last executing test programs:

3.976715975s ago: executing program 4 (id=6509):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$unix(0x1, 0x5, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000002c0)='./bus\x00', 0x40000022)

3.92171743s ago: executing program 4 (id=6512):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e21"], 0x254}}, 0x0)

3.896156673s ago: executing program 4 (id=6523):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$unix(0x1, 0x5, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000002c0)='./bus\x00', 0x40000022)

3.842176357s ago: executing program 4 (id=6516):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x97a9)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3.581289492s ago: executing program 4 (id=6521):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x22020600)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$9p_tcp(0x0, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000880)=ANY=[])
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = dup2(r10, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
close_range(r11, 0xffffffffffffffff, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f00000002c0)='./bus\x00', 0x40000022)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1002cbd7000fddbdf256a0000000800030090e8f3e9fac7647a3da12581a8c17ba7a7f3fa18343ddb1f1c6c", @ANYRES32=r13, @ANYBLOB="0c009900760600003f0000000500d200040000000500d200010000000500d200010000000500d2000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r14, 0x0)

2.767574156s ago: executing program 4 (id=6540):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="050a5114f60aaead2d27a17235d752a1d0bfa916a5b510f33c85f832", 0x1c}, {&(0x7f00000006c0)="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", 0xfe5}], 0x2})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

1.504333812s ago: executing program 0 (id=6571):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4c, &(0x7f00000003c0)={[{@numtail}, {@shortname_win95}, {@numtail}, {@rodir}, {@shortname_win95}, {@rodir}, {@utf8}, {@shortname_mixed}, {@rodir}]}, 0x0, 0x2a8, &(0x7f0000000d00)="$eJzs3UFr034YwPHnv+6/dh1bK4igoD7oRS9hqy9Ai2wgFpS5DvUgZC7V0tiOpEwq4noRr76O4dGboL6BXcSLd29DELzsIEZMmi3dutlt7Vq77wfG70me30N+a9PypNB0/e7rJ6WCaxTMqgwlVIZE6rIhkv4TNfzXGIf8eESi6nJ57MeXs3fu3b+ZzeWmZ1VnsnNXMqo6cf790+dvLnysjs2/nXgXl7X0g/Xvma9rp9ZOr/+ae1x0tehquVJVUxcqlaq5YFu6WHRLhupt2zJdS4tl13Ka8gW7srRUU7O8OJ5ccizXVbNc05JV02pFq05NzUdmsayGYeh4Uo634Tbm5FdnZ83srmkv1tEVoetGW+10nGy9dTK/egRrAgAAfWbv/j/o9Xfv/3Pzwdjh/l+E/r9L6k1bf+n/MRAcJ2smG6/fZvT/AAAAAAAAAAAAAAAAAAAAAAD8CzY8L+V5Xiocw7+4iCREJNzu9TrRHQd8/q/2aLnosMgX9xIi9qvl/HI+GIN8tiBFscWSSUnJT/98aAjimRu56Un1peWDvdKoX1nOxyQe1ofSrerPnZgK6rW5/n9JRo+fkZScbH38TMv6Ebl0MVJvSEo+PZSK2LLon9db9S+mVK/fym2rH/XnAQAAAAAwCAzdtOP63c/7ExKymR8N80H9Pj4f2HZ9PSxn2rlFJQAAAAAAODS39qxk2rblHCCIi8ghygc1iElfLGNbcE1E+mAZRxUkRCTYowcp/7ZZ3laV18acYRHp+cOyj6DX70wAAAAAOm2r6Y/u3flLIU0+v+zyqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOF7avR9YOH9HKkzsUR45XOzI/0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wOAAD//1s0H8I=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20a001, 0x200)
r4 = openat(r3, &(0x7f0000004280)='./file0\x00', 0x0, 0x11a)
unlinkat(r4, &(0x7f0000000140)='./file0\x00', 0xfe)

1.437248009s ago: executing program 0 (id=6572):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18)
unshare(0x22020600)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$eJzs3M1vFOUfAPDvzG7L+6/8EF9A0CoaiS8tLS9y8ILRxIMmJnrAeKptIchCDa2JEKLoAY+GxLvxaOJf4EkvRj2ZeNW7ISGGC+hpzezOlKXdbbvtlq3M55MMPM/Os3me78w8u888z04DKK3h7J8kYntE/B4RQ83s3QWGm//dvnl58u+blyeTqNff+itplLt18/JkUbR437Zmpl7P85va1Hv13YiJWm36Qp4fnTv3wejsxUsvnDk3cXr69PT58ePHjxzeP3hs/GhP4sziurX345l9e15759obkyevvffzt1l7t+f7W+NYkXT5IsPNo9vW011VtvHtaEkn1T42hK5UIiI7XQON/j8Uldgyv28oXv2sr40D1lW9Xq+3+37OXakD97Ek+t0CoD+KL/rs/rfY7tHQY0O4caJ5A5TFfTvfmnuq87f4Awvub3tpOCJOXvnnq2yL1cxDAAB06fts/PN8u/FfGg+1lPtfvoayMyL+HxG7IuKBiNgdEQ9GNMo+HBGPdFn/whWSxeOf9PqqAluhbPz3Ur62dff4L22M+7KQK/lyz45G/APJqTO16UP5MTkYA5uy/NgSdfzwym9fdNrXOv7Ltqz+YiyYt+N6dcEE3dTE3MTaor7jxqcRe6vt4k+iWMZJImJPROxdZR1nnv1mX6d9y8e/hB6sM9W/jnimef6vxIL4C0nH9cmxF4+NHx3dHLXpQ6PFVbHYL79efbNT/WuKvwey87+17fU/H//OZHPE7MVLZxvrtbPd13H1j8873tOs9vofTN5upAfz1z6amJu7MBYxmLy++PXxO+8t8kX5LP6DB9r3/13VO0fi0YjILuL9EfFYRDyet/2JiHgyIg4sEf9PLz/1fvfxLzEr30NZ/FPLnf9oPf/dJypnf/yu+/gL2fk/0kgdzF9ZyeffShu4lmMHAAAA/xVp4zfwSToyn07TkZHmb/h3x9a0NjM799ypmQ/PTzV/K78zBtJipmuoZT50LJ8bLvLjC/KH83njLytbGvmRyZnaVL+Dh5Lb1qH/Z/6s9Lt1wLrzvBaUl/4P5aX/Q3np/1Be+j+UV7v+/0kf2gHce77/obz0fygv/R/KS/+HUur4bHy6pkf+1z1RfGRtlPbcD4kTXb0r0o3Q5hIkqiv+YxarTGxqu6vPH0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA98m8AAAD//0Fo4Oc=")
mount$9p_tcp(0x0, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000880)=ANY=[])
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r11 = socket$unix(0x1, 0x5, 0x0)
r12 = dup2(r11, r10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
close_range(r12, 0xffffffffffffffff, 0x0)
r13 = inotify_init1(0x0)
inotify_add_watch(r13, &(0x7f00000002c0)='./bus\x00', 0x40000022)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r12, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1002cbd7000fddbdf256a0000000800030090e8f3e9fac7647a3da12581a8c17ba7a7f3fa18343ddb1f1c6c", @ANYRES32=r14, @ANYBLOB="0c009900760600003f0000000500d200040000000500d200010000000500d200010000000500d2000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r15, 0x0)

1.365124275s ago: executing program 0 (id=6575):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="050a5114f60aaead2d27a17235d752a1d0bfa916a5b510f33c85f832", 0x1c}, {&(0x7f00000006c0)="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", 0xfe5}], 0x2})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

1.20719753s ago: executing program 0 (id=6576):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000e800000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x3, 0x1, 0x4]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @private, 0x0, 0x0, 'ip_vti0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004009300050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
dup(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r6, &(0x7f0000000280)='./bus/file0\x00', 0x0)
r7 = gettid()
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000e9ec5684db7b00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10)
getitimer(0x1, &(0x7f00000007c0))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0)

1.186266012s ago: executing program 2 (id=6578):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcee0817896735dd1})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0080000000000000000000070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000480)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@block_validity}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@abort}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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")
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=@known='security.apparmor\x00')
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x88700a, 0x0)
sendfile(r6, r5, 0x0, 0x80006800)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000004000000060000000600000008350000", @ANYRES32, @ANYBLOB="0000000000000004df778986fa8e41062e4a702141270200"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x74, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x2000c880)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r9}, 0x10)

1.111066748s ago: executing program 2 (id=6581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r4}, 0x10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}})

1.027262316s ago: executing program 2 (id=6586):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x22020600)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$9p_tcp(0x0, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000880)=ANY=[])
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = dup2(r10, r9)
close_range(r11, 0xffffffffffffffff, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f00000002c0)='./bus\x00', 0x40000022)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1002cbd7000fddbdf256a0000000800030090e8f3e9fac7647a3da12581a8c17ba7a7f3fa18343ddb1f1c6c", @ANYRES32=r13, @ANYBLOB="0c009900760600003f0000000500d200040000000500d200010000000500d200010000000500d2000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r14, 0x0)

902.526368ms ago: executing program 2 (id=6591):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004009300050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
dup(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r6, &(0x7f0000000280)='./bus/file0\x00', 0x0)
r7 = gettid()
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000e9ec5684db7b00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10)
getitimer(0x1, &(0x7f00000007c0))
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0)

786.443988ms ago: executing program 1 (id=6594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8040)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000007c0)={0x0, 0xc000, 0x9}, 0x8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="a100"])
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000300000004000000030100", @ANYRES32, @ANYBLOB="000000020b00000004000000e500010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
set_tid_address(0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r10 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r11 = open(&(0x7f0000000180)='./bus\x00', 0x40cd80, 0x110)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
ftruncate(r11, 0x2007ffb)
sendfile(r10, r11, 0x0, 0x1000000201005)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

760.552461ms ago: executing program 3 (id=6595):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r4}, 0x10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}})

678.647568ms ago: executing program 1 (id=6596):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

677.621078ms ago: executing program 3 (id=6597):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000955a9ebb2910b787657f043b5f0c818866792420330cbc93d8"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000700)=ANY=[@ANYBLOB="0000bf03"])
syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcee0817896735dd1})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0080000000000000000000070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000480)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@block_validity}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@abort}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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")
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=@known='security.apparmor\x00')
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x88700a, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0x80006800)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000004000000060000000600000008350000", @ANYRES32, @ANYBLOB="0000000000000004df778986fa8e41062e4a702141270200"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r9}, 0x10)

661.00181ms ago: executing program 1 (id=6598):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
unshare(0x22020600)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$9p_tcp(0x0, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000880)=ANY=[])
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = dup2(r10, r9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
close_range(r11, 0xffffffffffffffff, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f00000002c0)='./bus\x00', 0x40000022)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1002cbd7000fddbdf256a0000000800030090e8f3e9fac7647a3da12581a8c17ba7a7f3fa18343ddb1f1c6c", @ANYRES32=r13, @ANYBLOB="0c009900760600003f0000000500d200040000000500d200010000000500d200010000000500d2000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r14, 0x0)

599.276685ms ago: executing program 3 (id=6599):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$unix(0x1, 0x5, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000002c0)='./bus\x00', 0x40000022)

563.445389ms ago: executing program 3 (id=6600):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40001) (fail_nth: 1)

537.370681ms ago: executing program 1 (id=6601):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
write$selinux_access(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6763745f723a6574635f9a"], 0x44)

297.481623ms ago: executing program 0 (id=6602):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
unshare(0x22020600)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x7}]}}]}, 0x38}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$9p_tcp(0x0, 0x0, &(0x7f00000003c0), 0x4, &(0x7f0000000880)=ANY=[])
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r10 = socket$unix(0x1, 0x5, 0x0)
r11 = dup2(r10, r9)
close_range(r11, 0xffffffffffffffff, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f00000002c0)='./bus\x00', 0x40000022)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1002cbd7000fddbdf256a0000000800030090e8f3e9fac7647a3da12581a8c17ba7a7f3fa18343ddb1f1c6c", @ANYRES32=r13, @ANYBLOB="0c009900760600003f0000000500d200040000000500d200010000000500d200010000000500d2000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x84)
r14 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r14, 0x0)

236.953499ms ago: executing program 3 (id=6603):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r2}, 0x10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r3 = inotify_init1(0x0)
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}})

236.374379ms ago: executing program 1 (id=6604):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="050a5114f60aaead2d27a17235d752a1d0bfa916a5b510f33c85f832", 0x1c}, {&(0x7f00000006c0)="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", 0xfe5}], 0x2})
io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0)

203.233642ms ago: executing program 0 (id=6605):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0)
dup3(r2, r7, 0x0)

144.275817ms ago: executing program 3 (id=6606):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='svcrdma_decode_rqst\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e)
connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x0, 0x3}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c0002"], 0x24}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x15, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x2, 0x1, 0x1, 0xfffffffffffffff8, 0x8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff4}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x4c4bcdf8066857a8}}}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, &(0x7f0000000500), 0x41000, 0xdb20d25610445274, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x100bb, r1, 0x5, &(0x7f0000000580), &(0x7f00000008c0)=[{0x0, 0x81, 0x10}, {0x4, 0x1, 0xe, 0x5}, {0x0, 0x5, 0x7, 0xa}, {0x5, 0x5, 0x8, 0x5}, {0x2, 0x3, 0x3, 0x1}], 0x10, 0x1, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x5, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r12 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x181182, 0x40, 0x22}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, &(0x7f00000002c0)={{0x1, 0x21}, {0x4, 0x4}, 0x4, 0x9f207e30ee09c636, 0xc9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)

83.658563ms ago: executing program 1 (id=6607):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r4}, 0x10)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, <r6=>0x0})
r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}})

11.403399ms ago: executing program 2 (id=6608):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

0s ago: executing program 2 (id=6609):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
r4 = dup2(r3, r2)
sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r4, &(0x7f0000003e80)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

ain item tag 0x0
[  448.874244][ T3646] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  448.881722][ T3646] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  448.889202][ T3646] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  448.899386][T23707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.907739][ T3646] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  448.952221][T23701] can0 (unregistered): slcan off ttyS3.
[  449.002960][T23728] __nla_validate_parse: 12 callbacks suppressed
[  449.002980][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'.
[  449.036286][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'.
[  449.105112][T23739] loop4: detected capacity change from 0 to 512
[  449.174887][T23739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.206447][T23739] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.375226][T21858] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 32: comm syz-executor: path /77/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  449.529758][T23798] xt_CT: You must specify a L4 protocol and not use inversions on it
[  449.536817][T23793] 9pnet_fd: Insufficient options for proto=fd
[  449.609992][T23804] can0: slcan on ttyS3.
[  449.632696][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.632849][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.667777][T23811] hub 9-0:1.0: USB hub found
[  449.684489][T23811] hub 9-0:1.0: 8 ports detected
[  449.722320][T23803] can0 (unregistered): slcan off ttyS3.
[  449.936546][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.944147][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.951577][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.959163][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.966797][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.974315][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.981781][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.989263][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  449.996898][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.004401][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.011927][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.019386][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.026931][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.034381][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.041966][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.049614][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.057055][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.064527][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.071955][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.072660][T23849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.079379][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.079409][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.079433][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.079455][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.117766][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.125261][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.132788][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.134951][T23859] 9pnet_fd: Insufficient options for proto=fd
[  450.140274][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.153893][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.161306][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.168745][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.176190][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.183770][ T2929] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  450.199472][T23849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.254528][T23863] netlink: 'syz.0.6241': attribute type 10 has an invalid length.
[  450.275757][T23863] team0: Port device netdevsim1 added
[  450.293584][T23863] netlink: 'syz.0.6241': attribute type 10 has an invalid length.
[  450.320692][ T2929] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  450.372870][T23863] team0: Port device netdevsim1 removed
[  450.395333][T23863] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  450.628235][T23914] can0: slcan on ttyS3.
[  450.637486][T23916] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  450.672193][T23913] can0 (unregistered): slcan off ttyS3.
[  450.751468][T23926] loop2: detected capacity change from 0 to 512
[  450.762417][T23926] EXT4-fs: Ignoring removed bh option
[  450.780563][T23926] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  450.808851][T23926] EXT4-fs (loop2): 1 truncate cleaned up
[  450.815167][T23926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.855971][T23926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.922695][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'.
[  450.932874][T23941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.940484][T23945] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.941334][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'.
[  451.004986][T23951] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  451.074353][T23954] FAULT_INJECTION: forcing a failure.
[  451.074353][T23954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.087604][T23954] CPU: 1 UID: 0 PID: 23954 Comm: syz.2.6260 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  451.098043][T23954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  451.108225][T23954] Call Trace:
[  451.111568][T23954]  <TASK>
[  451.114583][T23954]  dump_stack_lvl+0xf2/0x150
[  451.119211][T23954]  dump_stack+0x15/0x20
[  451.123488][T23954]  should_fail_ex+0x229/0x230
[  451.128196][T23954]  should_fail+0xb/0x10
[  451.132371][T23954]  should_fail_usercopy+0x1a/0x20
[  451.137451][T23954]  _copy_from_user+0x1e/0xd0
[  451.142087][T23954]  move_addr_to_kernel+0x82/0x120
[  451.147176][T23954]  __sys_connect+0x74/0x1b0
[  451.151787][T23954]  __x64_sys_connect+0x41/0x50
[  451.156669][T23954]  x64_sys_call+0x2220/0x2d60
[  451.161371][T23954]  do_syscall_64+0xc9/0x1c0
[  451.165940][T23954]  ? clear_bhb_loop+0x55/0xb0
[  451.170650][T23954]  ? clear_bhb_loop+0x55/0xb0
[  451.175473][T23954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.181507][T23954] RIP: 0033:0x7f3a1e69def9
[  451.185934][T23954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.205570][T23954] RSP: 002b:00007f3a1d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  451.214039][T23954] RAX: ffffffffffffffda RBX: 00007f3a1e855f80 RCX: 00007f3a1e69def9
[  451.222081][T23954] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000004
[  451.230074][T23954] RBP: 00007f3a1d317090 R08: 0000000000000000 R09: 0000000000000000
[  451.238083][T23954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.246089][T23954] R13: 0000000000000000 R14: 00007f3a1e855f80 R15: 00007ffc7d03dfd8
[  451.254085][T23954]  </TASK>
[  451.279045][T23954] loop2: detected capacity change from 0 to 512
[  451.295393][T23954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.313446][T23954] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.349928][T22562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.375418][T23969] netlink: 308 bytes leftover after parsing attributes in process `syz.2.6264'.
[  451.388999][T23969] loop2: detected capacity change from 0 to 512
[  451.401728][T23969] EXT4-fs (loop2): orphan cleanup on readonly fs
[  451.409743][T23969] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  451.422551][T23969] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.6264: invalid indirect mapped block 2683928664 (level 1)
[  451.454963][T23969] EXT4-fs (loop2): Remounting filesystem read-only
[  451.469947][T23969] EXT4-fs (loop2): 1 truncate cleaned up
[  451.484567][T23969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.504738][T23969] SELinux: (dev loop2, type ext4) getxattr errno 5
[  451.512896][T23976] xt_CT: You must specify a L4 protocol and not use inversions on it
[  451.521654][T23969] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.541859][ T3646] hid (null): unknown global tag 0xc
[  451.566737][ T3646] hid-generic 0000:1000003:0000.000E: unknown global tag 0xc
[  451.574200][ T3646] hid-generic 0000:1000003:0000.000E: item 0 4 1 12 parsing failed
[  451.585574][T23969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.595593][ T3646] hid-generic 0000:1000003:0000.000E: probe with driver hid-generic failed with error -22
[  451.607768][T23969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.999517][   T29] kauditd_printk_skb: 1215 callbacks suppressed
[  451.999549][   T29] audit: type=1326 audit(1726882014.953:64882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  452.031365][   T29] audit: type=1326 audit(1726882014.983:64883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  452.055010][   T29] audit: type=1326 audit(1726882014.983:64884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  452.078510][   T29] audit: type=1326 audit(1726882014.983:64885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  452.102329][   T29] audit: type=1326 audit(1726882014.983:64886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7feb0506def9 code=0x7ffc0000
[  452.126703][   T29] audit: type=1326 audit(1726882015.013:64887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  452.150227][   T29] audit: type=1326 audit(1726882015.013:64888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  452.173785][   T29] audit: type=1326 audit(1726882015.013:64889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7feb0506def9 code=0x7ffc0000
[  452.197668][   T29] audit: type=1326 audit(1726882015.013:64890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  452.221428][   T29] audit: type=1326 audit(1726882015.013:64891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23975 comm="syz.0.6267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  452.256925][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6269'.
[  452.294668][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6269'.
[  452.336710][T23988] loop2: detected capacity change from 0 to 1024
[  452.378383][T23988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.438666][T22562] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /49/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.460529][T22562] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.480397][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.501414][T22562] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /49/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.525094][T22562] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.546112][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.557683][T22562] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /49/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.582096][T22562] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.601521][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.613117][T22562] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /49/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.638017][T22562] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.666464][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.678139][T22562] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /49/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.704636][T22562] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  452.711198][T24006] FAULT_INJECTION: forcing a failure.
[  452.711198][T24006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.725817][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.736976][T24006] CPU: 0 UID: 0 PID: 24006 Comm: syz.1.6280 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  452.750455][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.759052][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  452.759073][T24006] Call Trace:
[  452.759081][T24006]  <TASK>
[  452.759090][T24006]  dump_stack_lvl+0xf2/0x150
[  452.771083][  T989] net_ratelimit: 9 callbacks suppressed
[  452.771100][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.780635][T24006]  dump_stack+0x15/0x20
[  452.780680][T24006]  should_fail_ex+0x229/0x230
[  452.786143][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.786886][T24006]  should_fail+0xb/0x10
[  452.791970][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.796987][T24006]  should_fail_usercopy+0x1a/0x20
[  452.807586][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.809177][T24006]  _copy_to_user+0x1e/0xa0
[  452.814305][T22562] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  452.825236][T24006]  simple_read_from_buffer+0xa0/0x110
[  452.825285][T24006]  proc_fail_nth_read+0xf9/0x140
[  452.884021][T24006]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  452.889767][T24006]  vfs_read+0x195/0x720
[  452.894031][T24006]  ? __rcu_read_unlock+0x4e/0x70
[  452.899007][T24006]  ? __fget_files+0x1d4/0x210
[  452.903708][T24006]  ksys_read+0xeb/0x1b0
[  452.907973][T24006]  __x64_sys_read+0x42/0x50
[  452.912494][T24006]  x64_sys_call+0x27d3/0x2d60
[  452.917243][T24006]  do_syscall_64+0xc9/0x1c0
[  452.921850][T24006]  ? clear_bhb_loop+0x55/0xb0
[  452.926565][T24006]  ? clear_bhb_loop+0x55/0xb0
[  452.931273][T24006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.937251][T24006] RIP: 0033:0x7fe6084dc93c
[  452.941716][T24006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  452.961469][T24006] RSP: 002b:00007fe607151030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  452.969986][T24006] RAX: ffffffffffffffda RBX: 00007fe608695f80 RCX: 00007fe6084dc93c
[  452.978022][T24006] RDX: 000000000000000f RSI: 00007fe6071510a0 RDI: 0000000000000003
[  452.986029][T24006] RBP: 00007fe607151090 R08: 0000000000000000 R09: 0000000000000064
[  452.994016][T24006] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000001
[  453.002021][T24006] R13: 0000000000000000 R14: 00007fe608695f80 R15: 00007ffd7602c3f8
[  453.010065][T24006]  </TASK>
[  453.015520][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.027552][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6283'.
[  453.037091][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6283'.
[  453.109530][T24019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6286'.
[  453.213827][T24027] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  453.244658][T24029] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  453.258534][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.270535][T22562] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.326860][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.386011][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.456687][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.600023][   T11] bridge_slave_1: left allmulticast mode
[  453.605826][   T11] bridge_slave_1: left promiscuous mode
[  453.611613][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.623203][   T11] bridge_slave_0: left allmulticast mode
[  453.628970][   T11] bridge_slave_0: left promiscuous mode
[  453.634732][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.661184][T24055] xt_CT: You must specify a L4 protocol and not use inversions on it
[  453.791641][T24059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.801820][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.809458][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.816989][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.824412][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.831797][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.839227][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.846638][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.854132][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.861598][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.869074][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.876512][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.883932][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.891338][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.898754][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.906194][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.913739][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.921198][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.928721][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.936153][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.942279][T24061] can: request_module (can-proto-0) failed.
