last executing test programs:

2m14.883331257s ago: executing program 2 (id=210):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800)

2m14.850502817s ago: executing program 2 (id=211):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r4 = socket(0x18, 0x80000, 0x2)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x20001, 0x20000000}, 0xc)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "49258a4bd282e3c1", "b3c97f661ba7d1b2598d741c674b9023499f874df7284d1b46314e964b1fb54f", "579c08c7", "917aa80383ece75c"}, 0x38)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="32d6107511e480dc004ad8795722bc9ecbcff52a342d5e00fb328d37b2b4a1543b12aac8316d2776343cfab959c3c6ec94040869a1d4e6f81e5cc28d8a4be41a48679c2c8f0a59e28f0b0231f7dbf844e7b909680931ed323ae227af590d3f677ff9f1f570e3af30111bd825ca", 0x6d}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close(r0)

2m14.825501197s ago: executing program 2 (id=212):
r0 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010002000000000000000200000014000200636f6e6430000e0000000000000000000900010073"], 0x40}}, 0x0) (fail_nth: 2)

2m14.567959436s ago: executing program 2 (id=214):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private1, <r0=>0x0}, &(0x7f0000000200)=0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xfffffe49, 0x85, 0x101, 0x2002, 0x1, 0x8, '\x00', r0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x2000000000000004, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b88f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
finit_module(r5, 0x0, 0x0)

2m14.507351716s ago: executing program 2 (id=217):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x210856, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$eJzs3c9vI1cdAPCvvXHiZNMmLT0AgnZpCwtarZN426jqgZYTQqgSokeQtiHxRlHsOIqd0oSVmp65IlGJExz5Azhw6ok7FwQ3LuWAxI8I1CBxGDTjSdabtTcWSewo/nyk2Zk3bzLf74t33lu/bPwCGFu3IuIgIiYj4r2ImMvPF/It3u5s6XWfHT5cPTp8uFqIJHn3H4WsPj0XXV+TupnfsxwR3/92xI8KT8Zt7e1vrtTrtZ28vNBubC+09vbvbjRW1mvrta1qdXlpefGNe69XL6ytLzUm86Mvf/r7g2/8JE1rNj/T3Y6L1Gl66SROaiIivnsZwUbgRt6eyVEnwv+lGBHPR8TL2fM/FzeyVxMAuM6SZC6Sue4yAHDdFbM5sEKxks8FzEaxWKl05vBeiJlivdlq33nQ3N1a68yVzUep+GCjXlvM5wrno1RIy0vZ8aNy9VT5XkQ8FxE/m5rOypXVZn1tlP/wAYAxdvPU+P/vqc74HxHJh6NODgC4POVRJwAADJ3xHwDGj/EfAMaP8R8Axk9n/J8e4MKdy08GABgK7/8BYPwY/wFgrHzvnXfSLTnKP/967f293c3m+3fXaq3NSmN3tbLa3NmurDeb69ln9jTOul+92dxeei12P5j/5narvdDa27/faO5ute9nn+t9v1bKrjoYQssAgH6ee+mTPxXSEfnN6WyLrrUcSiPNDLhsxVEnAIzMjVEnAIyM1b5gfJ3jPb7pAbgmeizR+5hyr18QSpIkubyUgEt2+wvm/2Fcdc3/+1/AMGbM/8P4Mv8P4ytJCoOu+R+DXggAXG3m+IE+P/9/Pt//Ov/hwA/XHtX9Nvvz455fd5B3LxebJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwxx+v/VvK1wGejWKxUIp6JiPkoFR5s1GuLEfFsRPxxqjSVlpdGnDMAcF7Fvxby9b9uz706+1jVizdPDicj4se/ePfnH6y02zt/iJgs/HPq+Hz74/x8dfjZAwBnOx6ns33XG/nPDh+uHm/DzOdv34qIcif+0eFkHJ3En4iJbF+OUkTM/KuQlzsKXXMX53HwUUR8vlf7CzGbzYF0Vj49HT+N/cxQ4xcfi1/M6jr79HvxuQvIBcbNJ2n/83av568Yt7J97+e/nPVQ55f3f+mtVo+yPvBR/OP+70af/u/WoDFe+913OkfTT9Z9FPHFiYjj2Edd/c9x/EKf+K8OGP/PX3rx5X51yS8jbkfv+N2xFtqN7YXW3v7djcbKem29tlWtLi8tL75x7/XqQjZHvdB/NPj7m3ee7VeXtn+mT/zyGe3/6oDt/9V/3/vBV54S/+uv9IpfjBeeEj8dE782YPyVmd+U+9Wl8df6tP+s1//OgPE//cv+2oCXAgBD0Nrb31yp12s7Dp48SJLkw/SbdFXycZC+GlcgjZ4Hbw0r1mSfv5A/faXzTJ+qSpKn3/Ct3lX9eoyLmHUDroKThz4i/jPqZAAAAAAAAAAAAAAAgJ6G8RtLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//99m9kb")
r0 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000, 0x10b0c0)
write$ppp(r3, &(0x7f0000000080)="f3454cc9abd9e0938dffecb3e5823c315681314d79b7b8c433949ffdef37fa9f3bbe6f368b5aa6f4ad0a58800edf8f22bd72be78d5e2265f03bdda5361d2496c2dd1a7fa59532295907be419e35dd9c4356acfec7f759fa1785f1feed467ea2b240dfc18dfca241fbd4a2767420cc0d42394c4722bb00960bd188c4442f26e18", 0x80)
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, r2, 0x800)
mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x10431, 0x0)

2m14.334640125s ago: executing program 2 (id=224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000008b7b"], 0x48)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000680)="2b012a1f5f28e4e0bef22240f39d04c31c51fb8a8f48a8d9ecdf3f0fe6c25b7bd133af3b6b0d798fdacacf1a0f8f23c1b44573bf7db3543fda21941f0958efd0fe2fa6afdf97ee6cdb7b962984bb71d07c123a8fd0babc9217167d4ea53485c60424c0cae0a4d328563a9e85775788bf0d5b52c1f4cc408999d71648958c3560977a75c0cd2a01aaeb876feb3d10e65cc78fa713f68444d10d9ce4972ba18916c40a4436e46a25cd95e1b68206ad4afef32e834f730c1ec71af64ece0f3f6bac13c91d2c39818d8db983dc981d6fb827b40701c120282b03c561e96262a7b3fc", 0xe0}, {&(0x7f0000000780)="c3438c1756ba4498b9f318e095d49f7335b4fd8f3427975adaf44c224fe7f3d5f16c99691a608770201612f38647e0913c92b249e5c2d7dc9bb7b7ba57d1", 0x3e}, {&(0x7f00000007c0)="90361dc536e1f9675e1212ea5e33494ac8", 0x11}, {&(0x7f0000000800)="8482", 0x2}, {&(0x7f0000000840)="f37075469a298685327885d7b2a2c7f70e523fdf9d478bcfef2b12e941564fb71c616bcf60a1d6e41a05719227c3ade5108483833ce886c5b84f30d8c2731041e0f25f3946651c6ef6ae9707627eaefd6a3392a78e93aa05ad334f39d7911bb748390dc46af5944854b6218825e9afcf30fa604b9606827dc8cfb910896aaa9fb257", 0x82}, {&(0x7f0000000900)="8342a2301f5aa4de6dbb2499f41f3507cc39f911f4824aa644b32d7ff9f03293e07cac958c06359d81", 0x29}, {&(0x7f0000000a00)="07ba9790b3a7b5b5d5dbba3b7d78f7c236b461911756c9659f4bb67db102f6e4ffa252cfb50bb7496567b61a3195ba13b60a0629584404c209b204bd3aa08398fd379836ea40d1e6bbbcbce2cc2252f477bcc859d76174c8092e2969a7dda7b9eed88bee7e4009bda7b4b3cfe9040b824aedbcdf7dbccbeb301e8cf4f151d237aa6f408c55b6327753933e4829faa8dc839f64a1a6a4ac06e2d0c33588b99b818806ed3a31c24e3d7242f31a0ecbcf0016d62818b61ffef9c64e04e6cd3705738ee354f7fe840c60e72650f125f3", 0xce}], 0x7, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x84000000}}], 0x18}, 0x4000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000)
socket$key(0xf, 0x3, 0x2)
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0)
flock(r6, 0x5)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00')
preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828a57000fedbdf25030000000900010073797a310000000014000200627269646765300000010300000000000900030073797a3000000000ecff0300010000000900010073797a3200000000a21a"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
getpeername$packet(r6, &(0x7f0000000200), &(0x7f0000000240)=0x14)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000000)={0x5, 0xb7, 0xa})

1m59.340979648s ago: executing program 32 (id=224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000008b7b"], 0x48)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000680)="2b012a1f5f28e4e0bef22240f39d04c31c51fb8a8f48a8d9ecdf3f0fe6c25b7bd133af3b6b0d798fdacacf1a0f8f23c1b44573bf7db3543fda21941f0958efd0fe2fa6afdf97ee6cdb7b962984bb71d07c123a8fd0babc9217167d4ea53485c60424c0cae0a4d328563a9e85775788bf0d5b52c1f4cc408999d71648958c3560977a75c0cd2a01aaeb876feb3d10e65cc78fa713f68444d10d9ce4972ba18916c40a4436e46a25cd95e1b68206ad4afef32e834f730c1ec71af64ece0f3f6bac13c91d2c39818d8db983dc981d6fb827b40701c120282b03c561e96262a7b3fc", 0xe0}, {&(0x7f0000000780)="c3438c1756ba4498b9f318e095d49f7335b4fd8f3427975adaf44c224fe7f3d5f16c99691a608770201612f38647e0913c92b249e5c2d7dc9bb7b7ba57d1", 0x3e}, {&(0x7f00000007c0)="90361dc536e1f9675e1212ea5e33494ac8", 0x11}, {&(0x7f0000000800)="8482", 0x2}, {&(0x7f0000000840)="f37075469a298685327885d7b2a2c7f70e523fdf9d478bcfef2b12e941564fb71c616bcf60a1d6e41a05719227c3ade5108483833ce886c5b84f30d8c2731041e0f25f3946651c6ef6ae9707627eaefd6a3392a78e93aa05ad334f39d7911bb748390dc46af5944854b6218825e9afcf30fa604b9606827dc8cfb910896aaa9fb257", 0x82}, {&(0x7f0000000900)="8342a2301f5aa4de6dbb2499f41f3507cc39f911f4824aa644b32d7ff9f03293e07cac958c06359d81", 0x29}, {&(0x7f0000000a00)="07ba9790b3a7b5b5d5dbba3b7d78f7c236b461911756c9659f4bb67db102f6e4ffa252cfb50bb7496567b61a3195ba13b60a0629584404c209b204bd3aa08398fd379836ea40d1e6bbbcbce2cc2252f477bcc859d76174c8092e2969a7dda7b9eed88bee7e4009bda7b4b3cfe9040b824aedbcdf7dbccbeb301e8cf4f151d237aa6f408c55b6327753933e4829faa8dc839f64a1a6a4ac06e2d0c33588b99b818806ed3a31c24e3d7242f31a0ecbcf0016d62818b61ffef9c64e04e6cd3705738ee354f7fe840c60e72650f125f3", 0xce}], 0x7, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x84000000}}], 0x18}, 0x4000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000)
socket$key(0xf, 0x3, 0x2)
r6 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0)
flock(r6, 0x5)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00')
preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r1)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828a57000fedbdf25030000000900010073797a310000000014000200627269646765300000010300000000000900030073797a3000000000ecff0300010000000900010073797a3200000000a21a"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
getpeername$packet(r6, &(0x7f0000000200), &(0x7f0000000240)=0x14)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000000)={0x5, 0xb7, 0xa})

3.068602202s ago: executing program 3 (id=3158):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socket$kcm(0x29, 0x2, 0x0)

2.797664121s ago: executing program 1 (id=3162):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000001ec0)={'mangle\x00', 0x0, [0xfffffffe, 0x0, 0x1000, 0xfffffff6, 0x81]}, &(0x7f0000001f40)=0x54)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvOHZIdrN1Chygh1JoUXYFaycNbSMObREITpWAcl9C4kRRnDhKnHYTVTQRfwAXBEic4MIFif8AVeLCsUIqgjOIIhCCLRw4wA4ae5zNZu04G5w4JJ+PNDvvza/ve/bOjzfzMg7gynomIl6NiPtpmt6KiHI+vZAPsdcesuU+uPfWQjYkkaav/y2JJJ/W2VaSj6/nq41FxNe/EvGt5NG4Wzu7q/P1em0zz1ebaxvVrZ3d2ytr88u15dr67OzMi3Mvzb0wNz2Qet6IiJe/9Kfvf/enX375F5998w93/nLz21mxvpjPP1yPx1Q8bma76qXWZ3F4hc2IV04Z78IptmqYGz/ZOvtnWB4AAHrLrvE/HBGfiohbUY6R4y9nAQAAgP9D6SsT8e8kIu1utNvEsei5PAAAAHABFSJiIpJCJe8LMBGFQqXS7sP70biWvh3R/MxSY3t9MZsXMRmlwtJKvTad9xWejFKS5Wda6Qf559v5/fcjWvnZiHgyIr5XHm/lKwuN+uKwb34AAADAFXH9SPv/n+V2+x8AAAC4ZCaHXQAAAADgzGn/AwAAwOWn/Q8AAACX2ldfey0b0s7vXy++sbO92njj9mJta7Wytr1QWWhsblSWG43l1jv71vptr95obHwu1rfvVpu1rWZ1a2f3zlpje715Z+Whn8AGAAAAztGTn3jnd0lE7H1+vDVkRnssO3KuJQPOWvEgleTjLnv/759oj98/p0IB56LfOf035XMqCHDuisMuADA0pcdZ2N8JwKWU9Jnfs/POu/n4k4MtDwAAMHhTH+/9/L9w7Jp7x88GLjw7MVxdnef/TxzJA5df6/l/rw6/R7lYgEul5IwPV17f5/+9OgC8e9IIafp4JQIAAAZtojUkhUp+e28iCoVKJeJGq7t/KVlaqdem8+cDvy2XPpTlZ1prJn3bDAAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAACXWkThz8kv2+/ynyo/N3H0/sBo8q9y5D8R+uaPXv/B3flmc3Mmm/73g+nNH+bTnx/GHQwAAADgqE47vdOOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBB+uDeWwudoTMtLZ993L9+ISImu8UvxlhrPBaliLj2jySKh9ZLImJkAPH39iPiY93iJ1mxDkJ2iz9+9vFjMv8UusW/PoD4cJW9kx1/Xs32v9GIOLz/FeKZ1rj7/leMeCh/Wq3jX3aA63L87Rz/Rnrs/zeObGuyR4yn3vt5tWf8/Yinit2PP534SY/4z56wjt/8xu5ur3npjyOmup5/kodiVZtrG9Wtnd3bK2vzy7Xl2vrs7MyLcy/NvTA3XV1aqdfyfx/ZfqlP2bL6X+sRf7JP/Z87Yf3/897dex/pUZws/s1nu8T/1U/yJR6NX8jPfZ/O09n8qU56r50+7Omf/frp4+q/2KP+/b7/myes/62vfeePEXH/0FcKAAzR1s7u6ny9Xts8NpFdtvRb5qImslb6BSiGxOkSJ/0veqrE2wPdYJqmafxve0oSQ//AO4lhH5kAAIBBe3DRP+ySAAAAAAAAAAAAAAAAAAAAwNV1Hq8TOxpz7yCVDOIV2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HfAAAA///xwNLS")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10)
llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
syz_io_uring_setup(0x90e, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000004}, 0x100100, 0x5dd8, 0x6, 0x0, 0x0, 0x8, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
truncate(&(0x7f0000000040)='./file1\x00', 0x7fff)
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
read(r4, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x40}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x2}, 0xb00, 0x3, 0xffff, 0x5, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xce03}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

2.298856449s ago: executing program 0 (id=3137):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lsm_list_modules(0x0, 0x0, 0x0)

2.260103309s ago: executing program 0 (id=3164):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {<r2=>0xffffffffffffffff, 0xee00}}, './file1\x00'}) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="5800000014", 0x5}], 0x1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wg2\x00', <r6=>0x0})
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4020}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r6, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0) (async)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x38, 0x18, 0x1, 0x4, 0x0, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0)

2.115274268s ago: executing program 1 (id=3168):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x9, 0x9})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4)

1.880616027s ago: executing program 3 (id=3169):
pipe2$9p(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x804, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==")
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15)
dup(0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1}, &(0x7f0000001200)=<r5=>0x0, &(0x7f0000001040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000001240), 0x1)
syz_usb_disconnect(0xffffffffffffffff)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.803865887s ago: executing program 0 (id=3170):
r0 = socket$netlink(0x10, 0x3, 0x14) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x17)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x400, 0xb, 0x3}, {0xa6, 0x2e, 0x1}, {0x5, 0xa9, 0xff, 0xbc362500}, {0x2, 0x39, 0x7, 0xe}, {0xffff, 0x9, 0xf, 0x803}, {0xfff8, 0xed, 0x6, 0x5}, {0x9, 0x5, 0x7f, 0xb8b9}, {0x100, 0x8, 0x60}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) (async)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af80000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf930000f0ffffffb7f5e613b500000018230000000000e7158a87736bd8f00000000000b418be082724121e3206fd", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='block_rq_remap\x00', r5}, 0x18) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0)
open_tree(r7, &(0x7f0000000440)='./file0\x00', 0x81801) (async)
r8 = socket$phonet(0x23, 0x2, 0x1)
accept(r8, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfff, @local, 0x9}, {0xa, 0x4e22, 0xd, @loopback, 0x3}, r10, 0x40}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r10}}, 0x48) (async)
r11 = dup2(r9, r9)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r10, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
fcntl$lock(r12, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r12, 0x26, &(0x7f00000031c0))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)

1.767166307s ago: executing program 1 (id=3173):
pipe2$9p(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x804, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x40000, 0x100000001})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x15)
dup(0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000001240), 0x1)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)

1.738877987s ago: executing program 5 (id=3174):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xc6, &(0x7f0000000000), &(0x7f0000000240)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9, 0x1, 0x0, 0x1, 0x0, 0x5, 0x62000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x100000, 0x0, 0x0, 0x6, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000071251a1864bcdd3fb45b8455ba6b020000ae5a63e0ff645bba555eec87829ed507bff61b0bc2902221cfc5496c59c774930350998e1ae47fbf21f35ebcb9519a47084487efaf7102cc48bbf74b9440f3d52081bda9d69993b73f0af01480d8aa60f6c64b072d6111963a5adc9e0fae7586a2e77d9484160d79b37d78140abe046b7834145cd2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000640)={0x80})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84f6ec850000ca118ff59ecd5e00ba98c43ee2f8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0xa)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={<r6=>0x0, 0x6}, &(0x7f0000000480)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000500)={r6, 0x9eaf, 0x5, 0xfc}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x121041)
r10 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}]}, 0x48}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

1.411077045s ago: executing program 5 (id=3179):
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00')
write$selinux_access(r0, &(0x7f0000000740)=ANY=[], 0x41)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000580)={[], [], 0x2c}, 0x0, 0x4f8, &(0x7f0000000700)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98d, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="9ed72d2b5f7db255bd241cc43df712ed8721d33404a0bdb0d0b238f6333d4000e86ea1262e3933b29a9478526e7dda7ffaa8c8be"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x33, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000300)='./file0\x00', 0xe5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="17713946fad8408a43a9c4588c3dbb30464db5f526a0f694c2e0e00e8e47ca0955a106cd30e39da3adf3077a7eff5921c7d79263a260622639dedf13d6211cb88b08a40e9020f5c41b45b48cca9e43165ce562a893101f7037fad3e770c9e2b7ef5bf0638b03e784ab2aa824e5422be6ecbe91b9cb29e4cccccdbb304812b5e950f575450d47f2daea8b2717725497fd572187f83387529552ca387d6c8a1d086a44101bcf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x59, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r2, &(0x7f0000000900)="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", 0x45c)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1d, 0x0, 0x3d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)

1.236064005s ago: executing program 5 (id=3181):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x22, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000440)="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", 0x14c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000401400e27f000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000180), 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000180), 0x0}, 0x20)
write$qrtrtun(r0, &(0x7f0000000180)="5354f8ea90d169190124029ec15b0bdb3bace5e97aa3524acd51bf8a1a950e8e16c6453317d5064b84296e1e458c5798a9b1a5db936d9b0be376a92a2fc30fe1b97e65678b6e723eaafca593ea9aa9e1dff0cce2ef931162a17f979916d7e4d2e732b8e6c6f7", 0x66)
write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b)
write$qrtrtun(r0, &(0x7f0000000640)="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", 0x26d)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

1.124916604s ago: executing program 5 (id=3184):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1e, {{0x2, 0xfffc, @multicast2}}}, 0x88)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=0x30)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_read_part_table(0x5c5, &(0x7f0000000b80)="$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")
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x0, 0x0, 0x2, 0x3}})
pipe(&(0x7f0000002480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000001800010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xb4}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1.120736694s ago: executing program 4 (id=3185):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x1)
flock(r1, 0x1)
flock(r1, 0x5) (async)
flock(r1, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.092252734s ago: executing program 4 (id=3186):
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) (fail_nth: 5)

1.060937164s ago: executing program 3 (id=3187):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000800000c0000000c000000a300bb6e00000000008d82e2574d29294e00c93621"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x19)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000cc0)=[{{&(0x7f00000004c0)=@ax25={{0x3, @default, 0x4}, [@null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)="423148a03e30859bb6d09798f2a994528f7f2cd8cfeaf6563092ccd02cb0e14766db020bc437a824dab07291c942cdc4a0dd032d9675ab47a9af2cfb09e1a0c349e4d24395360bdd023c7f39011a713242ddb49a46180b12eeae4d9dca293640dddc6dd3e0570266803e2fff31ac185616071cdcd9a5101f", 0x78}], 0x1, &(0x7f0000000880)=[{0x108, 0x6, 0xff, "cbf344154214ec87dbee7172bff0462e819217f70e55030fbdf8b380eb7a030bc644dbe585a51ab0b443d38216e95841726558e3d9afb2a0dc03bc652ff649af19268b2dd22d7b9e84ca27147b747fe20df44e25088919d75c714a84a92e37b977e8310d70565b568aa551ea7288ebc891e0a161b74837f4b8591e8e0d8ce0b1719ce1744ac524c9b1401bca3162bc4776a73579cc9d4ddbb65b9d628638800278a82a662e2bb190ec78ea3665e181559348b495c2b070636e227158946132cf7130dafa3d48227523304f4e2d66dad1758988ff347e2d69221f8f415208154b8c2013e5699669a5c88315ad2316a0c7a7a50b82587857d6"}, {0x48, 0x104, 0x6, "d051cd70a9dd6c1756fcdfb6331da70db4aa6581a608d3de6d2fd474e2ece3fd587472b8cd0c0458061f130b896a4829948ab97bb26f82"}, {0xd8, 0x10b, 0x0, "a6ebcb790dc38f731e78aca5f8d1048127da053ea01893f4cab21736d8a588653b8bbe3076e5438dbabbc6fde5a024c18fd5fd8e902a4421a14157f66097d9cf6093e3de0934f9b7bc9a8cbf0db4a0dfa5c632d88e2a1651c16fa914638e7c7cea86445ab9462b7bb276c3dd606291b4f41c7fa924a10c62f92230a6f44e0d8a43f313f153b84cd2666aa361b1acc9091e9bb85479f08d5eec7588452121f1de137ff9a14c68103cfe6c7c1fece3121977b00ba38521725bbec4a158179d4b9b451b"}], 0x228}}, {{&(0x7f0000000640)=@l2={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfff, 0x1}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000006c0)="4ab1920775ed7ff5da924af63f9bee0de9e1c5da006a0df0ea865894bb659308868a5db26757a685a887e4ce22c35c4bf4bad81eba896ce96bf0bb3ae6f10802c877b05f08da234c442f2ee7fb8c74f98471b0625f46998100a1e36a453e724319d010a7139c6314a6b0da3a478b6f3d969f43392a4366d6c017ede0e11b7e2a915aec0a9f9633ce63f73a6c18965446f88edf637562342a5ff5ebd0b9ec0b7ec2d0939729f82b8b03d207ac97457ffc4c328060452d84d80785d5fc71eed2d0dbd31eaa524aa5631dbdbfedbe3eb9c9db9603d2a0913f76", 0xd8}, {&(0x7f0000000ac0)="1a0fc3aa6329f6d9ea02f3b0520c56eed94dbbfeb33ee84ab1aca09053f82ea3a1147e24339d779f17016ce7379aa8e3c16dd9e914f7daf2e50f8b390c15ee77b48ca940b790fe8ee8f0a032b595f609b10c123ca821a462a8e8e901a0bd79d9b13ecca1c8634ab7b8d4eda614f6209b20bb8cf9dce036a685d3ebc606499da4a09fc8987951", 0x86}, {&(0x7f0000000b80)="6de9b1e1aa952c9ce6f7aef584ef5ec23e7a976ea9eaaeecfded773ab6a463d2ad48bb137bb8e9f26108f68369317380fe69484b053c9cc3d1542212776e7422f1301dfa2844950f9249c2080c53fbd8b8cb3982826369e07cf7d862da55667a1801c71097153975db17b505a86afe35fb13b94e78814c3b6aa8c5fe2495dd2e4d53080353750a17cf03e0290d4d97e54cfc16e1f801a5fc6490af11a591a19683130b34b4aada6cab3219dc8816672d75ede26f7dbbc9d59f8059e2b5434202220df8", 0xc3}, {&(0x7f00000007c0)="d289", 0x2}], 0x4, &(0x7f00000019c0)=[{0x10, 0x29}, {0xf8, 0x1a, 0x12000000, "49cd96fec7f8830f479fad65448d733e1c7353e1a1999393e33c8ed6815a1665912e7ad99b680329e70279ff357fe1a2c51ae5ff40f68db8d0af59386bf58fc21d5b1932270336f3d0e3690abffa1a917c5a21b58d7a3323974f454da68427d1d4698ab21e9c0bafdb4e058ddbd81dfa0e741ce0e0335c9eb06ceb356f021d8f91bd7ed7882885f51b915941466094749dcb2ee21d46b2ed64d1beefbd8d03f85290817e67f83f45c303da82a3faa0e5c1dd788819b300ae3c41e38dfb4325f2e7c307eb13b98aa74b5b7e02f5b0a6c1ba771a51ff2d3ca9881359493479b816e3936183"}, {0x58, 0x10a, 0x4, "340023f5f3017129fb86e0104a066c9ce5ef9c71f91dab83edc359b48583d740b964e5b5b5cd986fdb447c2089c15d1e7f584da7ac60f6901047208d7d456780e9ff"}, {0x38, 0x29, 0x10001, "21d9e18a8aaf1b85bdb9d03ff79d51229bb6ac47970b022e29489e57ae5cdc46ebf5"}, {0x1010, 0x108, 0x8, "c360e7be9e3216eb3ebd1a6c5db3c8a795d2fcfa11cb36e039880c8b89cbe1489b9ee326eb1365f03cda799153401177572487dcaa77d31473071479e759e276beb8f3d1662c0226e983ae7ca6ab8e4ed80dc5e28ff6f5789e8d17fb0a7d1ce02a341a456751aa9f0ae88b188228f30082631083aa5fafdcbccd3069c98179771331d9586ec956e764369b65d78268c9ece42da174d1d9194d1f0bd5f972cff7ea71bf5cabfe3e7c73b07c2dd2555d596f8bcd610beda7e6dad397254b5339b0e4fc7a6c77a161827a5ba0628cf9629a1524e6c9a07da1ea420596343d1c25c6018829f3bd5fcab2f3556170cfdfff069f46d61a3ce89bf6152d0ac926ad57e5f75cc220d35e34bc13b849c2c192bd031051366919b597a71ab897b6d560ddb0aa0fd23179f36dfcfb1e884d811684b2f8f5d64f1c7bd6834b550da0958a33e15ac12f47d7c4084f6e94bda1f41b7d7ac504069a568efdd68f7435cd19b15b699cdd9aa1bbadf104edba6df82e661bcd4d1669894885e03c5d89c01340071e0e91dca457e33fd44da8ebaf4daf7c6edd49d22097e572c1a977e5b5035d16c82bccc767d19c15b69bf7c6a72588fa200b39cefebba0d1f025407b9b90e65cfca9b5ed8ec212b1af615ef524975287fcc1c43e46aee530b74416dcdfadc03f1643e88d8c6a0cd47ec4df3606075e39a206d74b8f958fa34f6723ec720cf3bca358ba24c9ad5af64d80abcafba23902f1d406801d1f3f53b78164bf194052d2dade908d979dea03b4edd97be70748461512abea31f30b5b7ef8ab16a4460752557b4f49187206c9c26d8f4e8437e934e1e23e37071a3d77646db78fbdbccb13ef40dbadc3a5cc6c793b94aae09281e259f03c99d7ac6cf28e2a8dfa45f6c30fafb76c313d559dae751c17d61b1354527f753219b94fceb7544755bc6497a792f22d963ca386c3e798ab2d26625bafec65a03891aaf6c7928e54280fc1b1a2a5db4b3f5313660d4a71fb0ecb931eb8d95c7f0cc5713922c28e6c2f8e5eee18ccfe10f39e96b5783c171b7bb241b72f28080328162f013be6edcce3eb0b00792d318d7797a73b94ce20c317a01a4462511612e48786d49b02dc275442f046f673b3d6d181ec95c0a0d632dd0422a639b46df0027657371a8bedf7f270b025236e0d169bd4ddef53d50d714d0d8773250658f5c12664545ba1bfd79b9917abe4411ad83e0058db797134772600517f4f891600921117dd5a641494f42c61b5f35e9303000ecb51a0daee89481547c70d47c2a7ad428159d07332c0722477b19e8734d93662609014d706c3dc135d59b2250db8329dd6f914c1be281f62f37c0c0a55027dd33365a3b9967c0f9507ef18be732861a8dd5cebed87cf85cedfd425d6e8ed5bb11d5479f6103657dfdc0e6a87aa47e213357c273ae68e0130b59fcef754d5ca8fe7cc17f281e5928b1093fa9a386a5b7652480c84f3603eb23000a15efbccff724a99864a643b1c78d942cef33478141830d2c577e5ec0ebcb1e3e550f7557e8fe1630b994fcd2df9770e5ec674e4622a6a6d93a33d315ec0197b30c85e121a8bd3bf4aa8226aa2973c51add61521595c1f972f30f399373f40a4512a67a68d2aaf01e00f51ed0fdc33a9fc08713eed3202d6ac1ed29a9fec5c4e1963c312f1c5b4872392e1c10ef65b61e57f6a72113e7c9e087945bd5299cf286ca165e865f542a3668efd52d3fff5745e66fb919b557f9f5731e42376548ccaffc775df599efd7b0a600a9ea5a1e23326a54c1b071501eb0bcd3d65f2bc7784a15cb44084869af964c0e513b5648c648b33988d677486af5ea547a9f4533cb339d5e578be6fdc5f927e80012cd2d0e9dafdde079171ab6d5b14b794c97b66f10fcd032816abcda80edc93619f4f74e10bee53206bae911d49f96533b939f9f13c8f53eb7b0a65fe3bb36654d278057bcd47db429aa15f6fc127d076ad92dd32c461ace6a246f1df380563d09d5ae67a58be1a6a1de561c98dce06445ebf015718091f0c13cb2256acba9020a72760815471598538561a1028e36a7c5b26a13fa2ff58a973691af60f3df16bbda4181fb283a1f8f97cd29c077a23f17e34b5e8d3f169fba066a61f7a46ba2d39be1b9912c16f2221dbf8ceee3c217dc21d5280bb5a7e837d68a515c3129019784f1529a9ae15e6dd5b80afba22e90576a8e0996fe03515609ada2968f521563ffc435471acfd47209bcbc74d194d06d00ca6f6c0c3eb3ab9aec524636c4b0e73a68ad179b915e63c4c27f5e3f56b959254ee42d960c41db0537aa80fcadef7bec9cdf38c75f9af61cd5272832f14a5060379a6dac813dbb5e53ae6ba2562edef87d5ac25f9dac1fed218b7571df2718d4f3dcbca501499fafe486d62dd9c333dd6ce5f1d8ced81377e38b5faeaeceee0c1a3914ab38473100c1565b84b4e0c1397784f16b720b2059300492702d628abfe486a4919292f22a87eb2ab586832ceb2deb1f14430572da33d523d4de05a1a950d35fdd6d460e8d6621c60d0fe30731d7e380025cd8fc2fa06ae8f08cfe3b3487882cb0f977adc20fee63eb874bc056b1d3fff6a72d06ae03a315b4d1998aacbc6421ce68b57e51e16d62757b7f3a7b33fcc9b0cdef34fba9ad1f2a0d13dcaea2a2b2e2dfa996cd6458bb5c90820f91eb9797571ed2c923602d94d5774d34afb7c06c872edb71e3e2de5f004314177d7ec54a4b9d0a54c615296fb71b92c685579e4792821f06ccc7b2793eb7f91c1013049ba1d7080478b1c9266c710556d36c70bee7178688b9c7c7469603ebe67e53d70d825f61f15707cd68d89c1fb9ef1ca3cb1c29ec3f8f773394e8ad373839178a1296484471584720b80b29dc6f2cf09f6ba1150432350faea0dce6d88827a1761a6565b0cb602e68bffca4c5a56155d213759ce40f9dcf015eb80748d88cb672a056d0791f7aebd066161a9f3f0ba54f0306866133710ffb577157a5356c665d9048b09ad32deec051248d47a11f933fa271a905c5bf5d05ee483ba4a8de014d4da4314d8f5ed86ffae9fce7ec9d9b7285aaa874ec66c5f6bcf6fadb3cf8e50eeb2c6b90e53ea057afe3e0a024d1dceac188ff389541186b50246802dd3f227f29d8e0f5d3c94c15e1cfe8011e6af430aa97f3b20d3c2332b5d45bfcf1f3a2a5480e821da36de0f00a37d0545c1e18c1838ec00ab044f5636fcf076b082749def368b849c9510aeca5740fb60c3c05d43f13dfd7e455ef1d5e81de5da9cc12f2783a89288c15b05f4d4f9bd4e4a250c61152bca6c18cb679fd64dd760f2cf6573d8580bd4d3f9251818c1a9208cd135b1442f9d2a3a7561685ec99478a5ce6b463461c094b775633d02587094e963fb62b0d8ecf28395fa4dd5117848988f313420f4aa525661a35f67b3676d920662dfe371bdf0f8f3d4c4b7235bd3eae619b693cd7bf12e019ebbb8e807587f96d06cd53d1e9f2d6ac02dd2b631b1b58dea69b9f6834344efe37856d4834b18fe1e552098287c34811f7728251f792fa029b97b97abce56d59c8183d1180aca9c40f2c66da03f1863c3ff05d5bf7d1dae3630d108914c0c57e651a8b61cde06fb581718587cf069103841b6d6d1bc62f409186062bd450961f0579df972531164cc1e99fb101e253ed06e5513b824338795e5860b4adfdc94a2f52898487651bc0c1636761c04cb463373a2eb352cb105725f15c976b2aeac80e21afc908648afc5265785a4e3e4b25f700b70e0f20f00c5a2b80be5a2f46a21f918226bcf5ef5b1698def35a32e47778fe0db41ef39f931684ceb02b49fb5f9352561164b8e3fd7491ff9e0b3022eb716d0323b5e1ee470d5f7deea517d1a70d376a73042abe88811844952de38144dc7fb111e112b2cd2f89834701d69ba81ce16f6a4e853e6c8846402e6723bb6416bf13085e8981b8af3b97f7cf4291ddec23d0fd70c9aeb5b4ec0c592e55e920ce99828e4f0d12deef6a628b6b9852b6f554036e7b76ca6feb3979c8391083d8d4d9d5cc8918d3bb84c06bad646fd343f74ec5b587906c09fcdd187b64f2f33cb9fe59f48cbeaefac42a2ba13b1157a118ab39e4cf9ed0f48649c1347bc10a08268ff00d72c4877d648ceea0d663fe9a7346ac8be2a171b62dacd8277fd6e5c0af846f0825d9fc36989c299c4099d535f8f5189fbcec16faa7597e9163c29001e58ffb9d9bc1afa860cabdf8d9828666bb96e41c625c1194620aee3d16ee6786746e4eeefc9d2dd1da9062e9ca940dc74b47b627eb0178e0cb669562569113e7f39f172ca8ecf6c9d5c51dff41573d971f953f888047e68875f31d81ea95ee94bb0786fc18c9a855514444308d6d5420a63bd1c73fceeef830e8fcea4ea3ba5a3977a60b01757965f7a4b426ada67a4be101fb666932ece2e7ebaa6faefaac0344449abd875283cf071d663d3c2a615857356027e4fc74306c49a1eab7dc24dbcc760855baeedf728a9c75a58511e00f820627254e89115957044df0933a50f58fd4722edf2b2ad01e9e618615492115233908f66d41aabda9f00de9d8f4fd0c7027b87b6add333cec03e0e9cc5e9aae339558f40226bdf20de9150c3714a87d7762a4f34d62687bcfe2c9386c5d90771806850be4ebe8347ab983bd1caf0b76c5490bd52b8aa48f759a26b0bc41e0b74a59a07bd58cea7b6bc553292f7432af0422b8f57a6e9ef3e7f3e1b299cc3cfbcc157a9b16d752296d95e972241ea220a0674db2d9f29c1e81c42ffec0ea5bc73ba8e1e4904fd201ac37d31b4a691a80fb041a59effaeb8c2e8fe369a230d8882725420b87360838ab03668493155b3ff1d9c3af24f7db539aced50d830a832a2fcfe483dc854ebaabf454aec608eac4e957c2a03e12349629c2a1a250667e48344589f9cf3b2527ad2709c6891875eb037d2d95a50c3c6ee7d5a1490b209615b7ba1c780a3bd1b986ad386caac656b13e33a2cbc89994228efc99fb6035bf1bc413fe8794bf288618981a391f522e3ffb870eaad5e12280d0a445c446f1e5047bdde8b8b132755be8f42b8a835c53c64735f74c4d85254b3629ce3caba5daee45e84f2b418c02f0fec630f8a0f142b15a1b04772834b92cb9c08fa41621d5ed78569f38c452e357751736768fe4c25f5642c58ad19719b7d6ba37146288003a262a9c9aa1d683517f3c01de0f90d5838fbe115ad52f8b697cff43f3f1e745f16bc391037e03f00c3c97b913b13d54bc91c5dae5f955eb466f602b02553054dbd6e4be3bd31b052c81c42240acfc79b29ccf03115c42fa3c35135435f0ea60dd1063950282293ca8b899b05915300c629bc01fd766d9be5c45fc52cd7e9ad5d8b75558e144d9e2fb36cced2d25c12b3ee03632cdb2cf8f37147a2e3f8230774169047d6bec709ecc70de9e2ec943fe653c24594395f47f615fd9ddf7d91e0a876ba029f9630b7733245b26054154235250eadb8c8daa07c2e3b7fead5631786ab7df16e953107923d64d8dac5321a8ab36743bcab378d258f19bd7e2c870ac0ca906ceab17bc02858d39d35698a537045cdf20070930ca6b5560ee9baa3c8ca1990a5928322748f8ff667168029407e668b9866af60a2271c05c868a0e1d04905573ba6b35db67977e327b656b6fc14fdfe14eae26bea723ac753dd481758490d7deda8a57647b954faba7e75b4c2a52a6e412ba0a5d7cd7678da74363a85a2c327043ec5cb5946a50aa9b18d6595fcf308a05870389600cbdd87f4d93a4196f847a3001f8e7e73c5e2e40a747f"}, {0x38, 0x110, 0x5, "217995f6f59b61f58ac538f67adf61e983688be3fdf38cb0e6be293073e063fbe469"}, {0xd0, 0x0, 0x0, "630106afdf10dff847173e1c689fcda759149d82c01c49e483624891f3cfd0d38d4cb4d2d265b4f1c46f34290430c204d0738af4b668f0c73938cecac0a61931c31c92186599f9cecfde6bc9d71716ceb5402b97f0a8799e881804d07e25abdd961979906d3166ec06c6ad32b0e8c024f833e51a556edfd6b99e76a6c8be074aa10265fae434d7556f9044ef939bfa9d2cdf894839f99cea14d862637e780cdfa69a96f20915870c854ebf20d664d4247fbf3ca7bace0592b2526a"}, {0x18, 0x110, 0x1, "91c4"}], 0x12c8}}], 0x2, 0xc0016)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000000), 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0)
rmdir(&(0x7f0000000d40)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, 0x0)
r9 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064", 0x14}], 0x1}}], 0x1, 0x0)

1.011181474s ago: executing program 3 (id=3188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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")
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (fail_nth: 6)
open(0x0, 0x80142, 0x0)

952.840454ms ago: executing program 0 (id=3189):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10)
pipe2$9p(&(0x7f00000001c0), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000aae6f981f02024ec5e8c703a1f17598a5fcfc6f3569119bba020883901e3000000007b8af8ff00000000bfa200000000000007020000f8fffffeb70300000800"/75], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000001c00)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x10000043, 0x0, 0x0, 0x3}, 0xb09e2977203cb8be)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r10=>0x0})
bind$packet(r7, &(0x7f00000000c0)={0x11, 0xf8, r10, 0x1, 0x0, 0x6, @local}, 0x14)
bind$packet(r9, &(0x7f0000000100)={0x11, 0x4, r10}, 0x14)
syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[@ANYBLOB="01"], 0x0)
bind$tipc(r6, 0x0, 0x0)

952.416793ms ago: executing program 4 (id=3190):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x7, 0x4, 0x4, 0x4, 0x82, "0062ba7d820000b274676d5fe557ca2cbb8100"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
unshare(0x40000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}}, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e28, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
write(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0xe8, 0xe8, 0xe8, 0xe8, 0x1d0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'dvmrp0\x00', 'veth1_virt_wifi\x00', {0xff}}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9, {0x4}}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [0xff], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff000000], 'veth1_to_team\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000)
syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x1a, 0x4, 0x1, 0x1ee}, &(0x7f0000000340), 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1)
io_uring_setup(0x1de1, &(0x7f0000000440)={0x0, 0x0, 0x800})
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f"], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300000018000000000000000000deff00000000950000000000000085000000b40000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

938.832024ms ago: executing program 0 (id=3191):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) (fail_nth: 1)

938.388174ms ago: executing program 1 (id=3192):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4dd, &(0x7f0000000240)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

929.395504ms ago: executing program 3 (id=3193):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (fail_nth: 4)

315.077262ms ago: executing program 0 (id=3194):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40800)
syz_read_part_table(0x60d, &(0x7f0000002240)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x114)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[])
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000019"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4cc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000840}, 0x800)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r7, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0xb0)
sendto$inet(r7, &(0x7f0000000480)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

281.790261ms ago: executing program 5 (id=3195):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYBLOB="1263a7b959383aa0a9fa10796416d8755df9ffffff41a395796348a83463060c07de0fe7c8e02a1a743587f58ffb22bbd585d0a4cbead9ca0823180dad88e609da79bbd440b5045f37570748f21ac461994ea77e4a096f9d50951ef0a07c555e2e53a20f4a407feef4892391f639afa0ec81948e1f0c9cb8c0ad00fccafaefa58aadfc71bbd61088", @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYBLOB="fffe87be2280bfedcf18af822e9781c7128d9e86e97a0f512170eaa337f416d1790c04cbd70e758a95dab61e3cac75f6ab7f892b6111fa9e9e9969a0167accf57585e131633da716a9039e59af54f0b661725aa7431352b87f2fe016ea092722663ba7b527094ffe33a6a8db8250e33ed9e440bf0aab7d0e28df1202ce33b3cb47b01beaf5536ba1695276e86ebc4f3422f10e8ff76d61024fff483738628f", @ANYRES32], 0xde, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000280)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x2)

267.264551ms ago: executing program 1 (id=3196):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x9, 0x9})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4)

266.982671ms ago: executing program 3 (id=3197):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@empty, @in6=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200), 0x10)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0xfe, {0x0, 0x0, 0x74, r6, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

228.211341ms ago: executing program 4 (id=3198):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x15, 0x800, 0x38a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x555)

215.387571ms ago: executing program 5 (id=3199):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1)

83.417841ms ago: executing program 1 (id=3200):
socket$netlink(0x10, 0x3, 0x9)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x3, 0x4c)
socket(0x28, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x5d6)

815.31µs ago: executing program 4 (id=3201):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x1a40cc4, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYBLOB="1263a7b959383aa0a9fa10796416d8755df9ffffff41a395796348a83463060c07de0fe7c8e02a1a743587f58ffb22bbd585d0a4cbead9ca0823180dad88e609da79bbd440b5045f37570748f21ac461994ea77e4a096f9d50951ef0a07c555e2e53a20f4a407feef4892391f639afa0ec81948e1f0c9cb8c0ad00fccafaefa58aadfc71bbd61088", @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRES32], 0xde, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000280)='./bus/file0\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ftruncate(r1, 0xc17a)
pread64(r1, &(0x7f00000065c0)=""/141, 0x8d, 0x4)
renameat2(r0, &(0x7f00000001c0)='./bus/file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_create(0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0)
mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp'])
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
futex(0xfffffffffffffffc, 0x8, 0x3, 0x0, 0x0, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f00000004c0)='./bus\x00', r7, &(0x7f0000000500)='./file0\x00', 0x2)

0s ago: executing program 4 (id=3202):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200010, &(0x7f0000000c00), 0x1, 0xb95, &(0x7f00000017c0)="$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") (async)
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000340)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r0) (async)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000540)={r0, 0x1000, 0x3d}, &(0x7f0000000580)={'enc=', 'raw', ' hash=', {'hmac(sha256-avx2)\x00'}}, &(0x7f0000002380)="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", &(0x7f0000000600)="7040928872be4c9b67606fc25852d9aa9006eee6ea5a353bbc37f575c85cd2101b258670a80ca4a8fba2dac7c8c65a36b1123ad1ab019b21da65ecd7a5")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dc36bc4b00c00a149e8059fe14a2c", {"7f96141e5100", "dac60bebefc50000000000000200"}}}}}}}, 0x0) (async)
r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x5d40})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) (async, rerun: 64)
write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) (rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x404c053)

kernel console output (not intermixed with test programs):

"syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60f415d29 code=0x7ffc0000
[  148.852326][   T29] audit: type=1326 audit(1734648164.830:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60f415d29 code=0x7ffc0000
[  148.875989][   T29] audit: type=1326 audit(1734648164.830:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fc60f415d29 code=0x7ffc0000
[  148.900029][   T29] audit: type=1326 audit(1734648164.840:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.1.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60f415d29 code=0x7ffc0000
[  148.961227][T10942] lo speed is unknown, defaulting to 1000
[  148.985226][T10950] FAULT_INJECTION: forcing a failure.
[  148.985226][T10950] name failslab, interval 1, probability 0, space 0, times 0
[  148.997984][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.5.2679 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  149.008869][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  149.018933][T10950] Call Trace:
[  149.022226][T10950]  <TASK>
[  149.025181][T10950]  dump_stack_lvl+0xf2/0x150
[  149.029852][T10950]  dump_stack+0x15/0x1a
[  149.034051][T10950]  should_fail_ex+0x223/0x230
[  149.038854][T10950]  should_failslab+0x8f/0xb0
[  149.043510][T10950]  kmem_cache_alloc_noprof+0x52/0x320
[  149.048912][T10950]  ? fasync_alloc+0x26/0x30
[  149.053454][T10950]  ? fcntl_setlease+0x88/0x300
[  149.058299][T10950]  fasync_alloc+0x26/0x30
[  149.062744][T10950]  fcntl_setlease+0x220/0x300
[  149.067472][T10950]  do_fcntl+0x4c7/0xe10
[  149.071645][T10950]  __se_sys_fcntl+0xbd/0x1b0
[  149.076336][T10950]  __x64_sys_fcntl+0x43/0x50
[  149.080951][T10950]  x64_sys_call+0x2129/0x2dc0
[  149.085697][T10950]  do_syscall_64+0xc9/0x1c0
[  149.090221][T10950]  ? clear_bhb_loop+0x55/0xb0
[  149.094924][T10950]  ? clear_bhb_loop+0x55/0xb0
[  149.099676][T10950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.105793][T10950] RIP: 0033:0x7f6ac2c85d29
[  149.110222][T10950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.122751][T10957] loop0: detected capacity change from 0 to 512
[  149.129833][T10950] RSP: 002b:00007f6ac12f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  149.129857][T10950] RAX: ffffffffffffffda RBX: 00007f6ac2e75fa0 RCX: 00007f6ac2c85d29
[  149.129869][T10950] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000007
[  149.129880][T10950] RBP: 00007f6ac12f7090 R08: 0000000000000000 R09: 0000000000000000
[  149.129891][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.129919][T10950] R13: 0000000000000000 R14: 00007f6ac2e75fa0 R15: 00007ffffda818d8
[  149.184625][T10950]  </TASK>
[  149.305081][T10961] loop4: detected capacity change from 0 to 2048
[  149.322088][T10960] loop5: detected capacity change from 0 to 2048
[  149.376794][T10961] Alternate GPT is invalid, using primary GPT.
[  149.383131][T10961]  loop4: p1 p2 p3
[  149.405022][T10960] Alternate GPT is invalid, using primary GPT.
[  149.411427][T10960]  loop5: p1 p2 p3
[  149.430572][T10957] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2680: couldn't read orphan inode 26 (err -116)
[  149.452098][T10957] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.480755][ T2999] Alternate GPT is invalid, using primary GPT.
[  149.487154][ T2999]  loop5: p1 p2 p3
[  149.495710][T10979] FAULT_INJECTION: forcing a failure.
[  149.495710][T10979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.508959][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.1.2689 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  149.519735][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  149.529803][T10979] Call Trace:
[  149.533089][T10979]  <TASK>
[  149.536074][T10979]  dump_stack_lvl+0xf2/0x150
[  149.540732][T10979]  dump_stack+0x15/0x1a
[  149.544908][T10979]  should_fail_ex+0x223/0x230
[  149.549607][T10979]  should_fail+0xb/0x10
[  149.553783][T10979]  should_fail_usercopy+0x1a/0x20
[  149.558834][T10979]  _copy_from_user+0x1e/0xb0
[  149.563486][T10979]  copy_msghdr_from_user+0x54/0x2a0
[  149.568748][T10979]  ? __fget_files+0x17c/0x1c0
[  149.573423][T10979]  __sys_sendmsg+0x13e/0x230
[  149.578054][T10979]  __x64_sys_sendmsg+0x46/0x50
[  149.582888][T10979]  x64_sys_call+0x2734/0x2dc0
[  149.587635][T10979]  do_syscall_64+0xc9/0x1c0
[  149.592147][T10979]  ? clear_bhb_loop+0x55/0xb0
[  149.596851][T10979]  ? clear_bhb_loop+0x55/0xb0
[  149.601583][T10979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.608008][T10979] RIP: 0033:0x7fc60f415d29
[  149.612525][T10979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.632198][T10979] RSP: 002b:00007fc60da87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.640637][T10979] RAX: ffffffffffffffda RBX: 00007fc60f605fa0 RCX: 00007fc60f415d29
[  149.648601][T10979] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003
[  149.656627][T10979] RBP: 00007fc60da87090 R08: 0000000000000000 R09: 0000000000000000
[  149.664600][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.672607][T10979] R13: 0000000000000000 R14: 00007fc60f605fa0 R15: 00007ffcab9170a8
[  149.680661][T10979]  </TASK>
[  149.705345][T10988] loop1: detected capacity change from 0 to 512
[  149.712806][T10988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  149.796611][T10988] EXT4-fs (loop1): 1 truncate cleaned up
[  149.854610][T11003] syz.0.2699[11003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  149.910475][T11013] loop4: detected capacity change from 0 to 512
[  149.956344][T11013] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2701: couldn't read orphan inode 26 (err -116)
[  149.975848][T11013] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.000044][T11020] loop1: detected capacity change from 0 to 512
[  150.009811][T11020] EXT4-fs (loop1): invalid journal inode
[  150.021424][T11020] EXT4-fs (loop1): can't get journal size
[  150.030175][T11020] EXT4-fs (loop1): 1 truncate cleaned up
[  150.075017][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2704'.
[  150.105695][T11026] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  150.130178][T11032] loop0: detected capacity change from 0 to 512
[  150.138712][T11032] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  150.154653][T11022] lo speed is unknown, defaulting to 1000
[  150.156157][T11032] EXT4-fs (loop0): 1 truncate cleaned up
[  150.237045][T11027] lo speed is unknown, defaulting to 1000
[  150.237863][T11040] netlink: 'syz.0.2710': attribute type 322 has an invalid length.
[  150.243764][T11026] siw: device registration error -23
[  150.300940][T11042] loop5: detected capacity change from 0 to 512
[  150.312057][T11042] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  150.372105][T11042] EXT4-fs (loop5): 1 truncate cleaned up
[  150.463121][T11057] veth0_virt_wifi: entered promiscuous mode
[  150.471040][T11057] veth0_virt_wifi: left promiscuous mode
[  150.549341][T11066] loop5: detected capacity change from 0 to 512
[  150.579707][T11066] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  150.588613][T11066] System zones: 0-2, 18-18, 34-34
[  150.594430][T11066] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2721: bg 0: block 248: padding at end of block bitmap is not set
[  150.609582][T11066] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2721: Failed to acquire dquot type 1
[  150.621584][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'.
[  150.621667][T11066] EXT4-fs (loop5): 1 truncate cleaned up
[  150.632384][T11066] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.662821][T11074] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  150.681919][T11066] veth0_virt_wifi: entered promiscuous mode
[  150.711714][T11066] veth0_virt_wifi: left promiscuous mode
[  150.719972][T11073] lo speed is unknown, defaulting to 1000
[  150.726903][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'.
[  150.728773][T11074] siw: device registration error -23
[  150.845614][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2728'.
[  150.869024][T11093] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  150.871080][   T11] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 1
[  150.906191][T11090] lo speed is unknown, defaulting to 1000
[  150.937810][T11093] siw: device registration error -23
[  150.942780][T11099] veth0_virt_wifi: entered promiscuous mode
[  150.953403][T11099] veth0_virt_wifi: left promiscuous mode
[  150.959478][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'.
[  150.960045][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2731'.
[  151.077343][ T3301] bond0: (slave syz_tun): Releasing backup interface
[  151.098130][T11120] 9pnet_fd: p9_fd_create_unix (11120): problem connecting socket: ./file0: -111
[  151.149132][T11122] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  151.230418][T11132] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2740'.
[  151.301016][   T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.336081][   T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.393056][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'.
[  151.410707][   T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.421152][T11163] loop3: detected capacity change from 0 to 512
[  151.428906][T11163] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  151.442193][T11163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  151.450495][T11163] System zones: 1-12
[  151.454596][T11163] EXT4-fs (loop3): orphan cleanup on readonly fs
[  151.461553][T11163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2748: bg 0: block 361: padding at end of block bitmap is not set
[  151.481476][T11163] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  151.498002][   T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.506806][T11163] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2748: attempt to clear invalid blocks 33619980 len 1
[  151.522899][T11163] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2748: invalid indirect mapped block 1811939328 (level 0)
[  151.537197][T11125] lo speed is unknown, defaulting to 1000
[  151.545773][T11163] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2748: invalid indirect mapped block 2 (level 2)
[  151.562737][T11163] EXT4-fs (loop3): 1 truncate cleaned up
[  151.590058][T11169] loop5: detected capacity change from 0 to 512
[  151.600850][T11169] EXT4-fs (loop5): invalid journal inode
[  151.607086][T11169] EXT4-fs (loop5): can't get journal size
[  151.632896][T11169] EXT4-fs (loop5): 1 truncate cleaned up
[  151.641992][T11172] loop0: detected capacity change from 0 to 512
[  151.652713][T11172] EXT4-fs (loop0): invalid journal inode
[  151.658418][T11172] EXT4-fs (loop0): can't get journal size
[  151.665517][T11172] EXT4-fs (loop0): 1 truncate cleaned up
[  151.776636][   T40] bond0 (unregistering): Released all slaves
[  151.784784][   T40] bond1 (unregistering): Released all slaves
[  151.806726][T11125] chnl_net:caif_netlink_parms(): no params data found
[  151.832895][T11180] FAULT_INJECTION: forcing a failure.
[  151.832895][T11180] name failslab, interval 1, probability 0, space 0, times 0
[  151.845672][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.3.2752 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  151.856474][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  151.866589][T11180] Call Trace:
[  151.869879][T11180]  <TASK>
[  151.872812][T11180]  dump_stack_lvl+0xf2/0x150
[  151.877435][T11180]  dump_stack+0x15/0x1a
[  151.881671][T11180]  should_fail_ex+0x223/0x230
[  151.886372][T11180]  should_failslab+0x8f/0xb0
[  151.891014][T11180]  kmem_cache_alloc_noprof+0x52/0x320
[  151.896410][T11180]  ? copy_mm+0xe0/0x11c0
[  151.900657][T11180]  copy_mm+0xe0/0x11c0
[  151.904738][T11180]  ? kmem_cache_alloc_noprof+0x22c/0x320
[  151.910425][T11180]  ? copy_signal+0x54/0x350
[  151.915608][T11180]  ? hrtimer_init+0x104/0x1f0
[  151.920318][T11180]  ? __init_rwsem+0x5d/0x70
[  151.925016][T11180]  ? copy_signal+0x326/0x350
[  151.929726][T11180]  copy_process+0xd5b/0x1f90
[  151.934337][T11180]  kernel_clone+0x167/0x5e0
[  151.938917][T11180]  ? bpf_trace_run2+0x123/0x1d0
[  151.943794][T11180]  __x64_sys_clone+0xe8/0x120
[  151.948491][T11180]  x64_sys_call+0x2d7e/0x2dc0
[  151.953178][T11180]  do_syscall_64+0xc9/0x1c0
[  151.957733][T11180]  ? clear_bhb_loop+0x55/0xb0
[  151.962972][T11180]  ? clear_bhb_loop+0x55/0xb0
[  151.967685][T11180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.973617][T11180] RIP: 0033:0x7f6f42e75d29
[  151.978076][T11180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.997716][T11180] RSP: 002b:00007f6f414e6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  152.006148][T11180] RAX: ffffffffffffffda RBX: 00007f6f43065fa0 RCX: 00007f6f42e75d29
[  152.014151][T11180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000
[  152.022133][T11180] RBP: 00007f6f414e7090 R08: 0000000000000000 R09: 0000000000000000
[  152.030114][T11180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  152.038091][T11180] R13: 0000000000000000 R14: 00007f6f43065fa0 R15: 00007ffc08f04948
[  152.046082][T11180]  </TASK>
[  152.071690][T11201] bpf_get_probe_write_proto: 5 callbacks suppressed
[  152.071700][T11201] syz.3.2754[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.083841][T11201] syz.3.2754[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.095634][T11201] syz.3.2754[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.107266][   T40] hsr_slave_0: left promiscuous mode
[  152.125266][   T40] hsr_slave_1: left promiscuous mode
[  152.131958][   T40] veth1_macvtap: left promiscuous mode
[  152.137499][   T40] veth0_macvtap: left promiscuous mode
[  152.185498][   T96] smc: removing ib device syz1
[  152.205799][T11196] pimreg: entered allmulticast mode
[  152.213531][T11203] pimreg: left allmulticast mode
[  152.220917][    T8] lo speed is unknown, defaulting to 1000
[  152.238963][T11125] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.246374][T11125] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.256959][T11125] bridge_slave_0: entered allmulticast mode
[  152.263971][T11125] bridge_slave_0: entered promiscuous mode
[  152.272436][T11125] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.279613][T11125] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.287197][T11125] bridge_slave_1: entered allmulticast mode
[  152.305704][T11125] bridge_slave_1: entered promiscuous mode
[  152.335758][T11125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.358751][T11125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.389548][T11226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2758'.
[  152.419847][T11125] team0: Port device team_slave_0 added
[  152.439595][T11125] team0: Port device team_slave_1 added
[  152.472165][T11236] veth0_virt_wifi: entered promiscuous mode
[  152.489901][T11236] veth0_virt_wifi: left promiscuous mode
[  152.504459][T11125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.511643][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.538411][T11125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.554266][T11125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.561333][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.587606][T11125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.624919][T11125] hsr_slave_0: entered promiscuous mode
[  152.631478][T11125] hsr_slave_1: entered promiscuous mode
[  152.645390][T11242] syz.3.2761[11242] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.645529][T11242] syz.3.2761[11242] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.665753][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'.
[  152.687654][T11242] syz.3.2761[11242] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.782607][T11263] syz.0.2764[11263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.812785][T11263] syz.0.2764[11263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.838532][T11263] syz.0.2764[11263] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.895790][T11284] loop5: detected capacity change from 0 to 512
[  152.965372][T11284] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  152.985762][T11284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  152.995677][T11284] System zones: 1-12
[  152.999873][T11284] EXT4-fs (loop5): orphan cleanup on readonly fs
[  153.029808][T11284] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2770: bg 0: block 361: padding at end of block bitmap is not set
[  153.074554][T11284] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  153.091648][T11125] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  153.104944][T11125] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  153.113563][T11284] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2770: attempt to clear invalid blocks 33619980 len 1
[  153.133191][T11125] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  153.152790][T11125] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  153.159886][T11284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2770: invalid indirect mapped block 1811939328 (level 0)
[  153.193215][T11125] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.200210][T11309] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  153.200301][T11125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.218093][T11125] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.225182][T11125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.234107][T11284] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2770: invalid indirect mapped block 2 (level 2)
[  153.252864][T11284] EXT4-fs (loop5): 1 truncate cleaned up
[  153.279249][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.287056][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.402249][T11309] lo speed is unknown, defaulting to 1000
[  153.446780][T11309] lo speed is unknown, defaulting to 1000
[  153.455924][T11331] syz.0.2781[11331] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  153.460351][T11309] lo speed is unknown, defaulting to 1000
[  153.483537][T11125] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.496927][T11125] 8021q: adding VLAN 0 to HW filter on device team0
[  153.508807][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.509749][T11309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  153.516096][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.546307][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.553398][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.579802][T11309] lo speed is unknown, defaulting to 1000
[  153.665232][T11309] lo speed is unknown, defaulting to 1000
[  153.683865][   T29] kauditd_printk_skb: 366 callbacks suppressed
[  153.683877][   T29] audit: type=1326 audit(1734648169.690:11253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.703376][T11125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.713911][   T29] audit: type=1326 audit(1734648169.690:11254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.744425][   T29] audit: type=1326 audit(1734648169.690:11255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.768488][   T29] audit: type=1326 audit(1734648169.690:11256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.771019][T11309] lo speed is unknown, defaulting to 1000
[  153.792292][   T29] audit: type=1326 audit(1734648169.690:11257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.821876][   T29] audit: type=1326 audit(1734648169.690:11258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.826723][T11352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.846030][   T29] audit: type=1326 audit(1734648169.690:11259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.855356][T11352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.878099][   T29] audit: type=1326 audit(1734648169.690:11260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.909518][   T29] audit: type=1326 audit(1734648169.690:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.933132][   T29] audit: type=1326 audit(1734648169.690:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  153.954014][T11125] veth0_vlan: entered promiscuous mode
[  153.969761][T11125] veth1_vlan: entered promiscuous mode
[  153.995897][T11343] lo speed is unknown, defaulting to 1000
[  154.002142][T11309] lo speed is unknown, defaulting to 1000
[  154.014757][T11125] veth0_macvtap: entered promiscuous mode
[  154.029746][T11125] veth1_macvtap: entered promiscuous mode
[  154.060806][T11309] lo speed is unknown, defaulting to 1000
[  154.077772][T11125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.128765][T11125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.145840][T11309] lo speed is unknown, defaulting to 1000
[  154.216014][T11125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.224799][T11125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.233596][T11125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.242356][T11125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.266818][T11379] loop4: detected capacity change from 0 to 128
[  154.282710][T11379] vfat: Unknown parameter 'dont_measure'
[  154.316689][T11379] loop4: detected capacity change from 0 to 256
[  154.355605][T11390] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff00000000000000000000
[  154.370207][T11392] loop5: detected capacity change from 0 to 512
[  154.384630][T11392] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  154.401047][T11379] FAT-fs (loop4): Directory bread(block 64) failed
[  154.413316][T11379] FAT-fs (loop4): Directory bread(block 65) failed
[  154.420680][T11379] FAT-fs (loop4): Directory bread(block 66) failed
[  154.422129][T11392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  154.427364][T11379] FAT-fs (loop4): Directory bread(block 67) failed
[  154.439245][T11399] loop1: detected capacity change from 0 to 512
[  154.442512][T11379] FAT-fs (loop4): Directory bread(block 68) failed
[  154.454640][T11379] FAT-fs (loop4): Directory bread(block 69) failed
[  154.461346][T11379] FAT-fs (loop4): Directory bread(block 70) failed
[  154.461625][T11392] System zones: 1-12
[  154.468130][T11379] FAT-fs (loop4): Directory bread(block 71) failed
[  154.477458][T11399] EXT4-fs (loop1): invalid journal inode
[  154.483961][T11379] FAT-fs (loop4): Directory bread(block 72) failed
[  154.483987][T11379] FAT-fs (loop4): Directory bread(block 73) failed
[  154.500575][T11392] EXT4-fs (loop5): orphan cleanup on readonly fs
[  154.507275][T11399] EXT4-fs (loop1): can't get journal size
[  154.515088][T11392] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2788: bg 0: block 361: padding at end of block bitmap is not set
[  154.515782][T11399] EXT4-fs (loop1): 1 truncate cleaned up
[  154.529904][T11392] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  154.549656][T11392] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.2788: attempt to clear invalid blocks 33619980 len 1
[  154.564647][T11396] loop3: detected capacity change from 0 to 2048
[  154.577538][T11392] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2788: invalid indirect mapped block 1811939328 (level 0)
[  154.597923][T11392] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2788: invalid indirect mapped block 2 (level 2)
[  154.611701][T11392] EXT4-fs (loop5): 1 truncate cleaned up
[  154.637032][T11396] Alternate GPT is invalid, using primary GPT.
[  154.643404][T11396]  loop3: p1 p2 p3
[  154.740985][T11404] lo speed is unknown, defaulting to 1000
[  154.831326][   T28] kworker/u8:1: attempt to access beyond end of device
[  154.831326][   T28] loop4: rw=1, sector=1224, nr_sectors = 320 limit=256
[  154.845716][   T28] kworker/u8:1: attempt to access beyond end of device
[  154.845716][   T28] loop4: rw=1, sector=1576, nr_sectors = 256 limit=256
[  154.904646][T11411] lo speed is unknown, defaulting to 1000
[  154.916949][   T28] kworker/u8:1: attempt to access beyond end of device
[  154.916949][   T28] loop4: rw=1, sector=1864, nr_sectors = 31496 limit=256
[  154.948087][   T28] kworker/u8:1: attempt to access beyond end of device
[  154.948087][   T28] loop4: rw=1, sector=33360, nr_sectors = 440 limit=256
[  155.081500][T11421] loop4: detected capacity change from 0 to 512
[  155.083231][T11417] veth0_virt_wifi: entered promiscuous mode
[  155.095065][T11421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  155.108447][T11417] veth0_virt_wifi: left promiscuous mode
[  155.119060][T11423] pimreg: entered allmulticast mode
[  155.134253][T11423] pimreg: left allmulticast mode
[  155.139843][T11421] EXT4-fs (loop4): 1 truncate cleaned up
[  155.271526][T11437] loop5: detected capacity change from 0 to 512
[  155.297677][T11437] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2804: couldn't read orphan inode 26 (err -116)
[  155.332016][T11437] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.404124][T11447] __nla_validate_parse: 4 callbacks suppressed
[  155.404137][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2808'.
[  155.444360][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.452005][T11447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.455082][T11452] loop5: detected capacity change from 0 to 128
[  155.467808][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.475281][T11447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.599517][T11457] veth0_virt_wifi: entered promiscuous mode
[  155.614194][T11457] veth0_virt_wifi: left promiscuous mode
[  155.622176][T11449] lo speed is unknown, defaulting to 1000
[  155.624729][T11455] pimreg: entered allmulticast mode
[  155.652007][T11455] pimreg: left allmulticast mode
[  155.861355][T11475] loop5: detected capacity change from 0 to 2048
[  155.873995][T11467] lo speed is unknown, defaulting to 1000
[  155.973301][T11481] lo speed is unknown, defaulting to 1000
[  155.987830][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'.
[  156.016360][T11487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.032001][T11487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.041213][T11491] loop3: detected capacity change from 0 to 1024
[  156.067398][T11491] EXT4-fs mount: 62 callbacks suppressed
[  156.067410][T11491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.087778][T11491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.236825][T11504] loop0: detected capacity change from 0 to 512
[  156.278233][T11504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.291217][T11504] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.306745][T11513] loop3: detected capacity change from 0 to 512
[  156.316056][T11504] Cannot find add_set index 65534 as target
[  156.325496][T11513] EXT4-fs (loop3): invalid journal inode
[  156.331158][T11513] EXT4-fs (loop3): can't get journal size
[  156.337389][T11513] EXT4-fs (loop3): 1 truncate cleaned up
[  156.343298][T11513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.431775][T11518] syz.5.2837 (11518): attempted to duplicate a private mapping with mremap.  This is not supported.
[  157.073377][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.104070][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.170840][ T3303] bond0: (slave syz_tun): Releasing backup interface
[  157.197205][T11536] loop1: detected capacity change from 0 to 512
[  157.204781][T11536] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  157.228492][   T96] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.244453][T11536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  157.263295][T11536] System zones: 1-12
[  157.273705][T11536] EXT4-fs (loop1): orphan cleanup on readonly fs
[  157.294490][T11536] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2845: bg 0: block 361: padding at end of block bitmap is not set
[  157.316827][T11546] FAULT_INJECTION: forcing a failure.
[  157.316827][T11546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.329997][T11546] CPU: 1 UID: 0 PID: 11546 Comm: syz.5.2847 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  157.335678][T11536] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  157.340754][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  157.340768][T11546] Call Trace:
[  157.340775][T11546]  <TASK>
[  157.340782][T11546]  dump_stack_lvl+0xf2/0x150
[  157.340848][T11546]  dump_stack+0x15/0x1a
[  157.340875][T11546]  should_fail_ex+0x223/0x230
[  157.340899][T11546]  should_fail+0xb/0x10
[  157.379369][T11536] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2845: attempt to clear invalid blocks 33619980 len 1
[  157.383419][T11546]  should_fail_usercopy+0x1a/0x20
[  157.383478][T11546]  _copy_from_user+0x1e/0xb0
[  157.383537][T11546]  lo_ioctl+0x31d/0x11c0
[  157.383557][T11546]  ? __rcu_read_unlock+0x4e/0x70
[  157.410894][T11536] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2845: invalid indirect mapped block 1811939328 (level 0)
[  157.415624][T11546]  ? avc_has_extended_perms+0x60b/0x820
[  157.415694][T11546]  ? blkdev_common_ioctl+0xabc/0x1940
[  157.415724][T11546]  ? do_vfs_ioctl+0x96e/0x1530
[  157.415749][T11546]  ? selinux_file_ioctl+0x2f7/0x380
[  157.415773][T11546]  ? __pfx_lo_ioctl+0x10/0x10
[  157.450526][T11536] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2845: invalid indirect mapped block 2 (level 2)
[  157.455183][T11546]  blkdev_ioctl+0x359/0x450
[  157.455216][T11546]  ? __pfx_blkdev_ioctl+0x10/0x10
[  157.455240][T11546]  __se_sys_ioctl+0xc9/0x140
[  157.482599][T11546]  __x64_sys_ioctl+0x43/0x50
[  157.487213][T11546]  x64_sys_call+0x1690/0x2dc0
[  157.491895][T11546]  do_syscall_64+0xc9/0x1c0
[  157.496408][T11546]  ? clear_bhb_loop+0x55/0xb0
[  157.497060][T11536] EXT4-fs (loop1): 1 truncate cleaned up
[  157.501128][T11546]  ? clear_bhb_loop+0x55/0xb0
[  157.501152][T11546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.517373][T11546] RIP: 0033:0x7f6ac2c85d29
[  157.521790][T11546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.541530][T11546] RSP: 002b:00007f6ac12f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  157.549940][T11546] RAX: ffffffffffffffda RBX: 00007f6ac2e75fa0 RCX: 00007f6ac2c85d29
[  157.557952][T11546] RDX: 00000000200002c0 RSI: 0000000000004c0a RDI: 0000000000000003
[  157.566020][T11546] RBP: 00007f6ac12f7090 R08: 0000000000000000 R09: 0000000000000000
[  157.574008][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.581970][T11546] R13: 0000000000000000 R14: 00007f6ac2e75fa0 R15: 00007ffffda818d8
[  157.589944][T11546]  </TASK>
[  157.597017][T11536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  157.633483][   T96] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.660036][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2848'.
[  157.688019][   T96] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.718826][T11560] loop0: detected capacity change from 0 to 512
[  157.729886][   T96] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.762361][T11560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.783527][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  157.791552][T11533] lo speed is unknown, defaulting to 1000
[  157.802827][T11560] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.818000][T11560] Cannot find add_set index 65534 as target
[  157.831454][T11570] FAULT_INJECTION: forcing a failure.
[  157.831454][T11570] name failslab, interval 1, probability 0, space 0, times 0
[  157.844188][T11570] CPU: 1 UID: 0 PID: 11570 Comm: syz.1.2853 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  157.854983][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  157.862123][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'.
[  157.865071][T11570] Call Trace:
[  157.865080][T11570]  <TASK>
[  157.865088][T11570]  dump_stack_lvl+0xf2/0x150
[  157.884695][T11570]  dump_stack+0x15/0x1a
[  157.888867][T11570]  should_fail_ex+0x223/0x230
[  157.893538][T11570]  should_failslab+0x8f/0xb0
[  157.898154][T11570]  kmem_cache_alloc_node_noprof+0x59/0x320
[  157.903997][T11570]  ? __alloc_skb+0x10b/0x310
[  157.908706][T11570]  __alloc_skb+0x10b/0x310
[  157.913146][T11570]  create_monitor_ctrl_close+0xa1/0x370
[  157.918843][T11570]  ? hci_sock_release+0x94/0x2d0
[  157.923832][T11570]  hci_sock_release+0x9c/0x2d0
[  157.928671][T11570]  sock_close+0x68/0x150
[  157.932935][T11570]  ? __pfx_sock_close+0x10/0x10
[  157.937878][T11570]  __fput+0x17a/0x6d0
[  157.941962][T11570]  ____fput+0x1c/0x30
[  157.945965][T11570]  task_work_run+0x13a/0x1a0
[  157.950567][T11570]  syscall_exit_to_user_mode+0xa8/0x120
[  157.956204][T11570]  do_syscall_64+0xd6/0x1c0
[  157.960718][T11570]  ? clear_bhb_loop+0x55/0xb0
[  157.964394][T11533] chnl_net:caif_netlink_parms(): no params data found
[  157.965395][T11570]  ? clear_bhb_loop+0x55/0xb0
[  157.965417][T11570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.982781][T11570] RIP: 0033:0x7f4c92dd5d29
[  157.987209][T11570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.006914][T11570] RSP: 002b:00007f4c91441038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  158.015415][T11570] RAX: 0000000000000000 RBX: 00007f4c92fc5fa0 RCX: 00007f4c92dd5d29
[  158.023479][T11570] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  158.031469][T11570] RBP: 00007f4c91441090 R08: 0000000000000000 R09: 0000000000000000
[  158.039493][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.046075][T11585] loop4: detected capacity change from 0 to 512
[  158.047476][T11570] R13: 0000000000000000 R14: 00007f4c92fc5fa0 R15: 00007ffc541a6fd8
[  158.047499][T11570]  </TASK>
[  158.101798][T11585] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2855: couldn't read orphan inode 26 (err -116)
[  158.117621][T11585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.140614][T11585] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.182545][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.210280][   T96] bond0 (unregistering): Released all slaves
[  158.223908][   T96] bond1 (unregistering): Released all slaves
[  158.240690][T11587] pimreg: entered allmulticast mode
[  158.246627][T11597] pimreg: left allmulticast mode
[  158.260751][T11610] loop1: detected capacity change from 0 to 512
[  158.276720][   T96] tipc: Disabling bearer <udp:syz2>
[  158.281978][   T96] tipc: Disabling bearer <eth:team0>
[  158.288379][   T96] tipc: Left network mode
[  158.305788][T11610] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2862: couldn't read orphan inode 26 (err -116)
[  158.328156][T11610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.343749][T11610] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.357728][T11619] loop5: detected capacity change from 0 to 512
[  158.366310][T11605] lo speed is unknown, defaulting to 1000
[  158.372216][T11533] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.379403][T11533] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.391519][T11619] EXT4-fs (loop5): invalid journal inode
[  158.397685][T11619] EXT4-fs (loop5): can't get journal size
[  158.406489][T11533] bridge_slave_0: entered allmulticast mode
[  158.420440][T11533] bridge_slave_0: entered promiscuous mode
[  158.426088][T11619] EXT4-fs (loop5): 1 truncate cleaned up
[  158.439986][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.453764][T11619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.469261][T11533] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.476607][T11533] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.487355][T11533] bridge_slave_1: entered allmulticast mode
[  158.494009][T11533] bridge_slave_1: entered promiscuous mode
[  158.511661][   T96] veth1_macvtap: left promiscuous mode
[  158.517214][   T96] veth0_macvtap: left promiscuous mode
[  158.574104][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.634877][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.649797][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.704437][T11533] team0: Port device team_slave_0 added
[  158.711105][T11533] team0: Port device team_slave_1 added
[  158.740295][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.747332][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.773382][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.785029][T11658] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2868'.
[  158.810536][   T29] kauditd_printk_skb: 472 callbacks suppressed
[  158.810550][   T29] audit: type=1400 audit(1734648174.830:11735): avc:  denied  { setopt } for  pid=11643 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  158.818821][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.843471][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.869397][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.912028][T11533] hsr_slave_0: entered promiscuous mode
[  158.927562][T11533] hsr_slave_1: entered promiscuous mode
[  158.936194][T11533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.954706][T11533] Cannot create hsr debugfs directory
[  158.976889][   T96] IPVS: stop unused estimator thread 0...
[  159.005656][T11644] infiniband syz1: set active
[  159.010480][T11644] infiniband syz1: added team_slave_0
[  159.075000][T11644] RDS/IB: syz1: added
[  159.080713][T11644] smc: adding ib device syz1 with port count 1
[  159.098255][T11644] smc:    ib device syz1 port 1 has pnetid 
[  159.256417][T11703] loop4: detected capacity change from 0 to 512
[  159.266894][ T4756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.332187][T11703] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2880: couldn't read orphan inode 26 (err -116)
[  159.351334][T11708] loop5: detected capacity change from 0 to 512
[  159.359394][T11703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.372584][T11703] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.384325][T11708] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2881: couldn't read orphan inode 26 (err -116)
[  159.398257][T11708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.421451][T11708] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.432424][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.464494][T11533] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  159.484260][ T4756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.500966][T11533] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  159.516794][T11533] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  159.545033][T11533] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  159.608434][T11734] loop0: detected capacity change from 0 to 512
[  159.618571][T11732] loop4: detected capacity change from 0 to 512
[  159.628520][T11734] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.2887: casefold flag without casefold feature
[  159.643608][T11734] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2887: couldn't read orphan inode 15 (err -117)
[  159.655971][   T29] audit: type=1400 audit(1734648175.660:11736): avc:  denied  { read } for  pid=11738 comm="syz.5.2885" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  159.662428][T11739] hub 6-0:1.0: USB hub found
[  159.679312][   T29] audit: type=1400 audit(1734648175.660:11737): avc:  denied  { open } for  pid=11738 comm="syz.5.2885" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  159.679350][   T29] audit: type=1400 audit(1734648175.680:11738): avc:  denied  { write } for  pid=11738 comm="syz.5.2885" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  159.684979][T11533] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.736010][T11734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.742591][T11533] 8021q: adding VLAN 0 to HW filter on device team0
[  159.758139][T11739] hub 6-0:1.0: 8 ports detected
[  159.775989][T11732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  159.785341][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.792426][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.795887][   T29] audit: type=1326 audit(1734648175.810:11739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  159.804222][T11732] System zones: 0-2, 18-18, 34-34
[  159.824487][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.830334][T11732] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2886: bg 0: block 248: padding at end of block bitmap is not set
[  159.835394][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.896049][   T29] audit: type=1326 audit(1734648175.870:11740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  159.906625][T11732] Quota error (device loop4): write_blk: dquota write failed
[  159.919867][   T29] audit: type=1326 audit(1734648175.870:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  159.927092][T11732] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  159.945068][T11732] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2886: Failed to acquire dquot type 1
[  159.950760][   T29] audit: type=1326 audit(1734648175.890:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11733 comm="syz.0.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8cc85d29 code=0x7ffc0000
[  160.009275][T11754] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  160.010351][T11732] EXT4-fs (loop4): 1 truncate cleaned up
[  160.024800][T11754] netlink: 108 bytes leftover after parsing attributes in process `+}[@'.
[  160.046873][T11732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.061376][T11732] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.068529][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.098408][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.118883][T11732] veth0_virt_wifi: entered promiscuous mode
[  160.167724][T11732] veth0_virt_wifi: left promiscuous mode
[  160.307997][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.309286][T11533] veth0_vlan: entered promiscuous mode
[  160.325996][ T1768] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1
[  160.341697][T11533] veth1_vlan: entered promiscuous mode
[  160.369409][T11533] veth0_macvtap: entered promiscuous mode
[  160.384686][T11804] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  160.387451][T11533] veth1_macvtap: entered promiscuous mode
[  160.418320][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.440993][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.467958][T11533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.476916][T11533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.485907][T11533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.494772][T11533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.510692][T11816] pimreg: entered allmulticast mode
[  160.541126][T11816] pimreg: left allmulticast mode
[  160.618137][T11826] loop3: detected capacity change from 0 to 2048
[  160.667036][T11826] Alternate GPT is invalid, using primary GPT.
[  160.673474][T11826]  loop3: p1 p2 p3
[  160.724775][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'.
[  160.751303][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'.
[  160.820042][T11857] loop1: detected capacity change from 0 to 512
[  160.857856][T11857] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2904: couldn't read orphan inode 26 (err -116)
[  160.901030][T11857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.935534][T11857] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.995323][T11885] 9pnet_fd: p9_fd_create_unix (11885): problem connecting socket: ./file0: -111
[  161.031557][T11888] loop4: detected capacity change from 0 to 512
[  161.045599][T11888] ext4: Unknown parameter 'obj_role'
[  161.055645][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.071069][T11878] lo speed is unknown, defaulting to 1000
[  161.165859][T11888] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  161.173318][T11888] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  161.191246][T11874] lo speed is unknown, defaulting to 1000
[  161.233887][T11907] loop4: detected capacity change from 0 to 512
[  161.242226][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'.
[  161.256086][T11907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.296406][T11910] loop3: detected capacity change from 0 to 512
[  161.316509][T11910] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  161.324603][T11910] System zones: 0-2, 18-18, 34-34
[  161.330772][T11910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2917: bg 0: block 248: padding at end of block bitmap is not set
[  161.346668][T11907] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  161.349915][T11910] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2917: Failed to acquire dquot type 1
[  161.354055][T11907] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[  161.387901][T11910] EXT4-fs (loop3): 1 truncate cleaned up
[  161.394092][T11910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.406999][T11910] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.432095][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.450620][T11910] veth0_virt_wifi: entered promiscuous mode
[  161.464049][T11910] veth0_virt_wifi: left promiscuous mode
[  161.512969][T11927] loop1: detected capacity change from 0 to 512
[  161.523055][T11927] EXT4-fs (loop1): invalid journal inode
[  161.529648][T11927] EXT4-fs (loop1): can't get journal size
[  161.556164][T11927] EXT4-fs (loop1): 1 truncate cleaned up
[  161.578320][T11927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.621478][T11940] netlink: 'syz.0.2927': attribute type 6 has an invalid length.
[  161.626087][T11533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.639851][T11940] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  161.642384][ T1768] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1
[  161.689403][T11944] loop3: detected capacity change from 0 to 2048
[  161.747077][T11944] Alternate GPT is invalid, using primary GPT.
[  161.753388][T11944]  loop3: p1 p2 p3
[  161.901270][T11963] bpf_get_probe_write_proto: 2 callbacks suppressed
[  161.901286][T11963] syz.4.2936[11963] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.908420][T11963] syz.4.2936[11963] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  161.920306][T11963] syz.4.2936[11963] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.012377][T11974] FAULT_INJECTION: forcing a failure.
[  162.012377][T11974] name failslab, interval 1, probability 0, space 0, times 0
[  162.036617][T11974] CPU: 0 UID: 0 PID: 11974 Comm: syz.4.2938 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  162.047541][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  162.057633][T11974] Call Trace:
[  162.060972][T11974]  <TASK>
[  162.063968][T11974]  dump_stack_lvl+0xf2/0x150
[  162.068587][T11974]  dump_stack+0x15/0x1a
[  162.072881][T11974]  should_fail_ex+0x223/0x230
[  162.077640][T11974]  should_failslab+0x8f/0xb0
[  162.082402][T11974]  kmem_cache_alloc_noprof+0x52/0x320
[  162.087828][T11974]  ? getname_flags+0x81/0x3b0
[  162.092625][T11974]  getname_flags+0x81/0x3b0
[  162.097135][T11974]  user_path_at+0x26/0x120
[  162.101880][T11974]  do_faccessat+0x396/0x640
[  162.106410][T11974]  ? ksys_write+0x176/0x1b0
[  162.110939][T11974]  __x64_sys_faccessat2+0x51/0x60
[  162.116044][T11974]  x64_sys_call+0x15bc/0x2dc0
[  162.120735][T11974]  do_syscall_64+0xc9/0x1c0
[  162.125259][T11974]  ? clear_bhb_loop+0x55/0xb0
[  162.130033][T11974]  ? clear_bhb_loop+0x55/0xb0
[  162.134816][T11974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.140751][T11974] RIP: 0033:0x7f9bb2265d29
[  162.145177][T11974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.164822][T11974] RSP: 002b:00007f9bb08d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[  162.173491][T11974] RAX: ffffffffffffffda RBX: 00007f9bb2455fa0 RCX: 00007f9bb2265d29
[  162.181473][T11974] RDX: 0000000000000002 RSI: 0000000020000000 RDI: ffffffffffffffff
[  162.189516][T11974] RBP: 00007f9bb08d7090 R08: 0000000000000000 R09: 0000000000000000
[  162.197535][T11974] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  162.205516][T11974] R13: 0000000000000000 R14: 00007f9bb2455fa0 R15: 00007ffef4ed3178
[  162.213621][T11974]  </TASK>
[  162.230374][T11976] loop3: detected capacity change from 0 to 512
[  162.238141][T11977] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  162.276579][T11976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.289150][T11976] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.315348][T11981] loop4: detected capacity change from 0 to 2048
[  162.325524][T11981] EXT4-fs: Ignoring removed i_version option
[  162.339172][T11976] IPVS: stopping master sync thread 11977 ...
[  162.359685][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.372081][T11981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.396764][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2940'.
[  162.535927][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.611715][T11996] 9pnet_fd: p9_fd_create_unix (11996): problem connecting socket: ./file0: -111
[  162.695784][T12001] loop1: detected capacity change from 0 to 1024
[  162.707256][T12003] syz.0.2947[12003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.707391][T12003] syz.0.2947[12003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.718996][T12003] syz.0.2947[12003] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.726725][T12001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.761016][T12001] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.856102][T12018] loop0: detected capacity change from 0 to 512
[  162.866269][T12016] lo speed is unknown, defaulting to 1000
[  162.874653][T12018] EXT4-fs (loop0): invalid journal inode
[  162.881782][T12020] loop1: detected capacity change from 0 to 128
[  162.889119][T12018] EXT4-fs (loop0): can't get journal size
[  162.897270][T12020] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.910282][T12018] EXT4-fs (loop0): 1 truncate cleaned up
[  162.912116][T12020] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.921395][T12018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.992310][T12028] loop5: detected capacity change from 0 to 512
[  163.000488][T12020] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none.
[  163.011907][T12028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  163.020102][T12028] System zones: 0-2, 18-18, 34-34
[  163.026048][T12028] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2953: bg 0: block 248: padding at end of block bitmap is not set
[  163.040883][T12028] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2953: Failed to acquire dquot type 1
[  163.053326][T12028] EXT4-fs (loop5): 1 truncate cleaned up
[  163.059345][T12028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.072090][T12028] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.111875][T12028] veth0_virt_wifi: entered promiscuous mode
[  163.126600][T11533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.149485][T12028] veth0_virt_wifi: left promiscuous mode
[  163.407777][ T4756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.417164][   T28] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 1
[  163.429778][T11125] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.484992][T12046] loop1: detected capacity change from 0 to 2048
[  163.513559][T12046] Alternate GPT is invalid, using primary GPT.
[  163.519988][T12046]  loop1: p1 p2 p3
[  163.562118][ T9916] bond0: (slave syz_tun): Releasing backup interface
[  163.658947][T12052] lo speed is unknown, defaulting to 1000
[  163.689392][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.724072][T12065] pimreg: entered allmulticast mode
[  163.736397][T12067] loop1: detected capacity change from 0 to 512
[  163.744517][T12067] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  163.755858][T12065] pimreg: left allmulticast mode
[  163.767038][T12067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  163.775251][T12067] System zones: 1-12
[  163.779255][T12067] EXT4-fs (loop1): orphan cleanup on readonly fs
[  163.786900][T12067] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2962: bg 0: block 361: padding at end of block bitmap is not set
[  163.788306][T12052] chnl_net:caif_netlink_parms(): no params data found
[  163.815994][T12067] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  163.839345][T12067] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.2962: attempt to clear invalid blocks 33619980 len 1
[  163.868731][T12067] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2962: invalid indirect mapped block 1811939328 (level 0)
[  163.884515][T12067] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2962: invalid indirect mapped block 2 (level 2)
[  163.885726][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'.
[  163.906518][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2964'.
[  163.907496][T12067] EXT4-fs (loop1): 1 truncate cleaned up
[  163.922352][T12067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  163.936997][T12052] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.944167][T12052] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.952984][T12052] bridge_slave_0: entered allmulticast mode
[  163.960189][T12052] bridge_slave_0: entered promiscuous mode
[  163.967456][T12052] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.974575][T12052] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.982158][T12052] bridge_slave_1: entered allmulticast mode
[  163.989545][T12052] bridge_slave_1: entered promiscuous mode
[  164.016684][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  164.018126][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.047545][   T29] kauditd_printk_skb: 279 callbacks suppressed
[  164.047560][   T29] audit: type=1326 audit(1734648180.070:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.083877][T12091] loop3: detected capacity change from 0 to 512
[  164.091848][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.106064][T12091] EXT4-fs (loop3): invalid journal inode
[  164.115421][T12091] EXT4-fs (loop3): can't get journal size
[  164.135015][T12091] EXT4-fs (loop3): 1 truncate cleaned up
[  164.146727][   T29] audit: type=1326 audit(1734648180.070:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.170439][   T29] audit: type=1326 audit(1734648180.070:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.184212][T12091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.194003][   T29] audit: type=1326 audit(1734648180.070:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.229768][   T29] audit: type=1326 audit(1734648180.070:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.253369][   T29] audit: type=1326 audit(1734648180.100:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.277064][   T29] audit: type=1326 audit(1734648180.100:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.304692][   T29] audit: type=1326 audit(1734648180.320:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.307831][T12052] team0: Port device team_slave_0 added
[  164.328207][   T29] audit: type=1326 audit(1734648180.320:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.328251][   T29] audit: type=1326 audit(1734648180.320:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.5.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac2c85d29 code=0x7ffc0000
[  164.344285][T12052] team0: Port device team_slave_1 added
[  164.401795][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.408371][T12099] loop0: detected capacity change from 0 to 2048
[  164.408921][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.441200][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.452283][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.459256][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.485287][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.506562][T12099] Alternate GPT is invalid, using primary GPT.
[  164.513086][T12099]  loop0: p1 p2 p3
[  164.522452][T12052] hsr_slave_0: entered promiscuous mode
[  164.529069][T12052] hsr_slave_1: entered promiscuous mode
[  164.537881][T12052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.545476][T12052] Cannot create hsr debugfs directory
[  164.594139][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'.
[  164.608866][T12112] loop1: detected capacity change from 0 to 512
[  164.618017][T12110] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  164.651815][T12108] lo speed is unknown, defaulting to 1000
[  164.659625][T12052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.671151][T12112] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2974: couldn't read orphan inode 26 (err -116)
[  164.684130][T12112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.697034][T12112] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.715689][T12110] siw: device registration error -23
[  164.724562][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.769681][T12052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.791173][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2977'.
[  164.829019][T12052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.905772][T12052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.913172][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2981'.
[  164.956189][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'.
[  164.977520][T12138] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  164.991424][T12052] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.006900][T12052] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.016067][T12135] lo speed is unknown, defaulting to 1000
[  165.016122][T12052] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.031945][T12052] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  165.067933][T11533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.092338][T12138] siw: device registration error -23
[  165.093664][T12052] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.110451][T12052] 8021q: adding VLAN 0 to HW filter on device team0
[  165.131362][T12148] loop3: detected capacity change from 0 to 512
[  165.132707][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.144861][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.164876][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.168932][T12148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.172092][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.191896][T12148] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.207154][T12052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.240614][T12148] Cannot find add_set index 65534 as target
[  165.285240][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.304709][T12161] syz1: rxe_newlink: already configured on team_slave_0
[  165.473992][T12178] loop5: detected capacity change from 0 to 2048
[  165.486254][T12052] veth0_vlan: entered promiscuous mode
[  165.494405][T12052] veth1_vlan: entered promiscuous mode
[  165.512110][T12052] veth0_macvtap: entered promiscuous mode
[  165.520102][T12178] Alternate GPT is invalid, using primary GPT.
[  165.526480][T12178]  loop5: p1 p2 p3
[  165.537627][T12052] veth1_macvtap: entered promiscuous mode
[  165.551359][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.561920][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.572890][T12052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.583870][T12052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.594502][T12052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.608662][T12052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.620195][T12052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.629207][T12052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.637998][T12052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.646839][T12052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.733234][T12189] veth0_virt_wifi: entered promiscuous mode
[  165.746391][T12189] veth0_virt_wifi: left promiscuous mode
[  165.758835][T12192] loop4: detected capacity change from 0 to 128
[  165.766425][T12192] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  165.873651][T12199] __nla_validate_parse: 1 callbacks suppressed
[  165.873666][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2995'.
[  165.893424][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'.
[  165.984287][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3002'.
[  166.004975][T11533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.050700][T12224] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  166.059448][T12224] netlink: 108 bytes leftover after parsing attributes in process `+}[@'.
[  166.102185][T12225] lo speed is unknown, defaulting to 1000
[  166.148117][T12227] lo speed is unknown, defaulting to 1000
[  166.261938][T12233] veth0_virt_wifi: entered promiscuous mode
[  166.274785][T12233] veth0_virt_wifi: left promiscuous mode
[  166.351808][T12237] loop1: detected capacity change from 0 to 1024
[  166.360587][T12237] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.380055][T12239] loop0: detected capacity change from 0 to 512
[  166.387552][T12237] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3009: Invalid block bitmap block 0 in block_group 0
[  166.402651][T12237] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3009: Failed to acquire dquot type 0
[  166.403391][T12239] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.3010: corrupted in-inode xattr: invalid ea_ino
[  166.428072][T12237] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.3009: Freeing blocks not in datazone - block = 0, count = 4096
[  166.437948][T12239] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3010: couldn't read orphan inode 15 (err -117)
[  166.449289][T12243] loop3: detected capacity change from 0 to 1024
[  166.461074][T12237] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3009: Invalid inode bitmap blk 0 in block_group 0
[  166.468438][T12243] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.475009][T12237] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem
[  166.484530][T12239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.493977][T12237] EXT4-fs (loop1): 1 orphan inode deleted
[  166.505191][   T96] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 0
[  166.511282][T12237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.541654][T12237] EXT4-fs error (device loop1): ext4_lookup:1813: inode #15: comm syz.1.3009: iget: bad extra_isize 65535 (inode size 256)
[  166.547526][T12243] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3011: Invalid block bitmap block 0 in block_group 0
[  166.563515][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.570542][T12243] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3011: Failed to acquire dquot type 0
[  166.589195][T12243] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.3011: Freeing blocks not in datazone - block = 0, count = 4096
[  166.617947][T12243] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3011: Invalid inode bitmap blk 0 in block_group 0
[  166.632033][T12243] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  166.651633][   T96] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 0
[  166.651740][T12243] EXT4-fs (loop3): 1 orphan inode deleted
[  166.672117][T12243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.693437][T12243] EXT4-fs error (device loop3): ext4_lookup:1813: inode #15: comm syz.3.3011: iget: bad extra_isize 65535 (inode size 256)
[  166.738326][T11533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.738835][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'.
[  166.764204][T12249] lo speed is unknown, defaulting to 1000
[  166.774986][T12253] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  166.813271][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'.
[  166.827553][T12255] loop0: detected capacity change from 0 to 512
[  166.837008][T12259] FAULT_INJECTION: forcing a failure.
[  166.837008][T12259] name failslab, interval 1, probability 0, space 0, times 0
[  166.842915][T12253] siw: device registration error -23
[  166.849706][T12259] CPU: 1 UID: 0 PID: 12259 Comm: syz.5.3018 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  166.849732][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  166.849742][T12259] Call Trace:
[  166.849748][T12259]  <TASK>
[  166.849756][T12259]  dump_stack_lvl+0xf2/0x150
[  166.886831][T12259]  dump_stack+0x15/0x1a
[  166.890993][T12259]  should_fail_ex+0x223/0x230
[  166.895667][T12259]  should_failslab+0x8f/0xb0
[  166.900326][T12259]  kmem_cache_alloc_lru_noprof+0x57/0x320
[  166.906163][T12259]  ? __d_alloc+0x3d/0x340
[  166.910486][T12259]  __d_alloc+0x3d/0x340
[  166.914637][T12259]  d_alloc_parallel+0x54/0xc60
[  166.919485][T12259]  ? selinux_inode_permission+0x341/0x410
[  166.925199][T12259]  ? lockref_get_not_dead+0x118/0x1b0
[  166.930602][T12259]  ? down_read+0x171/0x4b0
[  166.935039][T12259]  __lookup_slow+0x8d/0x250
[  166.939557][T12259]  lookup_slow+0x3c/0x60
[  166.943795][T12259]  walk_component+0x1f5/0x230
[  166.948501][T12259]  ? path_lookupat+0xfd/0x2b0
[  166.953262][T12259]  path_lookupat+0x10a/0x2b0
[  166.957845][T12259]  filename_lookup+0x150/0x340
[  166.962698][T12259]  kern_path+0x39/0x120
[  166.966879][T12259]  bpf_uprobe_multi_link_attach+0x1ed/0x850
[  166.972826][T12259]  link_create+0x627/0x660
[  166.977244][T12259]  __sys_bpf+0x430/0x7a0
[  166.981485][T12259]  __x64_sys_bpf+0x43/0x50
[  166.985924][T12259]  x64_sys_call+0x2914/0x2dc0
[  166.990607][T12259]  do_syscall_64+0xc9/0x1c0
[  166.995199][T12259]  ? clear_bhb_loop+0x55/0xb0
[  166.999906][T12259]  ? clear_bhb_loop+0x55/0xb0
[  167.004635][T12259]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.010532][T12259] RIP: 0033:0x7f6ac2c85d29
[  167.014992][T12259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.034626][T12259] RSP: 002b:00007f6ac12f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  167.043052][T12259] RAX: ffffffffffffffda RBX: 00007f6ac2e75fa0 RCX: 00007f6ac2c85d29
[  167.051015][T12259] RDX: 0000000000000040 RSI: 0000000020000300 RDI: 000000000000001c
[  167.059014][T12259] RBP: 00007f6ac12f7090 R08: 0000000000000000 R09: 0000000000000000
[  167.067006][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.074997][T12259] R13: 0000000000000000 R14: 00007f6ac2e75fa0 R15: 00007ffffda818d8
[  167.082971][T12259]  </TASK>
[  167.117030][T12255] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  167.125075][T12255] System zones: 0-2, 18-18, 34-34
[  167.132807][T12255] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3017: bg 0: block 248: padding at end of block bitmap is not set
[  167.148639][T12255] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.3017: Failed to acquire dquot type 1
[  167.160622][T12255] EXT4-fs (loop0): 1 truncate cleaned up
[  167.166920][T12255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.186247][T12255] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.215678][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.257125][T12255] veth0_virt_wifi: entered promiscuous mode
[  167.296140][T12255] veth0_virt_wifi: left promiscuous mode
[  167.317901][T12279] 9pnet_fd: Insufficient options for proto=fd
[  167.456433][T12301] loop1: detected capacity change from 0 to 2048
[  167.467173][T12301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.467469][T12302] loop4: detected capacity change from 0 to 1024
[  167.479719][T12301] FAULT_INJECTION: forcing a failure.
[  167.479719][T12301] name failslab, interval 1, probability 0, space 0, times 0
[  167.498476][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.1.3034 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  167.509347][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  167.519620][T12301] Call Trace:
[  167.522978][T12301]  <TASK>
[  167.525914][T12301]  dump_stack_lvl+0xf2/0x150
[  167.530542][T12301]  dump_stack+0x15/0x1a
[  167.534733][T12301]  should_fail_ex+0x223/0x230
[  167.539403][T12301]  should_failslab+0x8f/0xb0
[  167.543995][T12301]  kmem_cache_alloc_noprof+0x52/0x320
[  167.549384][T12301]  ? getname_flags+0x81/0x3b0
[  167.554127][T12301]  getname_flags+0x81/0x3b0
[  167.558624][T12301]  __x64_sys_rename+0x33/0x70
[  167.563339][T12301]  x64_sys_call+0x2b1c/0x2dc0
[  167.568007][T12301]  do_syscall_64+0xc9/0x1c0
[  167.572547][T12301]  ? clear_bhb_loop+0x55/0xb0
[  167.577334][T12301]  ? clear_bhb_loop+0x55/0xb0
[  167.582001][T12301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.587936][T12301] RIP: 0033:0x7f4c92dd5d29
[  167.592344][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.611953][T12301] RSP: 002b:00007f4c91441038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  167.620451][T12301] RAX: ffffffffffffffda RBX: 00007f4c92fc5fa0 RCX: 00007f4c92dd5d29
[  167.628421][T12301] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 00000000200003c0
[  167.636473][T12301] RBP: 00007f4c91441090 R08: 0000000000000000 R09: 0000000000000000
[  167.644455][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.652432][T12301] R13: 0000000000000000 R14: 00007f4c92fc5fa0 R15: 00007ffc541a6fd8
[  167.660443][T12301]  </TASK>
[  167.680674][T12307] loop3: detected capacity change from 0 to 128
[  167.686861][T12302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.696013][T12307] msdos: Unknown parameter '�vt
�c�fiۉ�E�m��C��'
[  167.705486][T12302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.720866][T11125] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.736655][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.751072][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 1
[  167.847324][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'.
[  168.002099][T12331] loop3: detected capacity change from 0 to 2048
[  168.059507][T12339] pimreg: entered allmulticast mode
[  168.105329][T12339] loop5: detected capacity change from 0 to 512
[  168.155495][T12339] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  168.184419][T12339] EXT4-fs (loop5): 1 truncate cleaned up
[  168.219458][T12339] pimreg: left allmulticast mode
[  168.252427][T12344] SELinux: syz.4.3045 (12344) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  168.361418][T12355] lo speed is unknown, defaulting to 1000
[  168.525137][T12371] 9pnet: Could not find request transport: 0xffffffffffffffff
[  168.663200][T12391] loop4: detected capacity change from 0 to 2048
[  168.692666][T12397] FAULT_INJECTION: forcing a failure.
[  168.692666][T12397] name failslab, interval 1, probability 0, space 0, times 0
[  168.704976][T12391] Alternate GPT is invalid, using primary GPT.
[  168.705332][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.0.3069 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  168.711639][T12391]  loop4: p1 p2 p3
[  168.722157][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  168.722173][T12397] Call Trace:
[  168.722179][T12397]  <TASK>
[  168.722186][T12397]  dump_stack_lvl+0xf2/0x150
[  168.746763][T12397]  dump_stack+0x15/0x1a
[  168.750956][T12397]  should_fail_ex+0x223/0x230
[  168.755715][T12397]  ? alloc_pipe_info+0xb0/0x360
[  168.760564][T12397]  should_failslab+0x8f/0xb0
[  168.765155][T12397]  __kmalloc_cache_noprof+0x4e/0x320
[  168.770513][T12397]  alloc_pipe_info+0xb0/0x360
[  168.775233][T12397]  splice_direct_to_actor+0x60f/0x670
[  168.780616][T12397]  ? __pfx_direct_splice_actor+0x10/0x10
[  168.786261][T12397]  ? 0xffffffff81000000
[  168.790430][T12397]  ? selinux_file_permission+0x22a/0x360
[  168.796069][T12397]  ? __rcu_read_unlock+0x4e/0x70
[  168.801005][T12397]  ? avc_policy_seqno+0x15/0x20
[  168.805874][T12397]  ? selinux_file_permission+0x22a/0x360
[  168.811552][T12397]  do_splice_direct+0xd7/0x150
[  168.816362][T12397]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  168.822308][T12397]  do_sendfile+0x398/0x660
[  168.826721][T12397]  __x64_sys_sendfile64+0x110/0x150
[  168.831986][T12397]  x64_sys_call+0xfbd/0x2dc0
[  168.836572][T12397]  do_syscall_64+0xc9/0x1c0
[  168.841067][T12397]  ? clear_bhb_loop+0x55/0xb0
[  168.845787][T12397]  ? clear_bhb_loop+0x55/0xb0
[  168.850487][T12397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.856567][T12397] RIP: 0033:0x7fae8cc85d29
[  168.860972][T12397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.880580][T12397] RSP: 002b:00007fae8b2f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  168.889045][T12397] RAX: ffffffffffffffda RBX: 00007fae8ce75fa0 RCX: 00007fae8cc85d29
[  168.897007][T12397] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  168.905067][T12397] RBP: 00007fae8b2f1090 R08: 0000000000000000 R09: 0000000000000000
[  168.913048][T12397] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001
[  168.921096][T12397] R13: 0000000000000000 R14: 00007fae8ce75fa0 R15: 00007ffe96026c68
[  168.929070][T12397]  </TASK>
[  169.012307][T12400] loop0: detected capacity change from 0 to 512
[  169.023387][T12402] 9pnet: Could not find request transport: 0xffffffffffffffff
[  169.038145][T12400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  169.046416][T12400] System zones: 0-2, 18-18, 34-34
[  169.059208][T12400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3070: bg 0: block 248: padding at end of block bitmap is not set
[  169.078922][T12400] __quota_error: 614 callbacks suppressed
[  169.078938][T12400] Quota error (device loop0): write_blk: dquota write failed
[  169.091750][T12411] loop5: detected capacity change from 0 to 512
[  169.092105][T12400] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  169.104312][T12411] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  169.108241][T12400] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.3070: Failed to acquire dquot type 1
[  169.120996][T12411] EXT4-fs (loop5): invalid journal inode
[  169.128960][T12400] EXT4-fs (loop0): 1 truncate cleaned up
[  169.134245][T12411] EXT4-fs (loop5): can't get journal size
[  169.139738][T12400] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.157736][T12411] EXT4-fs (loop5): 1 truncate cleaned up
[  169.169840][T12411] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  169.182054][T12414] loop4: detected capacity change from 0 to 512
[  169.202689][T12400] veth0_virt_wifi: entered promiscuous mode
[  169.213854][T12400] veth0_virt_wifi: left promiscuous mode
[  169.220134][T12414] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.232299][T12414] Cannot find add_set index 65534 as target
[  169.239654][   T29] audit: type=1326 audit(1734648185.260:12626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.263373][   T29] audit: type=1326 audit(1734648185.260:12627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.286987][   T29] audit: type=1326 audit(1734648185.260:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.311987][   T29] audit: type=1326 audit(1734648185.340:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.335652][   T29] audit: type=1326 audit(1734648185.340:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.360080][   T29] audit: type=1326 audit(1734648185.380:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.383791][   T29] audit: type=1326 audit(1734648185.380:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.407443][   T29] audit: type=1326 audit(1734648185.380:12633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.4.3075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  169.452063][T12430] loop5: detected capacity change from 0 to 128
[  169.458797][T12430] vfat: Unknown parameter 'sho�name'
[  169.505593][T12435] 9pnet: Could not find request transport: f0xffffffffffffffff
[  169.530279][T12438] pimreg: entered allmulticast mode
[  169.536161][T12438] pimreg: left allmulticast mode
[  169.554249][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 1
[  169.612004][T12453] FAULT_INJECTION: forcing a failure.
[  169.612004][T12453] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  169.625341][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.5.3086 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  169.636110][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  169.646171][T12453] Call Trace:
[  169.649454][T12453]  <TASK>
[  169.652435][T12453]  dump_stack_lvl+0xf2/0x150
[  169.657122][T12453]  dump_stack+0x15/0x1a
[  169.661379][T12453]  should_fail_ex+0x223/0x230
[  169.666206][T12453]  should_fail_alloc_page+0xfd/0x110
[  169.671553][T12453]  __alloc_pages_noprof+0x109/0x340
[  169.676826][T12453]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  169.676994][T12444] cgroup: fork rejected by pids controller in 
[  169.682281][T12453]  alloc_pages_noprof+0xe1/0x100
[  169.682306][T12453]  alloc_skb_with_frags+0x19a/0x450
[  169.688492][T12444] /syz0
[  169.693344][T12453]  sock_alloc_send_pskb+0x435/0x4f0
[  169.698568][T12444] 
[  169.701283][T12453]  ? mntput+0x49/0x70
[  169.712853][T12453]  tun_get_user+0xa33/0x25b0
[  169.717483][T12453]  ? avc_has_perm+0xd4/0x160
[  169.722148][T12453]  ? ref_tracker_alloc+0x1f5/0x2f0
[  169.727352][T12453]  tun_chr_write_iter+0x188/0x240
[  169.732390][T12453]  vfs_write+0x77f/0x920
[  169.736671][T12453]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  169.742371][T12453]  ksys_write+0xe8/0x1b0
[  169.746626][T12453]  __x64_sys_write+0x42/0x50
[  169.751232][T12453]  x64_sys_call+0x287e/0x2dc0
[  169.755920][T12453]  do_syscall_64+0xc9/0x1c0
[  169.760428][T12453]  ? clear_bhb_loop+0x55/0xb0
[  169.765144][T12453]  ? clear_bhb_loop+0x55/0xb0
[  169.769889][T12453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.775808][T12453] RIP: 0033:0x7f6ac2c85d29
[  169.780222][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.799884][T12453] RSP: 002b:00007f6ac12f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  169.808372][T12453] RAX: ffffffffffffffda RBX: 00007f6ac2e75fa0 RCX: 00007f6ac2c85d29
[  169.816355][T12453] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8
[  169.824411][T12453] RBP: 00007f6ac12f7090 R08: 0000000000000000 R09: 0000000000000000
[  169.832395][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.840370][T12453] R13: 0000000000000000 R14: 00007f6ac2e75fa0 R15: 00007ffffda818d8
[  169.848429][T12453]  </TASK>
[  169.856410][T12453] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3086' sets config #0
[  169.994851][T12492] loop0: detected capacity change from 0 to 1024
[  170.078005][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3096'.
[  170.103236][T12503] lo speed is unknown, defaulting to 1000
[  170.113191][T12509] loop5: detected capacity change from 0 to 512
[  170.124581][T12509] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  170.134931][T12509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  170.143101][T12509] System zones: 1-12
[  170.147307][T12509] EXT4-fs (loop5): orphan cleanup on readonly fs
[  170.153935][T12509] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3097: bg 0: block 361: padding at end of block bitmap is not set
[  170.168556][T12509] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  170.178043][T12509] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.3097: attempt to clear invalid blocks 33619980 len 1
[  170.191236][T12513] loop4: detected capacity change from 0 to 512
[  170.196550][T12509] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3097: invalid indirect mapped block 1811939328 (level 0)
[  170.212840][T12509] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3097: invalid indirect mapped block 2 (level 2)
[  170.226685][T12509] EXT4-fs (loop5): 1 truncate cleaned up
[  170.237325][T12513] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.269783][T12513] Cannot find add_set index 65534 as target
[  170.335437][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3099'.
[  170.335560][T12520] loop0: detected capacity change from 0 to 512
[  170.353510][T12520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.365057][T12520] EXT4-fs (loop0): 1 truncate cleaned up
[  170.435939][T12526] netlink: 'syz.0.3102': attribute type 1 has an invalid length.
[  170.606986][T12534] lo speed is unknown, defaulting to 1000
[  170.631501][T12535] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  170.644784][T12535] siw: device registration error -23
[  170.692380][T12537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'.
[  170.799452][T12544] pimreg: entered allmulticast mode
[  170.805538][T12544] pimreg: left allmulticast mode
[  170.882693][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'.
[  170.941751][T12554] veth0_virt_wifi: entered promiscuous mode
[  170.949903][T12554] veth0_virt_wifi: left promiscuous mode
[  171.013557][T12560] lo speed is unknown, defaulting to 1000
[  171.051594][T12561] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  171.080673][T12560] siw: device registration error -23
[  171.105846][T12568] loop4: detected capacity change from 0 to 1024
[  171.168838][T12576] pimreg: entered allmulticast mode
[  171.213989][T12584] 9pnet_fd: p9_fd_create_unix (12584): problem connecting socket: ./file0: -111
[  171.232285][T12576] pimreg: left allmulticast mode
[  171.299409][T12594] loop4: detected capacity change from 0 to 512
[  171.302840][T12592] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3130' sets config #0
[  171.343823][T12594] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.345607][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'.
[  171.370069][T12599] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  171.382639][T12599] siw: device registration error -23
[  171.438425][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'.
[  171.527742][T12621] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3133'.
[  171.616818][T12618] lo speed is unknown, defaulting to 1000
[  171.717028][   T96] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.731632][T12618] chnl_net:caif_netlink_parms(): no params data found
[  171.770945][   T96] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.782049][T12618] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.789195][T12618] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.796485][T12618] bridge_slave_0: entered allmulticast mode
[  171.803577][T12618] bridge_slave_0: entered promiscuous mode
[  171.811011][T12618] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.818111][T12618] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.825404][T12618] bridge_slave_1: entered allmulticast mode
[  171.832115][T12618] bridge_slave_1: entered promiscuous mode
[  171.852882][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.864888][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.896570][T12618] team0: Port device team_slave_0 added
[  171.903855][T12618] team0: Port device team_slave_1 added
[  171.926620][   T96] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.949762][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.956802][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.982740][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.000428][   T96] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.013898][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.020990][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.046987][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.084615][T12618] hsr_slave_0: entered promiscuous mode
[  172.097639][T12618] hsr_slave_1: entered promiscuous mode
[  172.104157][T12618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.116070][T12618] Cannot create hsr debugfs directory
[  172.170211][   T96] bridge_slave_1: left allmulticast mode
[  172.176051][   T96] bridge_slave_1: left promiscuous mode
[  172.181819][   T96] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.199049][   T96] bridge_slave_0: left allmulticast mode
[  172.204740][   T96] bridge_slave_0: left promiscuous mode
[  172.210614][   T96] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.229654][T12647] loop4: detected capacity change from 0 to 1024
[  172.338306][   T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.347728][   T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.357734][   T96] bond0 (unregistering): Released all slaves
[  172.359137][T12667] loop5: detected capacity change from 0 to 512
[  172.366788][   T96] bond1 (unregistering): Released all slaves
[  172.378149][T12667] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.3144: iget: bogus i_mode (0)
[  172.389660][T12667] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3144: couldn't read orphan inode 17 (err -117)
[  172.408164][T12667] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3144: bg 0: block 7: invalid block bitmap
[  172.484917][T12676] 9pnet_fd: p9_fd_create_unix (12676): problem connecting socket: ./file0: -111
[  172.500602][T12663] lo speed is unknown, defaulting to 1000
[  172.580193][T12682] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  172.588686][T12682] netlink: 108 bytes leftover after parsing attributes in process `+}[@'.
[  172.660345][T12692] loop1: detected capacity change from 0 to 512
[  172.689248][   T96] dummy0: left promiscuous mode
[  172.698349][   T96] batadv_slave_1: left promiscuous mode
[  172.709270][   T96] hsr_slave_0: left promiscuous mode
[  172.715456][   T96] hsr_slave_1: left promiscuous mode
[  172.720224][T12692] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  172.732889][T12692] System zones: 0-2, 18-18, 34-34
[  172.743247][T12692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3151: bg 0: block 248: padding at end of block bitmap is not set
[  172.758120][   T96] veth1_macvtap: left promiscuous mode
[  172.758218][T12692] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3151: Failed to acquire dquot type 1
[  172.763670][   T96] veth0_macvtap: left promiscuous mode
[  172.781327][T12692] EXT4-fs (loop1): 1 truncate cleaned up
[  172.788531][T12692] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.790288][T12704] loop5: detected capacity change from 0 to 512
[  172.827948][T12704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.853032][   T96] infiniband syz1: set down
[  172.861840][T12704] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.876725][T12704] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  172.911710][   T96] team0 (unregistering): Port device team_slave_1 removed
[  172.922317][   T96] team0 (unregistering): Port device team_slave_0 removed
[  172.930080][   T11] smc: removing ib device syz1
[  172.967723][T12692] veth0_virt_wifi: entered promiscuous mode
[  172.978141][T12692] veth0_virt_wifi: left promiscuous mode
[  173.080398][T12618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  173.103042][T12618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  173.128912][T12618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  173.138671][  T171] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:5: Failed to release dquot type 1
[  173.146009][T12618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  173.216505][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'.
[  173.224856][T12717] loop1: detected capacity change from 0 to 1024
[  173.253882][T12717] EXT4-fs: Ignoring removed orlov option
[  173.259794][T12717] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.285377][T12618] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.293883][T12730] FAULT_INJECTION: forcing a failure.
[  173.293883][T12730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.307042][T12730] CPU: 0 UID: 0 PID: 12730 Comm: syz.4.3155 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  173.317820][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  173.322796][T12618] 8021q: adding VLAN 0 to HW filter on device team0
[  173.327932][T12730] Call Trace:
[  173.327940][T12730]  <TASK>
[  173.327946][T12730]  dump_stack_lvl+0xf2/0x150
[  173.345430][T12730]  dump_stack+0x15/0x1a
[  173.349603][T12730]  should_fail_ex+0x223/0x230
[  173.354302][T12730]  should_fail+0xb/0x10
[  173.358471][T12730]  should_fail_usercopy+0x1a/0x20
[  173.363552][T12730]  _copy_from_user+0x1e/0xb0
[  173.368166][T12730]  __se_sys_add_key+0x1ec/0x320
[  173.373100][T12730]  ? fput+0x1c4/0x200
[  173.377134][T12730]  __x64_sys_add_key+0x67/0x80
[  173.380491][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.382044][T12730]  x64_sys_call+0x2964/0x2dc0
[  173.389104][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.393706][T12730]  do_syscall_64+0xc9/0x1c0
[  173.405402][T12730]  ? clear_bhb_loop+0x55/0xb0
[  173.410121][T12730]  ? clear_bhb_loop+0x55/0xb0
[  173.414825][T12730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.420740][T12730] RIP: 0033:0x7fbb66195d29
[  173.425266][T12730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.444950][T12730] RSP: 002b:00007fbb64801038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  173.453410][T12730] RAX: ffffffffffffffda RBX: 00007fbb66385fa0 RCX: 00007fbb66195d29
[  173.461386][T12730] RDX: 0000000020000840 RSI: 0000000000000000 RDI: 00000000200001c0
[  173.469396][T12730] RBP: 00007fbb64801090 R08: 000000002c5af094 R09: 0000000000000000
[  173.477373][T12730] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001
[  173.485420][T12730] R13: 0000000000000000 R14: 00007fbb66385fa0 R15: 00007ffe1254b3c8
[  173.493405][T12730]  </TASK>
[  173.505276][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.512401][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.599994][T12750] loop4: detected capacity change from 0 to 512
[  173.652377][T12750] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.679395][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3159'.
[  173.689350][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.731380][T12766] pimreg: entered allmulticast mode
[  173.772086][T12766] pimreg: left allmulticast mode
[  173.844133][T12769] lo speed is unknown, defaulting to 1000
[  173.868489][T12618] veth0_vlan: entered promiscuous mode
[  173.875789][T12618] veth1_vlan: entered promiscuous mode
[  173.888772][T12618] veth0_macvtap: entered promiscuous mode
[  173.890227][T12778] loop1: detected capacity change from 0 to 512
[  173.895831][T12618] veth1_macvtap: entered promiscuous mode
[  173.909961][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.920518][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.930412][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.940933][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.951599][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.959993][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.970491][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.980357][T12618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.990821][T12618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.001227][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.017946][T12778] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  174.028937][T12618] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.037763][T12618] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.046495][T12618] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.055335][T12618] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.064304][T12778] System zones: 0-2, 18-18, 34-34
[  174.073183][T12778] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3162: bg 0: block 248: padding at end of block bitmap is not set
[  174.089509][   T29] kauditd_printk_skb: 950 callbacks suppressed
[  174.089536][   T29] audit: type=1326 audit(1734648190.110:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb6618cce7 code=0x7ffc0000
[  174.095989][T12778] Quota error (device loop1): write_blk: dquota write failed
[  174.126890][T12778] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  174.137014][T12778] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3162: Failed to acquire dquot type 1
[  174.155409][T12778] EXT4-fs (loop1): 1 truncate cleaned up
[  174.161440][T12778] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.167722][   T29] audit: type=1326 audit(1734648190.140:13581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb66131f29 code=0x7ffc0000
[  174.195374][   T29] audit: type=1326 audit(1734648190.140:13582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb6618cce7 code=0x7ffc0000
[  174.219055][   T29] audit: type=1326 audit(1734648190.140:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb66131f29 code=0x7ffc0000
[  174.242739][   T29] audit: type=1326 audit(1734648190.140:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  174.266352][   T29] audit: type=1326 audit(1734648190.150:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb6618cce7 code=0x7ffc0000
[  174.289890][   T29] audit: type=1326 audit(1734648190.150:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb66131f29 code=0x7ffc0000
[  174.313423][   T29] audit: type=1326 audit(1734648190.150:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.4.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbb66195d29 code=0x7ffc0000
[  174.342213][T12784] veth0_virt_wifi: entered promiscuous mode
[  174.355761][T12784] veth0_virt_wifi: left promiscuous mode
[  174.538743][ T1768] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1
[  174.552899][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3166'.
[  174.571137][T12800] FAULT_INJECTION: forcing a failure.
[  174.571137][T12800] name failslab, interval 1, probability 0, space 0, times 0
[  174.583883][T12800] CPU: 1 UID: 0 PID: 12800 Comm: syz.5.3167 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  174.594650][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  174.604720][T12800] Call Trace:
[  174.607989][T12800]  <TASK>
[  174.610911][T12800]  dump_stack_lvl+0xf2/0x150
[  174.615577][T12800]  dump_stack+0x15/0x1a
[  174.619732][T12800]  should_fail_ex+0x223/0x230
[  174.624522][T12800]  should_failslab+0x8f/0xb0
[  174.629111][T12800]  kmem_cache_alloc_noprof+0x52/0x320
[  174.634478][T12800]  ? audit_log_start+0x34c/0x6b0
[  174.639413][T12800]  audit_log_start+0x34c/0x6b0
[  174.644220][T12800]  audit_seccomp+0x4b/0x130
[  174.648717][T12800]  __seccomp_filter+0x6fa/0x1180
[  174.653741][T12800]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  174.659444][T12800]  ? vfs_write+0x596/0x920
[  174.663932][T12800]  ? putname+0xcf/0xf0
[  174.667999][T12800]  __secure_computing+0x9f/0x1c0
[  174.672934][T12800]  syscall_trace_enter+0xd1/0x1f0
[  174.677960][T12800]  ? fpregs_assert_state_consistent+0x83/0xa0
[  174.684028][T12800]  do_syscall_64+0xaa/0x1c0
[  174.688521][T12800]  ? clear_bhb_loop+0x55/0xb0
[  174.693259][T12800]  ? clear_bhb_loop+0x55/0xb0
[  174.697926][T12800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.704047][T12800] RIP: 0033:0x7f6ac2c85d29
[  174.708453][T12800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.728056][T12800] RSP: 002b:00007f6ac12f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc
[  174.736464][T12800] RAX: ffffffffffffffda RBX: 00007f6ac2e75fa0 RCX: 00007f6ac2c85d29
[  174.744426][T12800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000067
[  174.752416][T12800] RBP: 00007f6ac12f7090 R08: 0000000000000000 R09: 0000000000000000
[  174.760391][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.768427][T12800] R13: 0000000000000000 R14: 00007f6ac2e75fa0 R15: 00007ffffda818d8
[  174.776408][T12800]  </TASK>
[  174.799360][T12805] loop3: detected capacity change from 0 to 512
[  174.816900][T12802] pimreg: entered allmulticast mode
[  174.822881][T12805] EXT4-fs (loop3): invalid journal inode
[  174.828700][T12802] pimreg: left allmulticast mode
[  174.839333][T12805] EXT4-fs (loop3): can't get journal size
[  174.849912][T12811] loop5: detected capacity change from 0 to 512
[  174.857017][T12805] EXT4-fs (loop3): 1 truncate cleaned up
[  174.857069][T12811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  174.876363][T12808] rdma_rxe: rxe_newlink: failed to add lo
[  174.907165][T12811] EXT4-fs (loop5): 1 truncate cleaned up
[  174.908326][T12816] loop1: detected capacity change from 0 to 512
[  174.930210][T12816] EXT4-fs (loop1): invalid journal inode
[  174.940191][T12816] EXT4-fs (loop1): can't get journal size
[  174.947061][T12816] EXT4-fs (loop1): 1 truncate cleaned up
[  174.993167][T12821] netlink: 'syz.5.3174': attribute type 1 has an invalid length.
[  175.003022][T12818] xt_hashlimit: size too large, truncated to 1048576
[  175.251940][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  175.263011][T12834] loop5: detected capacity change from 0 to 512
[  175.269891][T12834] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  175.280049][T12834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  175.288099][T12834] System zones: 1-12
[  175.292022][T12834] EXT4-fs (loop5): orphan cleanup on readonly fs
[  175.298617][T12834] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3179: bg 0: block 361: padding at end of block bitmap is not set
[  175.313130][T12834] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  175.319564][T12836] loop4: detected capacity change from 0 to 128
[  175.322041][T12834] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.3179: attempt to clear invalid blocks 33619980 len 1
[  175.343763][T12834] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3179: invalid indirect mapped block 1811939328 (level 0)
[  175.356674][T12836] syz.4.3178: attempt to access beyond end of device
[  175.356674][T12836] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[  175.358696][T12834] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3179: invalid indirect mapped block 2 (level 2)
[  175.385370][T12834] EXT4-fs (loop5): 1 truncate cleaned up
[  175.460109][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'.
[  175.496212][T12846] pimreg: entered allmulticast mode
[  175.501988][T12846] pimreg: left allmulticast mode
[  175.521330][T12848] loop5: detected capacity change from 0 to 2048
[  175.549852][T12851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12851 comm=syz.4.3185
[  175.564369][T12848] Alternate GPT is invalid, using primary GPT.
[  175.570684][T12848]  loop5: p1 p2 p3
[  175.584396][ T2999] Alternate GPT is invalid, using primary GPT.
[  175.590769][ T2999]  loop5: p1 p2 p3
[  175.596166][T12853] ref_ctr increment failed for inode: 0xd3 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88812ceb24c0
[  175.608178][T12852] uprobe: syz.4.3186:12852 failed to unregister, leaking uprobe
[  175.663865][T12858] loop3: detected capacity change from 0 to 512
[  175.682664][T12858] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.739954][T12867] FAULT_INJECTION: forcing a failure.
[  175.739954][T12867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.753092][T12867] CPU: 1 UID: 0 PID: 12867 Comm: syz.0.3191 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  175.763885][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  175.771925][T12869] loop1: detected capacity change from 0 to 512
[  175.774489][T12867] Call Trace:
[  175.774498][T12867]  <TASK>
[  175.774506][T12867]  dump_stack_lvl+0xf2/0x150
[  175.791622][T12867]  dump_stack+0x15/0x1a
[  175.795793][T12867]  should_fail_ex+0x223/0x230
[  175.800481][T12867]  should_fail+0xb/0x10
[  175.804712][T12867]  should_fail_usercopy+0x1a/0x20
[  175.809749][T12867]  _copy_from_user+0x1e/0xb0
[  175.814355][T12867]  copy_msghdr_from_user+0x54/0x2a0
[  175.819656][T12867]  ? __fget_files+0x17c/0x1c0
[  175.824366][T12867]  __sys_sendmsg+0x13e/0x230
[  175.828991][T12867]  __x64_sys_sendmsg+0x46/0x50
[  175.829925][T12865] lo speed is unknown, defaulting to 1000
[  175.833757][T12867]  x64_sys_call+0x2734/0x2dc0
[  175.842804][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'.
[  175.844126][T12867]  do_syscall_64+0xc9/0x1c0
[  175.857544][T12867]  ? clear_bhb_loop+0x55/0xb0
[  175.862229][T12867]  ? clear_bhb_loop+0x55/0xb0
[  175.866927][T12867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.872931][T12867] RIP: 0033:0x7f34e7d75d29
[  175.877353][T12867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.897095][T12867] RSP: 002b:00007f34e63e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.905506][T12867] RAX: ffffffffffffffda RBX: 00007f34e7f65fa0 RCX: 00007f34e7d75d29
[  175.913489][T12867] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004
[  175.921629][T12867] RBP: 00007f34e63e7090 R08: 0000000000000000 R09: 0000000000000000
[  175.929591][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.937552][T12867] R13: 0000000000000000 R14: 00007f34e7f65fa0 R15: 00007ffd805e1368
[  175.945519][T12867]  </TASK>
[  176.004568][T12876] loop0: detected capacity change from 0 to 2048
[  176.012072][T12865] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  176.023063][T12877] FAULT_INJECTION: forcing a failure.
[  176.023063][T12877] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  176.036400][T12877] CPU: 1 UID: 0 PID: 12877 Comm: syz.3.3193 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  176.047201][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  176.057251][T12877] Call Trace:
[  176.060519][T12877]  <TASK>
[  176.063514][T12877]  dump_stack_lvl+0xf2/0x150
[  176.068110][T12877]  dump_stack+0x15/0x1a
[  176.072278][T12877]  should_fail_ex+0x223/0x230
[  176.077003][T12877]  should_fail_alloc_page+0xfd/0x110
[  176.082301][T12877]  __alloc_pages_noprof+0x109/0x340
[  176.087573][T12877]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  176.092951][T12877]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  176.098318][T12877]  handle_mm_fault+0xdd7/0x2ac0
[  176.103337][T12877]  exc_page_fault+0x296/0x650
[  176.108115][T12877]  ? mod_objcg_state+0x2ea/0x4f0
[  176.113049][T12877]  asm_exc_page_fault+0x26/0x30
[  176.117958][T12877] RIP: 0010:put_cmsg+0x1e3/0x3e0
[  176.122889][T12877] Code: 89 fe e8 f0 31 19 fd 4c 89 f7 4c 89 ee e8 e5 31 19 fd 4d 39 ee 0f 82 af 01 00 00 4d 39 fe 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 <4d> 89 65 00 8b 04 24 41 89 45 08 4c 8b 74 24 10 8b 44 24 04 41 89
[  176.142500][T12877] RSP: 0018:ffffc9000152f918 EFLAGS: 00050287
[  176.148569][T12877] RAX: 0000000000000000 RBX: ffffc9000152f9c0 RCX: ffff888102ecc200
[  176.156541][T12877] RDX: 0000000000000000 RSI: 0000000020001d80 RDI: 0000000020001d9c
[  176.164584][T12877] RBP: 000000000000000c R08: ffffffff84197dcb R09: ffffffff81686284
[  176.172547][T12877] R10: 0000000000000003 R11: ffff888102ecc200 R12: 000000000000001c
[  176.180545][T12877] R13: 0000000020001d80 R14: 0000000020001d9c R15: 00007ffffffff000
[  176.188511][T12877]  ? __check_object_size+0x74/0x520
[  176.193706][T12877]  ? put_cmsg+0x1cb/0x3e0
[  176.198068][T12877]  ? put_cmsg+0x1cb/0x3e0
[  176.202469][T12877]  ip_cmsg_recv_offset+0x11e/0x9f0
[  176.207605][T12877]  ip_recv_error+0x56e/0x600
[  176.212193][T12877]  udp_recvmsg+0x42f/0xb60
[  176.216601][T12877]  ? selinux_socket_recvmsg+0x185/0x1c0
[  176.222225][T12877]  ? __pfx_udp_recvmsg+0x10/0x10
[  176.227156][T12877]  inet_recvmsg+0x150/0x290
[  176.231781][T12877]  sock_recvmsg_nosec+0xc5/0x140
[  176.236724][T12877]  ____sys_recvmsg+0x271/0x280
[  176.241651][T12877]  do_recvmmsg+0x2aa/0x6d0
[  176.246078][T12877]  __x64_sys_recvmmsg+0xe2/0x170
[  176.251013][T12877]  x64_sys_call+0x2a9a/0x2dc0
[  176.255682][T12877]  do_syscall_64+0xc9/0x1c0
[  176.260329][T12877]  ? clear_bhb_loop+0x55/0xb0
[  176.265005][T12877]  ? clear_bhb_loop+0x55/0xb0
[  176.269678][T12877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.275572][T12877] RIP: 0033:0x7ff10bf75d29
[  176.280095][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.299779][T12877] RSP: 002b:00007ff10a5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  176.308314][T12877] RAX: ffffffffffffffda RBX: 00007ff10c166080 RCX: 00007ff10bf75d29
[  176.316286][T12877] RDX: 000000000291962b RSI: 0000000020000040 RDI: 0000000000000003
[  176.324333][T12877] RBP: 00007ff10a5c0090 R08: 0000000000000000 R09: 0000000000000000
[  176.332292][T12877] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001
[  176.340284][T12877] R13: 0000000000000000 R14: 00007ff10c166080 R15: 00007ffeed82b388
[  176.348250][T12877]  </TASK>
[  176.355265][T12869] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3192: couldn't read orphan inode 26 (err -116)
[  176.355542][T12865] siw: device registration error -23
[  176.368992][T12869] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.416376][T12878]  loop0: p1 < > p4
[  176.420730][T12878] loop0: p4 size 8388608 extends beyond EOD, truncated
[  176.480085][T12876]  loop0: p1 < > p4
[  176.482431][T12890] pimreg: entered allmulticast mode
[  176.487422][T12876] loop0: p4 size 8388608 extends beyond EOD, truncated
[  176.491218][T12890] pimreg: left allmulticast mode
[  176.537770][T12883] lo speed is unknown, defaulting to 1000
[  176.565249][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3197'.
[  176.606789][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3200'.
[  176.615836][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3200'.
[  176.636617][T12896] bond0: entered promiscuous mode
[  176.641690][T12896] bond_slave_0: entered promiscuous mode
[  176.647468][T12896] bond_slave_1: entered promiscuous mode
[  176.656525][T12896] batadv_slave_1: entered promiscuous mode
[  176.666096][T12900] ==================================================================
[  176.674205][T12900] BUG: KCSAN: data-race in call_rcu / mtree_range_walk
[  176.681067][T12900] 
[  176.683393][T12900] write to 0xffff888104998c08 of 8 bytes by task 12899 on cpu 1:
[  176.691115][T12900]  call_rcu+0x47/0x430
[  176.695200][T12900]  mas_replace_node+0x2fa/0x430
[  176.700064][T12900]  mas_wr_store_entry+0x1fbf/0x2d10
[  176.705286][T12900]  mas_store_prealloc+0x6bf/0x960
[  176.710335][T12900]  vma_complete+0x3a7/0x760
[  176.714860][T12900]  __split_vma+0x5d6/0x6a0
[  176.719280][T12900]  vma_modify+0xd3/0x1e0
[  176.723535][T12900]  vma_modify_flags+0xf1/0x120
[  176.728314][T12900]  mprotect_fixup+0x31a/0x5e0
[  176.733000][T12900]  do_mprotect_pkey+0x653/0x960
[  176.737865][T12900]  __x64_sys_mprotect+0x48/0x60
[  176.742724][T12900]  x64_sys_call+0x2770/0x2dc0
[  176.747411][T12900]  do_syscall_64+0xc9/0x1c0
[  176.751925][T12900]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.757841][T12900] 
[  176.760160][T12900] read to 0xffff888104998c08 of 8 bytes by task 12900 on cpu 0:
[  176.767798][T12900]  mtree_range_walk+0x140/0x460
[  176.772912][T12900]  mas_walk+0x16e/0x320
[  176.777063][T12900]  lock_vma_under_rcu+0x95/0x260
[  176.781985][T12900]  exc_page_fault+0x150/0x650
[  176.786675][T12900]  asm_exc_page_fault+0x26/0x30
[  176.791517][T12900] 
[  176.793835][T12900] value changed: 0x000000001fffefff -> 0x0000000000000000
[  176.800933][T12900] 
[  176.803245][T12900] Reported by Kernel Concurrency Sanitizer on:
[  176.809403][T12900] CPU: 0 UID: 0 PID: 12900 Comm: syz.4.3202 Not tainted 6.13.0-rc3-syzkaller-00082-gbaaa2567a712 #0
[  176.820147][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  176.830193][T12900] ==================================================================
[  176.841559][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3200'.
[  176.850628][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3200'.
[  176.863629][ T2999]  loop0: p1 < > p4
[  176.869608][ T2999] loop0: p4 size 8388608 extends beyond EOD, truncated
[  176.889242][ T7348] udevd[7348]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  176.889304][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory