last executing test programs:

5.174883113s ago: executing program 3 (id=1854):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrlimit(0xf, 0x0)

5.143161065s ago: executing program 3 (id=1912):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2000001e, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x24}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)

5.081318291s ago: executing program 4 (id=1913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x3, 0x0, 0x0, 0x20000011}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b000000", 0xd, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000002000000380000000000000000191bda000020000100006b5e0200000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

4.904430725s ago: executing program 3 (id=1917):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000740)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000200)=[{&(0x7f0000000b00)=""/156, 0x9c}], 0x1}}], 0x48}, 0x0)

4.837745401s ago: executing program 4 (id=1918):
syz_open_dev$tty1(0xc, 0x4, 0x1)
connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x26)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000600)='./file0\x00')

4.830383421s ago: executing program 3 (id=1919):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
close(0x3)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x38}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfea7)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db710382040038a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff0000000004000000000000000000000043fe1a00", "be1d0000ae9eefec8000990000008000", [0x564]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001ece7c2a15c5701ed5a52ad17600000000000000000000b973"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000700)}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(0x0, 0x0)
statfs(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.726513671s ago: executing program 4 (id=1921):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000000700000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000180)=""/92}, 0x20)

4.676222395s ago: executing program 4 (id=1922):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
close(0x3)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}], 0x38}}], 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfea7)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, "2dbe0000000000e0f7d6a4ae6dddebd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b58c66ee677df701905bbaafab4afbaf755a3f6a004", "cba3d627780820d1cbf7db710382040038a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff0000000004000000000000000000000043fe1a00", "be1d0000ae9eefec8000990000008000", [0x564]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001ece7c2a15c5701ed5a52ad17600000000000000000000b973"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000700)}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
capset(0x0, 0x0)
statfs(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.466340813s ago: executing program 3 (id=1924):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x6a040000)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000c1b3fa16e55d5e000000000000c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
rseq(0x0, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getuid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x2e092e68, 0xffffffff}}}}]}, 0x4c}}, 0x0)

4.315045225s ago: executing program 4 (id=1925):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)=""/90, 0x5a)
mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x49eed000)
syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000480)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005b460000d139cb462683dd0009000000000000000000"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="1000000000005f85257a9c09f659860000000000688d3fea0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r4}, 0x10)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000008220018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000003, 0x6}, 0x200501, 0xffffffffffffffff, 0xb85, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.815319787s ago: executing program 4 (id=1930):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
setgroups(0x0, 0x0)
renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)

2.589808041s ago: executing program 3 (id=1938):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)

2.041855027s ago: executing program 1 (id=1940):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)=""/90, 0x5a)
mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x49eed000)
syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000480)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005b460000d139cb462683dd0009000000000000000000"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="1000000000005f85257a9c09f659860000000000688d3fea0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r4}, 0x10)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000008220018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000003, 0x6}, 0x200501, 0xffffffffffffffff, 0xb85, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.661894399s ago: executing program 0 (id=1943):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

1.564451748s ago: executing program 1 (id=1944):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket(0x2b, 0x80801, 0x1)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x29, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x48880, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000240), 0x0, 0x52e, &(0x7f0000000f00)="$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")
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000400)=ANY=[@ANYBLOB="5cc700001700000081"])
r6 = socket$caif_stream(0x25, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007253a04d64a5835d1c077fc3bb35f4b62779c2dc6e33ee66fdd84811789ef944f99d4bf48add078a7d202429b800876c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
sendmmsg$inet(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce320e12d300)
quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, 0x0, &(0x7f0000000180))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
mkdir(0x0, 0x197)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

960.338378ms ago: executing program 1 (id=1947):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
unshare(0x6a040000)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000c1b3fa16e55d5e000000000000c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
rseq(0x0, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getuid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x2e092e68, 0xffffffff}}}}]}, 0x4c}}, 0x0)

958.313989ms ago: executing program 2 (id=1948):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0)
sendto$inet6(r0, &(0x7f00000006c0)="8511fdd1594bcdf62a356a740f0ff7b944ac31e608acbb8284daf9b9f50c28fc6ec607d2468d9d8702764ea4b75543006b244282bdd4ea4c7614f16ab14ee96f4fe6758d9ba983c02a83323ada4adadddb52a2955c70beb6c06bfdf9ad0e0815637a16e7bbfeac1f3fb20b113561f5642b4a2ae2435811bab3fbe94be247e97d4da7c77bee5561c1c9ba82c6a0fc89aa6b1a8a313cc17871e4944209e25d2bd6fc34f8350202874d12d0e69ae7de1c201bd0331b", 0xb4, 0x24010002, 0x0, 0x0)

852.020008ms ago: executing program 0 (id=1949):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)=ANY=[], 0x8)

831.11385ms ago: executing program 2 (id=1950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4)
mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x0, 0x12, 0x0)

814.572001ms ago: executing program 2 (id=1951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)

590.31294ms ago: executing program 0 (id=1952):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xf, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b72", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2)

567.920182ms ago: executing program 2 (id=1953):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
listxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)=""/90, 0x5a)
mmap(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x49eed000)
syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000480)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0xa0600, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000005b460000d139cb462683dd0009000000000000000000"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="1000000000005f85257a9c09f659860000000000688d3fea0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r4}, 0x10)
io_cancel(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000008220018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000003, 0x6}, 0x200501, 0xffffffffffffffff, 0xb85, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

556.348172ms ago: executing program 0 (id=1954):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x138)
syz_open_pts(0xffffffffffffffff, 0x802)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200030000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xedfd, 0x1, 0x61f, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000400002fce611ce300563c00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180c00a3ba8fce007e106a2906b58f6c00", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0xffffffff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0xfff1}, {}, {0x4, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

409.529645ms ago: executing program 2 (id=1955):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000611e23abde1d38da00000000000000000000000001000018aecad61f850a51031a81ed0e446e2ec8917838afb277e57b2f51750761f4282c6cae3046f7"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdf2, 0x10, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x107042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x0, 0x0, 0x0, 0x2000003})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000080), 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00e9ff14000380100003800c000180080001004000000018000180140002007465616d30"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="05000000000400000000000100000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008027000000000000000000000001000005000000ed41a9604c781e8382be918091c1a6493bad8335a1ce895a7e556b33a5e60857c5a373f852cef7acc8bfae7e4e56c1b1030000000000000065e24cf217fe66bd56a908e26094d5c1255dbcd97973565f8c963ad388679c5b55e6d9defe2b75421a0e0d692a5da14d3fbfaa69359177ecdb7d434496715433d227c58f13e3091cce3dace1da6cd44845406ae10e14978a01f6"], 0x48}, 0x1, 0x0, 0x0, 0x20024800}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000000)=0x7e, 0x8)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0)

288.684556ms ago: executing program 1 (id=1956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2000001e, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x24}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x122e, &(0x7f0000002580)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x800}, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0d0000000400000004000080000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = dup(r8)
write$P9_RLERRORu(r9, &(0x7f0000000040)=ANY=[], 0x53)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)

221.985101ms ago: executing program 0 (id=1957):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = socket(0x2b, 0x80801, 0x1)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x29, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x48880, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000240), 0x0, 0x52e, &(0x7f0000000f00)="$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")
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
sendmmsg$inet(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce320e12d300)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, 0x0, &(0x7f0000000180))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
mkdir(0x0, 0x197)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

77.343293ms ago: executing program 1 (id=1958):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210082, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'netpci0\x00', @multicast})
r2 = dup(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a0000040000000010"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1927f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000180)={0x1, 0x80000000, 0x1})
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0xe508, 0x3, 0x2f0, 0x0, 0xa, 0x1000000, 0x180, 0x0, 0x258, 0x230, 0x230, 0x258, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x158, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "5d5636820d6a60ff49677edc0f9111e7ccf795de83ae8e43a61945080891864007e5e0629b793e905f343cc4de3c1daad988422dd5c54625160c8169789570a8a1324f192aad0936f0376fbb8ef853444f8fbb2981fc44155aebbdf1ab66e929f2925cc90955436f7f220c7251f48f56f3e8c906b0424a32fc956bdb1a52c0e8", 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'ipvlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x350)

45.772686ms ago: executing program 2 (id=1959):
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000440)=0x4)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000300)=0x28)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)

11.607599ms ago: executing program 1 (id=1960):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0xa, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x5c, r5, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0)

0s ago: executing program 0 (id=1961):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 unset [1, 0] type 2 family 0 port 6081 - 0
[  146.259444][   T29] audit: type=1326 audit(1729251957.813:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.283079][   T29] audit: type=1326 audit(1729251957.813:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.306749][   T29] audit: type=1326 audit(1729251957.813:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.330274][   T29] audit: type=1326 audit(1729251957.813:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.331366][T10449] loop1: detected capacity change from 0 to 512
[  146.353775][   T29] audit: type=1326 audit(1729251957.813:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.392483][   T29] audit: type=1326 audit(1729251957.813:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.416042][   T29] audit: type=1326 audit(1729251957.813:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.439615][   T29] audit: type=1326 audit(1729251957.813:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.450313][T10449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  146.463109][   T29] audit: type=1326 audit(1729251957.813:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.495065][   T29] audit: type=1326 audit(1729251957.813:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10434 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  146.531637][ T4348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.543894][T10449] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.564810][T10442] loop3: detected capacity change from 0 to 512
[  146.603756][ T4348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.637027][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1628'.
[  146.665747][T10442] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1625: Failed to acquire dquot type 1
[  146.686807][T10446] random: crng reseeded on system resumption
[  146.687668][ T4348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.717557][T10442] EXT4-fs (loop3): 1 truncate cleaned up
[  146.734224][T10442] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.754703][T10449] Cannot find del_set index 0 as target
[  146.816036][T10300] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  146.826727][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1629'.
[  146.842358][T10442] usb usb6: usbfs: process 10442 (syz.3.1625) did not claim interface 0 before use
[  146.867112][ T4348] bridge_slave_1: left allmulticast mode
[  146.872820][ T4348] bridge_slave_1: left promiscuous mode
[  146.878509][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.898085][T10464] random: crng reseeded on system resumption
[  146.985690][ T4348] bridge_slave_0: left allmulticast mode
[  146.991473][ T4348] bridge_slave_0: left promiscuous mode
[  146.997182][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.005858][T10472] Cannot find del_set index 0 as target
[  147.197819][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1634'.
[  147.216468][T10488] random: crng reseeded on system resumption
[  147.220167][T10485] loop3: detected capacity change from 0 to 8192
[  147.230337][T10485] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  147.298871][T10488] Cannot find del_set index 0 as target
[  147.305247][ T4348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.331099][ T4348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.341900][ T4348] bond0 (unregistering): Released all slaves
[  147.395939][ T4348] hsr_slave_0: left promiscuous mode
[  147.401608][ T4348] hsr_slave_1: left promiscuous mode
[  147.407842][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.415382][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.428554][ T4348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.436058][ T4348] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.453359][ T4348] veth1_macvtap: left promiscuous mode
[  147.458938][ T4348] veth0_macvtap: left promiscuous mode
[  147.464505][ T4348] veth1_vlan: left promiscuous mode
[  147.469851][ T4348] veth0_vlan: left promiscuous mode
[  147.544769][T10503] program syz.0.1639 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.624675][ T4348] team0 (unregistering): Port device team_slave_1 removed
[  147.637762][ T4348] team0 (unregistering): Port device team_slave_0 removed
[  147.686728][T10506] usb usb6: usbfs: process 10506 (syz.0.1640) did not claim interface 0 before use
[  147.710018][T10501] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.1637'.
[  147.719288][T10501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1637'.
[  147.840694][T10448] chnl_net:caif_netlink_parms(): no params data found
[  147.861450][T10515] loop3: detected capacity change from 0 to 1024
[  147.875482][T10515] EXT4-fs: Ignoring removed orlov option
[  147.881204][T10515] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.921054][T10529] 9pnet_fd: Insufficient options for proto=fd
[  148.039750][T10448] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.046881][T10448] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.059346][T10542] loop3: detected capacity change from 0 to 1024
[  148.072029][T10448] bridge_slave_0: entered allmulticast mode
[  148.082215][T10448] bridge_slave_0: entered promiscuous mode
[  148.184053][T10448] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.191253][T10448] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.198526][T10448] bridge_slave_1: entered allmulticast mode
[  148.204968][T10448] bridge_slave_1: entered promiscuous mode
[  148.333329][T10577] loop1: detected capacity change from 0 to 1024
[  148.373919][T10577] EXT4-fs: Ignoring removed orlov option
[  148.379646][T10577] EXT4-fs: Ignoring removed nomblk_io_submit option
[  148.422579][T10448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.436680][T10448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.577748][T10448] team0: Port device team_slave_0 added
[  148.625483][T10448] team0: Port device team_slave_1 added
[  148.678497][T10448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.685523][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.711552][T10448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.745563][T10448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.752549][T10448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.778574][T10448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.822329][T10587] loop1: detected capacity change from 0 to 8192
[  148.847863][T10587] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  148.860417][T10448] hsr_slave_0: entered promiscuous mode
[  148.877019][T10448] hsr_slave_1: entered promiscuous mode
[  148.890396][T10448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.893162][T10589] program syz.0.1659 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.918591][T10448] Cannot create hsr debugfs directory
[  148.986772][T10607] bpf_get_probe_write_proto: 14 callbacks suppressed
[  148.986792][T10607] syz.1.1660[10607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.025683][T10607] syz.1.1660[10607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.052878][T10607] syz.1.1660[10607] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.195542][T10615] loop3: detected capacity change from 0 to 1024
[  149.418075][T10627] usb usb6: usbfs: process 10627 (syz.0.1666) did not claim interface 0 before use
[  149.473885][T10448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.536409][T10448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.609283][T10448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.697996][T10448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.987223][T10645] loop3: detected capacity change from 0 to 512
[  149.997712][T10448] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.068418][T10448] 8021q: adding VLAN 0 to HW filter on device team0
[  150.082274][T10645] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1669: Failed to acquire dquot type 1
[  150.115354][T10645] EXT4-fs (loop3): 1 truncate cleaned up
[  150.121977][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.129152][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.139042][T10655] syz.1.1670[10655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.139134][T10655] syz.1.1670[10655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.151810][T10645] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.175564][T10655] syz.1.1670[10655] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  150.187827][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.206490][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.237157][T10448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  150.247653][T10448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.260841][T10645] usb usb6: usbfs: process 10645 (syz.3.1669) did not claim interface 0 before use
[  150.271173][T10665] usb usb6: usbfs: process 10665 (syz.0.1672) did not claim interface 0 before use
[  150.544279][T10448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.584001][T10687] loop1: detected capacity change from 0 to 1024
[  150.661747][T10687] EXT4-fs: Ignoring removed orlov option
[  150.667637][T10687] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.339491][T10746] loop3: detected capacity change from 0 to 1024
[  151.360879][T10746] EXT4-fs: Ignoring removed orlov option
[  151.366754][T10746] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.389894][T10741] usb usb6: usbfs: process 10741 (syz.0.1682) did not claim interface 0 before use
[  151.508532][T10448] veth0_vlan: entered promiscuous mode
[  151.521418][T10448] veth1_vlan: entered promiscuous mode
[  151.669809][T10448] veth0_macvtap: entered promiscuous mode
[  151.816573][T10448] veth1_macvtap: entered promiscuous mode
[  151.843952][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.854484][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.864390][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.874910][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.884741][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.895270][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.908755][T10761] loop3: detected capacity change from 0 to 1024
[  151.915547][T10761] EXT4-fs: Ignoring removed orlov option
[  151.921285][T10761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.940082][T10448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.952107][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.962794][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.972756][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.983395][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.993270][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.003782][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.013768][T10448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.024295][T10448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.057352][T10448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.083429][T10448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.092350][T10448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.101213][T10448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.109980][T10448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.143798][T10780] syz.3.1689[10780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.143871][T10780] syz.3.1689[10780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.161705][T10780] syz.3.1689[10780] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.201391][T10777] loop1: detected capacity change from 0 to 1024
[  152.221257][T10777] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.240121][T10777] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.1690: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  152.283822][T10790] loop4: detected capacity change from 0 to 512
[  152.310216][T10777] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1690: couldn't read orphan inode 11 (err -117)
[  152.336185][T10790] __quota_error: 90 callbacks suppressed
[  152.336205][T10790] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  152.352010][T10790] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  152.361978][T10790] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1627: Failed to acquire dquot type 1
[  152.381324][T10794] loop2: detected capacity change from 0 to 1024
[  152.393043][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.406219][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.416832][T10777] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1690: Invalid block bitmap block 0 in block_group 0
[  152.430985][T10777] Quota error (device loop1): write_blk: dquota write failed
[  152.438480][T10777] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  152.480795][T10820] loop3: detected capacity change from 0 to 512
[  152.489842][T10790] EXT4-fs (loop4): 1 truncate cleaned up
[  152.500269][T10790] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.515561][T10777] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1690: Failed to acquire dquot type 0
[  152.528734][T10820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  152.557740][T10820] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.590508][T10829] loop2: detected capacity change from 0 to 8192
[  152.604298][T10829] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.655058][T10820] loop3: detected capacity change from 512 to 511
[  152.665084][T10820] EXT4-fs error (device loop3): ext4_ext_remove_space:2998: inode #19: comm syz.3.1693: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  152.679491][T10834] loop2: detected capacity change from 0 to 1024
[  152.689955][T10820] EXT4-fs error (device loop3) in ext4_setattr:5523: Corrupt filesystem
[  152.727442][ T7114] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /224/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  152.778133][T10839] +}[@[10839] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.941401][T10849] loop2: detected capacity change from 0 to 8192
[  153.031938][T10849] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.089109][T10849] program syz.2.1702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.104297][   T28] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.208574][   T28] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.320731][   T28] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.447104][   T28] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.467738][T10865] loop2: detected capacity change from 0 to 1024
[  153.499249][   T28] bridge_slave_1: left allmulticast mode
[  153.504978][   T28] bridge_slave_1: left promiscuous mode
[  153.510695][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.522331][   T28] bridge_slave_0: left allmulticast mode
[  153.528187][   T28] bridge_slave_0: left promiscuous mode
[  153.533892][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.578644][T10871] loop2: detected capacity change from 0 to 512
[  153.592819][T10871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.608173][T10871] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.648882][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.662148][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.673138][   T28] bond0 (unregistering): Released all slaves
[  153.720185][T10871] loop2: detected capacity change from 512 to 511
[  153.778836][T10881] EXT4-fs error (device loop2): ext4_ext_remove_space:2998: inode #19: comm syz.2.1708: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  153.824354][T10881] EXT4-fs error (device loop2) in ext4_setattr:5523: Corrupt filesystem
[  153.851645][ T9239] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /99/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  153.882751][   T28] hsr_slave_0: left promiscuous mode
[  153.890354][   T28] hsr_slave_1: left promiscuous mode
[  153.901509][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.904758][T10902] loop4: detected capacity change from 0 to 1024
[  153.917490][T10902] EXT4-fs: Ignoring removed orlov option
[  153.923250][T10902] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.936480][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.944046][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.963468][   T28] veth1_macvtap: left promiscuous mode
[  153.969104][   T28] veth0_macvtap: left promiscuous mode
[  153.974833][   T28] veth1_vlan: left promiscuous mode
[  153.980251][   T28] veth0_vlan: left promiscuous mode
[  154.050240][T10910] loop4: detected capacity change from 0 to 8192
[  154.058314][T10910] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  154.077991][T10910] program syz.4.1718 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.124564][   T28] team0 (unregistering): Port device team_slave_1 removed
[  154.136164][   T28] team0 (unregistering): Port device team_slave_0 removed
[  154.136805][T10912] loop4: detected capacity change from 0 to 512
[  154.157795][T10912] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  154.167933][T10912] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  154.178048][T10912] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1719: Failed to acquire dquot type 1
[  154.191557][T10912] EXT4-fs (loop4): 1 truncate cleaned up
[  154.198143][T10912] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.224762][T10856] chnl_net:caif_netlink_parms(): no params data found
[  154.284476][T10856] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.291627][T10856] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.298953][T10856] bridge_slave_0: entered allmulticast mode
[  154.305466][T10856] bridge_slave_0: entered promiscuous mode
[  154.312673][T10856] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.319881][T10856] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.327315][T10856] bridge_slave_1: entered allmulticast mode
[  154.334241][T10856] bridge_slave_1: entered promiscuous mode
[  154.373562][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.391807][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.407200][T10922] loop4: detected capacity change from 0 to 1024
[  154.422103][T10856] team0: Port device team_slave_0 added
[  154.434783][T10856] team0: Port device team_slave_1 added
[  154.487234][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.494234][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.520623][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.532140][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.539177][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.565248][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.649591][   T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.665363][T10942] loop4: detected capacity change from 0 to 512
[  154.666559][T10856] hsr_slave_0: entered promiscuous mode
[  154.688524][T10942] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  154.688856][T10856] hsr_slave_1: entered promiscuous mode
[  154.698765][T10942] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  154.698792][T10942] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1723: Failed to acquire dquot type 1
[  154.715991][   T29] audit: type=1326 audit(1729251966.273:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  154.728032][T10942] EXT4-fs (loop4): 1 truncate cleaned up
[  154.755507][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.763205][T10856] Cannot create hsr debugfs directory
[  154.764927][   T29] audit: type=1326 audit(1729251966.303:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.0.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  154.795257][T10942] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.814478][   T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.866859][T10942] usb usb6: usbfs: process 10942 (syz.4.1723) did not claim interface 0 before use
[  154.890628][   T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.983365][T10973] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1725'.
[  154.992586][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'.
[  155.008278][   T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.109298][ T4357] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:11: Failed to release dquot type 0
[  155.137232][T10938] chnl_net:caif_netlink_parms(): no params data found
[  155.164175][   T28] bridge_slave_1: left allmulticast mode
[  155.169900][   T28] bridge_slave_1: left promiscuous mode
[  155.172097][T10995] bpf_get_probe_write_proto: 11 callbacks suppressed
[  155.172116][T10995] syz.1.1729[10995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.175626][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.182452][T10995] syz.1.1729[10995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.201266][T10995] syz.1.1729[10995] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.231942][   T28] bridge_slave_0: left allmulticast mode
[  155.249249][   T28] bridge_slave_0: left promiscuous mode
[  155.255018][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.357372][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.367582][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.378115][   T28] bond0 (unregistering): Released all slaves
[  155.450910][   T28] hsr_slave_0: left promiscuous mode
[  155.456632][   T28] hsr_slave_1: left promiscuous mode
[  155.462279][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.469736][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.477843][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.485353][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.494738][   T28] veth1_macvtap: left promiscuous mode
[  155.500631][   T28] veth0_macvtap: left promiscuous mode
[  155.506432][   T28] veth1_vlan: left promiscuous mode
[  155.509480][T11008] syz.4.1731[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.511774][   T28] veth0_vlan: left promiscuous mode
[  155.511896][T11008] syz.4.1731[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.528623][T11008] syz.4.1731[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  155.618498][   T28] team0 (unregistering): Port device team_slave_1 removed
[  155.640925][   T28] team0 (unregistering): Port device team_slave_0 removed
[  155.706832][T10938] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.713930][T10938] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.723369][T10938] bridge_slave_0: entered allmulticast mode
[  155.733717][T10938] bridge_slave_0: entered promiscuous mode
[  155.746716][T10938] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.753956][T10938] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.773982][T10938] bridge_slave_1: entered allmulticast mode
[  155.780666][T10938] bridge_slave_1: entered promiscuous mode
[  155.821448][T11020] loop4: detected capacity change from 0 to 1024
[  155.830204][T10938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.840769][T11020] EXT4-fs: Ignoring removed orlov option
[  155.846544][T11020] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.862480][T10938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.901708][T10938] team0: Port device team_slave_0 added
[  155.907706][T10856] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  155.926276][T10938] team0: Port device team_slave_1 added
[  155.993770][T10856] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  156.006773][T10856] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  156.027577][T11037] syz.0.1742[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.027742][T11037] syz.0.1742[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.041988][T11037] syz.0.1742[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.054831][T10938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.073251][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.099230][T10938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.112579][T11037] syz.0.1742[11037] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  156.114113][T10856] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  156.163344][T10938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.170352][T10938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.196408][T10938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.261540][T11057] loop1: detected capacity change from 0 to 1024
[  156.268748][T11057] EXT4-fs: Ignoring removed orlov option
[  156.274538][T11057] EXT4-fs: Ignoring removed nomblk_io_submit option
[  156.284393][T10938] hsr_slave_0: entered promiscuous mode
[  156.291495][T10938] hsr_slave_1: entered promiscuous mode
[  156.300460][T11059] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1743'.
[  156.309645][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1743'.
[  156.371901][T10856] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.383147][T10856] 8021q: adding VLAN 0 to HW filter on device team0
[  156.401523][T10856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  156.411924][T10856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  156.475424][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.482543][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.492000][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.499176][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.824091][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.904647][T10938] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  156.916833][T10938] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  156.947448][T10938] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  156.956647][T10938] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  156.988693][T10856] veth0_vlan: entered promiscuous mode
[  156.997017][T10856] veth1_vlan: entered promiscuous mode
[  157.046379][T10856] veth0_macvtap: entered promiscuous mode
[  157.053699][T10856] veth1_macvtap: entered promiscuous mode
[  157.067706][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.079395][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.089653][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.100146][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.110091][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.120713][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.135884][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.157712][T11115] loop1: detected capacity change from 0 to 8192
[  157.170956][T11115] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.192612][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.203134][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.213092][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.223591][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.233711][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.244304][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.272291][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.346775][T10856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.355609][T10856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.355652][T10856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.373118][T10856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.398627][T10938] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.403396][T10938] 8021q: adding VLAN 0 to HW filter on device team0
[  157.407252][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.407285][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.429066][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.429141][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.473248][T10938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.520859][T11126] loop4: detected capacity change from 0 to 8192
[  157.521875][T11126] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.544118][T11126] program syz.4.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.556378][   T29] kauditd_printk_skb: 156 callbacks suppressed
[  157.556394][   T29] audit: type=1326 audit(1729251969.113:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.556421][   T29] audit: type=1326 audit(1729251969.113:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.556744][   T29] audit: type=1326 audit(1729251969.113:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.556833][   T29] audit: type=1326 audit(1729251969.113:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.556934][   T29] audit: type=1326 audit(1729251969.113:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.560937][   T29] audit: type=1326 audit(1729251969.113:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.561113][   T29] audit: type=1326 audit(1729251969.113:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.561244][   T29] audit: type=1326 audit(1729251969.113:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.561425][   T29] audit: type=1326 audit(1729251969.113:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.561646][   T29] audit: type=1326 audit(1729251969.113:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  157.683668][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'.
[  157.717308][T10938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.171639][T10938] veth0_vlan: entered promiscuous mode
[  158.216350][T10938] veth1_vlan: entered promiscuous mode
[  158.261267][T10938] veth0_macvtap: entered promiscuous mode
[  158.299610][T10938] veth1_macvtap: entered promiscuous mode
[  158.305651][T11212] loop3: detected capacity change from 0 to 1024
[  158.353903][T11212] EXT4-fs: Ignoring removed orlov option
[  158.359850][T11212] EXT4-fs: Ignoring removed nomblk_io_submit option
[  158.381698][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.392258][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.402231][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.412727][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.422658][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.433176][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.443157][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.453639][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.494732][T10938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.496591][T11212] EXT4-fs mount: 107 callbacks suppressed
[  158.496610][T11212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.535236][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.545816][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.555677][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.566162][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.576100][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.586611][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.596542][T10938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.607052][T10938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.624659][T10938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.680223][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.681835][T11235] loop1: detected capacity change from 0 to 8192
[  158.707504][T10938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.716270][T10938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.725133][T10938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.733887][T10938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.757613][T11235] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.838000][T11247] loop3: detected capacity change from 0 to 512
[  158.895537][T11247] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1777: Failed to acquire dquot type 1
[  158.925195][T11247] EXT4-fs (loop3): 1 truncate cleaned up
[  158.931404][T11247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.963061][T11247] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.004817][T11268] FAULT_INJECTION: forcing a failure.
[  159.004817][T11268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.007719][T11264] loop4: detected capacity change from 0 to 2048
[  159.018312][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.2.1784 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  159.035539][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  159.045610][T11268] Call Trace:
[  159.048896][T11268]  <TASK>
[  159.051835][T11268]  dump_stack_lvl+0xf2/0x150
[  159.056444][T11268]  dump_stack+0x15/0x20
[  159.060672][T11268]  should_fail_ex+0x223/0x230
[  159.065462][T11268]  should_fail+0xb/0x10
[  159.069639][T11268]  should_fail_usercopy+0x1a/0x20
[  159.074723][T11268]  _copy_from_user+0x1e/0xd0
[  159.079454][T11268]  copy_msghdr_from_user+0x54/0x2a0
[  159.084749][T11268]  __sys_sendmsg+0x171/0x270
[  159.089374][T11268]  __x64_sys_sendmsg+0x46/0x50
[  159.094239][T11268]  x64_sys_call+0x2689/0x2d60
[  159.098949][T11268]  do_syscall_64+0xc9/0x1c0
[  159.103462][T11268]  ? clear_bhb_loop+0x55/0xb0
[  159.108209][T11268]  ? clear_bhb_loop+0x55/0xb0
[  159.112905][T11268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.118820][T11268] RIP: 0033:0x7fb901e7dff9
[  159.123241][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.142888][T11268] RSP: 002b:00007fb900af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.151311][T11268] RAX: ffffffffffffffda RBX: 00007fb902035f80 RCX: 00007fb901e7dff9
[  159.159295][T11268] RDX: 0000000010000000 RSI: 0000000020000080 RDI: 0000000000000003
[  159.167296][T11268] RBP: 00007fb900af7090 R08: 0000000000000000 R09: 0000000000000000
[  159.175274][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.183310][T11268] R13: 0000000000000000 R14: 00007fb902035f80 R15: 00007ffff2cdbde8
[  159.191295][T11268]  </TASK>
[  159.212860][T11264] loop4: detected capacity change from 0 to 512
[  159.295919][T11264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.321921][T11274] loop1: detected capacity change from 0 to 1024
[  159.331565][T11264] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.480431][T11274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.543307][T10448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.588930][T10114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.023354][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.023409][T11287] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  160.085172][T11287] loop1: detected capacity change from 0 to 512
[  160.094688][T11287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.119123][T11290] bridge0: port 3(vlan2) entered blocking state
[  160.125612][T11290] bridge0: port 3(vlan2) entered disabled state
[  160.148101][T11287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.184613][T11287] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.201707][T11290] vlan2: entered allmulticast mode
[  160.207429][T11290] vlan2: left allmulticast mode
[  160.272385][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1795'.
[  160.294962][T11287] loop1: detected capacity change from 512 to 511
[  160.309357][T11305] bpf_get_probe_write_proto: 20 callbacks suppressed
[  160.309375][T11305] +}[@[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.313298][T11312] EXT4-fs error (device loop1): ext4_ext_remove_space:2998: inode #19: comm syz.1.1789: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  160.323634][T11305] +}[@[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.353289][T11312] EXT4-fs error (device loop1) in ext4_setattr:5523: Corrupt filesystem
[  160.372743][T11305] +}[@[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.421540][T10114] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /36/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  160.494342][T10114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.585762][T11329] syz.0.1800[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.585900][T11329] syz.0.1800[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  160.616118][T11329] syz.0.1800[11329] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.667269][T11343] loop2: detected capacity change from 0 to 1024
[  161.673680][T11344] loop3: detected capacity change from 0 to 2048
[  161.836333][T11343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.925806][  T140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.950545][T10938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.018306][T11364] syz.2.1812[11364] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.018497][T11364] syz.2.1812[11364] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.030806][T11364] syz.2.1812[11364] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.056317][  T140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.071080][T11364] syz.2.1812[11364] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.134304][T11379] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  162.154423][  T140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.251552][T11383] loop2: detected capacity change from 0 to 512
[  162.264115][  T140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.289066][T11383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.316410][T11351] chnl_net:caif_netlink_parms(): no params data found
[  162.369044][T11383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.393798][T11383] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.529256][T11394] loop3: detected capacity change from 0 to 2048
[  162.592741][T11394] loop3: detected capacity change from 0 to 512
[  162.600788][T11351] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.607917][T11351] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.615188][T11383] loop2: detected capacity change from 512 to 511
[  162.642196][T11394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.670469][T11351] bridge_slave_0: entered allmulticast mode
[  162.680057][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 5: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  162.711806][T11351] bridge_slave_0: entered promiscuous mode
[  162.723179][  T140] bridge_slave_1: left allmulticast mode
[  162.726336][T11394] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.728971][  T140] bridge_slave_1: left promiscuous mode
[  162.745041][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.754483][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 6: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.777096][  T140] bridge_slave_0: left allmulticast mode
[  162.780822][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 7: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.782754][  T140] bridge_slave_0: left promiscuous mode
[  162.810406][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.814508][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 8: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.819632][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.842197][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 9: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.873273][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 10: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.897260][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 11: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.933385][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 12: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.963757][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 13: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  162.986406][T10938] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 14: comm syz-executor: path /12/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=67108864, rec_len=0, size=1024 fake=0
[  163.021006][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.039420][T11418] loop3: detected capacity change from 0 to 512
[  163.047782][T11418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.060371][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.074746][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.086677][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.089175][T11418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.108020][T11418] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.116610][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.135926][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.136134][T11418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1824'.
[  163.145942][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.157213][T11418] random: crng reseeded on system resumption
[  163.169603][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.183508][   T29] kauditd_printk_skb: 155 callbacks suppressed
[  163.183521][   T29] audit: type=1326 audit(1729251974.733:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.220042][  T140] bond0 (unregistering): Released all slaves
[  163.230304][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.234697][T11429] Cannot find del_set index 0 as target
[  163.246176][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.247447][   T29] audit: type=1326 audit(1729251974.763:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.282317][   T29] audit: type=1326 audit(1729251974.763:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.284190][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.305999][   T29] audit: type=1326 audit(1729251974.763:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.324052][T10938] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  163.341524][   T29] audit: type=1326 audit(1729251974.763:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.367355][T11351] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.376502][   T29] audit: type=1326 audit(1729251974.763:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.383539][T11351] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.406986][   T29] audit: type=1326 audit(1729251974.763:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.407149][   T29] audit: type=1326 audit(1729251974.763:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.407178][   T29] audit: type=1326 audit(1729251974.763:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.485437][   T29] audit: type=1326 audit(1729251974.763:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11425 comm="syz.0.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f87737ddff9 code=0x7ffc0000
[  163.511247][T11351] bridge_slave_1: entered allmulticast mode
[  163.517821][T11351] bridge_slave_1: entered promiscuous mode
[  163.524635][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.597106][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.613086][  T140] hsr_slave_0: left promiscuous mode
[  163.639891][  T140] hsr_slave_1: left promiscuous mode
[  163.651226][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.658738][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.673425][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.675029][T11443] loop3: detected capacity change from 0 to 512
[  163.680911][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.702052][T11451] loop4: detected capacity change from 0 to 512
[  163.710759][  T140] veth1_macvtap: left promiscuous mode
[  163.716390][  T140] veth0_macvtap: left promiscuous mode
[  163.721970][  T140] veth1_vlan: left promiscuous mode
[  163.727300][  T140] veth0_vlan: left promiscuous mode
[  163.742555][T11451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.750841][T11445] program syz.0.1829 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.768925][T11443] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1828: Failed to acquire dquot type 1
[  163.787069][T11443] EXT4-fs (loop3): 1 truncate cleaned up
[  163.793232][T11443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.817481][T11443] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.823407][T11451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.842439][T11451] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.934989][T11451] loop4: detected capacity change from 512 to 511
[  163.943215][T11459] EXT4-fs error (device loop4): ext4_ext_remove_space:2998: inode #19: comm syz.4.1831: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  163.962590][  T140] team0 (unregistering): Port device team_slave_1 removed
[  163.978521][  T140] team0 (unregistering): Port device team_slave_0 removed
[  163.985536][T11459] EXT4-fs error (device loop4) in ext4_setattr:5523: Corrupt filesystem
[  164.004444][T10448] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /32/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  164.028585][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.043983][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.055965][T10448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.125689][T11351] team0: Port device team_slave_0 added
[  164.140103][T11351] team0: Port device team_slave_1 added
[  164.166245][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.173350][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.199342][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.228206][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.235279][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.261333][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.263813][T10938] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.316319][T11486] loop3: detected capacity change from 0 to 512
[  164.337329][T11351] hsr_slave_0: entered promiscuous mode
[  164.343986][T11351] hsr_slave_1: entered promiscuous mode
[  164.357210][T11351] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.366015][T11486] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1839: Failed to acquire dquot type 1
[  164.379335][T11486] EXT4-fs (loop3): 1 truncate cleaned up
[  164.385168][T11351] Cannot create hsr debugfs directory
[  164.402138][T11486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.436763][T11486] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.637872][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.660815][  T140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.720091][  T140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.808258][  T140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.879359][T11534] program syz.0.1846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.889177][T11548] FAULT_INJECTION: forcing a failure.
[  164.889177][T11548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.902329][T11548] CPU: 1 UID: 0 PID: 11548 Comm: syz.3.1847 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  164.913129][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  164.923254][T11548] Call Trace:
[  164.926546][T11548]  <TASK>
[  164.929496][T11548]  dump_stack_lvl+0xf2/0x150
[  164.934197][T11548]  dump_stack+0x15/0x20
[  164.938386][T11548]  should_fail_ex+0x223/0x230
[  164.943120][T11548]  should_fail+0xb/0x10
[  164.947302][T11548]  should_fail_usercopy+0x1a/0x20
[  164.952387][T11548]  strncpy_from_user+0x25/0x200
[  164.957267][T11548]  ? kmem_cache_alloc_noprof+0x10c/0x290
[  164.962980][T11548]  getname_flags+0xb0/0x3b0
[  164.967486][T11548]  __x64_sys_rmdir+0x21/0x40
[  164.972089][T11548]  x64_sys_call+0xfb1/0x2d60
[  164.976861][T11548]  do_syscall_64+0xc9/0x1c0
[  164.981384][T11548]  ? clear_bhb_loop+0x55/0xb0
[  164.986357][T11548]  ? clear_bhb_loop+0x55/0xb0
[  164.991108][T11548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.997051][T11548] RIP: 0033:0x7f9d10d5dff9
[  165.001563][T11548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.021177][T11548] RSP: 002b:00007f9d0f9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  165.029598][T11548] RAX: ffffffffffffffda RBX: 00007f9d10f15f80 RCX: 00007f9d10d5dff9
[  165.037728][T11548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  165.045717][T11548] RBP: 00007f9d0f9d7090 R08: 0000000000000000 R09: 0000000000000000
[  165.053833][T11548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.061879][T11548] R13: 0000000000000000 R14: 00007f9d10f15f80 R15: 00007ffdd3df2868
[  165.069888][T11548]  </TASK>
[  165.083569][  T140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.105474][T11556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'.
[  165.122983][T11495] chnl_net:caif_netlink_parms(): no params data found
[  165.139814][T11560] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.158301][T11492] chnl_net:caif_netlink_parms(): no params data found
[  165.173161][T11556] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1850'.
[  165.232576][T11565] loop3: detected capacity change from 0 to 512
[  165.250903][T11565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.269981][T11495] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.277154][T11495] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.286784][T11495] bridge_slave_0: entered allmulticast mode
[  165.293647][T11495] bridge_slave_0: entered promiscuous mode
[  165.301662][T11351] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  165.311848][T11565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.328557][T11351] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  165.344760][T11565] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.363026][T11495] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.370215][T11495] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.390985][T11495] bridge_slave_1: entered allmulticast mode
[  165.408566][T11495] bridge_slave_1: entered promiscuous mode
[  165.416758][T11351] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  165.436062][T11351] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  165.454922][T11560] loop3: detected capacity change from 512 to 511
[  165.497878][T11565] EXT4-fs error (device loop3): ext4_ext_remove_space:2998: inode #19: comm syz.3.1851: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  165.537973][T11495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.550376][T11565] EXT4-fs error (device loop3) in ext4_setattr:5523: Corrupt filesystem
[  165.564845][T11492] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.572094][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.582121][T11492] bridge_slave_0: entered allmulticast mode
[  165.588971][T11492] bridge_slave_0: entered promiscuous mode
[  165.598775][T11495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.620993][  T140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.632968][T10856] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /26/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  165.663491][T11492] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.670673][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.677966][T11492] bridge_slave_1: entered allmulticast mode
[  165.684401][T11492] bridge_slave_1: entered promiscuous mode
[  165.687435][T10856] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.741808][T11351] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.753019][  T140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.771428][T11495] team0: Port device team_slave_0 added
[  165.779316][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.793638][  T140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.808478][T11495] team0: Port device team_slave_1 added
[  165.827106][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.842530][T11351] 8021q: adding VLAN 0 to HW filter on device team0
[  165.850669][T11495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.857825][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.883948][T11495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.907984][T11492] team0: Port device team_slave_0 added
[  165.917274][T11492] team0: Port device team_slave_1 added
[  165.928050][  T140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.961561][T11495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.968626][T11495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.994680][T11495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.014203][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.021391][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.075891][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.082892][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.108923][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.122423][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.129487][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.155495][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.183518][T11495] hsr_slave_0: entered promiscuous mode
[  166.192888][T11495] hsr_slave_1: entered promiscuous mode
[  166.206709][T11495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.215996][T11495] Cannot create hsr debugfs directory
[  166.222217][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.229322][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.290048][  T140] bridge_slave_1: left allmulticast mode
[  166.295841][  T140] bridge_slave_1: left promiscuous mode
[  166.301528][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.316197][  T140] bridge_slave_0: left allmulticast mode
[  166.321882][  T140] bridge_slave_0: left promiscuous mode
[  166.327653][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.337424][  T140] bridge_slave_1: left allmulticast mode
[  166.343096][  T140] bridge_slave_1: left promiscuous mode
[  166.348968][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.361421][  T140] bridge_slave_0: left allmulticast mode
[  166.367201][  T140] bridge_slave_0: left promiscuous mode
[  166.372878][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.635742][T11657] program syz.0.1860 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  166.697648][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.708493][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.719843][  T140] bond0 (unregistering): Released all slaves
[  166.720536][T11676] bpf_get_probe_write_proto: 14 callbacks suppressed
[  166.720633][T11676] syz.0.1863[11676] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.732820][T11676] syz.0.1863[11676] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.732983][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.745073][T11676] syz.0.1863[11676] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.766938][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.789097][  T140] bond0 (unregistering): Released all slaves
[  166.844608][T11492] hsr_slave_0: entered promiscuous mode
[  166.851356][T11492] hsr_slave_1: entered promiscuous mode
[  166.857832][T11492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.865476][T11492] Cannot create hsr debugfs directory
[  166.947458][T11684] +}[@[11684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.947611][T11684] +}[@[11684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.963603][T11684] +}[@[11684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  166.973398][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.006741][  T140] hsr_slave_0: left promiscuous mode
[  167.012523][  T140] hsr_slave_1: left promiscuous mode
[  167.029308][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.036844][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.044850][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.052400][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.066807][  T140] hsr_slave_0: left promiscuous mode
[  167.072396][  T140] hsr_slave_1: left promiscuous mode
[  167.081831][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.089411][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.105501][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.113036][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.138126][  T140] veth1_macvtap: left promiscuous mode
[  167.143711][  T140] veth0_macvtap: left promiscuous mode
[  167.149303][  T140] veth1_vlan: left promiscuous mode
[  167.154629][  T140] veth0_vlan: left promiscuous mode
[  167.162637][  T140] veth1_macvtap: left promiscuous mode
[  167.168254][  T140] veth0_macvtap: left promiscuous mode
[  167.173776][  T140] veth1_vlan: left promiscuous mode
[  167.179182][  T140] veth0_vlan: left promiscuous mode
[  167.330872][  T140] team0 (unregistering): Port device team_slave_1 removed
[  167.341271][  T140] team0 (unregistering): Port device team_slave_0 removed
[  167.406455][  T140] team0 (unregistering): Port device team_slave_1 removed
[  167.417904][  T140] team0 (unregistering): Port device team_slave_0 removed
[  167.525661][T11601] chnl_net:caif_netlink_parms(): no params data found
[  167.561445][T11718] syz.0.1870[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.561521][T11718] syz.0.1870[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.573360][T11718] syz.0.1870[11718] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.601801][T11601] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.620387][T11601] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.630839][T11601] bridge_slave_0: entered allmulticast mode
[  167.651388][T11601] bridge_slave_0: entered promiscuous mode
[  167.672277][T11601] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.679608][T11601] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.699107][T11601] bridge_slave_1: entered allmulticast mode
[  167.710514][T11601] bridge_slave_1: entered promiscuous mode
[  167.724236][T11351] veth0_vlan: entered promiscuous mode
[  167.744009][T11351] veth1_vlan: entered promiscuous mode
[  167.759971][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.776716][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.802124][T11601] team0: Port device team_slave_0 added
[  167.814918][T11601] team0: Port device team_slave_1 added
[  167.820884][T11749] syz.0.1875[11749] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  167.839793][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.858442][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.884593][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.896340][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.903304][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.929277][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.970795][T11351] veth0_macvtap: entered promiscuous mode
[  167.986032][T11601] hsr_slave_0: entered promiscuous mode
[  167.992461][T11601] hsr_slave_1: entered promiscuous mode
[  168.000421][T11351] veth1_macvtap: entered promiscuous mode
[  168.031227][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.041732][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.051627][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.062087][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.083330][T11351] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.099014][T11495] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  168.120616][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.131151][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.141077][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.151641][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.162354][T11351] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.170292][T11495] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  168.198950][T11495] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  168.220271][T11495] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  168.255478][T11351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.264249][T11351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.273071][T11351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.281818][T11351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.488464][T11495] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.510498][T11495] 8021q: adding VLAN 0 to HW filter on device team0
[  168.527777][T11492] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  168.544708][T11601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.559690][T11492] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  168.576850][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.583938][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.593368][T11492] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  168.613443][T11601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.629545][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.636785][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.645934][T11492] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  168.655635][   T29] kauditd_printk_skb: 73 callbacks suppressed
[  168.655649][   T29] audit: type=1326 audit(1729251980.213:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.689157][   T29] audit: type=1326 audit(1729251980.233:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.712824][   T29] audit: type=1326 audit(1729251980.233:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.736474][   T29] audit: type=1326 audit(1729251980.233:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.759750][T11495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.760005][   T29] audit: type=1326 audit(1729251980.233:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.770322][T11495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.804297][   T29] audit: type=1326 audit(1729251980.233:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.827843][   T29] audit: type=1326 audit(1729251980.233:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.851380][   T29] audit: type=1326 audit(1729251980.233:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.874951][   T29] audit: type=1326 audit(1729251980.233:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.898477][   T29] audit: type=1326 audit(1729251980.233:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  168.926054][T11601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.980191][T11601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.021489][  T140] bridge_slave_1: left allmulticast mode
[  169.027324][  T140] bridge_slave_1: left promiscuous mode
[  169.033084][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.041387][  T140] bridge_slave_0: left allmulticast mode
[  169.047172][  T140] bridge_slave_0: left promiscuous mode
[  169.052876][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.147932][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.158446][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.168976][  T140] bond0 (unregistering): Released all slaves
[  169.209469][T11495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.219563][T11492] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.273798][  T140] hsr_slave_0: left promiscuous mode
[  169.282628][  T140] hsr_slave_1: left promiscuous mode
[  169.293815][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.301358][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.323462][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.331236][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.341107][  T140] veth1_macvtap: left promiscuous mode
[  169.346869][  T140] veth0_macvtap: left promiscuous mode
[  169.352409][  T140] veth1_vlan: left promiscuous mode
[  169.357715][  T140] veth0_vlan: left promiscuous mode
[  169.371636][T11849] loop1: detected capacity change from 0 to 1024
[  169.427790][T11849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.452560][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.471172][  T140] team0 (unregistering): Port device team_slave_1 removed
[  169.482281][  T140] team0 (unregistering): Port device team_slave_0 removed
[  169.531779][T11601] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.537743][T11857] loop1: detected capacity change from 0 to 8192
[  169.546822][T11857] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.558222][T11492] 8021q: adding VLAN 0 to HW filter on device team0
[  169.567235][T11858] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1891'.
[  169.576496][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'.
[  169.589137][T11601] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  169.601727][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.608914][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.613938][T11857] program syz.1.1892 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.619949][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.632669][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.646643][T11601] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  169.655642][T11601] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  169.702013][T11495] veth0_vlan: entered promiscuous mode
[  169.719107][T11492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.729701][T11492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.742501][T11495] veth1_vlan: entered promiscuous mode
[  169.745884][T11864] loop1: detected capacity change from 0 to 512
[  169.779107][T11864] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1893: Failed to acquire dquot type 1
[  169.787436][T11495] veth0_macvtap: entered promiscuous mode
[  169.799828][T11864] EXT4-fs (loop1): 1 truncate cleaned up
[  169.806478][T11864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.819315][T11864] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.833041][T11495] veth1_macvtap: entered promiscuous mode
[  169.849666][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.860272][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.870126][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.871339][T11864] usb usb6: usbfs: process 11864 (syz.1.1893) did not claim interface 0 before use
[  169.880635][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.882141][T11495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.909821][T11601] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.919255][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.929765][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.939669][T11495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.950138][T11495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.963475][T11495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.981814][T11495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.990633][T11495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.999468][T11495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.008359][T11495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.022229][T11601] 8021q: adding VLAN 0 to HW filter on device team0
[  170.029929][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.041171][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.048355][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.057278][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.064496][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.125944][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.145131][T11601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.268325][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.297529][T11889] loop1: detected capacity change from 0 to 512
[  170.330236][T11889] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1896: Failed to acquire dquot type 1
[  170.390400][T11889] EXT4-fs (loop1): 1 truncate cleaned up
[  170.396816][T11889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.412446][T11889] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.488701][T11492] veth0_vlan: entered promiscuous mode
[  170.496650][T11492] veth1_vlan: entered promiscuous mode
[  170.509715][T11492] veth0_macvtap: entered promiscuous mode
[  170.517399][T11492] veth1_macvtap: entered promiscuous mode
[  170.531207][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.541686][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.551570][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.562128][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.571983][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.582440][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.593089][T11492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.596143][T11893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11893 comm=syz.2.1842
[  170.601497][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.623847][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.633742][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.644248][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.654184][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.664635][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.675321][T11492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.737536][T11492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.746329][T11492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.755259][T11492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.764057][T11492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.784494][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.821071][T11601] veth0_vlan: entered promiscuous mode
[  170.837926][T11601] veth1_vlan: entered promiscuous mode
[  170.887960][T11601] veth0_macvtap: entered promiscuous mode
[  170.898766][T11926] loop4: detected capacity change from 0 to 512
[  170.915467][T11601] veth1_macvtap: entered promiscuous mode
[  170.950923][T11926] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1848: Failed to acquire dquot type 1
[  170.969797][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.980374][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.990287][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.000828][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.010701][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.021253][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.031087][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.041651][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.055373][T11926] EXT4-fs (loop4): 1 truncate cleaned up
[  171.062104][T11926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.062177][T11926] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.062212][T11930] program syz.0.1906 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.078518][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.102447][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.102469][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.102481][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.102534][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.102546][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.102562][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.102573][T11601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.102588][T11601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.103251][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.104454][T11601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.104493][T11601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.104578][T11601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.104612][T11601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.126234][T11926] usb usb6: usbfs: process 11926 (syz.4.1848) did not claim interface 0 before use
[  171.294823][T11943] loop1: detected capacity change from 0 to 512
[  171.330295][T11943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  171.391365][T11943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.404579][T11943] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.437539][T11943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1909'.
[  171.447939][T11492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.458843][T11943] random: crng reseeded on system resumption
[  171.503628][T11955] loop3: detected capacity change from 0 to 8192
[  171.525021][T11955] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  171.540610][T11943] Cannot find del_set index 0 as target
[  171.565522][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.621912][T11962] loop1: detected capacity change from 0 to 1024
[  171.628842][T11962] EXT4-fs: Ignoring removed orlov option
[  171.634542][T11962] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.648437][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.676979][T11964] loop2: detected capacity change from 0 to 1024
[  171.699718][T11962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.727475][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.730577][T11964] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  171.748625][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.751237][T11971] loop3: detected capacity change from 0 to 512
[  171.765270][T11971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  171.776886][T11964] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1916: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  171.797301][T11964] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1916: couldn't read orphan inode 11 (err -117)
[  171.811271][T11971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.814107][T11964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.824382][T11971] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.863492][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.867698][T11980] loop4: detected capacity change from 0 to 512
[  171.883976][T11980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  171.899952][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.911424][T11964] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1916: Invalid block bitmap block 0 in block_group 0
[  171.916201][T11982] loop1: detected capacity change from 0 to 1024
[  171.926811][T11964] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1916: Failed to acquire dquot type 0
[  171.944346][T11980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.957310][T11980] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.960153][T11982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.975774][T11971] loop3: detected capacity change from 512 to 511
[  171.988135][T11988] EXT4-fs error (device loop3): ext4_ext_remove_space:2998: inode #19: comm syz.3.1919: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  172.007365][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.015054][T11988] EXT4-fs error (device loop3) in ext4_setattr:5523: Corrupt filesystem
[  172.057433][T11601] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /3/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  172.060342][T11991] loop1: detected capacity change from 0 to 512
[  172.083905][T11980] loop4: detected capacity change from 512 to 511
[  172.096333][T11993] EXT4-fs error (device loop4): ext4_ext_remove_space:2998: inode #19: comm syz.4.1922: pblk 250 bad header/extent: invalid magic - magic 7, entries 84, max 0(0), depth 0(0)
[  172.104208][T11601] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.114555][T11993] EXT4-fs error (device loop4) in ext4_setattr:5523: Corrupt filesystem
[  172.141839][T11991] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1923: Failed to acquire dquot type 1
[  172.154100][T11991] EXT4-fs (loop1): 1 truncate cleaned up
[  172.160386][T11991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.173161][T11991] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.206894][T11492] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 4: comm syz-executor: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=1024 fake=0
[  172.235643][T11492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.314508][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.343122][T11997] loop1: detected capacity change from 0 to 512
[  172.350667][T11997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.377731][T11997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.390708][T11997] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.405028][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'.
[  172.415860][T11997] random: crng reseeded on system resumption
[  172.467985][T12000] Cannot find del_set index 0 as target
[  172.490602][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.648678][T12005] loop1: detected capacity change from 0 to 8192
[  172.657108][T12005] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.713153][  T140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.725466][T12007] bpf_get_probe_write_proto: 8 callbacks suppressed
[  172.725527][T12007] +}[@[12007] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.732648][T12007] +}[@[12007] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.744276][T12007] +}[@[12007] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.841125][T12018] loop1: detected capacity change from 0 to 512
[  172.859781][T12018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  172.882685][T12018] EXT4-fs (loop1): 1 truncate cleaned up
[  172.889973][T12018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.924488][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.930699][T12011] chnl_net:caif_netlink_parms(): no params data found
[  172.963954][T12026] loop1: detected capacity change from 0 to 512
[  172.980611][T12011] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.987949][T12011] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.991467][T12026] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1934: Failed to acquire dquot type 1
[  172.996918][T12011] bridge_slave_0: entered allmulticast mode
[  173.013821][T12011] bridge_slave_0: entered promiscuous mode
[  173.014497][T12026] EXT4-fs (loop1): 1 truncate cleaned up
[  173.022418][T12011] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.026210][T12026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.032502][T12011] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.045314][T12026] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.054670][T12011] bridge_slave_1: entered allmulticast mode
[  173.069882][T12011] bridge_slave_1: entered promiscuous mode
[  173.089094][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.099772][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.110236][T12026] usb usb6: usbfs: process 12026 (syz.1.1934) did not claim interface 0 before use
[  173.128135][T12011] team0: Port device team_slave_0 added
[  173.135497][T12011] team0: Port device team_slave_1 added
[  173.166635][  T140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.184810][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.192166][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.218204][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.230104][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.230158][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.246288][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.272280][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.289862][  T140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.322374][T12035] loop1: detected capacity change from 0 to 512
[  173.332983][T12011] hsr_slave_0: entered promiscuous mode
[  173.342688][T12011] hsr_slave_1: entered promiscuous mode
[  173.342760][T12035] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1936: Failed to acquire dquot type 1
[  173.359835][T12011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.361465][T12035] EXT4-fs (loop1): 1 truncate cleaned up
[  173.367543][T12011] Cannot create hsr debugfs directory
[  173.374289][T12035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.391768][T12035] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.403833][  T140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.494272][  T140] bridge_slave_1: left allmulticast mode
[  173.500116][  T140] bridge_slave_1: left promiscuous mode
[  173.505957][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.518159][  T140] bridge_slave_0: left allmulticast mode
[  173.523909][  T140] bridge_slave_0: left promiscuous mode
[  173.529736][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.584257][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.677506][T12055] FAULT_INJECTION: forcing a failure.
[  173.677506][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.690639][T12055] CPU: 1 UID: 0 PID: 12055 Comm: syz.1.1937 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  173.701502][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  173.711575][T12055] Call Trace:
[  173.714948][T12055]  <TASK>
[  173.717882][T12055]  dump_stack_lvl+0xf2/0x150
[  173.722478][T12055]  dump_stack+0x15/0x20
[  173.726635][T12055]  should_fail_ex+0x223/0x230
[  173.731355][T12055]  should_fail+0xb/0x10
[  173.735564][T12055]  should_fail_usercopy+0x1a/0x20
[  173.740634][T12055]  _copy_from_user+0x1e/0xd0
[  173.745252][T12055]  sctp_getsockopt_local_auth_chunks+0x8b/0x4c0
[  173.751551][T12055]  ? selinux_socket_getsockopt+0x19c/0x1d0
[  173.757434][T12055]  sctp_getsockopt+0x3b4/0xab0
[  173.762270][T12055]  sock_common_getsockopt+0x5b/0x70
[  173.767523][T12055]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  173.773423][T12055]  do_sock_getsockopt+0x1ca/0x260
[  173.778470][T12055]  __sys_getsockopt+0x18a/0x200
[  173.783481][T12055]  __x64_sys_getsockopt+0x66/0x80
[  173.788536][T12055]  x64_sys_call+0x11cd/0x2d60
[  173.793231][T12055]  do_syscall_64+0xc9/0x1c0
[  173.797870][T12055]  ? clear_bhb_loop+0x55/0xb0
[  173.802718][T12055]  ? clear_bhb_loop+0x55/0xb0
[  173.807428][T12055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.813343][T12055] RIP: 0033:0x7f7443aadff9
[  173.817797][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.837499][T12055] RSP: 002b:00007f7442700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  173.845960][T12055] RAX: ffffffffffffffda RBX: 00007f7443c66058 RCX: 00007f7443aadff9
[  173.854016][T12055] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003
[  173.861993][T12055] RBP: 00007f7442700090 R08: 0000000020000040 R09: 0000000000000000
[  173.870040][T12055] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  173.878076][T12055] R13: 0000000000000000 R14: 00007f7443c66058 R15: 00007ffdf670a408
[  173.886064][T12055]  </TASK>
[  173.896180][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.907468][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.918708][  T140] bond0 (unregistering): Released all slaves
[  173.969839][  T140] hsr_slave_0: left promiscuous mode
[  173.977706][  T140] hsr_slave_1: left promiscuous mode
[  173.984373][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.991918][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.000968][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.008545][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.020342][  T140] veth1_macvtap: left promiscuous mode
[  174.025962][  T140] veth0_macvtap: left promiscuous mode
[  174.031603][  T140] veth1_vlan: left promiscuous mode
[  174.037259][  T140] veth0_vlan: left promiscuous mode
[  174.142855][  T140] team0 (unregistering): Port device team_slave_1 removed
[  174.153589][  T140] team0 (unregistering): Port device team_slave_0 removed
[  174.339925][T12058] chnl_net:caif_netlink_parms(): no params data found
[  174.398761][T12058] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.405956][T12058] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.413318][T12058] bridge_slave_0: entered allmulticast mode
[  174.420401][T12058] bridge_slave_0: entered promiscuous mode
[  174.430475][T12058] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.437639][T12058] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.452890][T12058] bridge_slave_1: entered allmulticast mode
[  174.459629][T12058] bridge_slave_1: entered promiscuous mode
[  174.474190][T12011] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  174.514011][T12011] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  174.518966][T12103] loop1: detected capacity change from 0 to 2048
[  174.531577][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.544481][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.553790][T12011] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  174.565502][T12103]  loop1: p1 < > p4
[  174.570510][T12103] loop1: p4 size 8388608 extends beyond EOD, truncated
[  174.586449][T12011] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  174.620409][T12058] team0: Port device team_slave_0 added
[  174.634997][   T29] kauditd_printk_skb: 335 callbacks suppressed
[  174.635016][   T29] audit: type=1326 audit(1729251986.183:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.665145][   T29] audit: type=1326 audit(1729251986.183:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.688739][   T29] audit: type=1326 audit(1729251986.183:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.712812][   T29] audit: type=1326 audit(1729251986.183:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.736404][   T29] audit: type=1326 audit(1729251986.183:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.760144][   T29] audit: type=1326 audit(1729251986.183:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.783899][   T29] audit: type=1326 audit(1729251986.183:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.807963][   T29] audit: type=1326 audit(1729251986.183:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.831908][   T29] audit: type=1326 audit(1729251986.183:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.855445][   T29] audit: type=1326 audit(1729251986.183:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.1.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7443aadff9 code=0x7ffc0000
[  174.880774][  T140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.892804][T11495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.906706][T12058] team0: Port device team_slave_1 added
[  174.913303][T12126] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.1943'.
[  174.922538][T12126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1943'.
[  174.947664][ T2968]  loop1: p1 < > p4
[  174.958983][ T2968] loop1: p4 size 8388608 extends beyond EOD, truncated
[  174.978312][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  174.978432][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.000704][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.018499][ T8546] udevd[8546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  175.043112][  T140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.043626][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.053840][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.054905][ T4930] udevd[4930]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  175.067961][T12135] syz.2.1945[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.090021][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.108655][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.134746][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.153427][T12139] loop1: detected capacity change from 0 to 512
[  175.154241][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.166978][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.192982][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.215897][  T140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.242170][T12139] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1944: Failed to acquire dquot type 1
[  175.270037][T12153] loop2: detected capacity change from 0 to 512
[  175.286911][T12139] EXT4-fs (loop1): 1 truncate cleaned up
[  175.293108][T12139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.308288][T12139] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.321609][T12011] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.328599][T12153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  175.340653][  T140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.353651][T12153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.366353][T12153] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.375563][T12139] usb usb6: usbfs: process 12139 (syz.1.1944) did not claim interface 0 before use
[  175.382190][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'.
[  175.398091][T12058] hsr_slave_0: entered promiscuous mode
[  175.405758][T12058] hsr_slave_1: entered promiscuous mode
[  175.413785][T12153] random: crng reseeded on system resumption
[  175.430856][T12058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.438556][T12058] Cannot create hsr debugfs directory
[  175.450799][T12011] 8021q: adding VLAN 0 to HW filter on device team0
[  175.477593][T12011] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.488113][T12011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.508976][T12153] Cannot find del_set index 0 as target
[  175.517635][T11351] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.523017][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.533691][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.547994][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.555118][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.566643][T11495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.650789][  T140] bridge_slave_1: left allmulticast mode
[  175.656520][  T140] bridge_slave_1: left promiscuous mode
[  175.662266][  T140] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.672885][  T140] bridge_slave_0: left allmulticast mode
[  175.678725][  T140] bridge_slave_0: left promiscuous mode
[  175.684460][  T140] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.726004][T12176] FAULT_INJECTION: forcing a failure.
[  175.726004][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.739210][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.0.1952 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  175.749993][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  175.760104][T12176] Call Trace:
[  175.763458][T12176]  <TASK>
[  175.766460][T12176]  dump_stack_lvl+0xf2/0x150
[  175.771068][T12176]  dump_stack+0x15/0x20
[  175.775227][T12176]  should_fail_ex+0x223/0x230
[  175.779947][T12176]  should_fail+0xb/0x10
[  175.784117][T12176]  should_fail_usercopy+0x1a/0x20
[  175.789166][T12176]  _copy_to_user+0x1e/0xa0
[  175.793594][T12176]  simple_read_from_buffer+0xa0/0x110
[  175.798983][T12176]  proc_fail_nth_read+0xf9/0x140
[  175.803972][T12176]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  175.809536][T12176]  vfs_read+0x195/0x720
[  175.813715][T12176]  ? __rcu_read_unlock+0x4e/0x70
[  175.818746][T12176]  ? __fget_files+0x1d4/0x210
[  175.823491][T12176]  ksys_read+0xeb/0x1b0
[  175.827759][T12176]  __x64_sys_read+0x42/0x50
[  175.832283][T12176]  x64_sys_call+0x27d3/0x2d60
[  175.836975][T12176]  do_syscall_64+0xc9/0x1c0
[  175.841510][T12176]  ? clear_bhb_loop+0x55/0xb0
[  175.846272][T12176]  ? clear_bhb_loop+0x55/0xb0
[  175.851029][T12176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.856991][T12176] RIP: 0033:0x7f87737dca3c
[  175.861420][T12176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  175.881167][T12176] RSP: 002b:00007f8772457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  175.889587][T12176] RAX: ffffffffffffffda RBX: 00007f8773995f80 RCX: 00007f87737dca3c
[  175.897616][T12176] RDX: 000000000000000f RSI: 00007f87724570a0 RDI: 0000000000000004
[  175.905593][T12176] RBP: 00007f8772457090 R08: 0000000000000000 R09: 0000000000000000
[  175.913570][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.921632][T12176] R13: 0000000000000000 R14: 00007f8773995f80 R15: 00007ffd66a149e8
[  175.929617][T12176]  </TASK>
[  175.974114][T12179] loop2: detected capacity change from 0 to 2048
[  175.995324][T12179]  loop2: p1 < > p4
[  175.999420][  T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.000079][T12179] loop2: p4 size 8388608 extends beyond EOD, truncated
[  176.026173][  T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.042359][  T140] bond0 (unregistering): Released all slaves
[  176.063416][ T2968]  loop2: p1 < > p4
[  176.068754][ T2968] loop2: p4 size 8388608 extends beyond EOD, truncated
[  176.100584][T12182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.132590][ T8546] udevd[8546]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  176.143399][ T4930] udevd[4930]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  176.153590][T12182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.169797][T12182] bond0 (unregistering): Released all slaves
[  176.184068][T12193] loop2: detected capacity change from 0 to 512
[  176.204396][T12193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  176.228320][  T140] hsr_slave_0: left promiscuous mode
[  176.236731][  T140] hsr_slave_1: left promiscuous mode
[  176.245795][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.253296][  T140] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.261423][T12193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.274497][T12193] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.285432][  T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.292850][  T140] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.309511][  T140] veth1_macvtap: left promiscuous mode
[  176.313165][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'.
[  176.315178][  T140] veth0_macvtap: left promiscuous mode
[  176.329655][  T140] veth1_vlan: left promiscuous mode
[  176.335013][  T140] veth0_vlan: left promiscuous mode
[  176.343171][T12193] random: crng reseeded on system resumption
[  176.347849][T12204] loop1: detected capacity change from 0 to 8192
[  176.364372][T12204] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.407132][T12207] Cannot find del_set index 0 as target
[  176.479900][T12209] rdma_op ffff88810d16ad80 conn xmit_rdma 0000000000000000
[  176.490698][T11495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.523635][T11495] ==================================================================
[  176.531782][T11495] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[  176.539379][T11495] 
[  176.541716][T11495] read-write to 0xffff888237d2ac68 of 1 bytes by task 12211 on cpu 1:
[  176.549888][T11495]  folio_add_lru+0xa3/0x1f0
[  176.554432][T11495]  folio_add_lru_vma+0x48/0x60
[  176.559233][T11495]  handle_mm_fault+0x2493/0x2a80
[  176.564201][T11495]  __get_user_pages+0xf2c/0x2670
[  176.569174][T11495]  __mm_populate+0x25b/0x3b0
[  176.573795][T11495]  vm_mmap_pgoff+0x1d6/0x290
[  176.578415][T11495]  ksys_mmap_pgoff+0xd0/0x330
[  176.583150][T11495]  x64_sys_call+0x1884/0x2d60
[  176.587857][T11495]  do_syscall_64+0xc9/0x1c0
[  176.592361][T11495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.598266][T11495] 
[  176.600583][T11495] read to 0xffff888237d2ac68 of 1 bytes by task 11495 on cpu 0:
[  176.608215][T11495]  __lru_add_drain_all+0x136/0x3f0
[  176.613396][T11495]  lru_add_drain_all+0x10/0x20
[  176.618176][T11495]  invalidate_bdev+0x47/0x70
[  176.622772][T11495]  ext4_put_super+0x571/0x840
[  176.627484][T11495]  generic_shutdown_super+0xe5/0x220
[  176.632777][T11495]  kill_block_super+0x2a/0x70
[  176.637479][T11495]  ext4_kill_sb+0x44/0x80
[  176.641815][T11495]  deactivate_locked_super+0x7d/0x1c0
[  176.647259][T11495]  deactivate_super+0x9f/0xb0
[  176.651948][T11495]  cleanup_mnt+0x268/0x2e0
[  176.656381][T11495]  __cleanup_mnt+0x19/0x20
[  176.660796][T11495]  task_work_run+0x13a/0x1a0
[  176.665391][T11495]  syscall_exit_to_user_mode+0xbe/0x130
[  176.670948][T11495]  do_syscall_64+0xd6/0x1c0
[  176.675471][T11495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.681378][T11495] 
[  176.683708][T11495] value changed: 0x17 -> 0x18
[  176.688377][T11495] 
[  176.690695][T11495] Reported by Kernel Concurrency Sanitizer on:
[  176.696857][T11495] CPU: 0 UID: 0 PID: 11495 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0
[  176.707798][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  176.717878][T11495] ==================================================================
[  176.777397][  T140] team0 (unregistering): Port device team_slave_1 removed
[  176.787607][  T140] team0 (unregistering): Port device team_slave_0 removed
[  176.858900][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.123630][T12011] veth0_vlan: entered promiscuous mode
[  177.160543][T12011] veth1_vlan: entered promiscuous mode
[  177.213674][T12011] veth0_macvtap: entered promiscuous mode
[  177.242302][T12011] veth1_macvtap: entered promiscuous mode
[  177.272911][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.283456][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.293374][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.303861][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.313740][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.324280][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.336696][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.345328][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.355811][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.365693][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.376179][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.386059][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.396643][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.407193][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.421274][T12011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.430070][T12011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.438878][T12011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.447614][T12011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.476656][T12058] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  177.485615][T12058] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  177.498240][T12058] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  177.506882][T12058] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  177.570942][T12058] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.590598][T12058] 8021q: adding VLAN 0 to HW filter on device team0
[  177.601115][  T244] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.608267][  T244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.634781][  T244] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.641958][  T244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.729664][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.810299][T12058] veth0_vlan: entered promiscuous mode
[  177.819941][T12058] veth1_vlan: entered promiscuous mode
[  177.839781][T12058] veth0_macvtap: entered promiscuous mode
[  177.847624][T12058] veth1_macvtap: entered promiscuous mode
[  177.858382][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.868898][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.878812][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.889315][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.899190][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.909648][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.919518][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.930025][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.940664][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.951795][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.962360][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.972419][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.982876][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.992778][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.003217][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.013112][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.023565][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.034673][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.043576][T12058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.052395][T12058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.061156][T12058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.069896][T12058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0