[  453.943576][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.956869][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.964343][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.971807][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.979225][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.986655][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  453.994158][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.001585][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.009004][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.016412][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.023904][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.031300][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.032288][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.038712][ T3341] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  454.054498][T24059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.055837][ T3341] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  454.064014][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.113468][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.121694][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.185824][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.198158][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.208924][   T11] bond0 (unregistering): Released all slaves
[  454.340730][   T11] hsr_slave_0: left promiscuous mode
[  454.351452][   T11] hsr_slave_1: left promiscuous mode
[  454.358735][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.367205][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.374759][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.388539][   T11] veth1_macvtap: left promiscuous mode
[  454.394288][   T11] veth0_macvtap: left promiscuous mode
[  454.400312][   T11] veth1_vlan: left promiscuous mode
[  454.405599][   T11] veth0_vlan: left promiscuous mode
[  454.412683][T24073] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  454.512046][T24077] 9pnet_fd: Insufficient options for proto=fd
[  454.530729][ T2929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.567524][   T11] team0 (unregistering): Port device team_slave_1 removed
[  454.578515][   T11] team0 (unregistering): Port device team_slave_0 removed
[  454.640740][T24039] chnl_net:caif_netlink_parms(): no params data found
[  454.698929][T24088] __nla_validate_parse: 3 callbacks suppressed
[  454.698944][T24088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6312'.
[  454.734903][T24039] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.742127][T24039] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.750131][T24039] bridge_slave_0: entered allmulticast mode
[  454.759166][T24039] bridge_slave_0: entered promiscuous mode
[  454.791173][T24039] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.798461][T24039] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.809159][T24039] bridge_slave_1: entered allmulticast mode
[  454.815816][T24039] bridge_slave_1: entered promiscuous mode
[  454.831694][T24097] pim6reg1: entered promiscuous mode
[  454.837263][T24097] pim6reg1: entered allmulticast mode
[  454.873805][T24039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.894455][T24039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.948043][T24102] xt_CT: You must specify a L4 protocol and not use inversions on it
[  454.957884][T24039] team0: Port device team_slave_0 added
[  454.977718][T24039] team0: Port device team_slave_1 added
[  454.984308][T24104] 9pnet_fd: Insufficient options for proto=fd
[  455.006031][T24100] pimreg: entered allmulticast mode
[  455.033537][T24039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.040533][T24039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.066592][T24039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.082981][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.091294][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.101297][T24106] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  455.110998][T24107] pimreg: left allmulticast mode
[  455.123440][T24039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.130444][T24039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.156574][T24039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.185304][T24093] No such timeout policy "syz0"
[  455.206759][T24039] hsr_slave_0: entered promiscuous mode
[  455.216208][T24039] hsr_slave_1: entered promiscuous mode
[  455.222398][T24039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  455.230237][T24039] Cannot create hsr debugfs directory
[  455.404926][T24112] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  455.457312][T24116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6324'.
[  455.576829][T24039] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  455.603336][T24039] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  455.623103][T24039] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  455.641112][T24039] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  455.690124][T24039] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.732337][T24039] 8021q: adding VLAN 0 to HW filter on device team0
[  455.741597][T24128] 9pnet_fd: Insufficient options for proto=fd
[  455.777607][T24039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.788172][T24039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.844031][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.851174][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.860128][T24132] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  455.870369][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.877457][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.969306][T24039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.059526][T24039] veth0_vlan: entered promiscuous mode
[  456.070233][T24039] veth1_vlan: entered promiscuous mode
[  456.090319][T24039] veth0_macvtap: entered promiscuous mode
[  456.098694][T24039] veth1_macvtap: entered promiscuous mode
[  456.113920][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.124597][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.134538][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.145004][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.154940][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.165518][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.175471][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.185973][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.195865][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.206353][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.216192][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.226636][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.246567][T24039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.259192][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.269834][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.279681][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.290154][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.299990][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.310495][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.320429][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.330880][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.340804][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.351310][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.361258][T24039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.371698][T24039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.386051][T24039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.397197][T24039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.406109][T24039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.414884][T24039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.423603][T24039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.476714][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.650993][T24154] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  456.660462][T24157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6336'.
[  456.775373][T24167] xt_CT: You must specify a L4 protocol and not use inversions on it
[  456.783982][T24165] 9pnet_fd: Insufficient options for proto=fd
[  456.794287][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'.
[  456.831109][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'.
[  456.858009][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'.
[  456.869314][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'.
[  457.007392][   T29] kauditd_printk_skb: 792 callbacks suppressed
[  457.007409][   T29] audit: type=1326 audit(1726882019.963:65684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efceec84ea7 code=0x7ffc0000
[  457.043802][T24191] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  457.053941][   T29] audit: type=1326 audit(1726882019.963:65685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efceec29879 code=0x7ffc0000
[  457.077588][   T29] audit: type=1326 audit(1726882019.963:65686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7efceec8def9 code=0x7ffc0000
[  457.101406][   T29] audit: type=1326 audit(1726882019.973:65687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efceec84ea7 code=0x7ffc0000
[  457.125053][   T29] audit: type=1326 audit(1726882019.973:65688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efceec29879 code=0x7ffc0000
[  457.148713][   T29] audit: type=1326 audit(1726882019.973:65689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7efceec8def9 code=0x7ffc0000
[  457.172388][   T29] audit: type=1326 audit(1726882019.993:65690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efceec84ea7 code=0x7ffc0000
[  457.195947][   T29] audit: type=1326 audit(1726882019.993:65691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efceec29879 code=0x7ffc0000
[  457.219632][   T29] audit: type=1326 audit(1726882019.993:65692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7efceec8def9 code=0x7ffc0000
[  457.243241][   T29] audit: type=1326 audit(1726882020.003:65693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24166 comm="syz.2.6340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efceec84ea7 code=0x7ffc0000
[  457.395692][T24195] 9pnet_fd: Insufficient options for proto=fd
[  457.460292][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6358'.
[  457.494404][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6358'.
[  457.495822][T24201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6357'.
[  457.562528][T24207] FAULT_INJECTION: forcing a failure.
[  457.562528][T24207] name failslab, interval 1, probability 0, space 0, times 0
[  457.575220][T24207] CPU: 1 UID: 0 PID: 24207 Comm: syz.0.6360 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  457.585657][T24207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  457.595725][T24207] Call Trace:
[  457.599071][T24207]  <TASK>
[  457.602066][T24207]  dump_stack_lvl+0xf2/0x150
[  457.606689][T24207]  dump_stack+0x15/0x20
[  457.610878][T24207]  should_fail_ex+0x229/0x230
[  457.615589][T24207]  ? __kvmalloc_node_noprof+0x72/0x170
[  457.621246][T24207]  should_failslab+0x8f/0xb0
[  457.625886][T24207]  __kmalloc_node_noprof+0xa8/0x380
[  457.631117][T24207]  __kvmalloc_node_noprof+0x72/0x170
[  457.636449][T24207]  alloc_netdev_mqs+0x9d/0x8e0
[  457.641249][T24207]  ? __pfx_ppp_setup+0x10/0x10
[  457.646112][T24207]  ppp_ioctl+0x468/0x11b0
[  457.650494][T24207]  ? __pfx_ppp_ioctl+0x10/0x10
[  457.655458][T24207]  __se_sys_ioctl+0xcd/0x140
[  457.660066][T24207]  __x64_sys_ioctl+0x43/0x50
[  457.664755][T24207]  x64_sys_call+0x15cc/0x2d60
[  457.669452][T24207]  do_syscall_64+0xc9/0x1c0
[  457.673970][T24207]  ? clear_bhb_loop+0x55/0xb0
[  457.678695][T24207]  ? clear_bhb_loop+0x55/0xb0
[  457.683408][T24207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.689333][T24207] RIP: 0033:0x7feb0506def9
[  457.693815][T24207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.713531][T24207] RSP: 002b:00007feb03ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  457.721987][T24207] RAX: ffffffffffffffda RBX: 00007feb05225f80 RCX: 00007feb0506def9
[  457.729981][T24207] RDX: 0000000020000000 RSI: 00000000c004743e RDI: 0000000000000005
[  457.737981][T24207] RBP: 00007feb03ce7090 R08: 0000000000000000 R09: 0000000000000000
[  457.746028][T24207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.754012][T24207] R13: 0000000000000000 R14: 00007feb05225f80 R15: 00007fffe9d976c8
[  457.762533][T24207]  </TASK>
[  457.886190][T24222] FAULT_INJECTION: forcing a failure.
[  457.886190][T24222] name failslab, interval 1, probability 0, space 0, times 0
[  457.899004][T24222] CPU: 1 UID: 0 PID: 24222 Comm: syz.3.6367 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  457.909482][T24222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  457.919615][T24222] Call Trace:
[  457.922917][T24222]  <TASK>
[  457.925911][T24222]  dump_stack_lvl+0xf2/0x150
[  457.930630][T24222]  dump_stack+0x15/0x20
[  457.934873][T24222]  should_fail_ex+0x229/0x230
[  457.939650][T24222]  ? __d_alloc+0x3d/0x340
[  457.944049][T24222]  should_failslab+0x8f/0xb0
[  457.948681][T24222]  kmem_cache_alloc_lru_noprof+0x51/0x2a0
[  457.954440][T24222]  ? selinux_file_open+0x34a/0x3b0
[  457.956918][T24226] 9pnet_fd: Insufficient options for proto=fd
[  457.959640][T24222]  __d_alloc+0x3d/0x340
[  457.969909][T24222]  d_alloc_parallel+0x54/0xc80
[  457.974761][T24222]  ? lockref_get_not_dead+0x9d/0x1b0
[  457.980165][T24222]  ? lockref_get_not_dead+0x118/0x1b0
[  457.985683][T24222]  ? down_read+0x171/0x4b0
[  457.990143][T24222]  __lookup_slow+0x8d/0x250
[  457.994679][T24222]  lookup_slow+0x3c/0x60
[  457.999036][T24222]  walk_component+0x1f5/0x230
[  458.003753][T24222]  ? path_lookupat+0xfd/0x2b0
[  458.008459][T24222]  path_lookupat+0x10a/0x2b0
[  458.013140][T24222]  filename_lookup+0x127/0x300
[  458.018037][T24222]  user_path_at+0x3c/0x110
[  458.022468][T24222]  __x64_sys_llistxattr+0x73/0x130
[  458.027611][T24222]  x64_sys_call+0x257b/0x2d60
[  458.032336][T24222]  do_syscall_64+0xc9/0x1c0
[  458.036886][T24222]  ? clear_bhb_loop+0x55/0xb0
[  458.041649][T24222]  ? clear_bhb_loop+0x55/0xb0
[  458.046378][T24222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.052321][T24222] RIP: 0033:0x7f700616def9
[  458.056844][T24222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.076471][T24222] RSP: 002b:00007f7004de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3
[  458.084899][T24222] RAX: ffffffffffffffda RBX: 00007f7006325f80 RCX: 00007f700616def9
[  458.092881][T24222] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000020000180
[  458.100928][T24222] RBP: 00007f7004de7090 R08: 0000000000000000 R09: 0000000000000000
[  458.108915][T24222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.116924][T24222] R13: 0000000000000000 R14: 00007f7006325f80 R15: 00007ffc7dea8798
[  458.124923][T24222]  </TASK>
[  458.164063][T24228] usb usb8: usbfs: process 24228 (syz.2.6369) did not claim interface 0 before use
[  458.176605][T24228] loop2: detected capacity change from 0 to 256
[  458.203650][T24237] xt_CT: You must specify a L4 protocol and not use inversions on it
[  458.213154][T24234] syz.1.6373[24234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.213287][T24234] syz.1.6373[24234] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.237317][T24228] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  458.269850][T24228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  458.360378][T24241] loop2: detected capacity change from 0 to 512
[  458.371502][T24241] EXT4-fs: Ignoring removed bh option
[  458.383186][T24241] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  458.394738][T24244] syz.1.6373[24244] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.394916][T24244] syz.1.6373[24244] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  458.410383][T24241] EXT4-fs (loop2): 1 truncate cleaned up
[  458.447773][T24241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.498313][T24241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.533351][T24248] loop2: detected capacity change from 0 to 512
[  458.540131][T24248] EXT4-fs: Ignoring removed bh option
[  458.548444][T24248] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  458.565419][T24248] EXT4-fs (loop2): 1 truncate cleaned up
[  458.572692][T24248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.593189][T24248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.594898][ T3338] net_ratelimit: 6 callbacks suppressed
[  458.594928][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.616349][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.656778][T24253] SELinux: failed to load policy
[  458.700050][T24264] loop2: detected capacity change from 0 to 512
[  458.707309][T24264] ext4: Unknown parameter 'fsname'
[  458.737730][T24264] loop2: detected capacity change from 0 to 512
[  458.744587][T24264] ext4: Unknown parameter 'fsname'
[  458.755078][T24264] loop2: detected capacity change from 0 to 512
[  458.761621][T24264] ext4: Unknown parameter 'fsname'
[  458.777054][T24264] loop2: detected capacity change from 0 to 512
[  458.831292][T24269] 9pnet_fd: Insufficient options for proto=fd
[  458.853804][T24269] loop2: detected capacity change from 0 to 128
[  459.006017][T24283] loop2: detected capacity change from 0 to 1024
[  459.029510][T24286] syz.3.6392[24286] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  459.029582][T24286] syz.3.6392[24286] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  459.089415][T24294] devtmpfs: Unknown parameter 'n'
[  459.091197][T24288] block device autoloading is deprecated and will be removed.
[  459.105515][T24293] FAULT_INJECTION: forcing a failure.
[  459.105515][T24293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.115244][T24283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.126620][T24293] CPU: 1 UID: 0 PID: 24293 Comm: syz.1.6395 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  459.149082][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  459.159165][T24293] Call Trace:
[  459.162453][T24293]  <TASK>
[  459.165394][T24293]  dump_stack_lvl+0xf2/0x150
[  459.170086][T24293]  dump_stack+0x15/0x20
[  459.174314][T24293]  should_fail_ex+0x229/0x230
[  459.179088][T24293]  should_fail+0xb/0x10
[  459.183261][T24293]  should_fail_usercopy+0x1a/0x20
[  459.188302][T24293]  _copy_from_user+0x1e/0xd0
[  459.192955][T24293]  move_addr_to_kernel+0x82/0x120
[  459.198095][T24293]  copy_msghdr_from_user+0x271/0x2a0
[  459.203423][T24293]  __sys_sendmmsg+0x21e/0x500
[  459.208214][T24293]  __x64_sys_sendmmsg+0x57/0x70
[  459.213103][T24293]  x64_sys_call+0xa49/0x2d60
[  459.217747][T24293]  do_syscall_64+0xc9/0x1c0
[  459.222290][T24293]  ? clear_bhb_loop+0x55/0xb0
[  459.227022][T24293]  ? clear_bhb_loop+0x55/0xb0
[  459.231745][T24293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.237697][T24293] RIP: 0033:0x7fe6084ddef9
[  459.242202][T24293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.261839][T24293] RSP: 002b:00007fe607151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  459.270284][T24293] RAX: ffffffffffffffda RBX: 00007fe608695f80 RCX: 00007fe6084ddef9
[  459.278268][T24293] RDX: 0000000000000001 RSI: 0000000020003080 RDI: 0000000000000003
[  459.286326][T24293] RBP: 00007fe607151090 R08: 0000000000000000 R09: 0000000000000000
[  459.294308][T24293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.302326][T24293] R13: 0000000000000000 R14: 00007fe608695f80 R15: 00007ffd7602c3f8
[  459.310371][T24293]  </TASK>
[  459.314808][T11128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.427116][T24039] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.460778][T24039] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.494269][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.511584][T24039] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.542418][T21858] bond0: (slave syz_tun): Releasing backup interface
[  459.552394][T24039] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.571776][T24301] 9pnet_fd: Insufficient options for proto=fd
[  459.578474][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.591669][T24039] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.621291][T24039] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.643078][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.645208][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.656336][T24039] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.663347][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.686784][T24039] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.714563][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.734383][T24039] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /12/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.746233][T24310] __nla_validate_parse: 1 callbacks suppressed
[  459.746251][T24310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6402'.
[  459.775384][T24039] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  459.796451][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.810042][T24317] xt_CT: You must specify a L4 protocol and not use inversions on it
[  459.812305][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.843912][T21858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.872684][   T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.880967][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.882537][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6406'.
[  459.916053][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.928512][T24305] syz.3.6400[24305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  459.928582][T24305] syz.3.6400[24305] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  459.944740][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.975910][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  459.997762][T24039] EXT4-fs warning (device loop2): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  460.014126][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.063767][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.078426][T24334] FAULT_INJECTION: forcing a failure.
[  460.078426][T24334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.091579][T24334] CPU: 1 UID: 0 PID: 24334 Comm: syz.0.6410 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  460.102042][T24334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  460.112119][T24334] Call Trace:
[  460.115429][T24334]  <TASK>
[  460.118444][T24334]  dump_stack_lvl+0xf2/0x150
[  460.123102][T24334]  dump_stack+0x15/0x20
[  460.127301][T24334]  should_fail_ex+0x229/0x230
[  460.132020][T24334]  should_fail+0xb/0x10
[  460.136226][T24334]  should_fail_usercopy+0x1a/0x20
[  460.141318][T24334]  _copy_from_user+0x1e/0xd0
[  460.145977][T24334]  move_addr_to_kernel+0x82/0x120
[  460.151016][T24334]  __sys_sendto+0x15f/0x250
[  460.155609][T24334]  __x64_sys_sendto+0x78/0x90
[  460.160307][T24334]  x64_sys_call+0x2959/0x2d60
[  460.165010][T24334]  do_syscall_64+0xc9/0x1c0
[  460.169548][T24334]  ? clear_bhb_loop+0x55/0xb0
[  460.174249][T24334]  ? clear_bhb_loop+0x55/0xb0
[  460.178979][T24334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.185041][T24334] RIP: 0033:0x7feb0506def9
[  460.189605][T24334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.209349][T24334] RSP: 002b:00007feb03ce7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  460.217833][T24334] RAX: ffffffffffffffda RBX: 00007feb05225f80 RCX: 00007feb0506def9
[  460.225834][T24334] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000000006
[  460.233917][T24334] RBP: 00007feb03ce7090 R08: 0000000020b63fe4 R09: 000000000000001c
[  460.241900][T24334] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001
[  460.249937][T24334] R13: 0000000000000000 R14: 00007feb05225f80 R15: 00007fffe9d976c8
[  460.257947][T24334]  </TASK>
[  460.300132][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.319601][T24339] FAULT_INJECTION: forcing a failure.
[  460.319601][T24339] name failslab, interval 1, probability 0, space 0, times 0
[  460.332353][T24339] CPU: 1 UID: 0 PID: 24339 Comm: +}[@ Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  460.342279][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  460.352357][T24339] Call Trace:
[  460.355714][T24339]  <TASK>
[  460.358711][T24339]  dump_stack_lvl+0xf2/0x150
[  460.363438][T24339]  dump_stack+0x15/0x20
[  460.367656][T24339]  should_fail_ex+0x229/0x230
[  460.371114][T24340] syz.0.6411[24340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.372442][T24339]  ? __alloc_skb+0x10b/0x310
[  460.372488][T24339]  should_failslab+0x8f/0xb0
[  460.383970][T24340] syz.0.6411[24340] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  460.388420][T24339]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  460.410193][T24339]  ? __rtnl_unlock+0x99/0xb0
[  460.414803][T24339]  __alloc_skb+0x10b/0x310
[  460.419240][T24339]  netlink_ack+0xef/0x4f0
[  460.423684][T24339]  ? __dev_queue_xmit+0x161/0x1fe0
[  460.428828][T24339]  netlink_rcv_skb+0x19c/0x230
[  460.433674][T24339]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  460.439211][T24339]  rtnetlink_rcv+0x1c/0x30
[  460.443695][T24339]  netlink_unicast+0x599/0x670
[  460.448558][T24339]  netlink_sendmsg+0x5cc/0x6e0
[  460.453433][T24339]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.458743][T24339]  __sock_sendmsg+0x140/0x180
[  460.463438][T24339]  ____sys_sendmsg+0x312/0x410
[  460.468229][T24339]  __sys_sendmmsg+0x25d/0x500
[  460.473027][T24339]  __x64_sys_sendmmsg+0x57/0x70
[  460.478019][T24339]  x64_sys_call+0xa49/0x2d60
[  460.482673][T24339]  do_syscall_64+0xc9/0x1c0
[  460.487193][T24339]  ? clear_bhb_loop+0x55/0xb0
[  460.491972][T24339]  ? clear_bhb_loop+0x55/0xb0
[  460.496764][T24339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.502729][T24339] RIP: 0033:0x7f700616def9
[  460.507163][T24339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.526784][T24339] RSP: 002b:00007f7004de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  460.535363][T24339] RAX: ffffffffffffffda RBX: 00007f7006325f80 RCX: 00007f700616def9
[  460.543375][T24339] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007
[  460.551467][T24339] RBP: 00007f7004de7090 R08: 0000000000000000 R09: 0000000000000000
[  460.559585][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  460.567579][T24339] R13: 0000000000000000 R14: 00007f7006325f80 R15: 00007ffc7dea8798
[  460.575590][T24339]  </TASK>
[  460.592257][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.617120][T24306] chnl_net:caif_netlink_parms(): no params data found
[  460.644135][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.668939][T24347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6414'.
[  460.680596][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.690824][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.757445][T24354] loop1: detected capacity change from 0 to 512
[  460.757732][T24354] EXT4-fs: Ignoring removed bh option
[  460.781208][T24354] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  460.794952][T24354] EXT4-fs (loop1): 1 truncate cleaned up
[  460.795426][T24354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.798951][T24306] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.820658][T24306] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.828181][T24306] bridge_slave_0: entered allmulticast mode
[  460.828634][T24354] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.829248][T24306] bridge_slave_0: entered promiscuous mode
[  460.830570][T24306] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.830607][T24306] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.830779][T24306] bridge_slave_1: entered allmulticast mode
[  460.831384][T24306] bridge_slave_1: entered promiscuous mode
[  460.867999][T24360] futex_wake_op: syz.0.6416 tries to shift op by -1; fix this program
[  460.897934][T24306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.908481][   T36] bridge_slave_1: left allmulticast mode
[  460.914373][   T36] bridge_slave_1: left promiscuous mode
[  460.920217][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.928714][   T36] bridge_slave_0: left allmulticast mode
[  460.934498][   T36] bridge_slave_0: left promiscuous mode
[  460.940245][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.940464][T24367] loop1: detected capacity change from 0 to 1024
[  460.966465][T24367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  461.009971][T22748] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.033153][T22748] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.052715][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.065828][T22748] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.087802][T22748] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.107388][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.118961][T22748] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.140741][T22748] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.161593][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.173781][T22748] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.195556][T22748] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.214922][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.227040][T22748] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.249236][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  461.249423][T22748] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  461.277643][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.289374][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  461.290548][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.310013][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.322542][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.323420][   T36] bond0 (unregistering): Released all slaves
[  461.336544][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.352750][T22748] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  461.365695][T24306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.377419][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6421'.
[  461.388786][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.399497][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.399724][T24380] xt_CT: You must specify a L4 protocol and not use inversions on it
[  461.409341][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.409421][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.409436][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.409452][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.409474][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.409491][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.409510][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.409566][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.499193][T24374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.509631][T24374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.539033][   T36] hsr_slave_0: left promiscuous mode
[  461.545267][   T36] hsr_slave_1: left promiscuous mode
[  461.550994][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.558542][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.566341][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.573944][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.583817][   T36] veth1_macvtap: left promiscuous mode
[  461.589370][   T36] veth0_macvtap: left promiscuous mode
[  461.595031][   T36] veth1_vlan: left promiscuous mode
[  461.600282][   T36] veth0_vlan: left promiscuous mode
[  461.604165][T24382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6425'.
[  461.705552][   T36] team0 (unregistering): Port device team_slave_1 removed
[  461.714333][T22748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.724213][   T36] team0 (unregistering): Port device team_slave_0 removed
[  461.770161][T24306] team0: Port device team_slave_0 added
[  461.778501][T24306] team0: Port device team_slave_1 added
[  461.798023][T24306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.805168][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  461.831276][T24306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.843273][T24306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.850409][T24306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  461.876483][T24306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  461.876886][T24392] xt_CT: You must specify a L4 protocol and not use inversions on it
[  461.906026][T24306] hsr_slave_0: entered promiscuous mode
[  461.915569][T24306] hsr_slave_1: entered promiscuous mode
[  461.925096][T24306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  461.933248][T24306] Cannot create hsr debugfs directory
[  462.016426][   T29] kauditd_printk_skb: 1197 callbacks suppressed
[  462.016458][   T29] audit: type=1326 audit(1726882024.973:66891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  462.046606][   T29] audit: type=1326 audit(1726882024.993:66892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  462.058405][T24384] chnl_net:caif_netlink_parms(): no params data found
[  462.070190][   T29] audit: type=1326 audit(1726882024.993:66893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7feb0506def9 code=0x7ffc0000
[  462.100600][   T29] audit: type=1326 audit(1726882025.003:66894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24379 comm="syz.3.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7006164ea7 code=0x7ffc0000
[  462.124136][   T29] audit: type=1326 audit(1726882025.003:66895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24379 comm="syz.3.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7006109879 code=0x7ffc0000
[  462.147886][   T29] audit: type=1326 audit(1726882025.003:66896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24379 comm="syz.3.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  462.163503][T24039] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.172802][   T29] audit: type=1326 audit(1726882025.003:66897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb05064ea7 code=0x7ffc0000
[  462.203932][   T29] audit: type=1326 audit(1726882025.003:66898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb05009879 code=0x7ffc0000
[  462.227618][   T29] audit: type=1326 audit(1726882025.003:66899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24391 comm="syz.0.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7feb0506def9 code=0x7ffc0000
[  462.251221][   T29] audit: type=1326 audit(1726882025.013:66900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24379 comm="syz.3.6424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7006164ea7 code=0x7ffc0000
[  462.350873][T24384] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.358154][T24384] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.365542][T24384] bridge_slave_0: entered allmulticast mode
[  462.373474][T24384] bridge_slave_0: entered promiscuous mode
[  462.380644][T24384] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.387826][T24384] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.397515][T24384] bridge_slave_1: entered allmulticast mode
[  462.403984][T24384] bridge_slave_1: entered promiscuous mode
[  462.439287][T24384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.464236][T24384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.515957][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.524115][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6430'.
[  462.536467][T24384] team0: Port device team_slave_0 added
[  462.543523][T24384] team0: Port device team_slave_1 added
[  462.549408][T24306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  462.568894][T24306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  462.587385][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.605158][T24384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.612290][T24384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.638383][T24384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.657258][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.668565][T24306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  462.681073][T24384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.688107][T24384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.714245][T24384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.728062][T24306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  462.768438][T24384] hsr_slave_0: entered promiscuous mode
[  462.775245][T24384] hsr_slave_1: entered promiscuous mode
[  462.781296][T24384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  462.789235][T24384] Cannot create hsr debugfs directory
[  462.803624][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.883864][   T36] bridge_slave_1: left allmulticast mode
[  462.889612][   T36] bridge_slave_1: left promiscuous mode
[  462.895458][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.905083][   T36] bridge_slave_0: left allmulticast mode
[  462.910838][   T36] bridge_slave_0: left promiscuous mode
[  462.916735][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.981031][T24433] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  463.025503][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.036688][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.049329][   T36] bond0 (unregistering): Released all slaves
[  463.076439][T24435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  463.103409][T24406] chnl_net:caif_netlink_parms(): no params data found
[  463.123376][   T36] hsr_slave_0: left promiscuous mode
[  463.129160][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.136666][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.144406][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.151946][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.161547][   T36] veth1_macvtap: left promiscuous mode
[  463.167110][   T36] veth0_macvtap: left promiscuous mode
[  463.172735][   T36] veth1_vlan: left promiscuous mode
[  463.178035][   T36] veth0_vlan: left promiscuous mode
[  463.260930][T24438] bpf_get_probe_write_proto: 2 callbacks suppressed
[  463.260946][T24438] syz.3.6440[24438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  463.268463][T24438] syz.3.6440[24438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  463.268611][   T36] team0 (unregistering): Port device team_slave_1 removed
[  463.301077][T24438] FAULT_INJECTION: forcing a failure.
[  463.301077][T24438] name failslab, interval 1, probability 0, space 0, times 0
[  463.313926][T24438] CPU: 0 UID: 0 PID: 24438 Comm: syz.3.6440 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  463.324388][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  463.334464][T24438] Call Trace:
[  463.337738][T24438]  <TASK>
[  463.340739][T24438]  dump_stack_lvl+0xf2/0x150
[  463.345380][T24438]  dump_stack+0x15/0x20
[  463.349604][T24438]  should_fail_ex+0x229/0x230
[  463.354367][T24438]  ? __alloc_skb+0x10b/0x310
[  463.359034][T24438]  should_failslab+0x8f/0xb0
[  463.363640][T24438]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  463.369508][T24438]  ? avc_has_perm+0xd4/0x160
[  463.374112][T24438]  __alloc_skb+0x10b/0x310
[  463.378573][T24438]  sock_wmalloc+0x7b/0xc0
[  463.382945][T24438]  pppol2tp_sendmsg+0x103/0x320
[  463.387805][T24438]  ? __pfx_pppol2tp_sendmsg+0x10/0x10
[  463.393198][T24438]  __sock_sendmsg+0x140/0x180
[  463.397940][T24438]  ____sys_sendmsg+0x312/0x410
[  463.402832][T24438]  __sys_sendmmsg+0x25d/0x500
[  463.407581][T24438]  __x64_sys_sendmmsg+0x57/0x70
[  463.412538][T24438]  x64_sys_call+0xa49/0x2d60
[  463.417247][T24438]  do_syscall_64+0xc9/0x1c0
[  463.421767][T24438]  ? clear_bhb_loop+0x55/0xb0
[  463.426519][T24438]  ? clear_bhb_loop+0x55/0xb0
[  463.431208][T24438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.437260][T24438] RIP: 0033:0x7f700616def9
[  463.441783][T24438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.461486][T24438] RSP: 002b:00007f7004de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  463.469970][T24438] RAX: ffffffffffffffda RBX: 00007f7006325f80 RCX: 00007f700616def9
[  463.477954][T24438] RDX: 04000000000001ce RSI: 0000000020005f80 RDI: 0000000000000006
[  463.485942][T24438] RBP: 00007f7004de7090 R08: 0000000000000000 R09: 0000000000000000
[  463.493969][T24438] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001
[  463.502036][T24438] R13: 0000000000000000 R14: 00007f7006325f80 R15: 00007ffc7dea8798
[  463.510045][T24438]  </TASK>
[  463.514079][   T36] team0 (unregistering): Port device team_slave_0 removed
[  463.536303][T24440] syz.3.6441[24440] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  463.536430][T24440] syz.3.6441[24440] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  463.575715][T24306] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.578773][T24442] xt_CT: You must specify a L4 protocol and not use inversions on it
[  463.592247][T24306] 8021q: adding VLAN 0 to HW filter on device team0
[  463.624547][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.631693][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.639794][T11128] net_ratelimit: 6 callbacks suppressed
[  463.639808][T11128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.662713][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.669933][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.695026][T24447] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.6443'.
[  463.702857][T24306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  463.704438][T24447] openvswitch: netlink: Flow key attr not present in new flow.
[  463.714964][T24306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.737026][T24406] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.744409][T24406] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.753832][T24406] bridge_slave_0: entered allmulticast mode
[  463.760481][T24406] bridge_slave_0: entered promiscuous mode
[  463.767790][T24406] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.774976][T24406] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.782627][T24406] bridge_slave_1: entered allmulticast mode
[  463.789327][T24406] bridge_slave_1: entered promiscuous mode
[  463.794572][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.803789][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.828513][T24406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  463.839730][T24406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.861287][T24406] team0: Port device team_slave_0 added
[  463.868523][T24406] team0: Port device team_slave_1 added
[  463.887277][T24406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.894425][T24406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.920480][T24406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.935453][T24406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.942515][T24406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  463.968699][T24406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.998564][T24406] hsr_slave_0: entered promiscuous mode
[  464.006389][T24406] hsr_slave_1: entered promiscuous mode
[  464.014729][T24406] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  464.022551][T24406] Cannot create hsr debugfs directory
[  464.029399][T24306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.112427][T24384] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  464.121793][T24384] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  464.147053][T24463] syz.0.6444[24463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  464.147138][T24463] syz.0.6444[24463] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  464.149257][T24384] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  464.184803][T24384] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  464.231442][T24406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.289742][T24384] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.306199][T24406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.336580][T24306] veth0_vlan: entered promiscuous mode
[  464.341062][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.346904][T24306] veth1_vlan: entered promiscuous mode
[  464.349820][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.358301][T24384] 8021q: adding VLAN 0 to HW filter on device team0
[  464.362817][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.377055][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.384515][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.385003][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.391944][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.398961][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.406376][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.421130][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.428618][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.436204][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.443768][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.443788][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.443839][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.456920][T24384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  464.458309][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.465572][T24384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  464.476019][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.490104][T24474] xt_CT: You must specify a L4 protocol and not use inversions on it
[  464.493694][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.516904][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.524633][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.532229][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.539646][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.542698][T24472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.547089][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.562898][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.570424][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.577995][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.585483][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.593005][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.600511][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.608045][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.615719][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.623319][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.630833][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.638298][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.645786][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.653339][ T3336] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  464.661785][T24472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.669692][ T3336] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  464.670874][T24406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.701866][T24384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.714421][T24306] veth0_macvtap: entered promiscuous mode
[  464.725853][T24306] veth1_macvtap: entered promiscuous mode
[  464.735869][T24406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.762522][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.773107][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.783090][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.793600][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.803602][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.814106][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.824066][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.834581][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.844472][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.854983][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.866005][T24306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.867400][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.881738][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.882636][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.900531][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.910479][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.921106][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.931060][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.941632][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.951483][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.961977][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.971837][T24306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.982351][T24306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.993320][T24306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.003094][T24306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.011892][T24306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.020714][T24306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.029504][T24306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.080541][T24406] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  465.095595][T24384] veth0_vlan: entered promiscuous mode
[  465.107896][T24406] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  465.109378][T24490] loop4: detected capacity change from 0 to 512
[  465.121372][T24490] EXT4-fs: Ignoring removed bh option
[  465.126736][T24384] veth1_vlan: entered promiscuous mode
[  465.133058][T24406] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  465.133771][T24490] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  465.152495][T24406] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  465.164147][T24490] EXT4-fs (loop4): 1 truncate cleaned up
[  465.170500][T24490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.195252][T24384] veth0_macvtap: entered promiscuous mode
[  465.203294][T24384] veth1_macvtap: entered promiscuous mode
[  465.212488][T24406] 8021q: adding VLAN 0 to HW filter on device bond0
[  465.224064][T24490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.231333][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.243861][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.253833][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.264377][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.274291][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.285059][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.295017][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.305818][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.316113][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.326617][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.336610][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.347090][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.364255][T24384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.375353][T24406] 8021q: adding VLAN 0 to HW filter on device team0
[  465.389294][T24498] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  465.407104][  T326] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.414284][  T326] bridge0: port 1(bridge_slave_0) entered forwarding state
[  465.426793][  T326] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.433954][  T326] bridge0: port 2(bridge_slave_1) entered forwarding state
[  465.453358][T24406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  465.469889][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.480518][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.490426][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.500948][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.510822][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.521353][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.531338][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.539936][T24505] syz.3.6453[24505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.541802][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.541831][T24505] syz.3.6453[24505] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.553428][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.585139][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.595094][T24384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.605542][T24384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.617490][T24384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.633398][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.641656][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.656053][T24384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.664959][T24384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.673832][T24384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.682719][T24384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.724081][T24406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.866889][T24528] 9pnet_fd: Insufficient options for proto=fd
[  465.871824][T24531] xt_CT: You must specify a L4 protocol and not use inversions on it
[  465.883904][T24528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6435'.
[  465.892805][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.892936][T24528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6435'.
[  465.918911][T24406] veth0_vlan: entered promiscuous mode
[  465.923109][T24534] loop4: detected capacity change from 0 to 512
[  465.928074][T24406] veth1_vlan: entered promiscuous mode
[  465.939085][T24534] EXT4-fs: Ignoring removed bh option
[  465.944737][T24406] veth0_macvtap: entered promiscuous mode
[  465.957897][T24406] veth1_macvtap: entered promiscuous mode
[  465.958958][T24534] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  465.969430][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.982791][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.992948][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.003503][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.012648][T24534] EXT4-fs (loop4): 1 truncate cleaned up
[  466.013361][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.019712][T24534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.029542][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.029565][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.029586][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.071793][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.082414][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.092371][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.103015][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.112879][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  466.123446][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.134477][T24406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.142092][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.154683][T24543] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  466.170167][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.180746][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.190724][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.201264][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.211226][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.221731][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.231630][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.242121][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.252037][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.262524][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.272638][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.283366][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.293235][T24406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.303682][T24406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.314285][T24406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.318675][T24534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.323387][T24406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.339522][T24406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.348386][T24406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.357277][T24406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.387261][T24545] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  466.499409][T24553] futex_wake_op: syz.1.6467 tries to shift op by -1; fix this program
[  466.566524][T24566] 9pnet_fd: Insufficient options for proto=fd
[  466.575138][T24566] loop1: detected capacity change from 0 to 128
[  466.582979][T24569] syz.0.6469[24569] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  466.583049][T24569] syz.0.6469[24569] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  466.649555][T24573] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  466.796653][T24563] loop4: detected capacity change from 0 to 32768
[  466.864745][T24563]  loop4: p1 p2 p3 < p5 p6 p7 >
[  466.885696][T24592] 9pnet_fd: Insufficient options for proto=fd
[  466.893850][T24592] loop2: detected capacity change from 0 to 128
[  466.935371][T24597] xt_CT: You must specify a L4 protocol and not use inversions on it
[  466.980537][T24603] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  467.057723][T24609] loop2: detected capacity change from 0 to 512
[  467.072281][T24609] EXT4-fs: Ignoring removed bh option
[  467.086258][T24609] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  467.115024][T24609] EXT4-fs (loop2): 1 truncate cleaned up
[  467.125876][T24609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.159962][T24609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.257357][T24622] xt_CT: You must specify a L4 protocol and not use inversions on it
[  467.267573][   T29] kauditd_printk_skb: 511 callbacks suppressed
[  467.267590][   T29] audit: type=1326 audit(1726882030.223:67412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24621 comm="syz.2.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628e3bdef9 code=0x7ffc0000
[  467.319858][T24624] 9pnet_fd: Insufficient options for proto=fd
[  467.328652][   T29] audit: type=1326 audit(1726882030.233:67413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.352357][   T29] audit: type=1326 audit(1726882030.233:67414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.376142][   T29] audit: type=1326 audit(1726882030.233:67415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.399988][   T29] audit: type=1326 audit(1726882030.233:67416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.424184][   T29] audit: type=1326 audit(1726882030.233:67417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.447903][   T29] audit: type=1326 audit(1726882030.233:67418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.471564][   T29] audit: type=1326 audit(1726882030.233:67419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.471951][T24628] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6498'.
[  467.495338][   T29] audit: type=1326 audit(1726882030.233:67420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.527929][   T29] audit: type=1326 audit(1726882030.233:67421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24625 comm="syz.3.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700616def9 code=0x7ffc0000
[  467.587810][T24635] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  467.639501][T24637] loop4: detected capacity change from 0 to 512
[  467.660067][T24637] EXT4-fs: Ignoring removed bh option
[  467.674893][T24637] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  467.695725][T24637] EXT4-fs (loop4): 1 truncate cleaned up
[  467.702499][T24637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.722140][T24637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.793733][T24651] FAULT_INJECTION: forcing a failure.
[  467.793733][T24651] name failslab, interval 1, probability 0, space 0, times 0
[  467.806470][T24651] CPU: 0 UID: 0 PID: 24651 Comm: syz.1.6508 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  467.806511][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  467.806528][T24651] Call Trace:
[  467.806537][T24651]  <TASK>
[  467.806547][T24651]  dump_stack_lvl+0xf2/0x150
[  467.806641][T24651]  dump_stack+0x15/0x20
[  467.806678][T24651]  should_fail_ex+0x229/0x230
[  467.806705][T24651]  ? security_file_alloc+0x32/0x100
[  467.806737][T24651]  should_failslab+0x8f/0xb0
[  467.806792][T24651]  kmem_cache_alloc_noprof+0x4c/0x290
[  467.806821][T24651]  security_file_alloc+0x32/0x100
[  467.806852][T24651]  alloc_empty_file+0x121/0x2f0
[  467.806908][T24651]  alloc_file_pseudo+0xc3/0x140
[  467.806980][T24651]  create_pipe_files+0x1bd/0x3b0
[  467.807049][T24651]  __do_pipe_flags+0x46/0x190
[  467.807142][T24651]  do_pipe2+0x64/0x130
[  467.807177][T24651]  __x64_sys_pipe2+0x30/0x40
[  467.807233][T24651]  x64_sys_call+0x65f/0x2d60
[  467.807266][T24651]  do_syscall_64+0xc9/0x1c0
[  467.807286][T24651]  ? clear_bhb_loop+0x55/0xb0
[  467.807319][T24651]  ? clear_bhb_loop+0x55/0xb0
[  467.807433][T24651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.807470][T24651] RIP: 0033:0x7f032d4edef9
[  467.807569][T24651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.807595][T24651] RSP: 002b:00007f032c167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  467.807662][T24651] RAX: ffffffffffffffda RBX: 00007f032d6a5f80 RCX: 00007f032d4edef9
[  467.807676][T24651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  467.807694][T24651] RBP: 00007f032c167090 R08: 0000000000000000 R09: 0000000000000000
[  467.807711][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.807729][T24651] R13: 0000000000000000 R14: 00007f032d6a5f80 R15: 00007ffed0c54d18
[  467.807753][T24651]  </TASK>
[  467.861434][T24659] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6512'.
[  467.875374][T24657] 9pnet_fd: Insufficient options for proto=fd
[  467.877117][T24657] loop1: detected capacity change from 0 to 128
[  467.920156][T24666] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  467.966871][T24669] loop4: detected capacity change from 0 to 1024
[  467.980603][T24670] netlink: 'syz.1.6514': attribute type 10 has an invalid length.
[  468.027091][T24669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.126744][T24670] syz_tun: entered promiscuous mode
[  468.139198][T24670] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  468.151757][T24678] xt_CT: You must specify a L4 protocol and not use inversions on it
[  468.165969][T24676] loop2: detected capacity change from 0 to 512
[  468.175312][T24676] EXT4-fs: Ignoring removed bh option
[  468.194496][T24676] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  468.202933][T24306] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.232198][T24676] EXT4-fs (loop2): 1 truncate cleaned up
[  468.238682][T24676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.260868][T24306] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.283872][T24687] 9pnet_fd: Insufficient options for proto=fd
[  468.292076][T24687] loop1: detected capacity change from 0 to 128
[  468.305548][T24688] bpf_get_probe_write_proto: 6 callbacks suppressed
[  468.305632][T24688] syz.0.6524[24688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.309659][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.312514][T24688] syz.0.6524[24688] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.324332][T24306] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.370153][T24306] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.389750][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.394257][T24690] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6526'.
[  468.401684][T24306] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.434342][T24306] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.462050][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.475371][T24306] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.497000][T24306] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.517415][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.528964][T24306] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.563991][T24306] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  468.591424][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.604050][T24700] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  468.606345][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.625496][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.637667][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.652310][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.665081][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6530'.
[  468.670808][T24306] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  468.687762][T24703] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  468.698278][T24701] loop2: detected capacity change from 0 to 2048
[  468.724181][T24701] EXT4-fs (loop2): failed to initialize system zone (-117)
[  468.731653][T24701] EXT4-fs (loop2): mount failed
[  468.785288][T24713] 9pnet_fd: Insufficient options for proto=fd
[  468.832725][ T3341] net_ratelimit: 7 callbacks suppressed
[  468.832759][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  468.994265][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.039367][T24724] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  469.054524][   T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.107529][   T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.141410][T24739] xt_CT: You must specify a L4 protocol and not use inversions on it
[  469.174165][T24743] 9pnet_fd: Insufficient options for proto=fd
[  469.207800][   T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.232520][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.265034][T24751] xt_CT: You must specify a L4 protocol and not use inversions on it
[  469.277799][   T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.308704][T24725] chnl_net:caif_netlink_parms(): no params data found
[  469.379691][   T50] bridge_slave_1: left allmulticast mode
[  469.385430][   T50] bridge_slave_1: left promiscuous mode
[  469.391149][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.399353][   T50] bridge_slave_0: left allmulticast mode
[  469.405236][   T50] bridge_slave_0: left promiscuous mode
[  469.410943][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.495051][T24772] 9pnet_fd: Insufficient options for proto=fd
[  469.504811][T24772] loop2: detected capacity change from 0 to 128
[  469.546837][T24777] loop1: detected capacity change from 0 to 512
[  469.553585][T24777] EXT4-fs: Ignoring removed bh option
[  469.559376][T24777] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  469.569501][T24777] EXT4-fs (loop1): 1 truncate cleaned up
[  469.575516][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.576488][T24777] EXT4-fs mount: 2 callbacks suppressed
[  469.576504][T24777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  469.591311][T24780] loop2: detected capacity change from 0 to 512
[  469.609739][T24780] EXT4-fs: Ignoring removed bh option
[  469.615502][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.615691][T24780] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  469.635598][   T50] bond0 (unregistering): Released all slaves
[  469.644859][T24780] EXT4-fs (loop2): 1 truncate cleaned up
[  469.651167][T24780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  469.651843][T24725] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.670299][T24725] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.679654][T24725] bridge_slave_0: entered allmulticast mode
[  469.686461][T24725] bridge_slave_0: entered promiscuous mode
[  469.704021][T24725] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.711232][T24725] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.719363][T24406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.719764][T24725] bridge_slave_1: entered allmulticast mode
[  469.729480][T11128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.735107][T24725] bridge_slave_1: entered promiscuous mode
[  469.749193][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.769152][   T50] hsr_slave_0: left promiscuous mode
[  469.775084][   T50] hsr_slave_1: left promiscuous mode
[  469.780824][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.782222][T24785] loop2: detected capacity change from 0 to 512
[  469.788318][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.802424][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.809906][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.821887][   T50] veth1_macvtap: left promiscuous mode
[  469.827643][   T50] veth0_macvtap: left promiscuous mode
[  469.833421][   T50] veth1_vlan: left promiscuous mode
[  469.838661][   T50] veth0_vlan: left promiscuous mode
[  469.844259][T24785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.857281][T24785] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  469.973073][   T50] team0 (unregistering): Port device team_slave_1 removed
[  469.985307][   T50] team0 (unregistering): Port device team_slave_0 removed
[  469.992504][T24792] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #19: comm syz.2.6562: corrupted inode contents
[  469.992720][T24792] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #19: comm syz.2.6562: mark_inode_dirty error
[  470.018431][T24792] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #19: comm syz.2.6562: corrupted inode contents
[  470.030951][T24792] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3007: inode #19: comm syz.2.6562: mark_inode_dirty error
[  470.035304][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.047187][T24792] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3010: inode #19: comm syz.2.6562: mark inode dirty (error -117)
[  470.071002][T24725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.081026][T24792] EXT4-fs warning (device loop2): ext4_evict_inode:271: xattr delete (err -117)
[  470.084600][T24725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.142642][T24406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.156999][T24725] team0: Port device team_slave_0 added
[  470.164210][T24725] team0: Port device team_slave_1 added
[  470.212909][T24725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.219919][T24725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.245919][T24725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.257639][T24725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.264741][T24725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.290835][T24725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.306178][T24802] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  470.311679][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.325837][T24807] 9pnet_fd: Insufficient options for proto=fd
[  470.341222][T24725] hsr_slave_0: entered promiscuous mode
[  470.342617][T24804] loop1: detected capacity change from 0 to 128
[  470.353770][T24725] hsr_slave_1: entered promiscuous mode
[  470.363198][T24725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  470.371867][T24725] Cannot create hsr debugfs directory
[  470.416241][T24814] loop2: detected capacity change from 0 to 512
[  470.430011][T24814] EXT4-fs: Ignoring removed bh option
[  470.444143][T24814] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  470.463987][T24814] EXT4-fs (loop2): 1 truncate cleaned up
[  470.472480][T24811] loop1: detected capacity change from 0 to 512
[  470.479301][T24814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.495892][T24811] EXT4-fs: Ignoring removed bh option
[  470.504574][T24811] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  470.526104][T24811] EXT4-fs (loop1): 1 truncate cleaned up
[  470.533634][T24811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.548264][T24814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.574690][T24820] xt_CT: You must specify a L4 protocol and not use inversions on it
[  470.584749][T24384] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.682646][T24830] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  470.702182][T24833] 9pnet_fd: Insufficient options for proto=fd
[  470.720201][T24836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6584'.
[  470.766375][T24840] loop2: detected capacity change from 0 to 512
[  470.774350][T24840] EXT4-fs: Ignoring removed bh option
[  470.781731][T24840] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  470.797878][T24840] EXT4-fs (loop2): 1 truncate cleaned up
[  470.804239][T24840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.819847][T24840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.824988][T24725] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  470.832623][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6590'.
[  470.847551][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6590'.
[  470.855537][T24725] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  470.878048][T24725] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  470.889820][T24725] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  470.941090][T24725] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.963492][T24725] 8021q: adding VLAN 0 to HW filter on device team0
[  470.974631][ T2102] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.981761][ T2102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.010236][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.017392][ T2102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.021266][T24860] 9pnet_fd: Insufficient options for proto=fd
[  471.036713][T24860] loop1: detected capacity change from 0 to 128
[  471.038895][T24862] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  471.074591][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.122187][T24725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.135396][T24872] loop1: detected capacity change from 0 to 512
[  471.142954][T24872] EXT4-fs: Ignoring removed bh option
[  471.149006][T24872] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  471.168114][T24872] EXT4-fs (loop1): 1 truncate cleaned up
[  471.174913][T24872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.200400][T24872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.235982][T24884] FAULT_INJECTION: forcing a failure.
[  471.235982][T24884] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  471.249556][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.3.6600 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  471.260019][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  471.270214][T24884] Call Trace:
[  471.273497][T24884]  <TASK>
[  471.276464][T24884]  dump_stack_lvl+0xf2/0x150
[  471.281165][T24884]  dump_stack+0x15/0x20
[  471.285345][T24884]  should_fail_ex+0x229/0x230
[  471.290062][T24884]  should_fail_alloc_page+0xfd/0x110
[  471.295374][T24884]  __alloc_pages_noprof+0x109/0x360
[  471.300686][T24884]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  471.306162][T24884]  folio_alloc_mpol_noprof+0x36/0x70
[  471.311485][T24884]  shmem_get_folio_gfp+0x3eb/0xd80
[  471.316657][T24884]  shmem_write_begin+0xa2/0x180
[  471.321528][T24884]  generic_perform_write+0x1a8/0x4a0
[  471.326838][T24884]  ? _raw_spin_unlock+0x26/0x50
[  471.331720][T24884]  shmem_file_write_iter+0xc2/0xe0
[  471.336917][T24884]  vfs_write+0x76a/0x910
[  471.341213][T24884]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  471.347117][T24884]  ksys_write+0xeb/0x1b0
[  471.351508][T24884]  __x64_sys_write+0x42/0x50
[  471.356266][T24884]  x64_sys_call+0x27dd/0x2d60
[  471.361026][T24884]  do_syscall_64+0xc9/0x1c0
[  471.365550][T24884]  ? clear_bhb_loop+0x55/0xb0
[  471.370264][T24884]  ? clear_bhb_loop+0x55/0xb0
[  471.375010][T24884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.381010][T24884] RIP: 0033:0x7f700616def9
[  471.385446][T24884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.405091][T24884] RSP: 002b:00007f7004de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  471.413517][T24884] RAX: ffffffffffffffda RBX: 00007f7006325f80 RCX: 00007f700616def9
[  471.421522][T24884] RDX: 0000000000040001 RSI: 0000000020000180 RDI: 0000000000000009
[  471.429501][T24884] RBP: 00007f7004de7090 R08: 0000000000000000 R09: 0000000000000000
[  471.437560][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.445629][T24884] R13: 0000000000000000 R14: 00007f7006325f80 R15: 00007ffc7dea8798
[  471.453616][T24884]  </TASK>
[  471.457813][   T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.465973][   T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.474293][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.507826][T24893] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  471.545075][T24725] veth0_vlan: entered promiscuous mode
[  471.555152][T24725] veth1_vlan: entered promiscuous mode
[  471.578654][T24725] veth0_macvtap: entered promiscuous mode
[  471.591324][T24725] veth1_macvtap: entered promiscuous mode
[  471.634883][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.645570][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.655461][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.666054][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.676090][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.687058][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.697325][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.707925][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.717924][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.728623][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.738475][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.749094][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.759240][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  471.769819][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.784039][T24904] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks
[  471.784062][T24725] batman_adv: batadv0: Interface activated: batadv_slave_0
[  471.784151][T24904] ==================================================================
[  471.784192][T24904] BUG: KCSAN: data-race in data_push_tail / string
[  471.784232][T24904] 
[  471.784239][T24904] write to 0xffffffff88ba0e56 of 1 bytes by task 24725 on cpu 0:
[  471.784261][T24904]  string+0x16c/0x210
[  471.784295][T24904]  vsnprintf+0xa09/0xe30
[  471.784329][T24904]  vscnprintf+0x42/0x90
[  471.784364][T24904]  printk_sprint+0x30/0x2d0
[  471.784399][T24904]  vprintk_store+0x570/0x810
[  471.784431][T24904]  vprintk_emit+0x15e/0x680
[  471.784463][T24904]  vprintk_default+0x26/0x30
[  471.784497][T24904]  vprintk+0x75/0x80
[  471.784516][T24904]  _printk+0x7a/0xa0
[  471.784537][T24904]  batadv_hardif_activate_interface+0x1e5/0x330
[  471.784568][T24904]  batadv_hard_if_event+0x47a/0x1010
[  471.784593][T24904]  raw_notifier_call_chain+0x6f/0x1d0
[  471.784617][T24904]  call_netdevice_notifiers_info+0xae/0x100
[  471.784649][T24904]  __dev_notify_flags+0xff/0x1a0
[  471.784689][T24904]  dev_change_flags+0xab/0xd0
[  471.784719][T24904]  do_setlink+0x844/0x2490
[  471.784760][T24904]  rtnl_newlink+0x11a3/0x1690
[  471.784790][T24904]  rtnetlink_rcv_msg+0x6aa/0x710
[  471.784824][T24904]  netlink_rcv_skb+0x12c/0x230
[  471.784860][T24904]  rtnetlink_rcv+0x1c/0x30
[  471.784898][T24904]  netlink_unicast+0x599/0x670
[  471.784932][T24904]  netlink_sendmsg+0x5cc/0x6e0
[  471.784976][T24904]  __sock_sendmsg+0x140/0x180
[  471.785005][T24904]  __sys_sendto+0x1d9/0x250
[  471.785036][T24904]  __x64_sys_sendto+0x78/0x90
[  471.785065][T24904]  x64_sys_call+0x2959/0x2d60
[  471.785101][T24904]  do_syscall_64+0xc9/0x1c0
[  471.785126][T24904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.785164][T24904] 
[  471.785174][T24904] read to 0xffffffff88ba0e50 of 8 bytes by task 24904 on cpu 1:
[  471.785195][T24904]  data_push_tail+0x102/0x430
[  471.785222][T24904]  data_alloc+0xbe/0x2c0
[  471.785247][T24904]  prb_reserve+0x85e/0xb60
[  471.785279][T24904]  vprintk_store+0x53f/0x810
[  471.785311][T24904]  vprintk_emit+0x15e/0x680
[  471.785340][T24904]  vprintk_default+0x26/0x30
[  471.785374][T24904]  vprintk+0x75/0x80
[  471.785400][T24904]  _printk+0x7a/0xa0
[  471.785427][T24904]  __ext4_msg+0x18e/0x1a0
[  471.785454][T24904]  ext4_resize_fs+0x2cb/0x2750
[  471.785473][T24904]  ext4_ioctl+0x17c5/0x2dd0
[  471.785501][T24904]  __se_sys_ioctl+0xcd/0x140
[  471.785524][T24904]  __x64_sys_ioctl+0x43/0x50
[  471.785549][T24904]  x64_sys_call+0x15cc/0x2d60
[  471.785582][T24904]  do_syscall_64+0xc9/0x1c0
[  471.785604][T24904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.785635][T24904] 
[  471.785641][T24904] value changed: 0x000000010000195a -> 0x6162203a7664615f
[  471.785654][T24904] 
[  471.785660][T24904] Reported by Kernel Concurrency Sanitizer on:
[  471.785678][T24904] CPU: 1 UID: 0 PID: 24904 Comm: syz.1.6607 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  471.785714][T24904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  471.785732][T24904] ==================================================================
[  471.785744][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.785792][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.873182][T24911] FAULT_INJECTION: forcing a failure.
[  471.873182][T24911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.875998][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.881421][T24911] CPU: 1 UID: 0 PID: 24911 Comm: syz.2.6609 Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0
[  471.887299][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.892233][T24911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  471.892254][T24911] Call Trace:
[  471.892264][T24911]  <TASK>
[  471.896948][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.901354][T24911]  dump_stack_lvl+0xf2/0x150
[  471.906134][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.911046][T24911]  dump_stack+0x15/0x20
[  471.915815][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.920191][T24911]  should_fail_ex+0x229/0x230
[  471.925128][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.929711][T24911]  should_fail+0xb/0x10
[  471.934437][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.938894][T24911]  should_fail_usercopy+0x1a/0x20
[  471.943571][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.948217][T24911]  _copy_from_user+0x1e/0xd0
[  471.952822][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.958681][T24911]  copy_msghdr_from_user+0x54/0x2a0
[  471.961052][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.968676][T24911]  __sys_sendmsg+0x171/0x270
[  471.973433][T24725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  471.977616][T24911]  __x64_sys_sendmsg+0x46/0x50
[  471.982012][T24725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  471.986584][T24911]  x64_sys_call+0x2689/0x2d60
[  471.994711][T24725] batman_adv: batadv0: Interface activated: batadv_slave_1
[  471.995642][T24911]  do_syscall_64+0xc9/0x1c0
[  471.995667][T24911]  ? clear_bhb_loop+0x55/0xb0
[  472.007921][T24725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.012611][T24911]  ? clear_bhb_loop+0x55/0xb0
[  472.017234][T24725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.021773][T24911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.026505][T24725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.031090][T24911] RIP: 0033:0x7f628e3bdef9
[  472.035615][T24725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.041514][T24911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.402388][T24911] RSP: 002b:00007f628cff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.411408][T24911] RAX: ffffffffffffffda RBX: 00007f628e576130 RCX: 00007f628e3bdef9
[  472.419396][T24911] RDX: 0000000000000000 RSI: 0000000020003e80 RDI: 0000000000000006
[  472.427373][T24911] RBP: 00007f628cff5090 R08: 0000000000000000 R09: 0000000000000000
[  472.435441][T24911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.443703][T24911] R13: 0000000000000000 R14: 00007f628e576130 R15: 00007ffd1960ff58
[  472.451713][T24911]  </TASK>
[  474.527350][ T3340] net_ratelimit: 8 callbacks suppressed
[  474.527366][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.602749][ T3339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.554521][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.632372][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.792271][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.522620][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.530859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.594637][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.675132][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.636018][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.715641][ T3340] net_ratelimit: 7 callbacks suppressed
[  479.715662][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.802315][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.754238][ T3336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.832232][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.840753][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.849560][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.858080][ T3338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog