last executing test programs:

29.174325382s ago: executing program 1 (id=128):
perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket(0x2a, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002d80)=@newtclass={0x24, 0x28, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0xd, 0x3}, {0x3, 0x7}}}, 0x24}}, 0x40800)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xd}}}, 0x24}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

29.160788322s ago: executing program 1 (id=129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x5)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCSETS(r6, 0x5453, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5417, &(0x7f0000000080))
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

29.095811352s ago: executing program 1 (id=130):
r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x457a4f59ceee3eb8}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000001180), 0xfffffffffffffffe, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fBy\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\fU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sa\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\v\xfbO\xf3\xff\x1bf\xedC\xbd\xd1\xf1#\xb3\xe5\t\x9a\xddk\x95\xd5N\xf3\x98\x1a\xa3\xca%N\xf8\xc6\xbcJw\xd8\x99f\xf1\xb5\x93^x|\x05\x00\x00\x00o*\xd3\xab\x05$<\xa3KQm\x00\xd3M\xb2\xd0,\xeeP\x1a\xd0 yI!\x17\x9b\xe7\xef\t\xba\xa0]\xf4\xb7\x00_g/\r\xd2\x06\xc5\x15\x1d\xcc\x0eB\x87\xe9 \x81P\"\xea\xd5#\xa4\xe5\xa1\x19Wp\x83\xf8tC\x10\xbe\xe3\xa9H\xc7\x89\x0eN\xd3\xc1\xd7\x99\xd8\x88\x1dZ\x91\r\xd1\x1c\xac\xe26b\x04\xecB[\xf3Lp\xfcQ\xf8\xec\xa0\x87\xd3\xde\x8bo\xd2\xbb~;\x8d\xc2\xf1\tP\xdfB\"VD\v\x90\xfb`\x8b\xfbr\x87B\xc3\x1c\x99\xe1ft\xd1\xdb\x0e\x86\xa3\xfc;y\x9d\xe6\xe25\x9f9\nj\x8a\xba\xb5\xc7\x92`\xed\x89\xf4\xbd\xc3\xe7l\xa9\xda\xde\xe0\xcf\xeaM\xb2~\x159\x92\xf60\x0e\xa0\xc2\x17\x8aC\xa5\xcf\xcd\x16\xdb\x83v\xe8\xf1\x82\xe2\xa5\xf0\xc7K\xe4?|\xc9\xdfx\xf0\xb1', &(0x7f0000001600)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000081cf8cfd86b2b2cf2df4dc08b5c257ef010060007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sync()
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000040)=""/204, 0xcc}], 0x1, 0x2, 0xac5b)
preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0)
sync()
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
sync()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x6, &(0x7f0000000100)=[{0x6, 0x3, 0x10, 0x8}, {0x4, 0x2, 0x8, 0x7c4c95d7}, {0x2, 0x4, 0x8, 0x1000}, {0x9, 0x6, 0x81, 0x50b3}, {0x8, 0xfb, 0x0, 0x87}, {0x1, 0xff, 0x80, 0x5e86aae8}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(r3, &(0x7f0000000140)='mounts\x00')

28.971899353s ago: executing program 1 (id=135):
r0 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b9, &(0x7f0000000c00)="$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")
acct(&(0x7f00000001c0)='./file1\x00')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002a40)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000100)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT])
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)

28.841610912s ago: executing program 1 (id=139):
r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10410, 0x1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8210, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r6, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02090406300000002cbd7000fedbdf25010015004e23000004000300050000000000000000000000210000000000000001000000000000000400040006000000050000000000000006000000000000000104000000000000180018000808b300df4978fa3c06eb2a5bf2149463a7a039893c5a1c9178b5dc232cfa1e22e945dee77d5afcf314ba23a591b9cb6145fe2409fb8e347c8e6bd23a747769068252be18e58eb83bfe584b3228d9dc95b4be49076db9c68f4faf853d28ca3bf1324517ae16ff5b695b39fa7c9efcdd0767f13645a26f35c6cc4a88ff2903f4ec29fe24c266a62a83bb9dfb777a76e4f4a57e42fd19040999b9aebee8c73ea7d718a802bdede25f9167a47663a35bb27e2ca2aebba67d0000000000050019000000000002004e24ac1414bb000000000000000002004e21ac1414aa000000000000000005001a0000000000000000000000ffffac1e0001ac1414bb0000000000000000000000002900101002000a003800000009000000000000000100140000000000e45052d4b96fcf0d404d8c3176bcdd365491e57fa1e1a34d42f1a1146d90916f159c89d71577"], 0x180}}, 0x854)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
keyctl$KEYCTL_CAPABILITIES(0x15, 0x0, 0x0)
write$char_usb(r9, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_int(r11, 0x0, 0xc, 0x0, &(0x7f0000000080))
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

28.571144573s ago: executing program 1 (id=145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20)
r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8813eec6f838616, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000000000fab7ecf400", [0x100000000, 0x2]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f000011", "bd14060000000000000092f94413582b", '\x00\x00\x00 '}, 0x28)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r7, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x154)
close_range(r5, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdf2501"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

28.570677023s ago: executing program 32 (id=145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20)
r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8813eec6f838616, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000000000fab7ecf400", [0x100000000, 0x2]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f000011", "bd14060000000000000092f94413582b", '\x00\x00\x00 '}, 0x28)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r7, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x154)
close_range(r5, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdf2501"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

11.385996921s ago: executing program 4 (id=532):
r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10410, 0x1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8210, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r6, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02090406300000002cbd7000fedbdf25010015004e23000004000300050000000000000000000000210000000000000001000000000000000400040006000000050000000000000006000000000000000104000000000000180018000808b300df4978fa3c06eb2a5bf2149463a7a039893c5a1c9178b5dc232cfa1e22e945dee77d5afcf314ba23a591b9cb6145fe2409fb8e347c8e6bd23a747769068252be18e58eb83bfe584b3228d9dc95b4be49076db9c68f4faf853d28ca3bf1324517ae16ff5b695b39fa7c9efcdd0767f13645a26f35c6cc4a88ff2903f4ec29fe24c266a62a83bb9dfb777a76e4f4a57e42fd19040999b9aebee8c73ea7d718a802bdede25f9167a47663a35bb27e2ca2aebba67d0000000000050019000000000002004e24ac1414bb000000000000000002004e21ac1414aa000000000000000005001a0000000000000000000000ffffac1e0001ac1414bb0000000000000000000000002900101002000a003800000009000000000000000100140000000000e45052d4b96fcf0d404d8c3176bcdd365491e57fa1e1a34d42f1a1146d90916f159c89d71577"], 0x180}}, 0x854)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
keyctl$KEYCTL_CAPABILITIES(0x15, 0x0, 0x0)
write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_int(r11, 0x0, 0xc, 0x0, &(0x7f0000000080))
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

11.379837471s ago: executing program 4 (id=533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r3, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x6d, 0x11}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0)

11.330587591s ago: executing program 4 (id=535):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000f3ffffff000000382304f5d34548f98c090d443a380bc627cb188df8372e5e619f82688e579554c123f2649899b7332a93254bf656b1199f945fadb31c8523b10f63f29bb57ec61c47323d795eba51a44023b72ecbac7bb2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0)
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
acct(0x0)

11.117149022s ago: executing program 4 (id=541):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
write$binfmt_script(r0, &(0x7f0000000540), 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syncfs(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
unshare(0x28000400)
r5 = socket$inet(0x2, 0x80003, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x3a8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, 0x0, 0x0}, 0x20)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000100001000000000000000000fe880000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000001100000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x3d, 0x55d, &(0x7f0000000b00)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x10)
fchdir(0xffffffffffffffff)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x82, 0x1, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x3ff}, r11, 0x100000000000, 0xffffffffffffffff, 0x0)

10.880039852s ago: executing program 4 (id=545):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800710, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nouid32}, {@user_xattr}, {@errors_remount}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x472, &(0x7f0000000240)="$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")
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003380)=ANY=[], 0x48)
r0 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x10, r1, 0x0, 0x0, 0x200, 0x0, 0x0, r1}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0xfff})
process_vm_writev(r0, &(0x7f0000002dc0)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003300)=[{&(0x7f0000002e00)=""/100, 0x64}, {&(0x7f0000002e80)=""/186, 0xba}, {&(0x7f0000002f40)=""/234, 0xea}, {&(0x7f0000003040)=""/143, 0x8f}, {&(0x7f0000003100)=""/87, 0x57}, {&(0x7f0000003180)=""/91, 0x5b}, {&(0x7f0000003200)=""/237, 0xed}], 0x7, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
recvmsg$unix(r3, &(0x7f0000001b40)={&(0x7f0000000700), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/169, 0xa9}, {&(0x7f0000001940)=""/198, 0xc6}, {&(0x7f0000001a40)=""/194, 0xc2}, {&(0x7f0000001bc0)=""/155, 0x9b}], 0x6, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)

10.688419593s ago: executing program 4 (id=550):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

10.669737982s ago: executing program 33 (id=550):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)

3.165650535s ago: executing program 2 (id=724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = getpid()
setreuid(0xee00, 0x0)
syz_pidfd_open(r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

3.147900115s ago: executing program 2 (id=725):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r1, 0x84, 0x74, 0xfffffffffffffffe, &(0x7f0000000040)=0x41)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
socket$kcm(0x11, 0xa, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0xd, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

2.286469306s ago: executing program 2 (id=749):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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")
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r6, 0x10001, 0x0)

2.253036886s ago: executing program 2 (id=751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0xf2ff}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
request_key(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x28, 0x0, 0xe1527b0cf4b1ab97, 0x0, 0x0, {{}, {@val={0x59}, @val={0xc}}}}, 0x28}}, 0x0)
openat(0xffffffffffffffff, 0x0, 0x200081, 0x40)

1.197444678s ago: executing program 2 (id=771):
syz_emit_ethernet(0x8e, &(0x7f0000000d80)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x58, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "000100", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, [@hopopts={0x3a}], "df56d55afb0de3af04cfb8847c321f682afab786a80700005e6aa1e0136a3056"}}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc)

1.197239478s ago: executing program 3 (id=772):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (fail_nth: 10)

1.116875488s ago: executing program 5 (id=774):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

899.534129ms ago: executing program 2 (id=776):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close_range(r1, r0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x232})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000006c0)=ANY=[@ANYRESHEX])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0xc0182101, 0x20000000)

864.312068ms ago: executing program 6 (id=777):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$eJzs3EtvG0UcAPD/rpv0RR6U8ugDaiiIiELSpAUqxAUEUi9ISHCAY0hDFZq2qAkSrSpaECpHxCcAjkh8Ak5wQcAJxBXuCKlCvVA4IKO1d4kT28Gx67qpfz9p45l9eOa/uxPP7ngdwMAqZ3+SiEpE/BIRY7Xs6hXKtZfr1y7O/XXt4lwSlcorfyTV9f68dnGuWLXYbmeemUgj0g+T2Nek3KXzF07NLi7On8vzU8un355aOn/hiYXTsyfnT86fmTl27OiR6aefmnnyhsQ5ktV173tn9+85/vonL81V4o3vv8zqe0e+vD6OmvGuyyxHefW+rBqu/n2k63e/tYzUpZMtfawIG1KKiOxwDVXb/1iUYuXgjcWLH/S1ckBPVSqVytaGuaUicbkC3MaS6HcNgP4oPuiz699iuondj767+lztAiiL+3o+1ZZsiTR72Va7Yh/pUfnliHjt8t+fZlM0vQ/R3LYe1QcAuP19nfV/Hm/W/xtN7qlbbzQfGxqPiEMRsSsi7oqI3RFxd0Rk694bEfdtsPzymnxj/+en7R0F1qas//dsPra1uv+XFquMl/LcSDX+oeTNhcX5w/k+mYihrVl+ep0yvnnh549bLavv/2VTVn7RF8zr8fuWNTfoTswuz3YTc71nFmqvjfGv3BdIImJPROzt4P2zfbbw2Bf7s/Tozsbl/x//Om7AOFPl84hHa/FfjjXxF5JaSa3GJ6e2xeL84anirGj0w49XXq7PD9Wlu4r/Brj6fsSOFse/qmgGxXjt0sbLuPLrRy2vaTo9/4eTV6vp4Xzeu7PLy+emI4bzGavmz6xsW+SL9bP4Jw42i3802RXxz2f5dvsiIjuJ74+IByLiQF73ByPioYg4uE783z3/8Fvr76H+Hv8T6x3/iPGkfry+g0Tp1LdftSq/veN/tJqayOe08/+v3Qp2s+8AAABgs0ir34FP0sn/0mk6OVn7Dv/u2JEunl1aPlSOd86cqH1XfjyG0uJO11jd/dDp/N5wkZ9Zkz8SEXdW7yhur+Yn584u9mpMHWjPzhbtP/Nbqd+1A3puQ+NojU+0AZuY5zVhcGn/MLi0fxhc2j8Mrmbt/1LE9T5UBbjJfP7D4NL+YXBp/zC4tH8YSI2PxBc/t9LJk/4riV3Hu9p8gBKlHr1z1P9oRw8SkfZ913WeSG+FahzIE1sjot2tLvX0mK49fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwMAAP//GCvoLw==")
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r6, 0x10001, 0x0)

740.450369ms ago: executing program 5 (id=778):
r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10410, 0x1}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8210, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r6, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x180}}, 0x854)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
keyctl$KEYCTL_CAPABILITIES(0x15, 0x0, 0x0)
write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_int(r11, 0x0, 0xc, 0x0, &(0x7f0000000080))
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

715.545369ms ago: executing program 3 (id=779):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x11ef, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x8000000092}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00')
recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0x10002}], 0x1, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x210002, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0x904e)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5)
ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0)
r6 = socket(0x10, 0x3, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000300)="d0c6", 0x2}])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x8000000}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0)
pwrite64(r6, &(0x7f00000002c0)="a7839f23b3b9b5bbda69926e2137c8a5a3e597ad1e458ce198cba236d57b8935ab5473c904f3640483242aed9ae24b36fec880ef7b9e3a62a26a3c99c61399df5b1300db90e08b0ce8ad1a72bed3006fe015656371", 0x55, 0x1)

714.860459ms ago: executing program 5 (id=780):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) (async)
unlink(&(0x7f0000000180)='./file1\x00') (async)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x8a, &(0x7f0000000100)=0x57cc0000, 0x4) (async)
lsetxattr(&(0x7f0000000240)='./file2\x00', &(0x7f0000000280)=@random={'os2.', ':@!(\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x3)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f91124fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0)

616.842469ms ago: executing program 5 (id=781):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r4 = dup(r3)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x2, 0x0, 0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4)
r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080))

616.227799ms ago: executing program 6 (id=782):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000093ffda1ed094f8e80000002000"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x8c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0200001000010000000000fedbdf25e0000002000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000100000000000000000000000000000000330000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000003500000a000400000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013010100636d61632861657329"], 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

572.098379ms ago: executing program 6 (id=783):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0103"], 0x34}}, 0x0)
recvmsg(r2, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x10002)

571.718909ms ago: executing program 6 (id=784):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000f3ffffff000000382304f5d34548f98c090d443a380bc627cb188df8372e5e619f82688e579554c123f2649899b7332a93254bf656b1199f945fadb31c8523b10f63f29bb57ec61c47323d795eba51a44023b72ecbac7bb2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
acct(0x0)

571.469309ms ago: executing program 5 (id=785):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
listen(r0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r4 = dup(r3)
write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (fail_nth: 3)

557.230439ms ago: executing program 0 (id=786):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100106, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

330.589629ms ago: executing program 0 (id=787):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1ce1b6528f454bf77af117840c2983ba6c21d30a880dadfeb7cb48787335d54004000000b77c17631aedbd953046cbfc490898980d50241b5eca652df77378f69ffd45530dac252fb7e4387dd662d0e54b3dfe9c7f631f866f9f3701741847e727fa5c9d000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095", @ANYRES8=r3, @ANYBLOB="08faa07d1cebea3218993a71bed3cfe639b1a6000127126289073f1e647c8bcbe618e7b4bf72aa4b07030defefcae976900ec0634ea59a468faa855ec7f17e24d84c71e330b5bc3829c88bd66cd44d1b45357095920cad0f05d98e705799d00db5168b49faa005f9031f3b8885e1f299b8f997797f2122bba325397bac2a7dd3a9ee34e64674cee52e3e29d80af6d57252f9fe14d8d106ca125fff922670557102ed23ee60bcf463dc8c46b764d363670b94062c390c5ae4034cafe634"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT=r1, @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="020000fc7fffff00000000000000008500000041007930d50000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
set_robust_list(&(0x7f0000000280), 0x18)

329.786519ms ago: executing program 0 (id=788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

328.727029ms ago: executing program 5 (id=789):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0xa, 0x40000000002, 0x0)
recvfrom$inet_nvme(r0, &(0x7f0000000000)=""/95, 0x5f, 0x0, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @private1, 0x2, 0x4}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x0, 0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
setpgid(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000008e9e18110000", @ANYRES32=r5, @ANYRES64=r5], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e21}})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x1, 0xa82, &(0x7f0000000180)="$eJzs3c1vHGcZAPBnNrZju1WbtqEtUZtMUqV12+CsbZoo6oEm9jpx8QeyHamRQE3VOCiKRVEDUhshNZUQJyoqhJAACaEeOVUqB3pBORWOnDggQf8DVHFKETBoZnftXWc/Yndtp+X3s9Y7H8877/POzM7rXe/uG3yeZVlW3LY4f/63O5ksd58zUx+/9/47+e3tGzEQe+K55PcRgxGRRvT9pzhX+ienFhfmumzoasTFiLgZkUTE3qjetzHUNHcxkp/EvevzNyP5VTzaotjgJhtHVxn/13b7/AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLvS5FS5PJbE7Mz8+ZfS9oohwDusr2/uw2LU7+TDbtUmEUl+i8HB+lDfj+5fX/1w/utIPFade6w68vdgXL/n4X3PP9RXqpfvkNCOuPbm9auvrK6uvF6b35um/V0L7d32tDZvYGvFzlbmZ5YWZuZOn62kM0sL6akTJ8rHz00vpdMzUVm6sLRcmUsnFyunlxcW05HJp9OxU6cm0srohYXz82enRmcr9YUnvzJeLp9IXxz9RuX04tLC/PEXR5cmz83Mzs7Mny1i8tV5zMn8RPz6zHK6XDk9l6aXr6yuTHRLMg8aa7kmaQ4a77al8fL4+NjY+FCceO7UcyfL5b7agvGx+oLyBnFbxO6ftPTar+848nc9v37DZ1Cq9f8xGzMxH+fjpUhb/kzGVCzGQsy1WJesb6/e/x89XulYb2P/X+/lH11ffSCK/v9gFH9YHGzX/7fJtftPllXrabHuo5VNbOdavBnX42q8EquxGivx+pYzWv/5qHn+043r/51l2Ra2m+atPdS4D3qQ69moxHzMxFIsxEzMxeliSVpbksapOBEnohwvx7mYjqVIYzpmYjYqsRQXYimWo1KcUZOxGJU0YjkWYjHSGInJeDrSGItTMRQTkUYlRuNCLMT5mI+zMRWni61cjivFfp/okONa0NidBI13CLqtM/9s/X92N/4lyHbr+TUctiqr9f8DbQOy+tTI5I5lBQAAAPTSl/8U9+1/8I9/i+iPx4vX5adnZivl3U4LAAAA6KHi7XqP5Xf9WUQ8HkmL5/+lXUoOAAAA6IkkDtZeBRiOQ9Wp6ieh9oQ3AQAAAMAXRPH//4P53XA+dSiStW9CubjbuQEAAAC90f079rtGJINR+07L9FL1/lItovY9v8PTM7OV0cmF2efH4sniWwaKTxrctrU9EUl/8fGDZ+JwNerwcPV+uHmLg3nU2OjzY/FMHKk1ZOSJ/O6JkRaR49XIp6qRT3WInMgjAeCL7sjt/fGn2Sb7/2fiWDXi2IG+gYjoO9CiZy2v96x9u9FQAGDNkeL9/53G2GmOeKtWrrH//+r68//+2uqm/v/BuPzffOFKjMar8VqsxqU4VnzaoHjHQVO933y39prB2tsQynGsy6sB9dg/nyzFsS6vBww3DPRyrMsrAtXY+FbExPYeBADYYUfa9MPt+v8iIupvHKz2/8canv/H7c//14YWWvGRQgC4K6yNYN/TiWxP45LdbiMA0EwvDQAAAAAAAAAAAAAAAAAAAAAAAAAAAL3X06/9H9xi8b/XxvWrLsl6Px5B64mh2j6oL3lrU3vj7WtvXv9pRDSuKuWN2J6ci0x7u+VSD7aTRcROHa+dm4h9EVveq9Fq1UBEbHvyQ72o4tPaRPWxUep08TjfcS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfA0nEnlbLSxF7I6IcEcd3Pqvtc2O3E9h5X2ucSW7FrXgj7tu9dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvphq3/9fiur9PdVF0VeKOBoRFyMi2+0ce+nWbifQI0NbLNfw/f/5MY8sib7qYY+kf3JqcWEuP/zF2A+lj997/51HmovvvdN6isDShsElajVsjP3NvfWpB4pSw1Mr165+77XvplNnohQDcWZ5enZq7uziC+tFHk4+iEijeqvL881vPzj6h3dbtPyDvKWtbax3utg5U7fX+0ir0p3r7eTK6sp4XtNy5aXl73/nyhsNqx6MwxFPjESMNNf07fzWpqbD0d+ptuST5EfJffHzuFgc/3xvJFmSH6L7i/YPXb6yujL66murl9rktC8ORcSliMGuOa3t6kPF9aSl4qwr9ee1loug/Nf+Lm1srXGMi+oWx9q04YHilBmutWGgqQ2lNnWm7dtQ7PCG/V6qTyTJxowmahkNRHNGD8WTLY50tjei/V54svORbi35JPlrci7+Ej9sGP+jlB//o9H+0dm8iSKy4UxpG1mqRhYtH29c8fLGyH/84o6ybzlMDZv146YHb6nh+l87Vj26HmVJx+tRQ40TbWps/bjYUOPGs6LUtuFFj7R/Q4na1adtoWqe+6tRTXmuV/SleDai70Cnq+JtvfWz7a8ozeVfaL16q4//XyYj8c+4YfwfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7pdE7Gm1vBRxNCL21efTiGwTm93bbkVpONlsij11Y+3X59z+4nepadnb3Yslt+JW9tZ2JQUAAAAAAADATjsz9fF777+T34r/x++5lWW1/++nEX0RsS/52VBMLS7MddlQf8TFiLiZTw+2C/pXVtW8NC8X967P34zI7t96kwCALv4XAAD//wIIc7g=")
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0)

328.174229ms ago: executing program 6 (id=790):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=<r0=>0x0, &(0x7f0000000680)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffee) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='hrtimer_init\x00', r1}, 0x68) (async)
socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) (async)
r2 = socket$inet6(0xa, 0x2, 0x0) (async)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
getsockname$inet6(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) (async)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1, 0x2}, 0x1c) (async, rerun: 32)
listxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=""/110, 0x6e) (async, rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x26, &(0x7f0000000780)=@raw=[@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query, @jmp={0x5, 0x0, 0x0, 0xa}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000280)='GPL\x00', 0x4, 0xc6, &(0x7f0000000300)=""/198, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x4, 0x2, 0x3, 0x5}, {0x5, 0x4, 0xb, 0x6}, {0x0, 0x5, 0x8}, {0x3, 0x4, 0xb, 0xa}, {0x2, 0x3, 0xe, 0x2}, {0x5, 0x4, 0xb, 0xc}, {0x1, 0x4, 0xf, 0x6}], 0x10, 0x8003, @void, @value}, 0x94)
ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f00000005c0)={r5}) (async)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd) (async)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00'/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000500", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000600)) (rerun: 64)

306.055949ms ago: executing program 0 (id=791):
ioperm(0x8, 0x1, 0x57)
ioperm(0x4, 0x1, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
getresuid(&(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280))

288.61885ms ago: executing program 6 (id=792):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (fail_nth: 10)

288.007259ms ago: executing program 3 (id=793):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x201, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)
dup2(r1, r2)

252.190389ms ago: executing program 0 (id=794):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
socket$unix(0x1, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1)

241.39092ms ago: executing program 3 (id=795):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103"], 0x34}}, 0x0)
recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x10002)

227.72448ms ago: executing program 0 (id=796):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x11ef, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x8000000092}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00')
recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0x10002}], 0x1, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x210002, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(0xffffffffffffffff, 0x904e)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5)
ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0)
r6 = socket(0x10, 0x3, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r7=>0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r7, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000300)="d0c6", 0x2}])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x8000000}, 0xc)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0)
pwrite64(r6, &(0x7f00000002c0)="a7839f23b3b9b5bbda69926e2137c8a5a3e597ad1e458ce198cba236d57b8935ab5473c904f3640483242aed9ae24b36fec880ef7b9e3a62a26a3c99c61399df5b1300db90e08b0ce8ad1a72bed3006fe0156563716603017347e4cd107922ad08531b6723b5180802262c0a83a14706b48358f2b9a6a87598a7a9ea7fd9a3", 0x7f, 0x1)

32.49615ms ago: executing program 3 (id=797):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100106, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

0s ago: executing program 3 (id=798):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000000000000000000000020000000000bf2e42bc35d0100a0000000000000000001202000000020000000000000e030000000000000000006100"], 0x0, 0x54, 0x0, 0x800000, 0x0, 0x0, @void, @value}, 0x28) (rerun: 64)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async, rerun: 64)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) (rerun: 64)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000500)="b05d8553dd6373171664c952f131fd3139af9059e3547af6dc24737ac3ac9db84c45dae3850ba74cafb40d179ba68e85a9cfc274531c5360d749e29da803fc617f74d7a986b4ead1d50e74d676c775e5f775e081243b325e6c3d1378cea72c4c1d73078dd80b14398d347a11454be2542678c46f6cb7e156b25fad4411421aba6ad8d6fa3707312bfb2843cfa5678bbd159064142332b748c8affd", 0x9b}, {&(0x7f0000000040)="bbee484b8c18578fde5e23d433fb8a12f7c0bcc038a10c2fac71cafb860c7ed31e6457c54aca4668a2977df85c9893b8330714500024bff5920bb0b66e024e64826e60fb35a540678c10d965fefeaea74ee68c9192d58913c9078806b503b1f7cd96ce25be9bdf71a2c66ecd83d700370c", 0x71}, {&(0x7f00000003c0)="b782b3ad389002c3267f154c81a894704106cfc1822b00de9f", 0x19}, {&(0x7f00000005c0)="695da34b54d23a56760e50f7f004e1ae0f6ba0a12ab300ab653937f97581ace59f8bc15cbd4458b43c92adf9135f5b94d12fc952de9426d78ed0dd776859cc9a5dfcd425d9ee779fe9b8a431669a6a752c31e9b7556036291ac79bf2b6cef7a399ace5a08c27d24af1d0f01bbd391adb8b8ed288e33d612656bfb9335de1f50340a4dd79a547803b79c01819a225f798f291c05070f6336ac24c8fd3be397c58a1feb0633501360db5f4c440dcfe9b9b6f45c74dbd552a92c3e862cc9b81e86dbf8a7cc2a05477d158831476bfc43dff7992d82d0523ee5a82b8f2edaceb", 0xde}], 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

0000-0000-000000000000.
[   29.724504][ T3575] loop4: detected capacity change from 0 to 512
[   29.742426][ T3575] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.36: casefold flag without casefold feature
[   29.757787][ T3575] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.36: couldn't read orphan inode 15 (err -117)
[   29.771027][ T3575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.786517][ T3575] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure
[   29.894059][ T3580] SELinux: syz.2.38 (3580) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   29.965893][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.020474][ T3585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.39'.
[   30.103368][ T3597] FAULT_INJECTION: forcing a failure.
[   30.103368][ T3597] name failslab, interval 1, probability 0, space 0, times 1
[   30.116151][ T3597] CPU: 0 UID: 0 PID: 3597 Comm: syz.2.43 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   30.126819][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   30.135604][ T3600] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.40'.
[   30.136883][ T3597] Call Trace:
[   30.136898][ T3597]  <TASK>
[   30.152166][ T3597]  dump_stack_lvl+0xf2/0x150
[   30.156781][ T3597]  dump_stack+0x15/0x1a
[   30.160994][ T3597]  should_fail_ex+0x223/0x230
[   30.165724][ T3597]  should_failslab+0x8f/0xb0
[   30.170303][ T3597]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   30.176691][ T3597]  ? should_failslab+0x8f/0xb0
[   30.181519][ T3597]  ? key_alloc+0x2dd/0xa40
[   30.185999][ T3597]  kmemdup_noprof+0x2a/0x60
[   30.190503][ T3597]  key_alloc+0x2dd/0xa40
[   30.194739][ T3597]  keyring_alloc+0x44/0xb0
[   30.199230][ T3597]  lookup_user_key+0x318/0xdf0
[   30.204001][ T3597]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[   30.210233][ T3597]  __se_sys_add_key+0x24b/0x320
[   30.215153][ T3597]  __x64_sys_add_key+0x67/0x80
[   30.219915][ T3597]  x64_sys_call+0x2964/0x2dc0
[   30.224592][ T3597]  do_syscall_64+0xc9/0x1c0
[   30.229090][ T3597]  ? clear_bhb_loop+0x55/0xb0
[   30.233759][ T3597]  ? clear_bhb_loop+0x55/0xb0
[   30.238426][ T3597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.244332][ T3597] RIP: 0033:0x7f5a08f05d19
[   30.248741][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.268460][ T3597] RSP: 002b:00007f5a07571038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   30.276887][ T3597] RAX: ffffffffffffffda RBX: 00007f5a090f5fa0 RCX: 00007f5a08f05d19
[   30.284923][ T3597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280
[   30.292940][ T3597] RBP: 00007f5a07571090 R08: ffffffffffffffff R09: 0000000000000000
[   30.300901][ T3597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   30.308866][ T3597] R13: 0000000000000000 R14: 00007f5a090f5fa0 R15: 00007ffc99391aa8
[   30.316947][ T3597]  </TASK>
[   30.320794][ T3584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.330766][ T3584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.346846][ T3584] loop0: detected capacity change from 0 to 164
[   30.354933][ T3584] Unable to read rock-ridge attributes
[   30.382245][ T3602] sctp: [Deprecated]: syz.1.45 (pid 3602) Use of struct sctp_assoc_value in delayed_ack socket option.
[   30.382245][ T3602] Use struct sctp_sack_info instead
[   30.543824][ T3630] FAULT_INJECTION: forcing a failure.
[   30.543824][ T3630] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   30.550321][ T3632] FAULT_INJECTION: forcing a failure.
[   30.550321][ T3632] name failslab, interval 1, probability 0, space 0, times 0
[   30.557091][ T3630] CPU: 1 UID: 0 PID: 3630 Comm: syz.1.55 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   30.580153][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   30.590200][ T3630] Call Trace:
[   30.593467][ T3630]  <TASK>
[   30.596469][ T3630]  dump_stack_lvl+0xf2/0x150
[   30.601124][ T3630]  dump_stack+0x15/0x1a
[   30.605279][ T3630]  should_fail_ex+0x223/0x230
[   30.610001][ T3630]  should_fail_alloc_page+0xfd/0x110
[   30.615316][ T3630]  __alloc_pages_noprof+0x109/0x340
[   30.620551][ T3630]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   30.625947][ T3630]  alloc_pages_noprof+0xe1/0x100
[   30.630875][ T3630]  get_free_pages_noprof+0xc/0x30
[   30.635902][ T3630]  selinux_genfs_get_sid+0x33/0x170
[   30.641149][ T3630]  inode_doinit_with_dentry+0x63e/0x840
[   30.646697][ T3630]  selinux_d_instantiate+0x27/0x40
[   30.651886][ T3630]  security_d_instantiate+0x7e/0xa0
[   30.657083][ T3630]  __d_obtain_alias+0xce/0x5d0
[   30.661939][ T3630]  ? _raw_spin_unlock+0x26/0x50
[   30.666795][ T3630]  ? unlock_new_inode+0x74/0xa0
[   30.671633][ T3630]  d_obtain_alias+0x1a/0x20
[   30.676200][ T3630]  kernfs_fh_to_dentry+0xec/0x110
[   30.681277][ T3630]  exportfs_decode_fh_raw+0xc9/0x4d0
[   30.686666][ T3630]  ? kstrtouint+0x77/0xc0
[   30.691004][ T3630]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[   30.696819][ T3630]  do_handle_to_path+0x68/0xd0
[   30.701677][ T3630]  do_handle_open+0x4b4/0x580
[   30.706358][ T3630]  __x64_sys_open_by_handle_at+0x46/0x50
[   30.711988][ T3630]  x64_sys_call+0x2cca/0x2dc0
[   30.716658][ T3630]  do_syscall_64+0xc9/0x1c0
[   30.721165][ T3630]  ? clear_bhb_loop+0x55/0xb0
[   30.725831][ T3630]  ? clear_bhb_loop+0x55/0xb0
[   30.730502][ T3630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.736425][ T3630] RIP: 0033:0x7f23c0025d19
[   30.740828][ T3630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.760428][ T3630] RSP: 002b:00007f23be697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[   30.768833][ T3630] RAX: ffffffffffffffda RBX: 00007f23c0215fa0 RCX: 00007f23c0025d19
[   30.776793][ T3630] RDX: 000000000000ffa1 RSI: 00000000200005c0 RDI: 0000000000000003
[   30.784762][ T3630] RBP: 00007f23be697090 R08: 0000000000000000 R09: 0000000000000000
[   30.792726][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.800690][ T3630] R13: 0000000000000000 R14: 00007f23c0215fa0 R15: 00007ffcbd771988
[   30.808757][ T3630]  </TASK>
[   30.811779][ T3632] CPU: 0 UID: 0 PID: 3632 Comm: syz.3.56 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   30.822295][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   30.832361][ T3632] Call Trace:
[   30.835633][ T3632]  <TASK>
[   30.838556][ T3632]  dump_stack_lvl+0xf2/0x150
[   30.843225][ T3632]  dump_stack+0x15/0x1a
[   30.847406][ T3632]  should_fail_ex+0x223/0x230
[   30.852165][ T3632]  should_failslab+0x8f/0xb0
[   30.856833][ T3632]  __kmalloc_node_noprof+0xad/0x410
[   30.862067][ T3632]  ? __kvmalloc_node_noprof+0x72/0x170
[   30.867589][ T3632]  __kvmalloc_node_noprof+0x72/0x170
[   30.872901][ T3632]  io_futex_cache_init+0x2c/0xb0
[   30.877887][ T3632]  io_ring_ctx_alloc+0x595/0xcc0
[   30.882818][ T3632]  io_uring_create+0x40/0x6d0
[   30.887490][ T3632]  __se_sys_io_uring_setup+0x1d2/0x1e0
[   30.892966][ T3632]  __x64_sys_io_uring_setup+0x31/0x40
[   30.898355][ T3632]  x64_sys_call+0x270c/0x2dc0
[   30.903085][ T3632]  do_syscall_64+0xc9/0x1c0
[   30.907582][ T3632]  ? clear_bhb_loop+0x55/0xb0
[   30.912254][ T3632]  ? clear_bhb_loop+0x55/0xb0
[   30.916922][ T3632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   30.922908][ T3632] RIP: 0033:0x7fd83e825d19
[   30.927314][ T3632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   30.946938][ T3632] RSP: 002b:00007fd83ce96fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   30.955378][ T3632] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e825d19
[   30.963348][ T3632] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000002c0c
[   30.971387][ T3632] RBP: 0000000020000400 R08: 0000000000000000 R09: 0000000000000000
[   30.979441][ T3632] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[   30.987408][ T3632] R13: 0000000000000000 R14: 0000000000002c0c R15: 0000000000000000
[   30.995723][ T3632]  </TASK>
[   31.076478][ T3637] loop4: detected capacity change from 0 to 512
[   31.087526][ T3637] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   31.097299][ T3637] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   31.105682][ T3637] System zones: 0-2, 18-18, 34-35
[   31.111269][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.208940][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[   31.277478][ T3662] loop4: detected capacity change from 0 to 4096
[   31.293305][ T3662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.373016][ T3662] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   31.386168][ T3662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.59'.
[   31.430430][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.528289][ T3695] loop4: detected capacity change from 0 to 512
[   31.546544][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.552438][ T3696] loop3: detected capacity change from 0 to 1764
[   31.566483][ T3695] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.586349][ T3696] ISOFS: unable to read i-node block
[   31.591881][ T3696] isofs_fill_super: get root inode failed
[   31.618339][ T3696] ebtables: ebtables: counters copy to user failed while replacing table
[   31.651801][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.966380][   T29] kauditd_printk_skb: 598 callbacks suppressed
[   31.966394][   T29] audit: type=1400 audit(1734011135.126:738): avc:  denied  { ioctl } for  pid=3704 comm="syz.1.71" path="socket:[4934]" dev="sockfs" ino=4934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.997274][   T29] audit: type=1326 audit(1734011135.126:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.020592][   T29] audit: type=1326 audit(1734011135.126:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.043827][   T29] audit: type=1326 audit(1734011135.126:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.066989][   T29] audit: type=1326 audit(1734011135.126:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.090165][   T29] audit: type=1326 audit(1734011135.136:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.113477][   T29] audit: type=1326 audit(1734011135.136:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3704 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c0025d19 code=0x7ffc0000
[   32.155018][   T29] audit: type=1400 audit(1734011135.316:745): avc:  denied  { create } for  pid=3719 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   32.174410][   T29] audit: type=1400 audit(1734011135.316:746): avc:  denied  { bind } for  pid=3719 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   32.242731][   T29] audit: type=1326 audit(1734011135.396:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3721 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   32.405155][ T3736] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.78'.
[   32.480867][ T3741] process 'syz.2.80' launched '/dev/fd/3' with NULL argv: empty string added
[   32.672899][ T3758] loop2: detected capacity change from 0 to 1764
[   32.680844][ T3758] ISOFS: unable to read i-node block
[   32.686191][ T3758] isofs_fill_super: get root inode failed
[   32.710866][ T3758] ebtables: ebtables: counters copy to user failed while replacing table
[   33.062352][ T3773] FAULT_INJECTION: forcing a failure.
[   33.062352][ T3773] name failslab, interval 1, probability 0, space 0, times 0
[   33.075061][ T3773] CPU: 1 UID: 0 PID: 3773 Comm: syz.3.88 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   33.085572][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   33.095617][ T3773] Call Trace:
[   33.098888][ T3773]  <TASK>
[   33.101808][ T3773]  dump_stack_lvl+0xf2/0x150
[   33.106448][ T3773]  dump_stack+0x15/0x1a
[   33.110619][ T3773]  should_fail_ex+0x223/0x230
[   33.115290][ T3773]  should_failslab+0x8f/0xb0
[   33.119898][ T3773]  kmem_cache_alloc_node_noprof+0x59/0x320
[   33.125745][ T3773]  ? __alloc_skb+0x10b/0x310
[   33.130334][ T3773]  __alloc_skb+0x10b/0x310
[   33.134741][ T3773]  netlink_alloc_large_skb+0xad/0xe0
[   33.140032][ T3773]  netlink_sendmsg+0x3b4/0x6e0
[   33.144884][ T3773]  ? __pfx_netlink_sendmsg+0x10/0x10
[   33.150159][ T3773]  __sock_sendmsg+0x140/0x180
[   33.154864][ T3773]  ____sys_sendmsg+0x312/0x410
[   33.159615][ T3773]  __sys_sendmsg+0x19d/0x230
[   33.164275][ T3773]  __x64_sys_sendmsg+0x46/0x50
[   33.169031][ T3773]  x64_sys_call+0x2734/0x2dc0
[   33.173691][ T3773]  do_syscall_64+0xc9/0x1c0
[   33.178178][ T3773]  ? clear_bhb_loop+0x55/0xb0
[   33.182842][ T3773]  ? clear_bhb_loop+0x55/0xb0
[   33.187543][ T3773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.193455][ T3773] RIP: 0033:0x7fd83e825d19
[   33.197890][ T3773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.217513][ T3773] RSP: 002b:00007fd83ce97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   33.225996][ T3773] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e825d19
[   33.234014][ T3773] RDX: 0000000000000080 RSI: 0000000020000580 RDI: 0000000000000004
[   33.242032][ T3773] RBP: 00007fd83ce97090 R08: 0000000000000000 R09: 0000000000000000
[   33.249998][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.257963][ T3773] R13: 0000000000000000 R14: 00007fd83ea15fa0 R15: 00007fff82c68138
[   33.265933][ T3773]  </TASK>
[   33.287954][ T3780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'.
[   33.297153][ T3780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'.
[   33.309555][ T3780] loop3: detected capacity change from 0 to 512
[   33.316230][ T3780] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   33.330614][ T3780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.90'.
[   33.392955][ T3788] loop4: detected capacity change from 0 to 128
[   33.407033][ T3788] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   33.422261][ T3788] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   33.433509][ T3792] loop2: detected capacity change from 0 to 2048
[   33.477826][ T3794] loop1: detected capacity change from 0 to 512
[   33.486137][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   33.495739][ T3794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   33.517966][ T3794] EXT4-fs (loop1): orphan cleanup on readonly fs
[   33.525458][ T3792]  loop2: p1 < > p4
[   33.529978][ T3792] loop2: p4 size 8388608 extends beyond EOD, truncated
[   33.539168][ T3794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.95: bg 0: block 248: padding at end of block bitmap is not set
[   33.572638][ T3794] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.95: Failed to acquire dquot type 1
[   33.585363][ T3794] EXT4-fs (loop1): 1 truncate cleaned up
[   33.591686][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   33.693351][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.998707][ T3829] loop4: detected capacity change from 0 to 512
[   34.005295][ T3829] EXT4-fs: Ignoring removed bh option
[   34.011104][ T3829] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   34.020677][ T3829] EXT4-fs (loop4): 1 truncate cleaned up
[   34.026812][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.046202][ T3829] pimreg: entered allmulticast mode
[   34.059688][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.129431][ T3836] ebtables: ebtables: counters copy to user failed while replacing table
[   34.401982][ T3862] loop2: detected capacity change from 0 to 1024
[   34.437481][ T3862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.464484][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.669569][ T3882] loop1: detected capacity change from 0 to 164
[   34.925431][ T3909] loop1: detected capacity change from 0 to 256
[   34.955362][ T3909] Process accounting resumed
[   34.960056][ T3909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[   34.968997][ T3909] FAT-fs (loop1): Filesystem has been set read-only
[   34.984481][ T3912] Falling back ldisc for ttyS3.
[   34.990431][ T3909] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[   35.015796][ T3305] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   35.024412][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'.
[   35.033686][ T3305] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   35.248651][ T3953] loop3: detected capacity change from 0 to 764
[   35.328116][ T3964] loop3: detected capacity change from 0 to 512
[   35.338802][ T3964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   35.351595][ T3964] EXT4-fs (loop3): 1 truncate cleaned up
[   35.357807][ T3964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.408759][ T3975] loop4: detected capacity change from 0 to 1024
[   35.421332][ T3975] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   35.436154][ T3975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   35.485792][ T3962] chnl_net:caif_netlink_parms(): no params data found
[   35.518650][ T3962] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.526022][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.533335][ T3962] bridge_slave_0: entered allmulticast mode
[   35.533639][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.539880][ T3962] bridge_slave_0: entered promiscuous mode
[   35.554886][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.562074][ T3962] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.569312][ T3962] bridge_slave_1: entered allmulticast mode
[   35.575962][ T3962] bridge_slave_1: entered promiscuous mode
[   35.587681][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.607916][ T3962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.637528][ T3962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.668768][ T3962] team0: Port device team_slave_0 added
[   35.675407][ T3962] team0: Port device team_slave_1 added
[   35.689656][ T3962] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.696633][ T3962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.722603][ T3962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.733618][ T3962] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.740588][ T3962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.766750][ T3962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.795481][ T3962] hsr_slave_0: entered promiscuous mode
[   35.808561][ T3962] hsr_slave_1: entered promiscuous mode
[   35.814648][ T3962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.822197][ T3962] Cannot create hsr debugfs directory
[   35.905727][ T3962] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   35.930681][ T3962] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   35.939863][ T3962] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   35.949420][ T3962] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   35.971035][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.978199][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.985453][ T3962] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.992489][ T3962] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.017056][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.025042][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.042560][ T3962] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.054971][ T3962] 8021q: adding VLAN 0 to HW filter on device team0
[   36.065800][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.072878][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.083899][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.090993][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.150911][ T3962] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.278772][ T3962] veth0_vlan: entered promiscuous mode
[   36.289853][ T3962] veth1_vlan: entered promiscuous mode
[   36.306402][ T3962] veth0_macvtap: entered promiscuous mode
[   36.313488][ T3962] veth1_macvtap: entered promiscuous mode
[   36.323099][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.333690][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.343536][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.353997][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.364002][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.374476][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.384310][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.394783][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.404618][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.415179][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.425950][ T3962] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.436855][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.447360][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.457315][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.467729][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.477539][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.488058][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.497879][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.508317][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.518157][ T3962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.528582][ T3962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.539056][ T3962] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.547493][ T3962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.556335][ T3962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.565114][ T3962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.573850][ T3962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.662717][ T4056] loop5: detected capacity change from 0 to 512
[   36.669480][ T4056] EXT4-fs: inline encryption not supported
[   36.696102][ T4056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.708910][ T4056] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.775532][ T4066] loop4: detected capacity change from 0 to 512
[   36.782911][ T4066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   36.793767][ T4066] EXT4-fs (loop4): 1 truncate cleaned up
[   36.800204][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.857152][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.861876][ T4075] netlink: 'syz.2.176': attribute type 1 has an invalid length.
[   36.873984][ T4075] netlink: 224 bytes leftover after parsing attributes in process `syz.2.176'.
[   37.008608][   T29] kauditd_printk_skb: 561 callbacks suppressed
[   37.008621][   T29] audit: type=1326 audit(1734011140.166:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.027375][ T4095] FAULT_INJECTION: forcing a failure.
[   37.027375][ T4095] name failslab, interval 1, probability 0, space 0, times 0
[   37.039256][   T29] audit: type=1326 audit(1734011140.186:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.050858][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.0.184 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   37.074149][   T29] audit: type=1326 audit(1734011140.186:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.084681][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   37.084694][ T4095] Call Trace:
[   37.084700][ T4095]  <TASK>
[   37.108002][   T29] audit: type=1326 audit(1734011140.186:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.118017][ T4095]  dump_stack_lvl+0xf2/0x150
[   37.121300][   T29] audit: type=1326 audit(1734011140.186:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.124299][ T4095]  dump_stack+0x15/0x1a
[   37.147666][   T29] audit: type=1326 audit(1734011140.186:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.152102][ T4095]  should_fail_ex+0x223/0x230
[   37.152127][ T4095]  should_failslab+0x8f/0xb0
[   37.175371][   T29] audit: type=1326 audit(1734011140.186:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.179483][ T4095]  __kmalloc_node_track_caller_noprof+0xa8/0x410
[   37.202744][   T29] audit: type=1326 audit(1734011140.186:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.207379][ T4095]  ? sidtab_sid2str_get+0xb8/0x140
[   37.211997][   T29] audit: type=1326 audit(1734011140.186:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476cf85d19 code=0x7ffc0000
[   37.212018][   T29] audit: type=1326 audit(1734011140.186:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4094 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f476cf84680 code=0x7ffc0000
[   37.316991][ T4095]  kmemdup_noprof+0x2a/0x60
[   37.321552][ T4095]  sidtab_sid2str_get+0xb8/0x140
[   37.326544][ T4095]  security_sid_to_context_core+0x1eb/0x2f0
[   37.332430][ T4095]  security_sid_to_context+0x27/0x30
[   37.337733][ T4095]  selinux_lsmprop_to_secctx+0x2c/0x40
[   37.343325][ T4095]  security_lsmprop_to_secctx+0x4a/0x90
[   37.348915][ T4095]  audit_log_task_context+0x93/0x1c0
[   37.354236][ T4095]  audit_log_task+0xf9/0x1c0
[   37.358809][ T4095]  audit_seccomp+0x68/0x130
[   37.363363][ T4095]  __seccomp_filter+0x6fa/0x1180
[   37.368326][ T4095]  __secure_computing+0x9f/0x1c0
[   37.373267][ T4095]  syscall_trace_enter+0xd1/0x1f0
[   37.378445][ T4095]  ? fpregs_assert_state_consistent+0x83/0xa0
[   37.384575][ T4095]  do_syscall_64+0xaa/0x1c0
[   37.389135][ T4095]  ? clear_bhb_loop+0x55/0xb0
[   37.393796][ T4095]  ? clear_bhb_loop+0x55/0xb0
[   37.398530][ T4095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.404454][ T4095] RIP: 0033:0x7f476cf8472c
[   37.408906][ T4095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   37.428497][ T4095] RSP: 002b:00007f476b5f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   37.437007][ T4095] RAX: ffffffffffffffda RBX: 00007f476d175fa0 RCX: 00007f476cf8472c
[   37.444960][ T4095] RDX: 000000000000000f RSI: 00007f476b5f70a0 RDI: 0000000000000004
[   37.452977][ T4095] RBP: 00007f476b5f7090 R08: 0000000000000000 R09: 0000000000000000
[   37.460937][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   37.468897][ T4095] R13: 0000000000000000 R14: 00007f476d175fa0 R15: 00007ffc98d4bed8
[   37.476856][ T4095]  </TASK>
[   37.511709][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.606776][ T4111] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   37.631563][ T4113] netlink: 'syz.3.190': attribute type 1 has an invalid length.
[   37.639331][ T4113] netlink: 224 bytes leftover after parsing attributes in process `syz.3.190'.
[   37.650078][ T4111] veth0_vlan: entered allmulticast mode
[   37.777325][ T4120] loop5: detected capacity change from 0 to 512
[   37.786265][ T4120] EXT4-fs: Ignoring removed nobh option
[   37.840460][ T4120] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   37.855154][ T4120] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.191: casefold flag without casefold feature
[   37.876043][ T4120] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.191: couldn't read orphan inode 13 (err -117)
[   37.888642][ T4120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.917563][ T4120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.191'.
[   37.952294][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.968695][   T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.017780][ T4142] loop3: detected capacity change from 0 to 512
[   38.059532][   T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.078241][ T4149] loop5: detected capacity change from 0 to 128
[   38.103792][ T4153] loop3: detected capacity change from 0 to 512
[   38.124253][ T4153] EXT4-fs: inline encryption not supported
[   38.129527][ T4151] ebtables: ebtables: counters copy to user failed while replacing table
[   38.157864][   T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.230284][   T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.372476][ T4153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.413246][ T4153] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.435073][ T4153] FAULT_INJECTION: forcing a failure.
[   38.435073][ T4153] name failslab, interval 1, probability 0, space 0, times 0
[   38.447781][ T4153] CPU: 1 UID: 0 PID: 4153 Comm: syz.3.204 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   38.458405][ T4153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   38.468542][ T4153] Call Trace:
[   38.471838][ T4153]  <TASK>
[   38.474761][ T4153]  dump_stack_lvl+0xf2/0x150
[   38.479354][ T4153]  dump_stack+0x15/0x1a
[   38.483566][ T4153]  should_fail_ex+0x223/0x230
[   38.488236][ T4153]  should_failslab+0x8f/0xb0
[   38.492956][ T4153]  kmem_cache_alloc_noprof+0x52/0x320
[   38.498324][ T4153]  ? dquot_alloc+0x26/0x30
[   38.502735][ T4153]  dquot_alloc+0x26/0x30
[   38.507005][ T4153]  dqget+0x2a8/0x8b0
[   38.510896][ T4153]  __dquot_initialize+0x194/0x760
[   38.516131][ T4153]  ? avc_has_perm+0xd4/0x160
[   38.520722][ T4153]  dquot_initialize+0x1a/0x20
[   38.525475][ T4153]  ext4_set_acl+0xe9/0x3d0
[   38.530326][ T4153]  vfs_set_acl+0x578/0x710
[   38.534772][ T4153]  do_set_acl+0xab/0x130
[   38.539510][ T4153]  file_setxattr+0x172/0x1b0
[   38.544107][ T4153]  path_setxattrat+0x2c2/0x310
[   38.548871][ T4153]  __x64_sys_fsetxattr+0x6d/0x80
[   38.553819][ T4153]  x64_sys_call+0x29d2/0x2dc0
[   38.558569][ T4153]  do_syscall_64+0xc9/0x1c0
[   38.563060][ T4153]  ? clear_bhb_loop+0x55/0xb0
[   38.567846][ T4153]  ? clear_bhb_loop+0x55/0xb0
[   38.572512][ T4153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.578404][ T4153] RIP: 0033:0x7fd83e825d19
[   38.582814][ T4153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.602413][ T4153] RSP: 002b:00007fd83ce97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[   38.610882][ T4153] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e825d19
[   38.618865][ T4153] RDX: 0000000020000740 RSI: 0000000020000000 RDI: 0000000000000007
[   38.626828][ T4153] RBP: 00007fd83ce97090 R08: 0000000000000000 R09: 0000000000000000
[   38.634856][ T4153] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[   38.642865][ T4153] R13: 0000000000000000 R14: 00007fd83ea15fa0 R15: 00007fff82c68138
[   38.650888][ T4153]  </TASK>
[   38.674014][   T28] bridge_slave_1: left allmulticast mode
[   38.679717][   T28] bridge_slave_1: left promiscuous mode
[   38.685552][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.709868][ T4153] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.204: corrupted inode contents
[   38.722912][ T4153] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.204: mark_inode_dirty error
[   38.734877][ T4153] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.204: corrupted inode contents
[   38.747054][   T28] bridge_slave_0: left allmulticast mode
[   38.752729][   T28] bridge_slave_0: left promiscuous mode
[   38.758444][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.816839][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.833757][   T28] bridge0 (unregistering): left allmulticast mode
[   38.888647][   T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.911055][   T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.928040][   T28] bond0 (unregistering): Released all slaves
[   39.027231][ T4192] FAULT_INJECTION: forcing a failure.
[   39.027231][ T4192] name failslab, interval 1, probability 0, space 0, times 0
[   39.036339][   T28] tipc: Left network mode
[   39.039884][ T4192] CPU: 0 UID: 0 PID: 4192 Comm: syz.5.213 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   39.054789][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.064852][ T4192] Call Trace:
[   39.068139][ T4192]  <TASK>
[   39.071085][ T4192]  dump_stack_lvl+0xf2/0x150
[   39.075728][ T4192]  dump_stack+0x15/0x1a
[   39.079907][ T4192]  should_fail_ex+0x223/0x230
[   39.084618][ T4192]  should_failslab+0x8f/0xb0
[   39.089233][ T4192]  __kmalloc_noprof+0xab/0x3f0
[   39.094012][ T4192]  ? __se_sys_futex_waitv+0x10b/0x360
[   39.099423][ T4192]  __se_sys_futex_waitv+0x10b/0x360
[   39.104633][ T4192]  __x64_sys_futex_waitv+0x67/0x80
[   39.109820][ T4192]  x64_sys_call+0x105f/0x2dc0
[   39.114518][ T4192]  do_syscall_64+0xc9/0x1c0
[   39.119067][ T4192]  ? clear_bhb_loop+0x55/0xb0
[   39.123807][ T4192]  ? clear_bhb_loop+0x55/0xb0
[   39.128532][ T4192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.134510][ T4192] RIP: 0033:0x7f87ff095d19
[   39.138969][ T4192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.158659][ T4192] RSP: 002b:00007f87fd707038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[   39.167066][ T4192] RAX: ffffffffffffffda RBX: 00007f87ff285fa0 RCX: 00007f87ff095d19
[   39.175090][ T4192] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001080
[   39.183120][ T4192] RBP: 00007f87fd707090 R08: 0000000000000001 R09: 0000000000000000
[   39.191080][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   39.199062][ T4192] R13: 0000000000000000 R14: 00007f87ff285fa0 R15: 00007ffe51c08f58
[   39.207139][ T4192]  </TASK>
[   39.242736][   T28] hsr_slave_0: left promiscuous mode
[   39.251179][   T28] hsr_slave_1: left promiscuous mode
[   39.257290][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.264800][   T28] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.282933][   T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   39.290410][   T28] batman_adv: batadv0: Removing interface: batadv_slave_1
[   39.310559][ T4215] netlink: 'syz.5.218': attribute type 1 has an invalid length.
[   39.318298][ T4215] netlink: 224 bytes leftover after parsing attributes in process `syz.5.218'.
[   39.365883][   T28] veth1_macvtap: left promiscuous mode
[   39.371408][   T28] veth0_macvtap: left promiscuous mode
[   39.377052][   T28] veth1_vlan: left promiscuous mode
[   39.382321][   T28] veth0_vlan: left promiscuous mode
[   39.447205][   T28] pim6reg (unregistering): left allmulticast mode
[   39.476520][   T28] team0 (unregistering): Port device team_slave_1 removed
[   39.492635][   T28] team0 (unregistering): Port device team_slave_0 removed
[   39.527698][ T4231] netlink: 'syz.2.221': attribute type 1 has an invalid length.
[   39.535443][ T4231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.221'.
[   39.665052][ T4264] FAULT_INJECTION: forcing a failure.
[   39.665052][ T4264] name failslab, interval 1, probability 0, space 0, times 0
[   39.677829][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz.0.228 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   39.688444][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.698521][ T4264] Call Trace:
[   39.701804][ T4264]  <TASK>
[   39.704748][ T4264]  dump_stack_lvl+0xf2/0x150
[   39.709355][ T4264]  dump_stack+0x15/0x1a
[   39.713601][ T4264]  should_fail_ex+0x223/0x230
[   39.718297][ T4264]  should_failslab+0x8f/0xb0
[   39.722911][ T4264]  kmem_cache_alloc_noprof+0x52/0x320
[   39.728305][ T4264]  ? getname_flags+0x81/0x3b0
[   39.732977][ T4264]  getname_flags+0x81/0x3b0
[   39.737473][ T4264]  user_path_at+0x26/0x120
[   39.741970][ T4264]  __se_sys_mount+0x248/0x2d0
[   39.746724][ T4264]  __x64_sys_mount+0x67/0x80
[   39.751323][ T4264]  x64_sys_call+0x2c84/0x2dc0
[   39.756021][ T4264]  do_syscall_64+0xc9/0x1c0
[   39.760513][ T4264]  ? clear_bhb_loop+0x55/0xb0
[   39.765185][ T4264]  ? clear_bhb_loop+0x55/0xb0
[   39.769858][ T4264]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.775831][ T4264] RIP: 0033:0x7f476cf85d19
[   39.780237][ T4264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.799843][ T4264] RSP: 002b:00007f476b5f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.808248][ T4264] RAX: ffffffffffffffda RBX: 00007f476d175fa0 RCX: 00007f476cf85d19
[   39.816245][ T4264] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000000000000
[   39.824311][ T4264] RBP: 00007f476b5f7090 R08: 0000000020000140 R09: 0000000000000000
[   39.832284][ T4264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   39.840298][ T4264] R13: 0000000000000000 R14: 00007f476d175fa0 R15: 00007ffc98d4bed8
[   39.848269][ T4264]  </TASK>
[   39.886677][ T4268] loop4: detected capacity change from 0 to 2048
[   39.952825][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.124161][ T4296] netlink: 'syz.0.234': attribute type 1 has an invalid length.
[   40.132055][ T4296] netlink: 224 bytes leftover after parsing attributes in process `syz.0.234'.
[   40.171074][ T4297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   40.217210][ T4310] netlink: 'syz.5.237': attribute type 1 has an invalid length.
[   40.224967][ T4310] netlink: 224 bytes leftover after parsing attributes in process `syz.5.237'.
[   40.238284][ T4268] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   40.253426][ T4268] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   40.265895][ T4268] EXT4-fs (loop4): This should not happen!! Data will be lost
[   40.265895][ T4268] 
[   40.275630][ T4268] EXT4-fs (loop4): Total free blocks count 0
[   40.281735][ T4268] EXT4-fs (loop4): Free/Dirty block details
[   40.287652][ T4268] EXT4-fs (loop4): free_blocks=2415919104
[   40.293440][ T4268] EXT4-fs (loop4): dirty_blocks=8192
[   40.298756][ T4268] EXT4-fs (loop4): Block reservation details
[   40.304768][ T4268] EXT4-fs (loop4): i_reserved_data_blocks=512
[   40.335565][ T4286] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[   40.362119][ T1036] kernel write not supported for file /slabinfo (pid: 1036 comm: kworker/0:2)
[   40.444680][ T4323] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   40.458611][ T4323] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   40.655567][ T4364] netlink: 'syz.3.248': attribute type 1 has an invalid length.
[   40.663294][ T4364] netlink: 224 bytes leftover after parsing attributes in process `syz.3.248'.
[   40.705191][ T4377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4377 comm=syz.2.250
[   40.957266][ T4415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4415 comm=syz.3.259
[   40.971591][ T4415] netlink: 'syz.3.259': attribute type 1 has an invalid length.
[   41.002037][ T4415] 8021q: adding VLAN 0 to HW filter on device bond1
[   41.121552][ T4441] loop3: detected capacity change from 0 to 1024
[   41.146557][ T4441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.161036][ T4441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   41.177394][ T4441] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   41.189707][ T4441] EXT4-fs (loop3): This should not happen!! Data will be lost
[   41.189707][ T4441] 
[   41.199404][ T4441] EXT4-fs (loop3): Total free blocks count 0
[   41.205458][ T4441] EXT4-fs (loop3): Free/Dirty block details
[   41.211400][ T4441] EXT4-fs (loop3): free_blocks=68451041280
[   41.217707][ T4441] EXT4-fs (loop3): dirty_blocks=16
[   41.222858][ T4441] EXT4-fs (loop3): Block reservation details
[   41.229035][ T4441] EXT4-fs (loop3): i_reserved_data_blocks=1
[   41.271280][ T4467] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28
[   41.306090][ T4471] loop5: detected capacity change from 0 to 1024
[   41.329916][ T4471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.415028][ T4470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4470 comm=+}k
[   41.427521][ T4470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4470 comm=+}k
[   41.518599][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.920272][ T4536] netlink: 'syz.3.280': attribute type 1 has an invalid length.
[   41.927996][ T4536] netlink: 224 bytes leftover after parsing attributes in process `syz.3.280'.
[   41.981052][ T4546] pimreg: entered allmulticast mode
[   42.019148][ T4546] pimreg: left allmulticast mode
[   42.089463][   T29] kauditd_printk_skb: 331 callbacks suppressed
[   42.089479][   T29] audit: type=1326 audit(1734011145.246:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.128753][   T29] audit: type=1326 audit(1734011145.246:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.152191][   T29] audit: type=1326 audit(1734011145.246:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.175761][   T29] audit: type=1326 audit(1734011145.246:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.199146][   T29] audit: type=1326 audit(1734011145.246:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.222448][   T29] audit: type=1326 audit(1734011145.246:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.245821][   T29] audit: type=1326 audit(1734011145.246:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.269194][   T29] audit: type=1326 audit(1734011145.246:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.292541][   T29] audit: type=1326 audit(1734011145.246:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.315887][   T29] audit: type=1326 audit(1734011145.246:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   42.502577][ T4587] FAULT_INJECTION: forcing a failure.
[   42.502577][ T4587] name failslab, interval 1, probability 0, space 0, times 0
[   42.515444][ T4587] CPU: 0 UID: 0 PID: 4587 Comm: syz.0.292 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   42.526048][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   42.536107][ T4587] Call Trace:
[   42.539379][ T4587]  <TASK>
[   42.542301][ T4587]  dump_stack_lvl+0xf2/0x150
[   42.546930][ T4587]  dump_stack+0x15/0x1a
[   42.551146][ T4587]  should_fail_ex+0x223/0x230
[   42.555884][ T4587]  ? inet6_dump_fib+0x183/0x700
[   42.560749][ T4587]  should_failslab+0x8f/0xb0
[   42.565378][ T4587]  __kmalloc_cache_noprof+0x4e/0x320
[   42.570695][ T4587]  inet6_dump_fib+0x183/0x700
[   42.575371][ T4587]  ? inet_dump_fib+0x3f8/0x450
[   42.580145][ T4587]  ? __pfx_inet6_dump_fib+0x10/0x10
[   42.585376][ T4587]  rtnl_dump_all+0x1a5/0x230
[   42.589960][ T4587]  ? __pfx_rtnl_dump_all+0x10/0x10
[   42.595076][ T4587]  rtnl_dumpit+0x6c/0x130
[   42.599397][ T4587]  netlink_dump+0x398/0x7e0
[   42.603938][ T4587]  netlink_recvmsg+0x427/0x780
[   42.608703][ T4587]  ? __pfx_netlink_recvmsg+0x10/0x10
[   42.614039][ T4587]  sock_recvmsg_nosec+0x107/0x140
[   42.619090][ T4587]  ____sys_recvmsg+0x271/0x280
[   42.623856][ T4587]  do_recvmmsg+0x2aa/0x6d0
[   42.628280][ T4587]  __x64_sys_recvmmsg+0xf9/0x170
[   42.633285][ T4587]  x64_sys_call+0x2a9a/0x2dc0
[   42.637960][ T4587]  do_syscall_64+0xc9/0x1c0
[   42.642454][ T4587]  ? clear_bhb_loop+0x55/0xb0
[   42.647150][ T4587]  ? clear_bhb_loop+0x55/0xb0
[   42.651815][ T4587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.657804][ T4587] RIP: 0033:0x7f476cf85d19
[   42.662277][ T4587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.681874][ T4587] RSP: 002b:00007f476b5f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   42.690404][ T4587] RAX: ffffffffffffffda RBX: 00007f476d175fa0 RCX: 00007f476cf85d19
[   42.698499][ T4587] RDX: 0400000000000ec0 RSI: 0000000020002ec0 RDI: 0000000000000004
[   42.706494][ T4587] RBP: 00007f476b5f7090 R08: 00000000200001c0 R09: 0000000000000000
[   42.714461][ T4587] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002
[   42.722506][ T4587] R13: 0000000000000000 R14: 00007f476d175fa0 R15: 00007ffc98d4bed8
[   42.730474][ T4587]  </TASK>
[   42.751053][ T4593] netlink: 'syz.3.294': attribute type 4 has an invalid length.
[   42.796987][ T4593] netlink: 'syz.3.294': attribute type 4 has an invalid length.
[   42.807301][ T4591] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   42.815008][ T4591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.295'.
[   42.830849][ T4603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.297'.
[   42.893506][ T4603] loop4: detected capacity change from 0 to 2048
[   42.932437][ T4603] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[   42.967441][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.060405][ T4624] sg_write: data in/out 588840944/3 bytes for SCSI command 0x94-- guessing data in;
[   43.060405][ T4624]    program syz.3.306 not setting count and/or reply_len properly
[   43.137244][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.160143][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.175633][ T4624] infiniband syz0: set active
[   43.180467][ T4624] infiniband syz0: added bond0
[   43.189109][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.198805][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.218752][ T4624] RDS/IB: syz0: added
[   43.223437][ T4624] smc: adding ib device syz0 with port count 1
[   43.231345][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'.
[   43.240491][ T4624] smc:    ib device syz0 port 1 has pnetid 
[   43.474632][ T4654] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   43.482314][ T4654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.314'.
[   43.663520][ T4671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.321'.
[   43.675220][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[   43.684194][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[   43.703338][   T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   43.716751][ T4676] netlink: 732 bytes leftover after parsing attributes in process `syz.0.324'.
[   43.719692][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28
[   43.727009][ T4676] netlink: 732 bytes leftover after parsing attributes in process `syz.0.324'.
[   43.739452][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[   43.739452][   T50] 
[   43.758240][   T50] EXT4-fs (loop4): Total free blocks count 0
[   43.764247][   T50] EXT4-fs (loop4): Free/Dirty block details
[   43.770200][   T50] EXT4-fs (loop4): free_blocks=2415919104
[   43.775985][   T50] EXT4-fs (loop4): dirty_blocks=8192
[   43.781295][   T50] EXT4-fs (loop4): Block reservation details
[   43.787288][   T50] EXT4-fs (loop4): i_reserved_data_blocks=512
[   43.804577][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28
[   43.872333][ T4679] ebtables: ebtables: counters copy to user failed while replacing table
[   44.035850][ T4697] netlink: 'syz.4.330': attribute type 1 has an invalid length.
[   44.132370][ T4707] blktrace: Concurrent blktraces are not allowed on sg0
[   44.402310][ T4732] loop4: detected capacity change from 0 to 512
[   44.409158][ T4732] EXT4-fs: Ignoring removed nobh option
[   44.414832][ T4732] EXT4-fs: Ignoring removed nobh option
[   44.432666][ T4732] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   44.441134][ T4732] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.345: invalid indirect mapped block 2683928664 (level 1)
[   44.455439][ T4732] EXT4-fs (loop4): 1 truncate cleaned up
[   44.461556][ T4732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.488499][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.506201][ T4735] loop4: detected capacity change from 0 to 128
[   44.563426][ T4739] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   44.626592][ T4740] syz.4.346: attempt to access beyond end of device
[   44.626592][ T4740] loop4: rw=2049, sector=460, nr_sectors = 16 limit=128
[   44.640691][ T4740] syz.4.346: attempt to access beyond end of device
[   44.640691][ T4740] loop4: rw=2049, sector=484, nr_sectors = 8 limit=128
[   44.654410][ T4740] syz.4.346: attempt to access beyond end of device
[   44.654410][ T4740] loop4: rw=2049, sector=500, nr_sectors = 8 limit=128
[   44.667819][ T4740] syz.4.346: attempt to access beyond end of device
[   44.667819][ T4740] loop4: rw=2049, sector=524, nr_sectors = 8 limit=128
[   44.681352][ T4740] syz.4.346: attempt to access beyond end of device
[   44.681352][ T4740] loop4: rw=2049, sector=540, nr_sectors = 8 limit=128
[   44.694779][ T4740] syz.4.346: attempt to access beyond end of device
[   44.694779][ T4740] loop4: rw=2049, sector=556, nr_sectors = 8 limit=128
[   44.708195][ T4740] syz.4.346: attempt to access beyond end of device
[   44.708195][ T4740] loop4: rw=2049, sector=580, nr_sectors = 8 limit=128
[   44.721703][ T4740] syz.4.346: attempt to access beyond end of device
[   44.721703][ T4740] loop4: rw=2049, sector=604, nr_sectors = 16 limit=128
[   44.735248][ T4740] syz.4.346: attempt to access beyond end of device
[   44.735248][ T4740] loop4: rw=2049, sector=628, nr_sectors = 16 limit=128
[   44.748880][ T4740] syz.4.346: attempt to access beyond end of device
[   44.748880][ T4740] loop4: rw=2049, sector=652, nr_sectors = 8 limit=128
[   44.861185][ T4761] syz.0.357[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.861287][ T4761] syz.0.357[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.872761][ T4761] syz.0.357[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   44.957666][ T4769] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   45.163621][ T4795] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[   45.170229][ T4795] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   45.177954][ T4795] vhci_hcd vhci_hcd.0: Device attached
[   45.196181][ T4795] loop4: detected capacity change from 0 to 2048
[   45.225714][ T4795] EXT4-fs (loop4): failed to initialize system zone (-117)
[   45.233033][ T4795] EXT4-fs (loop4): mount failed
[   45.303382][ T4814] netlink: 'syz.3.374': attribute type 1 has an invalid length.
[   45.364215][ T1036] vhci_hcd: vhci_device speed not set
[   45.424066][ T1036] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[   45.795590][ T4840] program syz.2.384 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   45.805108][ T4840] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   45.884603][ T4802] vhci_hcd: connection reset by peer
[   45.890280][  T371] vhci_hcd: stop threads
[   45.894585][  T371] vhci_hcd: release socket
[   45.899016][  T371] vhci_hcd: disconnect device
[   45.999154][ T4856] ebtables: ebtables: counters copy to user failed while replacing table
[   46.826653][ T4921] loop3: detected capacity change from 0 to 512
[   46.852015][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.946375][ T4936] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[   46.954107][ T4936] __nla_validate_parse: 6 callbacks suppressed
[   46.954118][ T4936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.401'.
[   47.031239][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.122064][ T4958] pimreg: entered allmulticast mode
[   47.157614][ T4958] pimreg: left allmulticast mode
[   47.350145][   T29] kauditd_printk_skb: 434 callbacks suppressed
[   47.350159][   T29] audit: type=1326 audit(1734011150.506:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.380657][   T29] audit: type=1326 audit(1734011150.516:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.388626][ T4987] loop4: detected capacity change from 0 to 512
[   47.404060][   T29] audit: type=1326 audit(1734011150.516:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.433620][   T29] audit: type=1326 audit(1734011150.516:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.439179][ T4987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.457027][   T29] audit: type=1326 audit(1734011150.516:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.474810][ T4989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.411'.
[   47.492244][   T29] audit: type=1326 audit(1734011150.516:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.492268][   T29] audit: type=1326 audit(1734011150.516:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.547941][   T29] audit: type=1326 audit(1734011150.516:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.571316][   T29] audit: type=1326 audit(1734011150.516:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.594781][   T29] audit: type=1326 audit(1734011150.516:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ff095d19 code=0x7ffc0000
[   47.643411][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.673446][ T4998] loop4: detected capacity change from 0 to 512
[   47.682713][ T4998] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.418: casefold flag without casefold feature
[   47.695572][ T4998] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.418: couldn't read orphan inode 15 (err -117)
[   47.707891][ T4998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.756108][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.788333][ T5009] loop5: detected capacity change from 0 to 1764
[   47.804992][ T5009] ISOFS: unable to read i-node block
[   47.810354][ T5009] isofs_fill_super: get root inode failed
[   47.850309][ T5009] ebtables: ebtables: counters copy to user failed while replacing table
[   47.879554][ T5020] netlink: 'syz.2.425': attribute type 1 has an invalid length.
[   47.887344][ T5020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.425'.
[   48.064775][ T5038] bridge0: entered allmulticast mode
[   48.072682][ T5038] pim6reg: entered allmulticast mode
[   48.082843][ T5038] loop4: detected capacity change from 0 to 512
[   48.089591][ T5038] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[   48.117640][ T5042] loop4: detected capacity change from 0 to 512
[   48.129742][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.434: casefold flag without casefold feature
[   48.142476][ T5042] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.434: couldn't read orphan inode 15 (err -117)
[   48.154830][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.180336][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.249380][ T5053] syz.4.438[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.249462][ T5053] syz.4.438[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.262122][ T5053] syz.4.438[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   48.583326][ T5071] bridge0: entered allmulticast mode
[   48.602615][ T5071] pim6reg: entered allmulticast mode
[   48.623865][ T5073] loop5: detected capacity change from 0 to 512
[   48.642970][ T5073] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.446: casefold flag without casefold feature
[   48.655804][ T5073] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.446: couldn't read orphan inode 15 (err -117)
[   48.668571][ T5073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.691354][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.821504][ T5087] loop3: detected capacity change from 0 to 512
[   48.828143][ T5087] EXT4-fs: Ignoring removed nobh option
[   48.845867][ T5087] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   48.854721][ T5087] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.451: casefold flag without casefold feature
[   48.867503][ T5087] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.451: couldn't read orphan inode 13 (err -117)
[   48.879882][ T5087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.899147][ T5087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.451'.
[   48.921568][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.041536][ T5095] ebtables: ebtables: counters copy to user failed while replacing table
[   49.998771][ T5133] SELinux: syz.3.469 (5133) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   50.512453][ T1036] usb 9-1: enqueue for inactive port 0
[   50.525863][ T1036] usb 9-1: enqueue for inactive port 0
[   50.596248][ T5167] SELinux: syz.0.483 (5167) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   50.617025][ T1036] vhci_hcd: vhci_device speed not set
[   50.818459][ T5184] loop5: detected capacity change from 0 to 512
[   50.836667][ T5184] EXT4-fs: Ignoring removed nobh option
[   50.842282][ T5184] EXT4-fs: Ignoring removed nobh option
[   50.868033][ T5184] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   50.876328][ T5184] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.491: invalid indirect mapped block 2683928664 (level 1)
[   50.892103][ T5184] EXT4-fs (loop5): 1 truncate cleaned up
[   50.900320][ T5184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.932231][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'.
[   50.941888][ T5184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.491'.
[   50.972721][ T5184] EXT4-fs error (device loop5): ext4_find_dest_de:2079: inode #2: block 13: comm syz.5.491: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   51.026268][ T5205] EXT4-fs error (device loop5): ext4_find_dest_de:2079: inode #2: block 13: comm syz.5.491: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[   51.050006][ T5208] sg_write: data in/out 588840944/3 bytes for SCSI command 0x94-- guessing data in;
[   51.050006][ T5208]    program syz.4.497 not setting count and/or reply_len properly
[   51.096063][ T5208] rdma_rxe: rxe_newlink: failed to add bond0
[   51.122866][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.128517][ T5213] ebtables: ebtables: counters copy to user failed while replacing table
[   51.136061][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.163209][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.172489][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.186291][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[   51.221817][ T5227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'.
[   51.251080][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.266422][ T5229] loop3: detected capacity change from 0 to 512
[   51.273093][ T5229] EXT4-fs: Ignoring removed nobh option
[   51.289462][ T5229] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   51.300488][ T5229] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.503: casefold flag without casefold feature
[   51.313500][ T5229] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.503: couldn't read orphan inode 13 (err -117)
[   51.326379][ T5229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.347001][ T5229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'.
[   51.370908][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.402841][ T5250] loop5: detected capacity change from 0 to 1764
[   51.410432][ T5250] ISOFS: unable to read i-node block
[   51.415790][ T5250] isofs_fill_super: get root inode failed
[   51.428344][ T5252] loop3: detected capacity change from 0 to 512
[   51.438837][ T5252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.452391][ T5250] ebtables: ebtables: counters copy to user failed while replacing table
[   51.476545][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.495305][ T5257] netlink: 'syz.3.506': attribute type 10 has an invalid length.
[   51.505942][ T5257] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.513394][ T5257] team0: Port device batadv0 added
[   51.794884][ T5276] loop4: detected capacity change from 0 to 2048
[   51.823732][ T5276] ext4: Unknown parameter 'obj_role'
[   51.933581][ T5285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5285 comm=syz.4.517
[   52.069631][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'.
[   52.138446][ T5317] loop4: detected capacity change from 0 to 512
[   52.161675][ T5317] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.527: casefold flag without casefold feature
[   52.179575][ T5317] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.527: couldn't read orphan inode 15 (err -117)
[   52.194477][ T5317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.235703][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.290335][ T5337] netlink: 'syz.4.529': attribute type 32 has an invalid length.
[   52.298257][ T5328] ebtables: ebtables: counters copy to user failed while replacing table
[   52.398175][   T29] kauditd_printk_skb: 468 callbacks suppressed
[   52.398190][   T29] audit: type=1400 audit(1734011155.556:2567): avc:  denied  { write } for  pid=5344 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   52.406120][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'.
[   52.568066][ T5368] loop4: detected capacity change from 0 to 512
[   52.587640][ T5368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.602480][   T29] audit: type=1400 audit(1734011155.756:2568): avc:  denied  { ioctl } for  pid=5373 comm="syz.5.539" path="socket:[9910]" dev="sockfs" ino=9910 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   52.633701][ T5378] bridge0: entered allmulticast mode
[   52.651496][   T29] audit: type=1326 audit(1734011155.756:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d88865d19 code=0x7ffc0000
[   52.651947][ T5378] pim6reg: entered allmulticast mode
[   52.674917][   T29] audit: type=1326 audit(1734011155.756:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d88865d19 code=0x7ffc0000
[   52.703482][   T29] audit: type=1326 audit(1734011155.756:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d88865d19 code=0x7ffc0000
[   52.726912][   T29] audit: type=1326 audit(1734011155.786:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2d88865d19 code=0x7ffc0000
[   52.750524][   T29] audit: type=1326 audit(1734011155.786:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5366 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d88865d19 code=0x7ffc0000
[   52.774035][   T29] audit: type=1400 audit(1734011155.786:2574): avc:  denied  { setopt } for  pid=5375 comm="syz.3.538" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.803050][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.885420][ T5409] loop4: detected capacity change from 0 to 164
[   52.897221][   T29] audit: type=1400 audit(1734011156.056:2575): avc:  denied  { mount } for  pid=5408 comm="syz.4.541" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   52.932985][ T5409] Unsupported NM flag settings (8)
[   52.948530][ T5409] Unsupported NM flag settings (8)
[   52.964399][   T29] audit: type=1400 audit(1734011156.126:2576): avc:  denied  { unmount } for  pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   52.964490][ T3302] Unsupported NM flag settings (8)
[   52.993858][ T3302] Unsupported NM flag settings (8)
[   52.999290][ T3302] Unsupported NM flag settings (8)
[   53.135385][ T5443] netlink: '+}[@': attribute type 10 has an invalid length.
[   53.142729][ T5443] netlink: 40 bytes leftover after parsing attributes in process `+}[@'.
[   53.169618][ T5443] team0: Port device geneve1 added
[   53.463638][ T5459] chnl_net:caif_netlink_parms(): no params data found
[   53.547769][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.554881][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.570396][ T5459] bridge_slave_0: entered allmulticast mode
[   53.583638][ T5459] bridge_slave_0: entered promiscuous mode
[   53.592754][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.599915][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.608938][ T5459] bridge_slave_1: entered allmulticast mode
[   53.615535][ T5459] bridge_slave_1: entered promiscuous mode
[   53.637141][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.659034][ T5485] loop3: detected capacity change from 0 to 512
[   53.665593][ T5485] EXT4-fs: Ignoring removed nobh option
[   53.672168][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.698150][ T5485] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   53.722449][ T5485] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.554: casefold flag without casefold feature
[   53.740600][ T5459] team0: Port device team_slave_0 added
[   53.749663][ T5459] team0: Port device team_slave_1 added
[   53.778917][ T5485] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.554: couldn't read orphan inode 13 (err -117)
[   53.796062][ T5485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.820479][ T5485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'.
[   53.848237][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.855247][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.881282][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.898212][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.905261][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.931174][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.956638][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.968499][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[   53.997576][ T5459] hsr_slave_0: entered promiscuous mode
[   54.003668][ T5459] hsr_slave_1: entered promiscuous mode
[   54.010265][ T5459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.020897][ T5459] Cannot create hsr debugfs directory
[   54.030508][ T5493] Unsupported ieee802154 address type: 0
[   54.079373][ T5509] bridge0: entered allmulticast mode
[   54.091872][ T5509] pim6reg: entered allmulticast mode
[   54.103891][ T5510] loop5: detected capacity change from 0 to 2048
[   54.134562][ T5510]  loop5: p1 < > p4 < >
[   54.153400][ T5459] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   54.168718][ T5459] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   54.176522][ T2999]  loop5: p1 < > p4 < >
[   54.177863][ T5459] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   54.189517][ T5459] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   54.269123][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.288134][ T5459] 8021q: adding VLAN 0 to HW filter on device team0
[   54.306674][  T371] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.313869][  T371] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.332268][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.339542][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.438858][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.583424][ T5459] veth0_vlan: entered promiscuous mode
[   54.592139][ T5459] veth1_vlan: entered promiscuous mode
[   54.613837][ T5459] veth0_macvtap: entered promiscuous mode
[   54.622928][ T5459] veth1_macvtap: entered promiscuous mode
[   54.636269][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.646902][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.657119][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.667846][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.677674][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.688163][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.698053][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.708506][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.718348][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   54.728830][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.740592][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.764880][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.775394][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.785229][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.795699][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.805523][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.815985][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.825826][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.836378][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.846217][ T5459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   54.856723][ T5459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   54.869048][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.879059][ T5459] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.887931][ T5459] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.896811][ T5459] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.905569][ T5459] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.915066][ T5552] ebtables: ebtables: counters copy to user failed while replacing table
[   55.068775][ T5566] pim6reg: left allmulticast mode
[   55.100821][ T5566] bridge0: left allmulticast mode
[   55.201055][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'.
[   55.282259][ T5584] bridge0: entered allmulticast mode
[   55.298544][ T5584] pim6reg: entered allmulticast mode
[   55.368003][ T5592] FAULT_INJECTION: forcing a failure.
[   55.368003][ T5592] name failslab, interval 1, probability 0, space 0, times 0
[   55.380778][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: syz.3.587 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   55.391416][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   55.401491][ T5592] Call Trace:
[   55.404860][ T5592]  <TASK>
[   55.407868][ T5592]  dump_stack_lvl+0xf2/0x150
[   55.412497][ T5592]  dump_stack+0x15/0x1a
[   55.416688][ T5592]  should_fail_ex+0x223/0x230
[   55.421381][ T5592]  should_failslab+0x8f/0xb0
[   55.426035][ T5592]  __kmalloc_noprof+0xab/0x3f0
[   55.430859][ T5592]  ? security_sb_alloc+0x47/0x110
[   55.435906][ T5592]  ? alloc_super+0x3a/0x5a0
[   55.440416][ T5592]  security_sb_alloc+0x47/0x110
[   55.445437][ T5592]  alloc_super+0x108/0x5a0
[   55.449853][ T5592]  ? __pfx_set_anon_super_fc+0x10/0x10
[   55.455319][ T5592]  sget_fc+0x259/0x670
[   55.459384][ T5592]  ? __pfx_set_anon_super_fc+0x10/0x10
[   55.464905][ T5592]  ? __pfx_mqueue_fill_super+0x10/0x10
[   55.470448][ T5592]  get_tree_nodev+0x28/0xf0
[   55.474970][ T5592]  mqueue_get_tree+0x6b/0x90
[   55.479560][ T5592]  vfs_get_tree+0x56/0x1e0
[   55.484004][ T5592]  fc_mount+0x16/0x70
[   55.487985][ T5592]  mq_init_ns+0x253/0x300
[   55.492310][ T5592]  copy_ipcs+0x218/0x3b0
[   55.496551][ T5592]  create_new_namespaces+0x135/0x430
[   55.501858][ T5592]  ? security_capable+0x81/0x90
[   55.506724][ T5592]  unshare_nsproxy_namespaces+0xe6/0x120
[   55.512355][ T5592]  ksys_unshare+0x3c9/0x6e0
[   55.516922][ T5592]  __x64_sys_unshare+0x1f/0x30
[   55.521680][ T5592]  x64_sys_call+0x1a3e/0x2dc0
[   55.526349][ T5592]  do_syscall_64+0xc9/0x1c0
[   55.530898][ T5592]  ? clear_bhb_loop+0x55/0xb0
[   55.535614][ T5592]  ? clear_bhb_loop+0x55/0xb0
[   55.540285][ T5592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.546298][ T5592] RIP: 0033:0x7fd83e825d19
[   55.550705][ T5592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.570305][ T5592] RSP: 002b:00007fd83ce97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   55.578756][ T5592] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e825d19
[   55.586722][ T5592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200
[   55.594683][ T5592] RBP: 00007fd83ce97090 R08: 0000000000000000 R09: 0000000000000000
[   55.602643][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.610602][ T5592] R13: 0000000000000001 R14: 00007fd83ea15fa0 R15: 00007fff82c68138
[   55.618579][ T5592]  </TASK>
[   55.769094][ T5617] syz.2.597[5617] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.769195][ T5617] syz.2.597[5617] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.847377][ T5623] loop5: detected capacity change from 0 to 512
[   55.849350][ T5621] 9pnet_fd: Insufficient options for proto=fd
[   55.876050][ T5623] EXT4-fs: Ignoring removed nobh option
[   55.942736][ T5623] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   55.960614][ T5623] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.600: casefold flag without casefold feature
[   55.973805][ T5623] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.600: couldn't read orphan inode 13 (err -117)
[   55.986754][ T5623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.007488][ T5623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.600'.
[   56.028780][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.069198][ T5645] loop3: detected capacity change from 0 to 1764
[   56.077182][ T5645] ISOFS: unable to read i-node block
[   56.082540][ T5645] isofs_fill_super: get root inode failed
[   56.108428][ T5645] ebtables: ebtables: counters copy to user failed while replacing table
[   56.128451][ T5651] loop5: detected capacity change from 0 to 2048
[   56.130252][ T5653] bridge0: entered allmulticast mode
[   56.143432][ T5653] pim6reg: entered allmulticast mode
[   56.164728][ T5651]  loop5: p1 < > p4 < >
[   56.340027][ T5670] ebt_among: dst integrity fail: 101
[   56.398213][ T5680] loop5: detected capacity change from 0 to 2048
[   56.464554][ T5680]  loop5: p1 < > p4 < >
[   56.491557][ T5682] FAULT_INJECTION: forcing a failure.
[   56.491557][ T5682] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   56.503505][ T5684] loop5: detected capacity change from 0 to 512
[   56.504757][ T5682] CPU: 0 UID: 0 PID: 5682 Comm: syz.2.624 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   56.521514][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   56.525632][ T5684] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.623: couldn't read orphan inode 26 (err -116)
[   56.531562][ T5682] Call Trace:
[   56.531573][ T5682]  <TASK>
[   56.531581][ T5682]  dump_stack_lvl+0xf2/0x150
[   56.545933][ T5684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.546548][ T5682]  dump_stack+0x15/0x1a
[   56.549640][ T5684] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.554191][ T5682]  should_fail_ex+0x223/0x230
[   56.554221][ T5682]  should_fail+0xb/0x10
[   56.554247][ T5682]  should_fail_usercopy+0x1a/0x20
[   56.554271][ T5682]  _copy_from_user+0x1e/0xb0
[   56.599513][ T5682]  __se_sys_io_uring_setup+0xf3/0x1e0
[   56.604914][ T5682]  __x64_sys_io_uring_setup+0x31/0x40
[   56.610369][ T5682]  x64_sys_call+0x270c/0x2dc0
[   56.615057][ T5682]  do_syscall_64+0xc9/0x1c0
[   56.619552][ T5682]  ? clear_bhb_loop+0x55/0xb0
[   56.624220][ T5682]  ? clear_bhb_loop+0x55/0xb0
[   56.628961][ T5682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.634877][ T5682] RIP: 0033:0x7f5a08f05d19
[   56.639284][ T5682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.658894][ T5682] RSP: 002b:00007f5a07571038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[   56.667298][ T5682] RAX: ffffffffffffffda RBX: 00007f5a090f5fa0 RCX: 00007f5a08f05d19
[   56.675260][ T5682] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000001691
[   56.683280][ T5682] RBP: 00007f5a07571090 R08: 0000000000000000 R09: 0000000000000000
[   56.691246][ T5682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.699206][ T5682] R13: 0000000000000000 R14: 00007f5a090f5fa0 R15: 00007ffc99391aa8
[   56.707216][ T5682]  </TASK>
[   56.748718][ T5684] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #3: comm syz.5.623: corrupted inode contents
[   56.761102][ T5684] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #3: comm syz.5.623: mark_inode_dirty error
[   56.772643][ T5692] FAULT_INJECTION: forcing a failure.
[   56.772643][ T5692] name failslab, interval 1, probability 0, space 0, times 0
[   56.785373][ T5692] CPU: 1 UID: 0 PID: 5692 Comm: syz.2.626 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   56.788080][ T5695] loop3: detected capacity change from 0 to 512
[   56.796045][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   56.796060][ T5692] Call Trace:
[   56.796066][ T5692]  <TASK>
[   56.796074][ T5692]  dump_stack_lvl+0xf2/0x150
[   56.810376][ T5684] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.623: bg 0: block 64: padding at end of block bitmap is not set
[   56.812349][ T5692]  dump_stack+0x15/0x1a
[   56.815925][ T5695] EXT4-fs: Ignoring removed nobh option
[   56.818545][ T5692]  should_fail_ex+0x223/0x230
[   56.828461][ T5684] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.623: Failed to acquire dquot type 0
[   56.837143][ T5692]  ? nf_tables_newtable+0x3a1/0xf20
[   56.837237][ T5692]  should_failslab+0x8f/0xb0
[   56.841442][ T5695] EXT4-fs: Mount option(s) incompatible with ext3
[   56.846904][ T5692]  __kmalloc_cache_noprof+0x4e/0x320
[   56.846934][ T5692]  nf_tables_newtable+0x3a1/0xf20
[   56.846983][ T5692]  nfnetlink_rcv+0xb3e/0x15d0
[   56.847015][ T5692]  ? kmem_cache_free+0xdc/0x2d0
[   56.898850][ T5692]  netlink_unicast+0x599/0x670
[   56.903646][ T5692]  netlink_sendmsg+0x5cc/0x6e0
[   56.908423][ T5692]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.913708][ T5692]  __sock_sendmsg+0x140/0x180
[   56.918554][ T5692]  ____sys_sendmsg+0x312/0x410
[   56.923336][ T5692]  __sys_sendmsg+0x19d/0x230
[   56.927945][ T5692]  __x64_sys_sendmsg+0x46/0x50
[   56.932723][ T5692]  x64_sys_call+0x2734/0x2dc0
[   56.937457][ T5692]  do_syscall_64+0xc9/0x1c0
[   56.941951][ T5692]  ? clear_bhb_loop+0x55/0xb0
[   56.946661][ T5692]  ? clear_bhb_loop+0x55/0xb0
[   56.951390][ T5692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.957342][ T5692] RIP: 0033:0x7f5a08f05d19
[   56.961807][ T5692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.981451][ T5692] RSP: 002b:00007f5a07571038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.989887][ T5692] RAX: ffffffffffffffda RBX: 00007f5a090f5fa0 RCX: 00007f5a08f05d19
[   56.997847][ T5692] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006
[   57.005809][ T5692] RBP: 00007f5a07571090 R08: 0000000000000000 R09: 0000000000000000
[   57.013772][ T5692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.021807][ T5692] R13: 0000000000000000 R14: 00007f5a090f5fa0 R15: 00007ffc99391aa8
[   57.029867][ T5692]  </TASK>
[   57.100126][ T5700] FAULT_INJECTION: forcing a failure.
[   57.100126][ T5700] name failslab, interval 1, probability 0, space 0, times 0
[   57.112787][ T5700] CPU: 0 UID: 0 PID: 5700 Comm: syz.3.629 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   57.123447][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   57.133515][ T5700] Call Trace:
[   57.136797][ T5700]  <TASK>
[   57.139734][ T5700]  dump_stack_lvl+0xf2/0x150
[   57.144405][ T5700]  dump_stack+0x15/0x1a
[   57.148584][ T5700]  should_fail_ex+0x223/0x230
[   57.148612][ T5700]  ? __pfx_ip6erspan_tap_setup+0x10/0x10
[   57.148711][ T5700]  should_failslab+0x8f/0xb0
[   57.148742][ T5700]  __kmalloc_node_noprof+0xad/0x410
[   57.148762][ T5700]  ? __kvmalloc_node_noprof+0x72/0x170
[   57.148851][ T5700]  ? __pfx_ip6erspan_tap_setup+0x10/0x10
[   57.148905][ T5700]  __kvmalloc_node_noprof+0x72/0x170
[   57.148933][ T5700]  alloc_netdev_mqs+0xa8/0x9c0
[   57.148953][ T5700]  ? __pfx_ip6erspan_tap_setup+0x10/0x10
[   57.149000][ T5700]  rtnl_create_link+0x233/0x680
[   57.149031][ T5700]  rtnl_newlink_create+0x133/0x5d0
[   57.149064][ T5700]  ? ns_capable+0x7d/0xb0
[   57.149132][ T5700]  ? netlink_ns_capable+0x88/0xa0
[   57.149153][ T5700]  rtnl_newlink+0xe61/0x1220
[   57.149175][ T5700]  ? __pfx_cmp_ex_search+0x10/0x10
[   57.149255][ T5700]  ? bpf_trace_run3+0x12b/0x1d0
[   57.149351][ T5700]  ? __kfree_skb+0x102/0x150
[   57.149373][ T5700]  ? __kfree_skb+0x102/0x150
[   57.149392][ T5700]  ? __rcu_read_unlock+0x4e/0x70
[   57.149419][ T5700]  ? avc_has_perm_noaudit+0x1cc/0x210
[   57.149561][ T5700]  ? selinux_capable+0x1f2/0x260
[   57.149602][ T5700]  ? security_capable+0x81/0x90
[   57.149640][ T5700]  ? ns_capable+0x7d/0xb0
[   57.149718][ T5700]  ? __pfx_rtnl_newlink+0x10/0x10
[   57.149741][ T5700]  rtnetlink_rcv_msg+0x651/0x710
[   57.149813][ T5700]  ? ref_tracker_free+0x3a5/0x410
[   57.149836][ T5700]  ? __dev_queue_xmit+0x186/0x2090
[   57.149858][ T5700]  netlink_rcv_skb+0x12c/0x230
[   57.149877][ T5700]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   57.149917][ T5700]  rtnetlink_rcv+0x1c/0x30
[   57.149935][ T5700]  netlink_unicast+0x599/0x670
[   57.149958][ T5700]  netlink_sendmsg+0x5cc/0x6e0
[   57.149989][ T5700]  ? __pfx_netlink_sendmsg+0x10/0x10
[   57.150040][ T5700]  __sock_sendmsg+0x140/0x180
[   57.150069][ T5700]  ____sys_sendmsg+0x312/0x410
[   57.150091][ T5700]  __sys_sendmsg+0x19d/0x230
[   57.150134][ T5700]  __x64_sys_sendmsg+0x46/0x50
[   57.150157][ T5700]  x64_sys_call+0x2734/0x2dc0
[   57.150253][ T5700]  do_syscall_64+0xc9/0x1c0
[   57.150271][ T5700]  ? clear_bhb_loop+0x55/0xb0
[   57.150290][ T5700]  ? clear_bhb_loop+0x55/0xb0
[   57.150381][ T5700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.150414][ T5700] RIP: 0033:0x7fd83e825d19
[   57.150430][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.150448][ T5700] RSP: 002b:00007fd83ce97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   57.150467][ T5700] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e825d19
[   57.150552][ T5700] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005
[   57.150565][ T5700] RBP: 00007fd83ce97090 R08: 0000000000000000 R09: 0000000000000000
[   57.150629][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.150639][ T5700] R13: 0000000000000000 R14: 00007fd83ea15fa0 R15: 00007fff82c68138
[   57.150658][ T5700]  </TASK>
[   57.181515][ T5709] loop6: detected capacity change from 0 to 2048
[   57.242949][ T5711] pim6reg: entered allmulticast mode
[   57.450134][ T5723] loop3: detected capacity change from 0 to 1764
[   57.453232][ T5719] pim6reg: left allmulticast mode
[   57.464876][ T5709]  loop6: p1 < > p4 < >
[   57.475321][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.491073][ T5723] ISOFS: unable to read i-node block
[   57.496471][ T5723] isofs_fill_super: get root inode failed
[   57.516220][ T2999]  loop6: p1 < > p4 < >
[   57.567508][ T5721] ebtables: ebtables: counters copy to user failed while replacing table
[   57.583565][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[   57.584642][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[   57.607535][   T29] kauditd_printk_skb: 246 callbacks suppressed
[   57.607591][   T29] audit: type=1400 audit(1734011160.766:2821): avc:  denied  { write } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.635500][   T29] audit: type=1400 audit(1734011160.766:2822): avc:  denied  { remove_name } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.658162][   T29] audit: type=1400 audit(1734011160.766:2823): avc:  denied  { rename } for  pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.680496][   T29] audit: type=1400 audit(1734011160.766:2824): avc:  denied  { add_name } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   57.703022][   T29] audit: type=1400 audit(1734011160.766:2825): avc:  denied  { unlink } for  pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.706924][ T5732] FAULT_INJECTION: forcing a failure.
[   57.706924][ T5732] name failslab, interval 1, probability 0, space 0, times 0
[   57.725495][   T29] audit: type=1400 audit(1734011160.766:2826): avc:  denied  { create } for  pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   57.738064][ T5732] CPU: 1 UID: 0 PID: 5732 Comm: syz.6.640 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   57.759755][   T29] audit: type=1400 audit(1734011160.766:2827): avc:  denied  { read } for  pid=5734 comm="syz.0.641" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   57.769257][ T5732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   57.769270][ T5732] Call Trace:
[   57.769276][ T5732]  <TASK>
[   57.769284][ T5732]  dump_stack_lvl+0xf2/0x150
[   57.769340][ T5732]  dump_stack+0x15/0x1a
[   57.769365][ T5732]  should_fail_ex+0x223/0x230
[   57.792394][   T29] audit: type=1400 audit(1734011160.816:2828): avc:  denied  { connect } for  pid=5734 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   57.802377][ T5732]  should_failslab+0x8f/0xb0
[   57.802407][ T5732]  kmem_cache_alloc_lru_noprof+0x57/0x320
[   57.824119][   T29] audit: type=1326 audit(1734011160.966:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5734 comm="syz.0.641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f476cf85d19 code=0x0
[   57.841477][ T5732]  ? __d_alloc+0x3d/0x340
[   57.841509][ T5732]  __d_alloc+0x3d/0x340
[   57.883035][ T5732]  d_alloc_pseudo+0x1e/0x80
[   57.887609][ T5732]  alloc_file_pseudo+0x70/0x140
[   57.892473][ T5732]  hugetlb_file_setup+0x290/0x3c0
[   57.897507][ T5732]  ksys_mmap_pgoff+0x172/0x330
[   57.902279][ T5732]  x64_sys_call+0x1940/0x2dc0
[   57.906950][ T5732]  do_syscall_64+0xc9/0x1c0
[   57.911522][ T5732]  ? clear_bhb_loop+0x55/0xb0
[   57.916227][ T5732]  ? clear_bhb_loop+0x55/0xb0
[   57.920897][ T5732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.926947][ T5732] RIP: 0033:0x7f43b1725d19
[   57.931351][ T5732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.950963][ T5732] RSP: 002b:00007f43afd91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   57.959373][ T5732] RAX: ffffffffffffffda RBX: 00007f43b1915fa0 RCX: 00007f43b1725d19
[   57.967421][ T5732] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000
[   57.975384][ T5732] RBP: 00007f43afd91090 R08: ffffffffffffffff R09: 0000000000000000
[   57.983343][ T5732] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001
[   57.991378][ T5732] R13: 0000000000000000 R14: 00007f43b1915fa0 R15: 00007ffe36f37028
[   57.999405][ T5732]  </TASK>
[   58.013012][   T29] audit: type=1400 audit(1734011161.166:2830): avc:  denied  { setopt } for  pid=5738 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   58.090430][ T5747] loop5: detected capacity change from 0 to 512
[   58.098953][ T5747] EXT4-fs (loop5): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE
[   58.129533][ T5747] netlink: 'syz.5.646': attribute type 10 has an invalid length.
[   58.163246][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.193812][ T5747] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   58.281531][ T5768] program syz.3.652 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   58.334718][ T5776] loop5: detected capacity change from 0 to 512
[   58.346613][ T5776] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.376895][ T5776] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002]
[   58.390536][ T5776] System zones: 0-2, 18-18, 34-35
[   58.396611][ T5776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.426464][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.512949][ T5795] FAULT_INJECTION: forcing a failure.
[   58.512949][ T5795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.526099][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.0.656 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   58.536829][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   58.543359][ T5780] Cannot find add_set index 0 as target
[   58.546914][ T5795] Call Trace:
[   58.546925][ T5795]  <TASK>
[   58.546933][ T5795]  dump_stack_lvl+0xf2/0x150
[   58.546987][ T5795]  dump_stack+0x15/0x1a
[   58.547016][ T5795]  should_fail_ex+0x223/0x230
[   58.572266][ T5795]  should_fail+0xb/0x10
[   58.576437][ T5795]  should_fail_usercopy+0x1a/0x20
[   58.581486][ T5795]  strncpy_from_user+0x25/0x210
[   58.586423][ T5795]  ? kmem_cache_alloc_noprof+0x18e/0x320
[   58.592084][ T5795]  ? getname_flags+0x81/0x3b0
[   58.596832][ T5795]  getname_flags+0xb0/0x3b0
[   58.601338][ T5795]  __x64_sys_linkat+0x6b/0xa0
[   58.606059][ T5795]  x64_sys_call+0x14e3/0x2dc0
[   58.610741][ T5795]  do_syscall_64+0xc9/0x1c0
[   58.615248][ T5795]  ? clear_bhb_loop+0x55/0xb0
[   58.619938][ T5795]  ? clear_bhb_loop+0x55/0xb0
[   58.624625][ T5795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.630594][ T5795] RIP: 0033:0x7f476cf85d19
[   58.635008][ T5795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.654688][ T5795] RSP: 002b:00007f476b5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[   58.663169][ T5795] RAX: ffffffffffffffda RBX: 00007f476d175fa0 RCX: 00007f476cf85d19
[   58.671197][ T5795] RDX: ffffffffffffffff RSI: 0000000020000300 RDI: ffffffffffffffff
[   58.679159][ T5795] RBP: 00007f476b5f7090 R08: 0000000000001c00 R09: 0000000000000000
[   58.687181][ T5795] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001
[   58.695146][ T5795] R13: 0000000000000000 R14: 00007f476d175fa0 R15: 00007ffc98d4bed8
[   58.703114][ T5795]  </TASK>
[   58.758792][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'.
[   58.770460][ T5807] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.779254][ T5807] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.788015][ T5807] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.796903][ T5807] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.799799][ T5809] loop5: detected capacity change from 0 to 2048
[   58.807229][ T5807] vxlan0: entered promiscuous mode
[   58.817280][ T5807] vxlan0: entered allmulticast mode
[   58.846017][ T5809]  loop5: p1 < > p4 < >
[   58.864273][ T2999]  loop5: p1 < > p4 < >
[   58.914324][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   58.928482][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[   59.113264][ T5834] loop5: detected capacity change from 0 to 512
[   59.124247][ T5834] EXT4-fs: Ignoring removed nobh option
[   59.178336][ T5841] loop6: detected capacity change from 0 to 512
[   59.193052][ T5834] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   59.202373][ T5841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.244147][ T5848] loop3: detected capacity change from 0 to 512
[   59.254190][ T5834] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.671: casefold flag without casefold feature
[   59.269133][ T5848] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   59.280310][ T5834] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.671: couldn't read orphan inode 13 (err -117)
[   59.294594][ T5834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.296256][ T5459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.332323][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.671'.
[   59.374700][ T5848] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c028, mo2=0002]
[   59.412421][ T5848] System zones: 0-2, 18-18, 34-35
[   59.419058][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.450753][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.461874][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.582038][ T5864] program syz.0.682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.653910][ T5866] loop6: detected capacity change from 0 to 512
[   59.660681][ T5866] EXT4-fs: Ignoring removed nobh option
[   59.678851][ T5866] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[   59.692952][ T5866] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #13: comm syz.6.683: casefold flag without casefold feature
[   59.707118][ T5866] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.683: couldn't read orphan inode 13 (err -117)
[   59.714127][ T5873] usb usb4: usbfs: process 5873 (syz.3.687) did not claim interface 0 before use
[   59.719539][ T5866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.774530][ T5459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.842949][ T5890] loop5: detected capacity change from 0 to 256
[   59.905642][ T5890] FAT-fs (loop5): Directory bread(block 64) failed
[   59.912342][ T5890] FAT-fs (loop5): Directory bread(block 65) failed
[   59.920646][ T5890] FAT-fs (loop5): Directory bread(block 66) failed
[   59.927298][ T5890] FAT-fs (loop5): Directory bread(block 67) failed
[   59.936393][ T5890] FAT-fs (loop5): Directory bread(block 68) failed
[   59.944747][ T5890] FAT-fs (loop5): Directory bread(block 69) failed
[   59.951363][ T5890] FAT-fs (loop5): Directory bread(block 70) failed
[   59.969339][ T5890] FAT-fs (loop5): Directory bread(block 71) failed
[   59.984245][ T5890] FAT-fs (loop5): Directory bread(block 72) failed
[   59.990783][ T5890] FAT-fs (loop5): Directory bread(block 73) failed
[   60.047127][ T5890] bio_check_eod: 16 callbacks suppressed
[   60.047143][ T5890] syz.5.694: attempt to access beyond end of device
[   60.047143][ T5890] loop5: rw=524288, sector=1768, nr_sectors = 4 limit=256
[   60.077689][ T5890] syz.5.694: attempt to access beyond end of device
[   60.077689][ T5890] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256
[   60.078287][ T5917] loop6: detected capacity change from 0 to 512
[   60.105029][ T5917] EXT4-fs: Ignoring removed nobh option
[   60.115983][ T5917] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[   60.127956][ T5917] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #13: comm syz.6.702: casefold flag without casefold feature
[   60.167922][ T5917] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.702: couldn't read orphan inode 13 (err -117)
[   60.182178][ T5917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.236220][ T5930] loop5: detected capacity change from 0 to 512
[   60.272329][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.324411][ T5459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.337157][ T3962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.599623][ T5949] Cannot find add_set index 0 as target
[   60.763129][ T5975] loop3: detected capacity change from 0 to 512
[   60.945104][ T5986] loop3: detected capacity change from 0 to 512
[   60.952866][ T5986] EXT4-fs: Ignoring removed nobh option
[   60.968730][ T5986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   60.981659][ T5986] EXT4-fs (loop3): 1 truncate cleaned up
[   61.505722][ T6017] capability: warning: `syz.0.744' uses 32-bit capabilities (legacy support in use)
[   61.575393][ T6016] loop6: detected capacity change from 0 to 1024
[   61.737922][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'.
[   61.778730][ T6047] loop6: detected capacity change from 0 to 512
[   61.804456][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.853821][ T6052] SELinux:  Context Ü is not valid (left unmapped).
[   61.918606][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.926077][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.933574][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.941030][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.948449][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.955942][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.963300][ T6054] serio: Serial port ptm0
[   61.963338][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.975090][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.982501][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.989912][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   61.997329][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.004927][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.012362][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.019784][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.027287][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.034704][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.042678][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.050201][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.057783][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2
[   62.065214][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.072649][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.080049][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.087459][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.094911][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.102297][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.109714][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.117193][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.124621][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.132097][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.139525][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.146978][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.154409][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.161796][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.169271][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.176675][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.184137][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.191528][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.198968][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.206380][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.213787][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.221331][ T3448] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   62.234331][ T3448] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   62.328528][ T6063] loop5: detected capacity change from 0 to 512
[   62.344306][ T6063] EXT4-fs: Ignoring removed nobh option
[   62.361587][ T6063] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   62.392212][ T6063] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #13: comm syz.5.761: casefold flag without casefold feature
[   62.421337][ T6070] loop3: detected capacity change from 0 to 2048
[   62.429535][ T6063] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.761: couldn't read orphan inode 13 (err -117)
[   62.581639][ T6079] loop5: detected capacity change from 0 to 2048
[   62.655270][   T29] kauditd_printk_skb: 406 callbacks suppressed
[   62.655355][   T29] audit: type=1400 audit(1734011165.806:3237): avc:  denied  { create } for  pid=6090 comm="syz.6.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.706538][ T6096] FAULT_INJECTION: forcing a failure.
[   62.706538][ T6096] name failslab, interval 1, probability 0, space 0, times 0
[   62.707599][ T6095] pim6reg527: entered allmulticast mode
[   62.719263][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.3.772 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   62.719292][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   62.719302][ T6096] Call Trace:
[   62.719309][ T6096]  <TASK>
[   62.719316][ T6096]  dump_stack_lvl+0xf2/0x150
[   62.757328][ T6096]  dump_stack+0x15/0x1a
[   62.761654][ T6096]  should_fail_ex+0x223/0x230
[   62.766348][ T6096]  should_failslab+0x8f/0xb0
[   62.771036][ T6096]  kmem_cache_alloc_noprof+0x52/0x320
[   62.776423][ T6096]  ? audit_log_start+0x34c/0x6b0
[   62.780394][   T29] audit: type=1400 audit(1734011165.836:3238): avc:  denied  { listen } for  pid=6090 comm="syz.6.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.781363][ T6096]  audit_log_start+0x34c/0x6b0
[   62.781388][ T6096]  ? tlb_table_flush+0x10b/0x2b0
[   62.800734][   T29] audit: type=1400 audit(1734011165.846:3239): avc:  denied  { ioctl } for  pid=6090 comm="syz.6.770" path="socket:[12129]" dev="sockfs" ino=12129 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   62.805417][ T6096]  audit_seccomp+0x4b/0x130
[   62.810467][   T29] audit: type=1326 audit(1734011165.856:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83e825d19 code=0x7ffc0000
[   62.834778][ T6096]  __seccomp_filter+0x6fa/0x1180
[   62.834816][ T6096]  __secure_computing+0x9f/0x1c0
[   62.834844][ T6096]  syscall_trace_enter+0xd1/0x1f0
[   62.834872][ T6096]  ? fpregs_assert_state_consistent+0x83/0xa0
[   62.839374][   T29] audit: type=1326 audit(1734011165.856:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd83e824680 code=0x7ffc0000
[   62.862594][ T6096]  do_syscall_64+0xaa/0x1c0
[   62.862614][ T6096]  ? clear_bhb_loop+0x55/0xb0
[   62.862632][ T6096]  ? clear_bhb_loop+0x55/0xb0
[   62.867634][   T29] audit: type=1326 audit(1734011165.866:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   62.872514][ T6096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.877567][   T29] audit: type=1326 audit(1734011165.866:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   62.883545][ T6096] RIP: 0033:0x7fd83e82472c
[   62.883562][ T6096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   62.906836][   T29] audit: type=1326 audit(1734011165.866:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   62.911270][ T6096] RSP: 002b:00007fd83ce97030 EFLAGS: 00000246
[   62.915937][   T29] audit: type=1326 audit(1734011165.866:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6094 comm="syz.2.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5a08f05d19 code=0x7ffc0000
[   62.920563][ T6096]  ORIG_RAX: 0000000000000000
[   62.920571][ T6096] RAX: ffffffffffffffda RBX: 00007fd83ea15fa0 RCX: 00007fd83e82472c
[   62.943879][   T29] audit: type=1326 audit(1734011165.866:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd83e8247cf code=0x7ffc0000
[   62.949650][ T6096] RDX: 000000000000000f RSI: 00007fd83ce970a0 RDI: 0000000000000005
[   62.949665][ T6096] RBP: 00007fd83ce97090 R08: 0000000000000000 R09: 0000000000000000
[   63.101670][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   63.109834][ T6096] R13: 0000000000000000 R14: 00007fd83ea15fa0 R15: 00007fff82c68138
[   63.117896][ T6096]  </TASK>
[   63.132868][ T6106] loop6: detected capacity change from 0 to 512
[   63.158683][ T6106] EXT4-fs: Ignoring removed nobh option
[   63.185543][ T6113] loop5: detected capacity change from 0 to 512
[   63.195463][ T6113] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   63.202540][ T6106] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[   63.213560][ T6106] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #13: comm syz.6.777: casefold flag without casefold feature
[   63.218161][ T6113] EXT4-fs (loop5): 1 truncate cleaned up
[   63.229266][ T6106] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.777: couldn't read orphan inode 13 (err -117)
[   63.295186][ T6123] sd 0:0:1:0: device reset
[   63.326070][ T6131] FAULT_INJECTION: forcing a failure.
[   63.326070][ T6131] name failslab, interval 1, probability 0, space 0, times 0
[   63.338771][ T6131] CPU: 0 UID: 0 PID: 6131 Comm: syz.5.785 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   63.349424][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   63.359578][ T6131] Call Trace:
[   63.362925][ T6131]  <TASK>
[   63.365924][ T6131]  dump_stack_lvl+0xf2/0x150
[   63.370617][ T6131]  dump_stack+0x15/0x1a
[   63.374773][ T6131]  should_fail_ex+0x223/0x230
[   63.379495][ T6131]  ? __se_sys_mount+0xf7/0x2d0
[   63.384351][ T6131]  should_failslab+0x8f/0xb0
[   63.388947][ T6131]  __kmalloc_cache_noprof+0x4e/0x320
[   63.394238][ T6131]  ? memdup_user+0x9f/0xc0
[   63.398724][ T6131]  __se_sys_mount+0xf7/0x2d0
[   63.403371][ T6131]  ? fput+0x1c4/0x200
[   63.407346][ T6131]  ? ksys_write+0x176/0x1b0
[   63.411889][ T6131]  __x64_sys_mount+0x67/0x80
[   63.416509][ T6131]  x64_sys_call+0x2c84/0x2dc0
[   63.421177][ T6131]  do_syscall_64+0xc9/0x1c0
[   63.425752][ T6131]  ? clear_bhb_loop+0x55/0xb0
[   63.430424][ T6131]  ? clear_bhb_loop+0x55/0xb0
[   63.435209][ T6131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.441215][ T6131] RIP: 0033:0x7f87ff095d19
[   63.445621][ T6131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.465273][ T6131] RSP: 002b:00007f87fd707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   63.473684][ T6131] RAX: ffffffffffffffda RBX: 00007f87ff285fa0 RCX: 00007f87ff095d19
[   63.481644][ T6131] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000
[   63.489603][ T6131] RBP: 00007f87fd707090 R08: 0000000020000400 R09: 0000000000000000
[   63.497561][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.505531][ T6131] R13: 0000000000000000 R14: 00007f87ff285fa0 R15: 00007ffe51c08f58
[   63.513510][ T6131]  </TASK>
[   63.611199][ T6151] FAULT_INJECTION: forcing a failure.
[   63.611199][ T6151] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   63.624635][ T6151] CPU: 0 UID: 0 PID: 6151 Comm: syz.6.792 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   63.635282][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   63.645353][ T6151] Call Trace:
[   63.648639][ T6151]  <TASK>
[   63.651746][ T6151]  dump_stack_lvl+0xf2/0x150
[   63.656389][ T6151]  dump_stack+0x15/0x1a
[   63.660562][ T6151]  should_fail_ex+0x223/0x230
[   63.665254][ T6151]  should_fail_alloc_page+0xfd/0x110
[   63.670635][ T6151]  __alloc_pages_noprof+0x109/0x340
[   63.675918][ T6151]  alloc_pages_mpol_noprof+0xb1/0x1e0
[   63.681298][ T6151]  vma_alloc_folio_noprof+0x1a0/0x2f0
[   63.686751][ T6151]  handle_mm_fault+0xdd7/0x2ac0
[   63.691694][ T6151]  ? __rcu_read_lock+0x36/0x50
[   63.696471][ T6151]  __get_user_pages+0xf2c/0x2670
[   63.701445][ T6151]  __gup_longterm_locked+0x932/0xf90
[   63.706802][ T6151]  ? selinux_ptrace_access_check+0x100/0x110
[   63.712830][ T6151]  ? security_ptrace_access_check+0x67/0x80
[   63.718723][ T6151]  ? down_read+0x171/0x4b0
[   63.723136][ T6151]  ? __ptrace_may_access+0x2cb/0x350
[   63.728422][ T6151]  pin_user_pages_remote+0x7f/0xb0
[   63.733530][ T6151]  process_vm_rw+0x4bc/0x890
[   63.738128][ T6151]  ? ksys_write+0x176/0x1b0
[   63.742702][ T6151]  __x64_sys_process_vm_writev+0x7a/0x90
[   63.748332][ T6151]  x64_sys_call+0x2c48/0x2dc0
[   63.753148][ T6151]  do_syscall_64+0xc9/0x1c0
[   63.757815][ T6151]  ? clear_bhb_loop+0x55/0xb0
[   63.762502][ T6151]  ? clear_bhb_loop+0x55/0xb0
[   63.767239][ T6151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.773157][ T6151] RIP: 0033:0x7f43b1725d19
[   63.777564][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.797164][ T6151] RSP: 002b:00007f43afd91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[   63.805568][ T6151] RAX: ffffffffffffffda RBX: 00007f43b1915fa0 RCX: 00007f43b1725d19
[   63.813529][ T6151] RDX: 0000000000000001 RSI: 0000000020001c80 RDI: 0000000000000062
[   63.821495][ T6151] RBP: 00007f43afd91090 R08: 0000000000000001 R09: 0000000000000000
[   63.829491][ T6151] R10: 0000000020001d80 R11: 0000000000000246 R12: 0000000000000002
[   63.837465][ T6151] R13: 0000000000000000 R14: 00007f43b1915fa0 R15: 00007ffe36f37028
[   63.845472][ T6151]  </TASK>
[   63.872190][ T6160] loop5: detected capacity change from 0 to 1764
[   63.886873][ T2999] ==================================================================
[   63.895075][ T2999] BUG: KCSAN: data-race in d_delete / lookup_fast
[   63.901504][ T2999] 
[   63.903826][ T2999] read-write to 0xffff88811f0849c0 of 4 bytes by task 4164 on cpu 0:
[   63.911879][ T2999]  d_delete+0x15a/0x180
[   63.916048][ T2999]  d_delete_notify+0x34/0x100
[   63.921000][ T2999]  vfs_unlink+0x320/0x430
[   63.925334][ T2999]  do_unlinkat+0x237/0x4d0
[   63.929747][ T2999]  __x64_sys_unlink+0x2e/0x40
[   63.934422][ T2999]  x64_sys_call+0x2329/0x2dc0
[   63.939090][ T2999]  do_syscall_64+0xc9/0x1c0
[   63.943586][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.949480][ T2999] 
[   63.951793][ T2999] read to 0xffff88811f0849c0 of 4 bytes by task 2999 on cpu 1:
[   63.959324][ T2999]  lookup_fast+0xd9/0x2a0
[   63.963645][ T2999]  walk_component+0x3f/0x230
[   63.968227][ T2999]  path_lookupat+0x10a/0x2b0
[   63.972810][ T2999]  filename_lookup+0x150/0x340
[   63.977566][ T2999]  do_readlinkat+0x89/0x210
[   63.982061][ T2999]  __x64_sys_readlink+0x47/0x60
[   63.986905][ T2999]  x64_sys_call+0x28ba/0x2dc0
[   63.991573][ T2999]  do_syscall_64+0xc9/0x1c0
[   63.996065][ T2999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.001958][ T2999] 
[   64.004268][ T2999] value changed: 0x00600108 -> 0x00008008
[   64.009977][ T2999] 
[   64.012287][ T2999] Reported by Kernel Concurrency Sanitizer on:
[   64.018445][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[   64.028676][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   64.038718][ T2999] ==================================================================
[   64.060585][ T6160] ISOFS: unable to read i-node block
[   64.065929][ T6160] isofs_fill_super: get root inode failed
[   64.135856][ T6168] netlink: 'syz.3.798': attribute type 21 has an invalid length.
[   64.153375][ T6168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.798'.
[   64.251754][ T6160] ebtables: ebtables: counters copy to user failed while replacing table