1\x00'})
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(r3, 0x1276, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x143481c, &(0x7f0000000500), 0x0, 0x778, &(0x7f0000000800)="$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")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
syz_io_uring_setup(0x4018, &(0x7f0000000480)={0x0, 0xacab, 0x0, 0x4, 0x10113}, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10)

561.816429ms ago: executing program 5 (id=3427):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090)
bind(r0, &(0x7f00000000c0)=@llc={0x1a, 0x204, 0x2, 0xe5, 0x7f, 0x1c, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000004)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async)
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) (async)
bind(r0, &(0x7f00000000c0)=@llc={0x1a, 0x204, 0x2, 0xe5, 0x7f, 0x1c, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x24000004) (async)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) (async)

548.235909ms ago: executing program 3 (id=3428):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") (fail_nth: 7)

206.883436ms ago: executing program 3 (id=3429):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}})
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x8}, 0xc)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
dup3(0xffffffffffffffff, r4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe913}, @jmp={0x5, 0x1, 0x5, 0x16cfa16e46592bff, 0x5, 0x2, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000240)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000280)=""/11, 0x41100, 0x10, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x1, 0xf, 0x9}, {0x2, 0x5, 0xc, 0x3}], 0x10, 0x10001}, 0x94)
syz_open_dev$char_usb(0xc, 0xb4, 0x8)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
kexec_load(0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="52d0707160e8179808293589175d79ba9312b30e558e0894a4567c53ebece5a6e048321f5422132cd6c8a934bf5d84b29dafc28f2af853ccc90a395df8fd911410d4ce4eeb6ca51cb470c832ffcc7f9ac1079c287916117b5e763c6de11cf628aa03e05833ec175f3e51f1a9732dadcec6a2468beb1f0dfb1dc6f7aca441024a56d9e62d7a267820ee2d788b5724104fc86803ba4b", 0x95, 0x66d4, 0x8000000000000000}], 0x280000)

138.407287ms ago: executing program 5 (id=3430):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0)

93.006578ms ago: executing program 3 (id=3431):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, 0x0, &(0x7f0000000280)=r1}, 0x20)

75.147038ms ago: executing program 6 (id=3432):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES64], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, r2], 0x2)
r3 = dup(r1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x28)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'ip6gre0\x00'}}, 0x1e)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002200850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback, 0x4}, 0x1c, &(0x7f0000000640)}, 0x4048043)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x9)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4}]})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={<r9=>0x0, @in6={{0xa, 0x4e24, 0x141, @private0, 0x2}}}, &(0x7f0000000340)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000540)={r9, 0x280}, 0x4)
close_range(r8, 0xffffffffffffffff, 0x0)

74.682188ms ago: executing program 5 (id=3433):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f00000003c0)='./file0\x00', 0x36)

28.369019ms ago: executing program 4 (id=3434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4d)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1d, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYRES64], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000c044}, 0x0)

2.12809ms ago: executing program 3 (id=3435):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f0000008940), 0x21, 0x4bf, &(0x7f00000009c0)="$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") (async)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) (async)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r2, &(0x7f0000000a00)=ANY=[], 0x58)
close(r2) (async)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}})

0s ago: executing program 5 (id=3436):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000042c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000043c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000081c8336256ce9bdde873a1b33d1892276fbfd22a7d0000000000000000000000000054ea7846514d1e1e772dd195241ff445a59931136c32fda8a4ef0055f466162d81f9d69b065f8714"], &(0x7f0000004100)='syzkaller\x00', 0x8, 0x4f, &(0x7f0000004140)=""/79, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000041c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000004200)={0x1, 0xd, 0x8001, 0xffffffff}, 0x10, 0x27f4, r1, 0x2, &(0x7f0000004240)=[r0], &(0x7f0000004280)=[{0x1, 0x2, 0x3, 0x1}, {0x4, 0x2, 0xf, 0x7}]}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000004440)=ANY=[@ANYBLOB="9feb010018000000004000000c0000000c000000020000000000ea3053bccd50fc110000000080b61e34988a833085f2eefb4f8e4503614c06c85d8d0eaec3ee429f34e3f4963ebf6e76c618daf04cab22733695ae6f27d0bacbd945"], 0x0, 0x26}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x0, &(0x7f0000000400), 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x7, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004380)={r3, 0xffffffffffffffff, 0x16, 0x0, @val=@target_btf_id=r5}, 0x14)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0xfe, 0x2b7, &(0x7f0000001340)="$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")
truncate(&(0x7f00000000c0)='./file1\x00', 0x6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8442, 0x0)
pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r8 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f00000004c0)='GPL\x00'}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r12 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r13, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

0s ago: executing program 3 (id=3437):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a1ab000000000000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000024003bbb1376bc58f1c9a71d9f00000800000001000000800000fd", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
unshare(0x20000400)
getsockopt$inet_int(r4, 0x0, 0xa, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ev=loop3, iso_blknum=16, block=32
[  155.966695][T11691] loop5: detected capacity change from 0 to 128
[  156.028128][T11707] loop0: detected capacity change from 0 to 512
[  156.066948][T11707] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.182377][T11727] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.192060][T11727] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32
[  156.295937][T11734] loop0: detected capacity change from 0 to 512
[  156.311939][T11734] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.2926: error while reading EA inode 32 err=-116
[  156.326262][T11734] EXT4-fs (loop0): Remounting filesystem read-only
[  156.333287][T11734] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  156.346918][T11734] EXT4-fs (loop0): 1 orphan inode deleted
[  156.407413][ T1036] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  156.459832][T11746] fido_id[11746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  156.579192][T11757] loop4: detected capacity change from 0 to 512
[  156.600017][T11757] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.666354][T11767] loop1: detected capacity change from 0 to 512
[  156.684353][T11767] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.722059][T11774] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  156.734510][T11774] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32
[  156.762963][   T29] kauditd_printk_skb: 562 callbacks suppressed
[  156.762980][   T29] audit: type=1326 audit(1758855859.674:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.798814][   T29] audit: type=1326 audit(1758855859.704:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.822556][   T29] audit: type=1326 audit(1758855859.704:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.846260][   T29] audit: type=1326 audit(1758855859.704:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.869971][   T29] audit: type=1326 audit(1758855859.704:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.893707][   T29] audit: type=1326 audit(1758855859.704:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.917410][   T29] audit: type=1326 audit(1758855859.704:11273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.941107][   T29] audit: type=1326 audit(1758855859.704:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.964699][   T29] audit: type=1326 audit(1758855859.704:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  156.988512][   T29] audit: type=1326 audit(1758855859.704:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.3.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ded8deec9 code=0x7ffc0000
[  157.041825][ T3393] hid_parser_main: 205 callbacks suppressed
[  157.041854][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.055342][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.062801][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.070270][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.077715][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.085232][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.092715][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.100273][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.107890][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.115445][ T3393] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  157.124858][ T3393] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  157.177166][T11789] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  157.263164][T11804] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  157.300211][T11806] netlink: 'syz.4.2954': attribute type 3 has an invalid length.
[  157.392759][   T10] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  157.421371][T11816] fido_id[11816]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.479953][T11794] loop0: detected capacity change from 0 to 1024
[  157.499670][T11794] EXT4-fs: Ignoring removed bh option
[  157.506557][T11794] EXT4-fs: inline encryption not supported
[  157.517314][T11794] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  157.533704][T11794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  157.543083][T11794] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2948: lblock 2 mapped to illegal pblock 2 (length 1)
[  157.557450][T11794] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2948: lblock 0 mapped to illegal pblock 48 (length 1)
[  157.572149][T11794] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2948: Failed to acquire dquot type 0
[  157.588871][T11794] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  157.613277][T11794] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2948: mark_inode_dirty error
[  157.643883][T11834] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  157.646117][T11794] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  157.663873][T11794] EXT4-fs (loop0): 1 orphan inode deleted
[  157.684383][   T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  157.707468][T11794] ext4: Unknown parameter ''
[  157.715964][T11837] netlink: 'syz.3.2967': attribute type 3 has an invalid length.
[  157.730660][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0
[  157.766848][   T10] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  157.799127][T11794] infiniband syz!: set active
[  157.803954][T11794] infiniband syz!: added team_slave_0
[  157.834211][T11844] fido_id[11844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.868694][T11848] loop1: detected capacity change from 0 to 512
[  157.882353][T11846] __nla_validate_parse: 8 callbacks suppressed
[  157.882440][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2972'.
[  157.887662][T11794] RDS/IB: syz!: added
[  157.889375][T11848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  157.903548][T11794] smc: adding ib device syz! with port count 1
[  157.918086][T11794] smc:    ib device syz! port 1 has pnetid 
[  157.947850][T11848] EXT4-fs (loop1): 1 truncate cleaned up
[  157.990003][T11856] loop5: detected capacity change from 0 to 512
[  158.040732][T11856] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.2972: error while reading EA inode 32 err=-116
[  158.081617][T11856] EXT4-fs (loop5): Remounting filesystem read-only
[  158.088213][T11856] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  158.127335][T11861] loop1: detected capacity change from 0 to 512
[  158.134420][T11856] EXT4-fs (loop5): 1 orphan inode deleted
[  158.168052][T11861] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.203131][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'.
[  158.212181][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2980'.
[  158.239872][T11872] loop3: detected capacity change from 0 to 512
[  158.271718][T11872] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.428300][T11883] netlink: 'syz.1.2984': attribute type 3 has an invalid length.
[  158.438818][T11884] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.463307][T11884] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32
[  158.502860][T11878] loop5: detected capacity change from 0 to 128
[  158.518960][T11889] loop1: detected capacity change from 0 to 512
[  158.543301][T11889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.575920][T11889] EXT4-fs (loop1): 1 truncate cleaned up
[  158.694407][T11905] loop4: detected capacity change from 0 to 512
[  158.731840][T11349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  158.771700][T11349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  158.788846][T11349] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  158.803086][T11905] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.916536][T11918] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.925938][T11918] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32
[  159.104425][   T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.115269][T11945] loop1: detected capacity change from 0 to 512
[  159.125227][T11945] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  159.137562][T11944] netlink: 'syz.4.3006': attribute type 3 has an invalid length.
[  159.146079][T11945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3007: bg 0: block 104: invalid block bitmap
[  159.162729][T11949] loop0: detected capacity change from 0 to 512
[  159.186369][   T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.196912][T11945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  159.212853][T11951] loop4: detected capacity change from 0 to 512
[  159.220019][T11949] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  159.242773][T11949] EXT4-fs (loop0): 1 truncate cleaned up
[  159.250200][T11945] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3007: invalid indirect mapped block 1 (level 1)
[  159.265091][T11945] EXT4-fs (loop1): 1 truncate cleaned up
[  159.284984][   T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.296748][T11951] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.345777][ T3300] EXT4-fs unmount: 186 callbacks suppressed
[  159.345794][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.365122][   T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.386213][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.408765][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.434709][T11925] chnl_net:caif_netlink_parms(): no params data found
[  159.476378][T11969] 9pnet_fd: Insufficient options for proto=fd
[  159.594904][T11925] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.602142][T11925] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.609646][T11925] bridge_slave_0: entered allmulticast mode
[  159.616866][T11925] bridge_slave_0: entered promiscuous mode
[  159.626154][   T31] bridge_slave_1: left allmulticast mode
[  159.631847][   T31] bridge_slave_1: left promiscuous mode
[  159.637505][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.653100][   T31] bridge_slave_0: left allmulticast mode
[  159.659103][   T31] bridge_slave_0: left promiscuous mode
[  159.664854][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.675909][T11991] loop0: detected capacity change from 0 to 512
[  159.697307][T11991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  159.699495][T11993] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.727857][T11991] EXT4-fs (loop0): 1 truncate cleaned up
[  159.733764][T11993] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32
[  159.750384][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3021'.
[  159.757031][T11991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.776958][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.785990][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.802563][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.831112][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.832062][T12000] loop1: detected capacity change from 0 to 512
[  159.840059][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.862887][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  159.875216][T12000] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3021: error while reading EA inode 32 err=-116
[  159.890138][T12000] EXT4-fs (loop1): Remounting filesystem read-only
[  159.896823][T12000] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  159.911209][T12000] EXT4-fs (loop1): 1 orphan inode deleted
[  159.921011][T12000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.934116][T12000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.985006][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.034542][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.052064][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.063550][   T31] bond0 (unregistering): Released all slaves
[  160.073249][T11925] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.080354][T11925] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.088169][T11925] bridge_slave_1: entered allmulticast mode
[  160.094657][T11925] bridge_slave_1: entered promiscuous mode
[  160.129748][T11925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.164146][T11925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.189490][T12023] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  160.260884][T11925] team0: Port device team_slave_0 added
[  160.298613][   T31] hsr_slave_0: left promiscuous mode
[  160.337862][   T31] hsr_slave_1: left promiscuous mode
[  160.346961][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.354382][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.407751][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.415300][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.425296][   T31] veth1_macvtap: left promiscuous mode
[  160.431149][   T31] veth0_macvtap: left promiscuous mode
[  160.436840][   T31] veth1_vlan: left promiscuous mode
[  160.443574][   T31] veth0_vlan: left promiscuous mode
[  160.463975][T12047] loop5: detected capacity change from 0 to 512
[  160.497696][T12047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.533677][T12047] EXT4-fs (loop5): 1 truncate cleaned up
[  160.539759][T12047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.583766][   T31] team0 (unregistering): Port device team_slave_1 removed
[  160.603183][   T31] team0 (unregistering): Port device team_slave_0 removed
[  160.621095][ T3379] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  160.693173][T12062] fido_id[12062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  160.717971][T12065] loop4: detected capacity change from 0 to 512
[  160.729924][   T31] team0 (unregistering): Port device dummy0 removed
[  160.739373][T12065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.755050][T12049] loop0: detected capacity change from 0 to 1024
[  160.759097][T12065] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.764339][T12049] EXT4-fs: Ignoring removed bh option
[  160.778544][T11925] team0: Port device team_slave_1 added
[  160.794511][T12049] EXT4-fs: inline encryption not supported
[  160.804736][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.832293][T12049] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  160.849768][T11925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.856876][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.882860][T11925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.884803][T12049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  160.912166][T12049] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3035: lblock 2 mapped to illegal pblock 2 (length 1)
[  160.929218][T12049] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3035: lblock 0 mapped to illegal pblock 48 (length 1)
[  160.938082][T11925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.950320][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.976398][T11925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.987166][T12049] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3035: Failed to acquire dquot type 0
[  161.002184][T12049] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  161.015393][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.016154][T12049] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3035: mark_inode_dirty error
[  161.024702][T12073] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  161.039664][T12049] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  161.074652][T12049] EXT4-fs (loop0): 1 orphan inode deleted
[  161.074921][T11925] hsr_slave_0: entered promiscuous mode
[  161.085496][T12049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.093644][T11925] hsr_slave_1: entered promiscuous mode
[  161.104293][ T3599] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  161.126201][T11925] debugfs: 'hsr0' already exists in 'hsr'
[  161.132089][T11925] Cannot create hsr debugfs directory
[  161.156313][ T3599] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0
[  161.177179][T12049] ext4: Unknown parameter ''
[  161.186859][T12049] syz!: rxe_newlink: already configured on team_slave_0
[  161.215395][T12082] loop4: detected capacity change from 0 to 512
[  161.258323][T12082] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3042: error while reading EA inode 32 err=-116
[  161.296094][T12082] EXT4-fs (loop4): Remounting filesystem read-only
[  161.302713][T12082] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  161.325790][T12082] EXT4-fs (loop4): 1 orphan inode deleted
[  161.332565][T12082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.335970][T12098] loop5: detected capacity change from 0 to 512
[  161.373480][T12082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.419459][T12098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.480935][T12098] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.484822][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.507760][T11349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  161.545571][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.567059][T11349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  161.604193][T11349] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  161.686636][T12117] loop4: detected capacity change from 0 to 512
[  161.723483][T12117] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  161.723832][T12120] loop0: detected capacity change from 0 to 512
[  161.747328][T12117] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3052: bg 0: block 104: invalid block bitmap
[  161.765543][T12121] loop1: detected capacity change from 0 to 512
[  161.781842][T12120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  161.797657][T11925] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  161.799385][T12117] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  161.815269][T12117] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3052: invalid indirect mapped block 1 (level 1)
[  161.834901][T12120] EXT4-fs (loop0): 1 truncate cleaned up
[  161.836480][T12117] EXT4-fs (loop4): 1 truncate cleaned up
[  161.846920][T12117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.854434][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.871153][T11925] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  161.881681][T12121] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3051: error while reading EA inode 32 err=-116
[  161.903076][T11925] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  161.912190][T12121] EXT4-fs (loop1): Remounting filesystem read-only
[  161.918807][T12121] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  161.945217][T12121] EXT4-fs (loop1): 1 orphan inode deleted
[  161.963562][T12121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.982650][T11925] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.012867][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.023385][T12121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.149186][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.233198][T11925] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.297101][T11925] 8021q: adding VLAN 0 to HW filter on device team0
[  162.342299][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.349426][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.378765][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.385925][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.413264][T12183] serio: Serial port ptm0
[  162.468270][T12187] netlink: 'syz.4.3061': attribute type 3 has an invalid length.
[  162.490437][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  162.490454][   T29] audit: type=1326 audit(1758855865.394:11325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.532831][   T29] audit: type=1326 audit(1758855865.424:11326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.556604][   T29] audit: type=1326 audit(1758855865.424:11327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.580200][   T29] audit: type=1326 audit(1758855865.434:11328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.603738][   T29] audit: type=1326 audit(1758855865.434:11329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.627589][   T29] audit: type=1326 audit(1758855865.434:11330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.651312][   T29] audit: type=1326 audit(1758855865.434:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.675042][   T29] audit: type=1326 audit(1758855865.434:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.698825][   T29] audit: type=1326 audit(1758855865.444:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.722652][   T29] audit: type=1326 audit(1758855865.444:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118972eec9 code=0x7ffc0000
[  162.748216][T12191] loop0: detected capacity change from 0 to 1024
[  162.755226][T12191] EXT4-fs: Ignoring removed bh option
[  162.760769][T12191] EXT4-fs: inline encryption not supported
[  162.771790][T11925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.778239][T12191] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  162.868308][T12191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  162.879174][T12191] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3058: lblock 2 mapped to illegal pblock 2 (length 1)
[  162.900415][T12191] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3058: lblock 0 mapped to illegal pblock 48 (length 1)
[  162.924838][T12191] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3058: Failed to acquire dquot type 0
[  162.927399][T12220] loop5: detected capacity change from 0 to 512
[  162.952237][T12220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  162.959773][T12191] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  162.980739][T12191] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3058: mark_inode_dirty error
[  162.995741][T12191] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  163.014177][T11925] veth0_vlan: entered promiscuous mode
[  163.021040][T12191] EXT4-fs (loop0): 1 orphan inode deleted
[  163.027368][T12191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.034680][T12220] EXT4-fs (loop5): 1 truncate cleaned up
[  163.042375][T11925] veth1_vlan: entered promiscuous mode
[  163.051637][   T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  163.070790][T12170] ext4: Unknown parameter ''
[  163.075271][T11925] veth0_macvtap: entered promiscuous mode
[  163.081983][T12220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.084777][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0
[  163.095182][T12170] syz!: rxe_newlink: already configured on team_slave_0
[  163.116860][T11925] veth1_macvtap: entered promiscuous mode
[  163.131156][T11925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.157584][T11925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.173365][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.188698][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.208294][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.222449][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.265604][T12230] netlink: 'syz.3.2996': attribute type 3 has an invalid length.
[  163.274224][T12230] netlink: 'syz.3.2996': attribute type 3 has an invalid length.
[  163.311360][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.345599][T12232] __nla_validate_parse: 7 callbacks suppressed
[  163.345614][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'.
[  163.392991][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.413025][T11349] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  163.436486][T12236] loop3: detected capacity change from 0 to 512
[  163.449486][T12239] loop4: detected capacity change from 0 to 512
[  163.451569][T11349] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  163.484396][T12236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.520040][T12236] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.528212][T12239] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3069: error while reading EA inode 32 err=-116
[  163.544518][T12236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.555597][T11349] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  163.567360][ T6296] vhci_hcd: connection reset by peer
[  163.581244][ T3605] vhci_hcd: stop threads
[  163.581338][T12239] EXT4-fs (loop4): Remounting filesystem read-only
[  163.585641][ T3605] vhci_hcd: release socket
[  163.592368][T12239] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  163.596707][ T3605] vhci_hcd: disconnect device
[  163.614875][T12239] EXT4-fs (loop4): 1 orphan inode deleted
[  163.626396][T12239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.701737][T12239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.721051][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.782745][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.836015][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.838156][ T3379] hid_parser_main: 162 callbacks suppressed
[  163.838177][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.859766][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.867265][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.874769][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.882195][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.889601][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.897069][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.904494][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.911988][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.919440][ T3379] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  163.957792][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.968720][ T3379] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  164.010349][T12262] fido_id[12262]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  164.033651][ T3393] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  164.063430][T12266] loop0: detected capacity change from 0 to 512
[  164.091185][T12266] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  164.108265][T12267] fido_id[12267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  164.127725][T12266] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3076: bg 0: block 104: invalid block bitmap
[  164.134446][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'.
[  164.161796][T12266] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  164.173305][   T56] bridge0: port 3(team0) entered disabled state
[  164.180354][T12266] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3076: invalid indirect mapped block 1 (level 1)
[  164.193776][   T56] bridge_slave_1: left allmulticast mode
[  164.199589][   T56] bridge_slave_1: left promiscuous mode
[  164.205316][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.230083][T12266] EXT4-fs (loop0): 1 truncate cleaned up
[  164.236145][   T56] bridge_slave_0: left allmulticast mode
[  164.241395][T12266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.241876][   T56] bridge_slave_0: left promiscuous mode
[  164.259579][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.278719][T12274] loop5: detected capacity change from 0 to 512
[  164.291649][T12274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  164.348496][T12274] EXT4-fs (loop5): 1 truncate cleaned up
[  164.354930][T12274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.387004][T11349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.526399][T12299] loop3: detected capacity change from 0 to 512
[  164.545963][T12299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  164.566262][   T56] bridge0 (unregistering): left allmulticast mode
[  164.574707][T12299] EXT4-fs (loop3): 1 truncate cleaned up
[  164.588689][T12299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.628292][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.675261][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.684276][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.693640][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.712522][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.721545][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.730459][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.732762][T11925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.769956][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.778906][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  164.792406][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.803060][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.815923][   T56] bond0 (unregistering): Released all slaves
[  164.838394][T12318] loop3: detected capacity change from 0 to 512
[  164.852730][T12294] netlink: 'syz.0.3081': attribute type 3 has an invalid length.
[  164.862957][T12294] netlink: 'syz.0.3081': attribute type 3 has an invalid length.
[  164.872085][T12318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3086: error while reading EA inode 32 err=-116
[  164.890038][   T56] tipc: Disabling bearer <udp:£>
[  164.895108][   T56] tipc: Left network mode
[  164.922072][T12318] EXT4-fs (loop3): Remounting filesystem read-only
[  164.928643][T12318] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  164.949863][T12325] loop4: detected capacity change from 0 to 512
[  164.974642][T12325] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  164.999487][T12318] EXT4-fs (loop3): 1 orphan inode deleted
[  165.037751][T12318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.054130][T12327] loop0: detected capacity change from 0 to 512
[  165.073177][T12325] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3089: bg 0: block 104: invalid block bitmap
[  165.085765][   T56] hsr_slave_0: left promiscuous mode
[  165.100758][   T56] hsr_slave_1: left promiscuous mode
[  165.106560][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.114199][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.122438][T12325] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  165.131852][T12318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.147635][T12325] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3089: invalid indirect mapped block 1 (level 1)
[  165.173721][T12325] EXT4-fs (loop4): 1 truncate cleaned up
[  165.173972][T12327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.180291][T12325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.209586][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.217077][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.244634][T12327] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.245065][   T56] veth1_macvtap: left promiscuous mode
[  165.310669][   T56] veth0_macvtap: left promiscuous mode
[  165.321982][   T56] veth1_vlan: left promiscuous mode
[  165.337067][T12327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.339637][   T56] veth0_vlan: left promiscuous mode
[  165.388813][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.510514][   T56] team_slave_1 (unregistering): left promiscuous mode
[  165.517932][   T56] team_slave_1 (unregistering): left allmulticast mode
[  165.526699][   T56] team0 (unregistering): Port device team_slave_1 removed
[  165.536655][   T56] team_slave_0 (unregistering): left promiscuous mode
[  165.543555][   T56] team_slave_0 (unregistering): left allmulticast mode
[  165.553843][   T56] team0 (unregistering): Port device team_slave_0 removed
[  165.564509][T12356] loop4: detected capacity change from 0 to 512
[  165.572334][T12356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  165.589810][T12356] EXT4-fs (loop4): 1 truncate cleaned up
[  165.596137][T12356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.620955][   T56] dummy0 (unregistering): left promiscuous mode
[  165.627848][   T56] dummy0 (unregistering): left allmulticast mode
[  165.636392][   T56] team0 (unregistering): Port device dummy0 removed
[  165.660012][T12244] chnl_net:caif_netlink_parms(): no params data found
[  165.740306][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.754555][T12244] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.761707][T12244] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.769232][T12244] bridge_slave_0: entered allmulticast mode
[  165.776328][T12244] bridge_slave_0: entered promiscuous mode
[  165.799626][T12244] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.806974][T12244] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.814583][T12244] bridge_slave_1: entered allmulticast mode
[  165.821628][T12244] bridge_slave_1: entered promiscuous mode
[  165.863380][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.878880][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.901872][T12375] loop4: detected capacity change from 0 to 512
[  165.924900][T12375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  165.974246][T12375] EXT4-fs (loop4): 1 truncate cleaned up
[  165.981969][T12244] team0: Port device team_slave_0 added
[  165.988831][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.996756][T12244] team0: Port device team_slave_1 added
[  166.041339][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.048342][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.074384][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.086794][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.093875][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.119851][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.147374][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.181701][T12244] hsr_slave_0: entered promiscuous mode
[  166.205671][T12244] hsr_slave_1: entered promiscuous mode
[  166.217637][T12244] debugfs: 'hsr0' already exists in 'hsr'
[  166.223479][T12244] Cannot create hsr debugfs directory
[  166.276722][T12394] netlink: 'syz.5.3099': attribute type 3 has an invalid length.
[  166.290722][ T3386] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  166.295219][T12394] netlink: 'syz.5.3099': attribute type 3 has an invalid length.
[  166.340234][T12399] fido_id[12399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  166.502211][T12386] loop4: detected capacity change from 0 to 1024
[  166.520940][T12386] EXT4-fs: Ignoring removed bh option
[  166.529696][T12386] EXT4-fs: inline encryption not supported
[  166.549464][T12386] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.577055][T12386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  166.614217][T12427] loop5: detected capacity change from 0 to 512
[  166.614496][T12386] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3097: lblock 2 mapped to illegal pblock 2 (length 1)
[  166.647294][T12427] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  166.656719][T12386] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3097: lblock 0 mapped to illegal pblock 48 (length 1)
[  166.672717][T12427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3106: bg 0: block 104: invalid block bitmap
[  166.685283][T12386] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3097: Failed to acquire dquot type 0
[  166.699907][T12427] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  166.716854][T12427] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3106: invalid indirect mapped block 1 (level 1)
[  166.730384][T12427] EXT4-fs (loop5): 1 truncate cleaned up
[  166.736892][T12427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.754707][T12386] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  166.787682][T12386] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3097: mark_inode_dirty error
[  166.812654][T12244] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  166.829271][T12244] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  166.836463][T12386] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  166.849310][T12244] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  166.869669][T12386] EXT4-fs (loop4): 1 orphan inode deleted
[  166.869945][ T1085] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  166.876128][T12386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.903065][T12244] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  166.916969][ T1085] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0
[  166.929543][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.957008][T12386] ext4: Unknown parameter ''
[  167.002001][T12244] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.017168][T12244] 8021q: adding VLAN 0 to HW filter on device team0
[  167.028738][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.035850][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.049793][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.056903][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.092139][T12244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.121080][T12480] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2
[  167.209928][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.259086][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.280336][T12496] loop3: detected capacity change from 0 to 512
[  167.292477][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  167.325140][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  167.339421][T12496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.352786][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  167.375414][T12496] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.395082][T12244] veth0_vlan: entered promiscuous mode
[  167.430530][T12244] veth1_vlan: entered promiscuous mode
[  167.456802][T11925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.457772][T12244] veth0_macvtap: entered promiscuous mode
[  167.473782][T12244] veth1_macvtap: entered promiscuous mode
[  167.490234][T12244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.502162][T12244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.517123][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.535259][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.548251][T12520] loop3: detected capacity change from 0 to 512
[  167.559731][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.568902][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.597788][T12520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.610863][T12520] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.625771][T12526] loop0: detected capacity change from 0 to 512
[  167.653739][T12526] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3118: error while reading EA inode 32 err=-116
[  167.669269][T11925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.680530][T12526] EXT4-fs (loop0): Remounting filesystem read-only
[  167.687281][T12526] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  167.699450][T12526] EXT4-fs (loop0): 1 orphan inode deleted
[  167.705768][T12526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.740177][T12526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.743588][T12534] loop3: detected capacity change from 0 to 512
[  167.774707][T12534] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  167.789955][T12534] EXT4-fs (loop3): 1 truncate cleaned up
[  167.799073][T12534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.986390][T12551] loop5: detected capacity change from 0 to 512
[  168.002358][T12551] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  168.025771][T12551] EXT4-fs (loop5): 1 truncate cleaned up
[  168.051095][T12551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.053226][T11925] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.077523][T12555] loop0: detected capacity change from 0 to 512
[  168.121030][T12555] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3127: error while reading EA inode 32 err=-116
[  168.176178][T12555] EXT4-fs (loop0): Remounting filesystem read-only
[  168.182794][T12555] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  168.193359][T12555] EXT4-fs (loop0): 1 orphan inode deleted
[  168.196272][T12563] loop3: detected capacity change from 0 to 512
[  168.199645][T12555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.232226][T12555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.234580][ T5361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.337158][T12563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.395241][T12563] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.405966][   T29] kauditd_printk_skb: 259 callbacks suppressed
[  168.405983][   T29] audit: type=1400 audit(1758855871.314:11588): avc:  denied  { create } for  pid=12571 comm="syz.1.3133" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  168.433554][   T29] audit: type=1400 audit(1758855871.314:11589): avc:  denied  { write } for  pid=12571 comm="syz.1.3133" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  168.456046][   T29] audit: type=1400 audit(1758855871.314:11590): avc:  denied  { open } for  pid=12571 comm="syz.1.3133" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  168.527308][T12572] loop1: detected capacity change from 0 to 2048
[  168.536790][T12582] __nla_validate_parse: 4 callbacks suppressed
[  168.536807][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'.
[  168.566837][   T29] audit: type=1326 audit(1758855871.474:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.590525][   T29] audit: type=1326 audit(1758855871.474:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.614429][   T29] audit: type=1326 audit(1758855871.474:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.638068][   T29] audit: type=1326 audit(1758855871.474:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.638170][ T3417] usb 3-1: enqueue for inactive port 0
[  168.661721][   T29] audit: type=1326 audit(1758855871.474:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.690782][   T29] audit: type=1326 audit(1758855871.474:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.714697][   T29] audit: type=1326 audit(1758855871.474:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.1.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  168.758209][ T3417] vhci_hcd: vhci_device speed not set
[  168.809345][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3138'.
[  168.826141][   T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.884923][T12603] loop3: detected capacity change from 0 to 512
[  168.896626][T12603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3138: error while reading EA inode 32 err=-116
[  168.910999][T12603] EXT4-fs (loop3): Remounting filesystem read-only
[  168.917562][T12603] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  168.929893][   T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.942014][T12603] EXT4-fs (loop3): 1 orphan inode deleted
[  168.994276][   T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.012659][T12610] loop5: detected capacity change from 0 to 512
[  169.048060][T12610] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.075757][   T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.123126][T12574] chnl_net:caif_netlink_parms(): no params data found
[  169.176518][T12619] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  169.219284][   T56] bridge0: port 3(team0) entered disabled state
[  169.234141][   T56] bridge_slave_1: left allmulticast mode
[  169.239861][   T56] bridge_slave_1: left promiscuous mode
[  169.245750][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.264281][   T56] bridge_slave_0: left allmulticast mode
[  169.269984][   T56] bridge_slave_0: left promiscuous mode
[  169.275999][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.365220][T12620] loop3: detected capacity change from 0 to 128
[  169.474258][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.490823][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.500759][   T56] bond0 (unregistering): Released all slaves
[  169.554151][T12574] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.561444][T12574] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.571801][T12574] bridge_slave_0: entered allmulticast mode
[  169.583542][T12574] bridge_slave_0: entered promiscuous mode
[  169.591084][T12574] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.598184][T12574] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.606050][T12574] bridge_slave_1: entered allmulticast mode
[  169.613372][T12574] bridge_slave_1: entered promiscuous mode
[  169.674693][   T56] hsr_slave_0: left promiscuous mode
[  169.700338][   T56] hsr_slave_1: left promiscuous mode
[  169.706429][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.713992][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.716454][ T3379] hid_parser_main: 119 callbacks suppressed
[  169.716478][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.734550][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.742046][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.749496][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.757015][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.764584][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.772044][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.779460][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.786968][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.794412][ T3379] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  169.816966][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.824534][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.837547][ T3379] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  169.876575][T12647] fido_id[12647]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  169.901890][   T56] veth1_macvtap: left promiscuous mode
[  169.912154][   T56] veth0_macvtap: left promiscuous mode
[  169.944807][   T56] veth1_vlan: left promiscuous mode
[  169.985235][T12660] loop3: detected capacity change from 0 to 512
[  170.019437][T12660] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.058998][T12651] loop5: detected capacity change from 0 to 128
[  170.091188][   T56] team_slave_1 (unregistering): left promiscuous mode
[  170.098127][   T56] team_slave_1 (unregistering): left allmulticast mode
[  170.106081][   T56] team0 (unregistering): Port device team_slave_1 removed
[  170.125037][   T56] C (unregistering): left promiscuous mode
[  170.130970][   T56] C (unregistering): left allmulticast mode
[  170.138013][   T56] team0 (unregistering): Port device C removed
[  170.201137][   T56] dummy0 (unregistering): left promiscuous mode
[  170.207486][   T56] dummy0 (unregistering): left allmulticast mode
[  170.214788][   T56] team0 (unregistering): Port device dummy0 removed
[  170.233710][T12649] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2
[  170.235234][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.264116][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.364847][T12690] FAULT_INJECTION: forcing a failure.
[  170.364847][T12690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  170.366070][T12574] team0: Port device team_slave_0 added
[  170.378010][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.5.3163 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  170.378050][T12690] Tainted: [W]=WARN
[  170.378057][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  170.378075][T12690] Call Trace:
[  170.378083][T12690]  <TASK>
[  170.378093][T12690]  __dump_stack+0x1d/0x30
[  170.378157][T12690]  dump_stack_lvl+0xe8/0x140
[  170.378185][T12690]  dump_stack+0x15/0x1b
[  170.378296][T12690]  should_fail_ex+0x265/0x280
[  170.378329][T12690]  should_fail+0xb/0x20
[  170.378356][T12690]  should_fail_usercopy+0x1a/0x20
[  170.378390][T12690]  _copy_from_iter+0xd2/0xe80
[  170.378447][T12690]  ? __build_skb_around+0x1a0/0x200
[  170.378475][T12690]  ? __alloc_skb+0x223/0x320
[  170.378506][T12690]  netlink_sendmsg+0x471/0x6b0
[  170.378543][T12690]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.378579][T12690]  __sock_sendmsg+0x145/0x180
[  170.378619][T12690]  ____sys_sendmsg+0x31e/0x4e0
[  170.378656][T12690]  ___sys_sendmsg+0x17b/0x1d0
[  170.378784][T12690]  __x64_sys_sendmsg+0xd4/0x160
[  170.378824][T12690]  x64_sys_call+0x191e/0x2ff0
[  170.378861][T12690]  do_syscall_64+0xd2/0x200
[  170.378965][T12690]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  170.378999][T12690]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  170.379182][T12690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.379211][T12690] RIP: 0033:0x7f6dc396eec9
[  170.379281][T12690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.379307][T12690] RSP: 002b:00007f6dc23ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.379332][T12690] RAX: ffffffffffffffda RBX: 00007f6dc3bc6090 RCX: 00007f6dc396eec9
[  170.379350][T12690] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000007
[  170.379367][T12690] RBP: 00007f6dc23ae090 R08: 0000000000000000 R09: 0000000000000000
[  170.379382][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.379399][T12690] R13: 00007f6dc3bc6128 R14: 00007f6dc3bc6090 R15: 00007fff331f2678
[  170.379466][T12690]  </TASK>
[  170.497919][T12699] loop3: detected capacity change from 0 to 512
[  170.518831][T12695] loop0: detected capacity change from 0 to 1024
[  170.601940][T12574] team0: Port device team_slave_1 added
[  170.632528][T12699] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.659889][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.666972][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.693015][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.709568][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.716687][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.723291][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'.
[  170.742658][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.768116][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3168'.
[  170.840402][T12574] hsr_slave_0: entered promiscuous mode
[  170.844013][T12721] loop5: detected capacity change from 0 to 512
[  170.851508][T12574] hsr_slave_1: entered promiscuous mode
[  170.881079][T12721] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3168: error while reading EA inode 32 err=-116
[  170.901051][T12574] debugfs: 'hsr0' already exists in 'hsr'
[  170.906845][T12574] Cannot create hsr debugfs directory
[  170.924694][T12721] EXT4-fs (loop5): Remounting filesystem read-only
[  170.931326][T12721] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  170.967031][T12733] loop3: detected capacity change from 0 to 512
[  170.982759][T12721] EXT4-fs (loop5): 1 orphan inode deleted
[  171.011001][T12733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.035523][T12733] EXT4-fs (loop3): 1 truncate cleaned up
[  171.409396][T12751] loop3: detected capacity change from 0 to 2048
[  171.470853][T12574] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.481896][T12574] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.517527][T12574] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.532812][T12574] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.556940][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.604536][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.662937][T12574] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.684941][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.716071][T12574] 8021q: adding VLAN 0 to HW filter on device team0
[  171.717365][T12802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  171.753032][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.791982][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.799132][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.838072][T12812] loop1: detected capacity change from 0 to 512
[  171.878005][T12812] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3184: error while reading EA inode 32 err=-116
[  171.907552][T12810] macvtap0: refused to change device tx_queue_len
[  171.944034][T12812] EXT4-fs (loop1): Remounting filesystem read-only
[  171.950641][T12812] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  171.970845][T12812] EXT4-fs (loop1): 1 orphan inode deleted
[  171.991033][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.998261][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.079861][T12574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.090368][T12574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.173122][   T12] bridge_slave_1: left allmulticast mode
[  172.178910][   T12] bridge_slave_1: left promiscuous mode
[  172.184737][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.224397][   T12] bridge_slave_0: left allmulticast mode
[  172.230088][   T12] bridge_slave_0: left promiscuous mode
[  172.235954][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.318334][T12853] loop5: detected capacity change from 0 to 512
[  172.333557][T12853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  172.374774][T12853] EXT4-fs (loop5): 1 truncate cleaned up
[  172.413407][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.424681][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.438694][   T12] bond0 (unregistering): Released all slaves
[  172.446843][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3191'.
[  172.470479][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3181'.
[  172.479634][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3181'.
[  172.555831][T12865] loop5: detected capacity change from 0 to 512
[  172.567111][   T12] hsr_slave_0: left promiscuous mode
[  172.579189][   T12] hsr_slave_1: left promiscuous mode
[  172.585256][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.587605][T12865] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3191: error while reading EA inode 32 err=-116
[  172.592744][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.612688][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.612690][T12865] EXT4-fs (loop5): Remounting filesystem read-only
[  172.620106][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.633972][T12865] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  172.644370][T12865] EXT4-fs (loop5): 1 orphan inode deleted
[  172.650273][   T12] veth1_macvtap: left promiscuous mode
[  172.656838][   T12] veth0_macvtap: left promiscuous mode
[  172.662552][   T12] veth1_vlan: left promiscuous mode
[  172.667800][   T12] veth0_vlan: left promiscuous mode
[  172.743864][   T12] team0 (unregistering): Port device team_slave_1 removed
[  172.753797][   T12] team0 (unregistering): Port device team_slave_0 removed
[  172.763403][ T3601] smc: removing ib device syz!
[  172.833997][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.864158][T12772] chnl_net:caif_netlink_parms(): no params data found
[  173.072629][T12772] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.079852][T12772] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.100682][T12772] bridge_slave_0: entered allmulticast mode
[  173.119865][T12772] bridge_slave_0: entered promiscuous mode
[  173.147338][T12772] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.154534][T12772] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.183574][T12889] loop5: detected capacity change from 0 to 2048
[  173.191010][T12772] bridge_slave_1: entered allmulticast mode
[  173.202429][T12772] bridge_slave_1: entered promiscuous mode
[  173.270397][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.305245][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.332321][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'.
[  173.391697][T12574] veth0_vlan: entered promiscuous mode
[  173.417798][T12772] team0: Port device team_slave_0 added
[  173.425608][T12772] team0: Port device team_slave_1 added
[  173.455497][T12574] veth1_vlan: entered promiscuous mode
[  173.477175][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.484282][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.510324][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.524616][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.531678][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.557715][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.600750][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.609841][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.619125][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.643564][T12772] hsr_slave_0: entered promiscuous mode
[  173.650439][T12772] hsr_slave_1: entered promiscuous mode
[  173.659411][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.668340][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.678041][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.702251][T12574] veth0_macvtap: entered promiscuous mode
[  173.714398][T12574] veth1_macvtap: entered promiscuous mode
[  173.722596][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.731665][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.738452][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.781250][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'.
[  173.816984][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.846085][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'.
[  173.874487][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  173.874528][   T29] audit: type=1326 audit(1758855876.784:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  173.911939][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.941450][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.949382][   T29] audit: type=1326 audit(1758855876.784:11752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  173.973980][   T29] audit: type=1326 audit(1758855876.784:11753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  173.997705][   T29] audit: type=1326 audit(1758855876.784:11754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.021433][   T29] audit: type=1326 audit(1758855876.784:11755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.045063][   T29] audit: type=1326 audit(1758855876.784:11756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.068767][   T29] audit: type=1326 audit(1758855876.784:11757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.092388][   T29] audit: type=1326 audit(1758855876.784:11758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.116037][   T29] audit: type=1326 audit(1758855876.784:11759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.139838][   T29] audit: type=1326 audit(1758855876.784:11760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc396eec9 code=0x7ffc0000
[  174.171837][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.202533][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.236463][T12772] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  174.260511][T12772] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  174.288264][T12772] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  174.319053][T12772] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  174.435204][T12772] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.480866][T12772] 8021q: adding VLAN 0 to HW filter on device team0
[  174.501668][T13011] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2
[  174.553015][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.560217][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.587354][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.594582][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.686355][T12772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.696798][T12772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.897980][T13036] loop4: detected capacity change from 0 to 1024
[  174.905755][T13036] EXT4-fs: Ignoring removed bh option
[  174.912310][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.912367][T13036] EXT4-fs: inline encryption not supported
[  174.929010][T13036] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  174.960803][T13036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  174.972022][T13036] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3218: lblock 2 mapped to illegal pblock 2 (length 1)
[  174.998843][T13036] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3218: lblock 0 mapped to illegal pblock 48 (length 1)
[  175.043472][T13036] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.3218: Failed to acquire dquot type 0
[  175.066289][T13036] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  175.085711][T13036] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3218: mark_inode_dirty error
[  175.100812][T13036] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  175.120838][T13036] EXT4-fs (loop4): 1 orphan inode deleted
[  175.133208][T13052] loop5: detected capacity change from 0 to 512
[  175.140836][ T1085] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  175.170524][ T1085] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0
[  175.183719][T13036] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3218: lblock 0 mapped to illegal pblock 48 (length 1)
[  175.200484][T13052] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3219: error while reading EA inode 32 err=-116
[  175.215292][T13052] EXT4-fs (loop5): Remounting filesystem read-only
[  175.221974][T13052] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  175.232793][T13052] EXT4-fs (loop5): 1 orphan inode deleted
[  175.301982][T13060] loop1: detected capacity change from 0 to 1024
[  175.321849][T12772] veth0_vlan: entered promiscuous mode
[  175.333988][T13060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  175.346712][T12772] veth1_vlan: entered promiscuous mode
[  175.367904][T12772] veth0_macvtap: entered promiscuous mode
[  175.375884][T12772] veth1_macvtap: entered promiscuous mode
[  175.404340][T12772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.414210][T12772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.448174][ T3603] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.477657][ T3603] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.492366][ T3601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.493430][T13060] infiniband syz1: set active
[  175.505981][T13060] infiniband syz1: added bridge0
[  175.516975][ T3601] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.535856][T13060] RDS/IB: syz1: added
[  175.539943][T13060] smc: adding ib device syz1 with port count 1
[  175.546190][T13060] smc:    ib device syz1 port 1 has pnetid 
[  175.628317][T13080] loop4: detected capacity change from 0 to 512
[  175.673175][T13080] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.705960][T13089] loop6: detected capacity change from 0 to 512
[  175.720376][T13089] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  175.826285][T13089] EXT4-fs (loop6): 1 truncate cleaned up
[  175.990330][T13102] FAULT_INJECTION: forcing a failure.
[  175.990330][T13102] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.003602][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.6.3232 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  176.003634][T13102] Tainted: [W]=WARN
[  176.003640][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  176.003652][T13102] Call Trace:
[  176.003659][T13102]  <TASK>
[  176.003670][T13102]  __dump_stack+0x1d/0x30
[  176.003737][T13102]  dump_stack_lvl+0xe8/0x140
[  176.003759][T13102]  dump_stack+0x15/0x1b
[  176.003780][T13102]  should_fail_ex+0x265/0x280
[  176.003828][T13102]  should_fail+0xb/0x20
[  176.003848][T13102]  should_fail_usercopy+0x1a/0x20
[  176.003883][T13102]  _copy_from_iter+0xd2/0xe80
[  176.003915][T13102]  ? __build_skb_around+0x1a0/0x200
[  176.003939][T13102]  ? __alloc_skb+0x223/0x320
[  176.004007][T13102]  netlink_sendmsg+0x471/0x6b0
[  176.004040][T13102]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.004064][T13102]  __sock_sendmsg+0x145/0x180
[  176.004125][T13102]  ____sys_sendmsg+0x31e/0x4e0
[  176.004183][T13102]  ___sys_sendmsg+0x17b/0x1d0
[  176.004289][T13102]  __x64_sys_sendmsg+0xd4/0x160
[  176.004320][T13102]  x64_sys_call+0x191e/0x2ff0
[  176.004348][T13102]  do_syscall_64+0xd2/0x200
[  176.004386][T13102]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  176.004459][T13102]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  176.004489][T13102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.004591][T13102] RIP: 0033:0x7f2326f3eec9
[  176.004661][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.004679][T13102] RSP: 002b:00007f232597e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.004699][T13102] RAX: ffffffffffffffda RBX: 00007f2327196090 RCX: 00007f2326f3eec9
[  176.004721][T13102] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 000000000000000a
[  176.004738][T13102] RBP: 00007f232597e090 R08: 0000000000000000 R09: 0000000000000000
[  176.004770][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.004786][T13102] R13: 00007f2327196128 R14: 00007f2327196090 R15: 00007ffedd18f5e8
[  176.004811][T13102]  </TASK>
[  176.363945][T13112] loop6: detected capacity change from 0 to 512
[  176.400080][T13112] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3235: error while reading EA inode 32 err=-116
[  176.444834][T13112] EXT4-fs (loop6): Remounting filesystem read-only
[  176.451519][T13112] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  176.459656][T13117] loop5: detected capacity change from 0 to 512
[  176.461990][T13112] EXT4-fs (loop6): 1 orphan inode deleted
[  176.479267][T13109] loop1: detected capacity change from 0 to 128
[  176.649670][T13131] loop4: detected capacity change from 0 to 512
[  176.668922][T13131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  176.720515][T13131] EXT4-fs (loop4): 1 truncate cleaned up
[  176.759006][T13137] netlink: 'syz.6.3244': attribute type 3 has an invalid length.
[  176.803545][T13140] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in;
[  176.803545][T13140]    program syz.6.3246 not setting count and/or reply_len properly
[  176.874587][T13144] ALSA: seq fatal error: cannot create timer (-19)
[  176.910274][T13150] loop5: detected capacity change from 0 to 1024
[  176.925941][T13150] EXT4-fs: Ignoring removed orlov option
[  176.931704][T13150] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.113026][T13166] FAULT_INJECTION: forcing a failure.
[  177.113026][T13166] name failslab, interval 1, probability 0, space 0, times 0
[  177.125803][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.3.3254 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  177.125891][T13166] Tainted: [W]=WARN
[  177.125900][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  177.125916][T13166] Call Trace:
[  177.125924][T13166]  <TASK>
[  177.125934][T13166]  __dump_stack+0x1d/0x30
[  177.125961][T13166]  dump_stack_lvl+0xe8/0x140
[  177.125983][T13166]  dump_stack+0x15/0x1b
[  177.126042][T13166]  should_fail_ex+0x265/0x280
[  177.126107][T13166]  should_failslab+0x8c/0xb0
[  177.126133][T13166]  __kmalloc_cache_node_noprof+0x54/0x320
[  177.126171][T13166]  ? __get_vm_area_node+0x106/0x1d0
[  177.126212][T13166]  __get_vm_area_node+0x106/0x1d0
[  177.126323][T13166]  __vmalloc_node_range_noprof+0x273/0xe00
[  177.126362][T13166]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.126422][T13166]  ? avc_has_perm_noaudit+0x1b1/0x200
[  177.126452][T13166]  ? cred_has_capability+0x210/0x280
[  177.126475][T13166]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.126533][T13166]  __vmalloc_noprof+0x83/0xc0
[  177.126573][T13166]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.126614][T13166]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.126686][T13166]  ? bpf_prog_alloc+0x2a/0x150
[  177.126721][T13166]  bpf_prog_alloc+0x3c/0x150
[  177.126747][T13166]  bpf_prog_load+0x514/0x1070
[  177.126784][T13166]  ? security_bpf+0x2b/0x90
[  177.126803][T13166]  __sys_bpf+0x462/0x7b0
[  177.126859][T13166]  __x64_sys_bpf+0x41/0x50
[  177.126891][T13166]  x64_sys_call+0x2aea/0x2ff0
[  177.126976][T13166]  do_syscall_64+0xd2/0x200
[  177.127015][T13166]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  177.127047][T13166]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  177.127120][T13166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.127148][T13166] RIP: 0033:0x7febd5a4eec9
[  177.127165][T13166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.127193][T13166] RSP: 002b:00007febd44b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  177.127211][T13166] RAX: ffffffffffffffda RBX: 00007febd5ca5fa0 RCX: 00007febd5a4eec9
[  177.127226][T13166] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  177.127242][T13166] RBP: 00007febd44b7090 R08: 0000000000000000 R09: 0000000000000000
[  177.127256][T13166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.127267][T13166] R13: 00007febd5ca6038 R14: 00007febd5ca5fa0 R15: 00007ffd27556fe8
[  177.127286][T13166]  </TASK>
[  177.127294][T13166] syz.3.3254: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  177.156219][T13161] loop1: detected capacity change from 0 to 128
[  177.159094][T13166] ,cpuset=/,mems_allowed=0
[  177.395313][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.3.3254 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  177.395380][T13166] Tainted: [W]=WARN
[  177.395389][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  177.395450][T13166] Call Trace:
[  177.395456][T13166]  <TASK>
[  177.395463][T13166]  __dump_stack+0x1d/0x30
[  177.395483][T13166]  dump_stack_lvl+0xe8/0x140
[  177.395501][T13166]  dump_stack+0x15/0x1b
[  177.395519][T13166]  warn_alloc+0x12b/0x1a0
[  177.395623][T13166]  __vmalloc_node_range_noprof+0x297/0xe00
[  177.395668][T13166]  ? avc_has_perm_noaudit+0x1b1/0x200
[  177.395777][T13166]  ? cred_has_capability+0x210/0x280
[  177.395857][T13166]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.395892][T13166]  __vmalloc_noprof+0x83/0xc0
[  177.395929][T13166]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.396030][T13166]  bpf_prog_alloc_no_stats+0x47/0x3a0
[  177.396058][T13166]  ? bpf_prog_alloc+0x2a/0x150
[  177.396106][T13166]  bpf_prog_alloc+0x3c/0x150
[  177.396198][T13166]  bpf_prog_load+0x514/0x1070
[  177.396237][T13166]  ? security_bpf+0x2b/0x90
[  177.396305][T13166]  __sys_bpf+0x462/0x7b0
[  177.396340][T13166]  __x64_sys_bpf+0x41/0x50
[  177.396376][T13166]  x64_sys_call+0x2aea/0x2ff0
[  177.396398][T13166]  do_syscall_64+0xd2/0x200
[  177.396430][T13166]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  177.396511][T13166]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  177.396539][T13166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.396561][T13166] RIP: 0033:0x7febd5a4eec9
[  177.396576][T13166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.396595][T13166] RSP: 002b:00007febd44b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  177.396628][T13166] RAX: ffffffffffffffda RBX: 00007febd5ca5fa0 RCX: 00007febd5a4eec9
[  177.396640][T13166] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  177.396653][T13166] RBP: 00007febd44b7090 R08: 0000000000000000 R09: 0000000000000000
[  177.396665][T13166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.396677][T13166] R13: 00007febd5ca6038 R14: 00007febd5ca5fa0 R15: 00007ffd27556fe8
[  177.396700][T13166]  </TASK>
[  177.397365][T13166] Mem-Info:
[  177.564831][T13173] loop1: detected capacity change from 0 to 512
[  177.571518][T13166] active_anon:9346 inactive_anon:5 isolated_anon:0
[  177.571518][T13166]  active_file:18827 inactive_file:2888 isolated_file:0
[  177.571518][T13166]  unevictable:22 dirty:459 writeback:0
[  177.571518][T13166]  slab_reclaimable:3628 slab_unreclaimable:29897
[  177.571518][T13166]  mapped:29856 shmem:528 pagetables:1739
[  177.571518][T13166]  sec_pagetables:0 bounce:0
[  177.571518][T13166]  kernel_misc_reclaimable:0
[  177.571518][T13166]  free:1841865 free_pcp:27631 free_cma:0
[  177.628962][T13173] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3255: error while reading EA inode 32 err=-116
[  177.669134][T13166] Node 0 active_anon:37520kB inactive_anon:24kB active_file:75308kB inactive_file:11624kB unevictable:84kB isolated(anon):0kB isolated(file):0kB mapped:119436kB dirty:1860kB writeback:0kB shmem:2220kB kernel_stack:5200kB pagetables:7048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  177.669201][T13166] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  177.697539][T13173] EXT4-fs (loop1): Remounting filesystem read-only
[  177.709512][T13166] lowmem_reserve[]:
[  177.738024][T13173] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  177.744563][T13166]  0
[  177.748430][T13173] EXT4-fs (loop1): 1 orphan inode deleted
[  177.758415][T13166]  2883 7862 7862
[  177.758444][T13166] Node 0 DMA32 free:2949200kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952832kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  177.800817][T13166] lowmem_reserve[]: 0 0 4978 4978
[  177.805893][T13166] Node 0 Normal free:4402900kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37520kB inactive_anon:24kB active_file:75308kB inactive_file:11624kB unevictable:84kB writepending:1860kB present:5242880kB managed:5098240kB mlocked:92kB bounce:0kB free_pcp:106520kB local_pcp:74304kB free_cma:0kB
[  177.838570][T13166] lowmem_reserve[]: 0 0 0 0
[  177.843335][T13166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  177.856204][T13166] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949200kB
[  177.872410][T13166] Node 0 Normal: 697*4kB (UME) 76*8kB (UME) 202*16kB (UME) 248*32kB (UME) 188*64kB (UM) 160*128kB (UME) 72*256kB (UM) 117*512kB (UME) 117*1024kB (UM) 38*2048kB (UM) 996*4096kB (UM) = 4402660kB
[  177.891633][T13166] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  177.901139][T13166] 22307 total pagecache pages
[  177.905839][T13166] 7 pages in swap cache
[  177.909999][T13166] Free swap  = 124968kB
[  177.914358][T13166] Total swap = 124996kB
[  177.918652][T13166] 2097051 pages RAM
[  177.922560][T13166] 0 pages HighMem/MovableOnly
[  177.927279][T13166] 80443 pages reserved
[  178.009354][T13180] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2
[  178.175952][T13200] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2
[  178.364202][T13226] FAULT_INJECTION: forcing a failure.
[  178.364202][T13226] name failslab, interval 1, probability 0, space 0, times 0
[  178.377195][T13226] CPU: 0 UID: 0 PID: 13226 Comm: syz.3.3276 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  178.377231][T13226] Tainted: [W]=WARN
[  178.377239][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  178.377255][T13226] Call Trace:
[  178.377261][T13226]  <TASK>
[  178.377270][T13226]  __dump_stack+0x1d/0x30
[  178.377317][T13226]  dump_stack_lvl+0xe8/0x140
[  178.377417][T13226]  dump_stack+0x15/0x1b
[  178.377437][T13226]  should_fail_ex+0x265/0x280
[  178.377525][T13226]  ? snd_timer_instance_new+0x31/0x160
[  178.377563][T13226]  should_failslab+0x8c/0xb0
[  178.377634][T13226]  __kmalloc_cache_noprof+0x4c/0x320
[  178.377687][T13226]  snd_timer_instance_new+0x31/0x160
[  178.377767][T13226]  snd_seq_timer_open+0x12b/0x360
[  178.377792][T13226]  ? snd_timer_instance_free+0x5f/0x70
[  178.377901][T13226]  ? kfree+0xd9/0x320
[  178.377935][T13226]  snd_seq_queue_timer_open+0xaf/0x120
[  178.377977][T13226]  snd_seq_ioctl_set_queue_timer+0x14b/0x170
[  178.378014][T13226]  snd_seq_ioctl+0x17d/0x2e0
[  178.378173][T13226]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  178.378266][T13226]  __se_sys_ioctl+0xcb/0x140
[  178.378291][T13226]  __x64_sys_ioctl+0x43/0x50
[  178.378313][T13226]  x64_sys_call+0x1816/0x2ff0
[  178.378340][T13226]  do_syscall_64+0xd2/0x200
[  178.378442][T13226]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  178.378472][T13226]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  178.378517][T13226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.378615][T13226] RIP: 0033:0x7febd5a4eec9
[  178.378633][T13226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.378655][T13226] RSP: 002b:00007febd44b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.378756][T13226] RAX: ffffffffffffffda RBX: 00007febd5ca5fa0 RCX: 00007febd5a4eec9
[  178.378772][T13226] RDX: 0000200000000400 RSI: 0000000040605346 RDI: 0000000000000004
[  178.378787][T13226] RBP: 00007febd44b7090 R08: 0000000000000000 R09: 0000000000000000
[  178.378838][T13226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.378853][T13226] R13: 00007febd5ca6038 R14: 00007febd5ca5fa0 R15: 00007ffd27556fe8
[  178.378887][T13226]  </TASK>
[  178.656748][T13229] loop4: detected capacity change from 0 to 512
[  178.690003][T13229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.743335][T13229] EXT4-fs (loop4): 1 truncate cleaned up
[  178.802390][T13239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.835709][T13238] loop1: detected capacity change from 0 to 2048
[  178.845730][T13239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.902625][   T29] kauditd_printk_skb: 320 callbacks suppressed
[  178.902643][   T29] audit: type=1326 audit(1758855881.814:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  178.956351][   T29] audit: type=1326 audit(1758855881.814:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  178.979998][   T29] audit: type=1326 audit(1758855881.814:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.003702][   T29] audit: type=1326 audit(1758855881.814:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.027376][   T29] audit: type=1326 audit(1758855881.814:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.051178][   T29] audit: type=1326 audit(1758855881.814:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.074954][   T29] audit: type=1326 audit(1758855881.814:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.078790][T13239] __nla_validate_parse: 25 callbacks suppressed
[  179.078827][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3280'.
[  179.098595][   T29] audit: type=1326 audit(1758855881.814:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.098647][   T29] audit: type=1326 audit(1758855881.814:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.117575][T13250] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2
[  179.137553][   T29] audit: type=1326 audit(1758855881.814:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  179.341857][T13264] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  179.351920][T13265] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  179.377432][T13267] loop5: detected capacity change from 0 to 512
[  179.416631][T13267] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.431388][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3288'.
[  179.470451][T13267] EXT4-fs (loop5): filesystem is read-only
[  179.497853][T13267] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  179.563758][T13267] EXT4-fs (loop5): filesystem is read-only
[  179.569679][T13267] EXT4-fs (loop5): orphan cleanup on readonly fs
[  179.579848][T13206] syz.4.3269 (13206) used greatest stack depth: 7496 bytes left
[  179.607852][T13267] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.3290: iget: bad i_size value: 648518346341360424
[  179.635323][T13267] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3290: couldn't read orphan inode 16 (err -117)
[  179.659975][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3294'.
[  179.676840][T13275] loop1: detected capacity change from 0 to 2048
[  179.697355][T13273] loop3: detected capacity change from 0 to 128
[  179.772501][T13282] loop4: detected capacity change from 0 to 512
[  179.888925][T13282] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3294: error while reading EA inode 32 err=-116
[  179.971974][T13282] EXT4-fs (loop4): Remounting filesystem read-only
[  179.978615][T13282] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  179.994679][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'.
[  180.004177][T13300] FAULT_INJECTION: forcing a failure.
[  180.004177][T13300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.017306][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.6.3300 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  180.017411][T13300] Tainted: [W]=WARN
[  180.017418][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  180.017430][T13300] Call Trace:
[  180.017435][T13300]  <TASK>
[  180.017441][T13300]  __dump_stack+0x1d/0x30
[  180.017464][T13300]  dump_stack_lvl+0xe8/0x140
[  180.017486][T13300]  dump_stack+0x15/0x1b
[  180.017505][T13300]  should_fail_ex+0x265/0x280
[  180.017597][T13300]  should_fail+0xb/0x20
[  180.017697][T13300]  should_fail_usercopy+0x1a/0x20
[  180.017797][T13300]  _copy_from_iter+0xd2/0xe80
[  180.017829][T13300]  ? __build_skb_around+0x1a0/0x200
[  180.017853][T13300]  ? __alloc_skb+0x223/0x320
[  180.017877][T13300]  netlink_sendmsg+0x471/0x6b0
[  180.017911][T13300]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.017937][T13300]  __sock_sendmsg+0x145/0x180
[  180.017970][T13300]  ____sys_sendmsg+0x31e/0x4e0
[  180.018069][T13300]  ___sys_sendmsg+0x17b/0x1d0
[  180.018113][T13300]  __x64_sys_sendmsg+0xd4/0x160
[  180.018146][T13300]  x64_sys_call+0x191e/0x2ff0
[  180.018223][T13300]  do_syscall_64+0xd2/0x200
[  180.018251][T13300]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  180.018277][T13300]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  180.018312][T13300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.018335][T13300] RIP: 0033:0x7f2326f3eec9
[  180.018418][T13300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.018438][T13300] RSP: 002b:00007f232597e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.018459][T13300] RAX: ffffffffffffffda RBX: 00007f2327196090 RCX: 00007f2326f3eec9
[  180.018473][T13300] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000009
[  180.018487][T13300] RBP: 00007f232597e090 R08: 0000000000000000 R09: 0000000000000000
[  180.018515][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.018605][T13300] R13: 00007f2327196128 R14: 00007f2327196090 R15: 00007ffedd18f5e8
[  180.018625][T13300]  </TASK>
[  180.262480][T13302] loop1: detected capacity change from 0 to 2048
[  180.266000][T13282] EXT4-fs (loop4): 1 orphan inode deleted
[  180.536023][T13313] loop4: detected capacity change from 0 to 512
[  180.551316][T13313] EXT4-fs: Ignoring removed mblk_io_submit option
[  180.590041][T13313] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  180.627820][T13313] EXT4-fs (loop4): 1 truncate cleaned up
[  180.636276][T13317] loop3: detected capacity change from 0 to 256
[  180.804690][T13322] loop1: detected capacity change from 0 to 2048
[  181.031935][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.040941][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.070422][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.129614][T13321] loop5: detected capacity change from 0 to 128
[  181.144354][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.153287][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.201517][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  181.617107][T13361] loop1: detected capacity change from 0 to 2048
[  181.642103][T13373] loop5: detected capacity change from 0 to 512
[  181.844889][T13386] loop3: detected capacity change from 0 to 512
[  181.861021][T13386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.892083][T13386] EXT4-fs (loop3): 1 truncate cleaned up
[  181.990339][T13390] loop6: detected capacity change from 0 to 512
[  182.064175][T13382] loop1: detected capacity change from 0 to 128
[  182.089016][T13390] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3333: error while reading EA inode 32 err=-116
[  182.104985][T13390] EXT4-fs (loop6): Remounting filesystem read-only
[  182.111717][T13390] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  182.122786][T13390] EXT4-fs (loop6): 1 orphan inode deleted
[  182.254851][T13405] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2
[  182.490536][T13422] loop5: detected capacity change from 0 to 2048
[  182.500090][T13423] loop1: detected capacity change from 0 to 512
[  182.543261][T13423] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3345: error while reading EA inode 32 err=-116
[  182.569943][T13423] EXT4-fs (loop1): Remounting filesystem read-only
[  182.576616][T13423] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  182.588044][T13423] EXT4-fs (loop1): 1 orphan inode deleted
[  182.709390][T13438] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2
[  182.915749][T13452] loop6: detected capacity change from 0 to 512
[  182.967088][T13452] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3353: error while reading EA inode 32 err=-116
[  183.068878][T13452] EXT4-fs (loop6): Remounting filesystem read-only
[  183.075587][T13452] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  183.132239][T13452] EXT4-fs (loop6): 1 orphan inode deleted
[  183.270633][T13470] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12)
[  183.277369][T13470] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  183.285063][T13470] vhci_hcd vhci_hcd.0: Device attached
[  183.317538][T13470] loop1: detected capacity change from 0 to 512
[  183.324856][T13470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  183.341937][T13470] EXT4-fs (loop1): 1 truncate cleaned up
[  183.360463][T13474] vhci_hcd: connection closed
[  183.362220][   T31] vhci_hcd: stop threads
[  183.372815][   T31] vhci_hcd: release socket
[  183.377263][   T31] vhci_hcd: disconnect device
[  183.431316][T13480] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2
[  183.628432][T13489] loop6: detected capacity change from 0 to 2048
[  183.727361][T13502] loop5: detected capacity change from 0 to 512
[  183.742092][T13502] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.757820][T13508] loop6: detected capacity change from 0 to 512
[  183.774868][T13508] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3373: error while reading EA inode 32 err=-116
[  183.794232][T13508] EXT4-fs (loop6): Remounting filesystem read-only
[  183.800864][T13508] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  183.811166][T13508] EXT4-fs (loop6): 1 orphan inode deleted
[  183.952560][   T29] kauditd_printk_skb: 255 callbacks suppressed
[  183.952579][   T29] audit: type=1326 audit(1758855886.864:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.005015][   T29] audit: type=1326 audit(1758855886.864:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.033650][   T29] audit: type=1326 audit(1758855886.914:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.057414][   T29] audit: type=1326 audit(1758855886.914:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.081021][   T29] audit: type=1326 audit(1758855886.914:12346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.104828][   T29] audit: type=1326 audit(1758855886.944:12347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.128565][   T29] audit: type=1326 audit(1758855886.944:12348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.152391][   T29] audit: type=1326 audit(1758855886.944:12349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.177429][   T29] audit: type=1326 audit(1758855886.944:12350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.201113][   T29] audit: type=1326 audit(1758855886.944:12351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13513 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1dc4eec9 code=0x7ffc0000
[  184.448002][T13528] loop4: detected capacity change from 0 to 2048
[  184.564364][T13530] loop4: detected capacity change from 0 to 2048
[  184.808377][T13538] FAULT_INJECTION: forcing a failure.
[  184.808377][T13538] name failslab, interval 1, probability 0, space 0, times 0
[  184.821232][T13538] CPU: 0 UID: 0 PID: 13538 Comm: syz.4.3386 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  184.821266][T13538] Tainted: [W]=WARN
[  184.821272][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  184.821284][T13538] Call Trace:
[  184.821291][T13538]  <TASK>
[  184.821298][T13538]  __dump_stack+0x1d/0x30
[  184.821368][T13538]  dump_stack_lvl+0xe8/0x140
[  184.821391][T13538]  dump_stack+0x15/0x1b
[  184.821410][T13538]  should_fail_ex+0x265/0x280
[  184.821440][T13538]  should_failslab+0x8c/0xb0
[  184.821516][T13538]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  184.821553][T13538]  ? sidtab_sid2str_get+0xa0/0x130
[  184.821577][T13538]  kmemdup_noprof+0x2b/0x70
[  184.821671][T13538]  sidtab_sid2str_get+0xa0/0x130
[  184.821700][T13538]  security_sid_to_context_core+0x1eb/0x2e0
[  184.821729][T13538]  security_sid_to_context+0x27/0x40
[  184.821755][T13538]  selinux_lsmprop_to_secctx+0x67/0xf0
[  184.821792][T13538]  security_lsmprop_to_secctx+0x43/0x80
[  184.821829][T13538]  audit_log_task_context+0x77/0x190
[  184.821951][T13538]  audit_log_task+0xf4/0x250
[  184.821989][T13538]  audit_seccomp+0x61/0x100
[  184.822021][T13538]  ? __seccomp_filter+0x68c/0x10d0
[  184.822044][T13538]  __seccomp_filter+0x69d/0x10d0
[  184.822139][T13538]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  184.822173][T13538]  ? vfs_write+0x7e8/0x960
[  184.822228][T13538]  ? __rcu_read_unlock+0x4f/0x70
[  184.822254][T13538]  ? __fget_files+0x184/0x1c0
[  184.822281][T13538]  __secure_computing+0x82/0x150
[  184.822302][T13538]  syscall_trace_enter+0xcf/0x1e0
[  184.822395][T13538]  do_syscall_64+0xac/0x200
[  184.822434][T13538]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  184.822507][T13538]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  184.822541][T13538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.822615][T13538] RIP: 0033:0x7fbd3e2eeec9
[  184.822633][T13538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.822656][T13538] RSP: 002b:00007fbd3cd36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040
[  184.822720][T13538] RAX: ffffffffffffffda RBX: 00007fbd3e546090 RCX: 00007fbd3e2eeec9
[  184.822738][T13538] RDX: 0000000000000642 RSI: 0000000000000003 RDI: 0000000000000000
[  184.822754][T13538] RBP: 00007fbd3cd36090 R08: 0000000000000000 R09: 0000000000000000
[  184.822769][T13538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.822784][T13538] R13: 00007fbd3e546128 R14: 00007fbd3e546090 R15: 00007ffdbb7d2c58
[  184.822808][T13538]  </TASK>
[  185.098503][T13547] __nla_validate_parse: 38 callbacks suppressed
[  185.098525][T13547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3389'.
[  185.118355][T13549] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2
[  185.195305][T13557] loop1: detected capacity change from 0 to 512
[  185.235386][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'.
[  185.266944][T13557] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3389: error while reading EA inode 32 err=-116
[  185.279846][T13557] EXT4-fs (loop1): Remounting filesystem read-only
[  185.286479][T13557] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  185.296919][T13557] EXT4-fs (loop1): 1 orphan inode deleted
[  185.352161][T13579] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3396'.
[  185.490362][T13585] FAULT_INJECTION: forcing a failure.
[  185.490362][T13585] name failslab, interval 1, probability 0, space 0, times 0
[  185.503170][T13585] CPU: 1 UID: 0 PID: 13585 Comm: syz.5.3398 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  185.503208][T13585] Tainted: [W]=WARN
[  185.503216][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  185.503231][T13585] Call Trace:
[  185.503240][T13585]  <TASK>
[  185.503250][T13585]  __dump_stack+0x1d/0x30
[  185.503272][T13585]  dump_stack_lvl+0xe8/0x140
[  185.503341][T13577] loop6: detected capacity change from 0 to 2048
[  185.503374][T13585]  dump_stack+0x15/0x1b
[  185.503391][T13585]  should_fail_ex+0x265/0x280
[  185.503426][T13585]  ? __se_sys_mount+0xef/0x2e0
[  185.503474][T13585]  should_failslab+0x8c/0xb0
[  185.503509][T13585]  __kmalloc_cache_noprof+0x4c/0x320
[  185.503552][T13585]  ? memdup_user+0x99/0xd0
[  185.503721][T13585]  __se_sys_mount+0xef/0x2e0
[  185.503767][T13585]  ? fput+0x8f/0xc0
[  185.503813][T13585]  ? ksys_write+0x192/0x1a0
[  185.503847][T13585]  __x64_sys_mount+0x67/0x80
[  185.503878][T13585]  x64_sys_call+0x2b4d/0x2ff0
[  185.503961][T13585]  do_syscall_64+0xd2/0x200
[  185.504000][T13585]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  185.504034][T13585]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  185.504077][T13585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.504106][T13585] RIP: 0033:0x7f6dc396eec9
[  185.504127][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.504152][T13585] RSP: 002b:00007f6dc23cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  185.504178][T13585] RAX: ffffffffffffffda RBX: 00007f6dc3bc5fa0 RCX: 00007f6dc396eec9
[  185.504195][T13585] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000
[  185.504213][T13585] RBP: 00007f6dc23cf090 R08: 0000200000000740 R09: 0000000000000000
[  185.504293][T13585] R10: 0000000000000801 R11: 0000000000000246 R12: 0000000000000001
[  185.504310][T13585] R13: 00007f6dc3bc6038 R14: 00007f6dc3bc5fa0 R15: 00007fff331f2678
[  185.504338][T13585]  </TASK>
[  185.730829][T13592] syzkaller0: entered allmulticast mode
[  185.792657][T13599] netdevsim netdevsim6: Direct firmware load for ./file0/file1 failed with error -2
[  185.956071][T13610] loop1: detected capacity change from 0 to 512
[  185.963195][T13610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  185.975473][T13610] EXT4-fs (loop1): 1 truncate cleaned up
[  185.992397][T13612] veth0: entered promiscuous mode
[  185.998541][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3410'.
[  186.175600][T13615] loop1: detected capacity change from 0 to 128
[  186.293287][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.302453][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.323492][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.348791][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.357760][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.370709][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  186.388842][T13629] loop3: detected capacity change from 0 to 2048
[  186.464566][T13590] syzkaller0: left allmulticast mode
[  186.552252][T13662] $Hÿ: renamed from bond0 (while UP)
[  186.552284][T13660] loop4: detected capacity change from 0 to 2048
[  186.570925][T13662] $Hÿ: entered promiscuous mode
[  186.576041][T13662] bond_slave_0: entered promiscuous mode
[  186.582027][T13662] bond_slave_1: entered promiscuous mode
[  186.598003][T13660]  loop4: p1 < > p4
[  186.617023][T13660] loop4: p4 size 8388608 extends beyond EOD, truncated
[  186.678651][T13671] FAULT_INJECTION: forcing a failure.
[  186.678651][T13671] name failslab, interval 1, probability 0, space 0, times 0
[  186.691482][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.1.3421 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  186.691531][T13671] Tainted: [W]=WARN
[  186.691539][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  186.691555][T13671] Call Trace:
[  186.691562][T13671]  <TASK>
[  186.691570][T13671]  __dump_stack+0x1d/0x30
[  186.691596][T13671]  dump_stack_lvl+0xe8/0x140
[  186.691658][T13671]  dump_stack+0x15/0x1b
[  186.691674][T13671]  should_fail_ex+0x265/0x280
[  186.691698][T13671]  ? rtnl_newlink+0x5c/0x12d0
[  186.691785][T13671]  should_failslab+0x8c/0xb0
[  186.691814][T13671]  __kmalloc_cache_noprof+0x4c/0x320
[  186.691846][T13671]  rtnl_newlink+0x5c/0x12d0
[  186.691904][T13671]  ? pcpu_freelist_pop+0x75/0xa0
[  186.691936][T13671]  ? __bpf_get_stackid+0x7db/0x800
[  186.692040][T13671]  ? xas_load+0x413/0x430
[  186.692076][T13671]  ? xas_load+0x413/0x430
[  186.692147][T13671]  ? __memcg_slab_free_hook+0x135/0x230
[  186.692192][T13671]  ? __rcu_read_unlock+0x4f/0x70
[  186.692215][T13671]  ? avc_has_perm_noaudit+0x1b1/0x200
[  186.692335][T13671]  ? cred_has_capability+0x210/0x280
[  186.692364][T13671]  ? selinux_capable+0x31/0x40
[  186.692401][T13671]  ? security_capable+0x83/0x90
[  186.692432][T13671]  ? ns_capable+0x7d/0xb0
[  186.692480][T13671]  ? __pfx_rtnl_newlink+0x10/0x10
[  186.692515][T13671]  rtnetlink_rcv_msg+0x5fe/0x6d0
[  186.692558][T13671]  netlink_rcv_skb+0x123/0x220
[  186.692631][T13671]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  186.692696][T13671]  rtnetlink_rcv+0x1c/0x30
[  186.692728][T13671]  netlink_unicast+0x5bd/0x690
[  186.692756][T13671]  netlink_sendmsg+0x58b/0x6b0
[  186.692813][T13671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.692843][T13671]  __sock_sendmsg+0x145/0x180
[  186.692886][T13671]  ____sys_sendmsg+0x31e/0x4e0
[  186.693019][T13671]  ___sys_sendmsg+0x17b/0x1d0
[  186.693067][T13671]  __x64_sys_sendmsg+0xd4/0x160
[  186.693097][T13671]  x64_sys_call+0x191e/0x2ff0
[  186.693118][T13671]  do_syscall_64+0xd2/0x200
[  186.693206][T13671]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  186.693236][T13671]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  186.693317][T13671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.693345][T13671] RIP: 0033:0x7faf1dc4eec9
[  186.693418][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.693441][T13671] RSP: 002b:00007faf1c6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.693524][T13671] RAX: ffffffffffffffda RBX: 00007faf1dea5fa0 RCX: 00007faf1dc4eec9
[  186.693540][T13671] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  186.693604][T13671] RBP: 00007faf1c6b7090 R08: 0000000000000000 R09: 0000000000000000
[  186.693620][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.693635][T13671] R13: 00007faf1dea6038 R14: 00007faf1dea5fa0 R15: 00007ffda54ff868
[  186.693661][T13671]  </TASK>
[  187.083108][ T3280] udevd[3280]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  187.101147][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  187.124975][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  187.193732][T13700] FAULT_INJECTION: forcing a failure.
[  187.193732][T13700] name failslab, interval 1, probability 0, space 0, times 0
[  187.206516][T13700] CPU: 1 UID: 0 PID: 13700 Comm: syz.3.3428 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  187.206558][T13700] Tainted: [W]=WARN
[  187.206567][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  187.206583][T13700] Call Trace:
[  187.206737][T13700]  <TASK>
[  187.206748][T13700]  __dump_stack+0x1d/0x30
[  187.206770][T13700]  dump_stack_lvl+0xe8/0x140
[  187.206851][T13700]  dump_stack+0x15/0x1b
[  187.206873][T13700]  should_fail_ex+0x265/0x280
[  187.206899][T13700]  should_failslab+0x8c/0xb0
[  187.206992][T13700]  kmem_cache_alloc_noprof+0x50/0x310
[  187.207027][T13700]  ? security_file_alloc+0x32/0x100
[  187.207066][T13700]  security_file_alloc+0x32/0x100
[  187.207156][T13700]  init_file+0x5c/0x1d0
[  187.207267][T13700]  alloc_empty_file+0x8b/0x200
[  187.207299][T13700]  alloc_file_pseudo+0xc6/0x160
[  187.207335][T13700]  __shmem_file_setup+0x1de/0x210
[  187.207382][T13700]  shmem_file_setup+0x3b/0x50
[  187.207419][T13700]  __se_sys_memfd_create+0x2c3/0x590
[  187.207454][T13700]  __x64_sys_memfd_create+0x31/0x40
[  187.207474][T13700]  x64_sys_call+0x2abe/0x2ff0
[  187.207496][T13700]  do_syscall_64+0xd2/0x200
[  187.207620][T13700]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  187.207645][T13700]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  187.207674][T13700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.207773][T13700] RIP: 0033:0x7febd5a4eec9
[  187.207789][T13700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.207812][T13700] RSP: 002b:00007febd44b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  187.207844][T13700] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007febd5a4eec9
[  187.207857][T13700] RDX: 00007febd44b6ef0 RSI: 0000000000000000 RDI: 00007febd5ad2960
[  187.207872][T13700] RBP: 0000200000000600 R08: 00007febd44b6bb7 R09: 00007febd44b6e40
[  187.207908][T13700] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000003c0
[  187.207924][T13700] R13: 00007febd44b6ef0 R14: 00007febd44b6eb0 R15: 0000200000000440
[  187.207948][T13700]  </TASK>
[  187.441763][T13706] loop6: detected capacity change from 0 to 2048
[  187.482992][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  187.530654][T13708] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2
[  187.714662][T13705] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  187.739631][T13727] ==================================================================
[  187.747773][T13727] BUG: KCSAN: data-race in memcpy_and_pad / release_task
[  187.748133][T13705] FAT-fs (loop3): unable to read boot sector
[  187.754828][T13727] 
[  187.754839][T13727] write to 0xffff8881252b04c8 of 8 bytes by task 12574 on cpu 0:
[  187.754858][T13727]  release_task+0x6f9/0xb60
[  187.775407][T13727]  wait_consider_task+0x114a/0x1660
[  187.780627][T13727]  __do_wait+0xfa/0x510
[  187.784812][T13727]  do_wait+0xb7/0x260
[  187.788828][T13727]  kernel_wait4+0x16b/0x1e0
[  187.793369][T13727]  __x64_sys_wait4+0x91/0x120
[  187.798086][T13727]  x64_sys_call+0x2a66/0x2ff0
[  187.802781][T13727]  do_syscall_64+0xd2/0x200
[  187.807313][T13727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.813218][T13727] 
[  187.815545][T13727] read to 0xffff8881252b0000 of 3264 bytes by task 13727 on cpu 1:
[  187.823443][T13727]  memcpy_and_pad+0x48/0x80
[  187.827959][T13727]  arch_dup_task_struct+0x2c/0x40
[  187.832994][T13727]  dup_task_struct+0x83/0x6a0
[  187.837682][T13727]  copy_process+0x399/0x2000
[  187.842283][T13727]  kernel_clone+0x16c/0x5c0
[  187.846886][T13727]  __se_sys_clone3+0x1c2/0x200
[  187.851666][T13727]  __x64_sys_clone3+0x31/0x40
[  187.856364][T13727]  x64_sys_call+0x1fc9/0x2ff0
[  187.861049][T13727]  do_syscall_64+0xd2/0x200
[  187.865569][T13727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.871467][T13727] 
[  187.873793][T13727] Reported by Kernel Concurrency Sanitizer on:
[  187.879953][T13727] CPU: 1 UID: 0 PID: 13727 Comm: syz.3.3437 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  187.891335][T13727] Tainted: [W]=WARN
[  187.895137][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  187.905198][T13727] ==================================================================
[  187.956776][T13732] loop5: detected capacity change from 0 to 256
[  187.963618][T13732] vfat: Unknown parameter '0x0000000000000000'
[  187.982669][T13732] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.035001][T13732] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.074091][T13732] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.124764][T13732] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.189822][ T3605] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.201507][ T3605] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.213427][ T3605] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.225236][ T3605] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0