last executing test programs:

1m24.28797139s ago: executing program 1 (id=2779):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a32"], 0x98}}, 0x4000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x48008491)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0)

1m24.223518972s ago: executing program 1 (id=2780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r7, 0x29, 0x6, 0x62, 0x3, 0x41, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7800, 0x0, 0xaa2e}})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff2abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="142005002114000d1280090001007665746800007e5fd9e00eede4ff43e0b22cde248f8f0bbd0e584ecb9244b39174d4443fc54f31749349c8285c1e9e956f6f36ac86766cf6f3260ea86d85d9ce9ff01157b8c140f1412cbc2d2711b541c68cc75d94cf8d91722a8d299300000000000000a12a38d632de2568fd64a273", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r8}, 0x2a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000001f40)={[{@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==")

1m23.880246127s ago: executing program 1 (id=2783):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

1m23.80804587s ago: executing program 1 (id=2785):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}], 0x6b}})

1m23.664016996s ago: executing program 1 (id=2786):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40040, 0x1)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x280000)
r3 = getpgrp(0x0)
syz_pidfd_open(r3, 0x0)
ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000200)={r3, 0x0, 0x2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffffffff1f6a, 0x10001)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x1fc, 0x3f, 0x820, 0x70bd26, 0x25dfdbff, {0x5}, [@generic="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", @generic="3981fc2e94561f069fa8265a6a565515e9a63ddf0257c345812ca44ed3ae9ce8d408c17d6e53e4d633ddf72bf031400e486fe93341a5420c59e5fc64cad02725e191015cf6194897794b558b6a969fa136af23bf2674879d2878231009e16ae3b4a57488437a8e7a952d6317a6b55fb14b9ad46e644337161506a04e9abb2fe2092f185a3831de80812d9779da76921c2abeb3ae1cfd1bdd8b6c3cfabed397628b7fbba36127a7cc4be80609b68391592df9af25a2b66af281e973bc5802ba7eb22715f16620e62f880cf19383ae73fb599adb38199eab360e6a5641d63352b84e8e1b06ae0ed6f311"]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40040}, 0x40010)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8})
shutdown(r6, 0x0)
syz_clone3(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1m23.595449509s ago: executing program 1 (id=2787):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e01, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000200)='sockfs\x00', 0x0)
r4 = signalfd(r3, &(0x7f0000000100)={[0x4]}, 0x8)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000000c0)=<r5=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r5, 0xee00}}, './file0\x00'})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0)
close(r3)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000eeff000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10)
openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

1m8.393491234s ago: executing program 32 (id=2787):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e01, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$cgroup_pid(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000200)='sockfs\x00', 0x0)
r4 = signalfd(r3, &(0x7f0000000100)={[0x4]}, 0x8)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000000c0)=<r5=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r5, 0xee00}}, './file0\x00'})
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0)
close(r3)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000eeff000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10)
openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

2.444542593s ago: executing program 4 (id=3632):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.339862068s ago: executing program 4 (id=3634):
r0 = socket$inet6(0xa, 0x3, 0x3c)
socket$inet(0xa, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e9907e04eb88b935d785f00"/54], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX")
r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r6, 0x402, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
bind$unix(r7, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18)
socket(0x10, 0x803, 0x0)

1.971353134s ago: executing program 2 (id=3646):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==")
r0 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

1.923270286s ago: executing program 2 (id=3649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r1, &(0x7f0000000040)="0600", 0x2)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000733a1862001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000400600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1}]}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))

1.852649469s ago: executing program 5 (id=3652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r1, r0}, 0xc)

1.796074281s ago: executing program 5 (id=3654):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
rt_sigprocmask(0x1, &(0x7f0000000080)={[0xffffffffffffffff]}, &(0x7f00000000c0), 0x8)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)

1.770732323s ago: executing program 5 (id=3656):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000085000000500000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0)

1.768685453s ago: executing program 3 (id=3657):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x78}, 0x1, 0x7}, 0x0)

1.726171465s ago: executing program 5 (id=3659):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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")
r0 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

1.725773504s ago: executing program 3 (id=3660):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socket(0x28, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

1.638021268s ago: executing program 5 (id=3662):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$inet(0xa, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e9907e04eb88b935d785f00"/54], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRES64=r0], 0x0, 0x31, 0xfffffe21, 0x1, 0x7}, 0x28)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x810408, 0x0, 0x20, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000a00)='./file0\x00')
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
bind$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18)
socket(0x10, 0x803, 0x0)

1.637570059s ago: executing program 3 (id=3663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0)

1.583135821s ago: executing program 3 (id=3666):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = fsopen(0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="a80000001200080029bd7000fbdbdf25010300084e234e22010000000a000000750000000700000006000000080200000004000168ebfffff58a9f75ad3ea5c4", @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8228b3c21869bc1e293e2b782c69836972b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6abc426d824caadc7441aeb057c485f95ea61816acf247da86b"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
fsmount(r1, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18)
syslog(0x9, 0x0, 0x0)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8)
pwritev2(r4, &(0x7f0000000a40)=[{&(0x7f0000000080)='\x00', 0xfffffefb}, {&(0x7f00000004c0)="d938a7105e1a445d2624bc7de2f6a121dc41e493cd841baf5dc859305a69a481c7b612d7c40ccfe78b6f5804112c63ba0983051277fc29ce432cb21fcae3975498823c9da4805bf005e0819047cb1ed9875442ca7c1f59d23b1ad57c165538649e0bde2b4aa1d931029b1a37608fb373c0af0c50d4352cfae0883abb8b10482016477ba444a6491e8673a70dbaa889b58e753f300a6b2a0cc4093b8a6fd41ac6e73bde8e1f638e0d110d82461ea187f666ee5760d76ee9b7b29b80f243c8b15410f8387f560ac22473ec968d6ae9d94f1560333543704dab159d29db07b9035050", 0xe1}, {&(0x7f0000000380)="0355c7b043accb9d0704754d602f622e40fc087bf9bfbbd15f6c71cdc5b1731b26eb9d21b969fb3ce1d88db305c6526cc6a82ab9a6e9a0c43695", 0x3a}, {&(0x7f0000000ac0)="75d91a702510cb7ce35d6995ba95798995beb67aa6e750c1bc256f0dc1810aeee3e5ff8ee5ed282bf95cbaa45db79c78b7690515ed994d727f0ed9656789958931f27c4c6b1750716983dea8208926b5ec2ff6fc5ec3d7abc452f72f7bd92e4ad37b1a9148cfef7ba60dfd249427675409477538a96b9c584b8cbb762c3ff26c78ddfd2116664b3f819d9dc5a1f9a23b59d06150ea56c5a8b917878e3ffb00d9bbb3683aaa6d1d60f2c4fa8cc759ebd6d5d55ec5cbe93772c4aac9bef9"}, {&(0x7f00000006c0)="a8e23ee95e1eac7e335fe49836cf1433e1df40cfeac99fc0ae3547e8d985192f5872495f8685994b56a501c55ab8b53acf9134d04a288b8e3e28daee23a55787ad6665555cd7be44dc2b636bf6d2dde91ddea8e09256f2d63c6ef378559e685a63ce66c6d9c02caee7e1e1ecf0b7222bca24c9925c6a09d889c2b6ebfec75c1e3f6e7cdddaf96935fdee67de7693ec4f92b4f78ec467411fb59636fe7304207b4d6f6c93a1de1ec8b1a4d4877746f807d228bee40d6729c1b7c1e37a3ae95fcbf21426a1824a44cd5ae7a7f3d6bcf3652d28e94ef64c92452009d75851b141c351a14c0694909fe42e"}, {&(0x7f00000007c0)="49e784b66730f2984516982a25fcff85fc9b73b2bd10b3ece42e774483d22c0fdc9b9a6d50963a9ec0cc076331cee0d6dbff806943d918c026f58cc3349bccd552c35e6944b9a67fa2f6d34561f3cfdccd14bc068b5e55768a12408f01f75ade44ea569b3479036d59d2241f743e5aa368ff4dd7a8d9af084c0423b887b08a1963f2bf21c45e0a479e67743174394da7941a71c814"}, {&(0x7f0000000880)="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"}], 0x3, 0xe7b, 0x0, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2})
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$unlink(0x9, r5, r5)
ftruncate(0xffffffffffffffff, 0x2007ffc)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file1\x00', 0x0, 0x4000}, 0x18)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES32=r7, @ANYRESDEC=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

1.488799045s ago: executing program 4 (id=3667):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x59, 0x59, 0x8, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x6f8, 0x9}, {0x1, 0x10, 0x1}], "01"}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x2d, 0x2}, @struct={0x5, 0x2, 0x0, 0x4, 0x1, 0xffffffff, [{0xd, 0x1}, {0xe, 0x2, 0x2}]}]}, {0x0, [0x0, 0x30, 0x0, 0x2e, 0x10, 0x30]}}, &(0x7f0000000440)=""/4096, 0x7c, 0x1000, 0x1, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000180)=ANY=[], 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020010000007e089bb70000000000001f14000200fc0200000000000000000000000000fe"], 0x5c}}, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000a}}, 0x10)

1.339551471s ago: executing program 4 (id=3669):
r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4cb, &(0x7f0000000f00)="$eJzs3ctrXNcZAPBvZiRZktX60VJsF2qDC+4Da/SgWGq76artwlBq6KYFV5XGqquRRmhGriW8kNudF12UlhZCFtnnL8gmXsUEQtbJPmQRHBJHgSQQmHDvzDjySCMPiawb6/5+MJ5zHzPfOR6+o3vPfQWQWxeSfwoRYxHxZkScaE0+ucKF1tv2ozvzyasQzea1Dwrpesl0Z9XO545HxFZEDEfE738d8ZfC7rj1jc2luWq1staeLjeWV8v1jc3LN5fnFiuLlZXJmSuzszMT01OzB9bWe//6272rr/x26OVP/vnwwb9fezWp1lh72c52HKRW0wfj1I55AxHxy2cRLAOldntGsq4IX0ny+30nIi6m+X8iSsmvOZR1rYDD0Gw2m583j/VavNUEjqxiug1cKI5HRKtcLI6Pt7bhvxujxWqt3vjpjdr6ykJrW/lkDBZv3KxWJtr7CidjsJBMT6blL6enuqanI9Jt4P+URtLp8fladeFwuzqgy/Gu/P+41Mp/ICcGsq4AkBn5D/kl/yG/5D/kl/yH/JL/kF/yH/JrQBcAuSX5Ib/kP+SX/Idc+t3Vq8mr2bn+feHWxvpS7dblhUp9aXx5fX58vra2Or5Yqy2m1+wsP+37qrXa6uTPYv12uVGpN8r1jc3ry7X1lcb19Lr+65XBQ2kV0I9T5++/XYiIrZ+PpK9E5/J/uQpHW7NZiKyvQQayUcq6AwIys/fQ3x437AOOHPv4QPdf/O7tguFeH1x1u1B4XhWzrgCQmUtn9zn+t+2u7nCUGf+H/HLqL+SX8X/gaUf89xv/B55Pxv8hv8Z6PP/rWzue3TUREd+OiLdKg8c6z/oCjoLie4X29v+lEz8c6146VPg0PUQwFBF/f+Ha/27PNRprk8n8Dx/Pb/y/PX9qxwd77jAAWenkaSePAYD82n50Z77zOsy47/+qdRLC7vgD7bHJ4fQY5eh24YlzFQoHdO7C1t2IOLNX/EL7eeetHZnR7dKu+Kfb74XWV6T1HUifm3448c/uiP+DHfHPfe3/FciH+0n/M7FX/hXTnI7H+fdk/zN2QOdO9O7/io/7v1KP/u98nzH++uI/3u0Z/27EuT3jd+INp7G64yd1u9Rn/Id/+sP3ei1rvtT6nr3idySlcmN5tVzf2Lyc3kdusbIyOXNldnZmYnpqtpyOUZc7I9W7/eLMGw/2a/9oj/j7tT+Z9+M+2//Z91//44V94v/o4t6//+l94o9ExE/6jP/R1Dt/7rUsib/Qo/3FfeIn86b7jF//72+O9bkqAHAI6hubS3PVamVNQUEhk8Ldb0Y1ugpZ90zAs1bfSHbNk6TPuiYAAAAAAAAAAABAvw7jdOKs2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBR8EQAA//+d8NXX")
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate\x00\x00,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYBLOB="dbebdec402a7b694b2b22189fe12bccd0da3a5fe7e5a", @ANYBLOB="2c636f64657061673835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c121f8030000000001009dba05feee081e91fc61a0fef55112510000"], 0x1, 0x238, &(0x7f0000000500)="$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")
io_uring_setup(0x5581, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r3, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000011, &(0x7f0000000180), 0x0, 0x617, &(0x7f0000001100)="$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")
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x5, 0x83, 0xd, @empty, @remote, 0x40, 0x0, 0x34}})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100039042aae7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c01006002c001280080001007369740020000280080003000a01010214000b00fc010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)

1.268102335s ago: executing program 0 (id=3672):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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")
r0 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

1.123709971s ago: executing program 0 (id=3673):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}], 0x6b}})

1.123349641s ago: executing program 3 (id=3674):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x58, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc001}, 0x20040844)

1.080994483s ago: executing program 2 (id=3675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x26}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000188, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, <r7=>0xffffffffffffffff}}, './file0\x00'})
r8 = socket$nl_audit(0x10, 0x3, 0x9)
r9 = gettid()
getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=<r10=>0x0)
lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r12, 0x0)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000500)={0xc0, 0x27, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x135, 0x0, 0x0, @str='\\]]\x00'}, @generic="f07f9ad7ca9cc1a63210b4dfedfc0eb92978e57f77b3dbc9d46a3d305cb12f9ab638c88d7b5595d38c630f5d574e6b2b5b0709fb0334432a2ba01370289a11e254896b05c8351146244d926c219b4cc839a8ad5d87f392d9981624d8d37153ad97e74875645d542dc737cc5f01eb89129702846a89b96a9f08845c9e2d45d62d95d0c2510205339b7af8409f96664560516f", @typed={0x14, 0x14f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}]}, 0xc0}], 0x1, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [r5, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r1, r6, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @rights={{0x24, 0x1, 0x1, [r4, r6, r1, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x34, 0x1, 0x1, [r6, r0, r0, r2, r5, r4, r12, r5, r6]}}, @rights={{0x20, 0x1, 0x1, [r13, r4, r0, r3]}}], 0xf8, 0x8800}, 0x8040)
recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)

1.044580224s ago: executing program 3 (id=3676):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x2}, 0x18)
chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0)

1.018896156s ago: executing program 0 (id=3677):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getdents64(r0, 0x0, 0x22)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x10, 0x803, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x557, 0x3}, 0x4c58, 0x4, 0x0, 0x0, 0x7, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x19)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x88}, 0x1, 0x7}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001840)=0x14)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
fcntl$setsig(r6, 0xa, 0x12)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9d27dac77ec4374, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xbc, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18)
socket(0x10, 0x1, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

1.017920326s ago: executing program 2 (id=3678):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000000206030000516ced7b00000000000000000000000d0003006861af7c1f5babe8e8ce73683a6e65740000000005000400000000000900020073797a310008000004000780050005000200000005000100"], 0x4c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0xf8d3, 0xde, &(0x7f0000000b80)=""/222, 0x41000, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x10, 0x1000, 0x804}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x8b}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18)
r5 = syz_io_uring_setup(0x14d9, &(0x7f0000000400)={0x0, 0x5125, 0x0, 0x0, 0x2cd}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ffff00001d960042340d0be9c8c48b6e1d960d6a3c5b9d7351d56e02436246a8ad61ba237d2c1fcfc543b3d50395026e093c4cc0e0021234f33fff0a6ee634fdb6bf583424d9349c9af010f30ba729fba83f5fcc6abc2539e4ab2b88c0fef8be59753d40954900ad84f251048417d4491af79d47ea63bed7", @ANYRES16=r9, @ANYBLOB="000129bd7000fddbdf250700000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'})
io_uring_enter(r5, 0x47ba, 0x3e00, 0x0, 0x0, 0x0)
capset(&(0x7f0000000600)={0x20080522}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r11, 0x2285, &(0x7f0000000680)={0x0, 0x0, 0xffffffffffffffa5, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="2f1666ce20db", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0})
r12 = socket$can_raw(0x1d, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x400, &(0x7f0000000a40)=ANY=[])
getsockopt$CAN_RAW_JOIN_FILTERS(r12, 0x65, 0x6, 0x0, &(0x7f0000000040))
write$cgroup_pid(r3, &(0x7f00000000c0), 0x49)

970.291897ms ago: executing program 0 (id=3679):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
finit_module(0xffffffffffffffff, 0x0, 0x0)

954.057558ms ago: executing program 4 (id=3680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x180, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2faa}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffea}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8c9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40004}, 0x20000104)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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")
syz_open_dev$usbfs(&(0x7f00000001c0), 0x1d16, 0x10000)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0xcd)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000800000791204000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendfile(r4, r4, 0x0, 0x800000009)

907.49625ms ago: executing program 0 (id=3681):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3)

629.297342ms ago: executing program 5 (id=3682):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = mq_open(0x0, 0x1, 0x1, &(0x7f00000003c0)={0x2, 0x57, 0x4, 0x6})
mq_getsetattr(r1, &(0x7f0000000400)={0x93, 0x5c463867, 0x4, 0xe9}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, 0x0, 0x0)
fallocate(r2, 0x1, 0x5, 0x9)
mknod(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @multicast2}, {0x1, @remote}, 0x10, {0x2, 0x4e21, @broadcast}, 'bridge0\x00'})
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000740)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000780)=0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESDEC=r2, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='rpcgss_bad_seqno\x00', r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='svcrdma_qp_error\x00', r7}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfbno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,\x00'])
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

365.605304ms ago: executing program 4 (id=3683):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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")
r0 = syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0)

63.681517ms ago: executing program 0 (id=3684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040003ea0756", 0xe, 0x24044085, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

57.836388ms ago: executing program 2 (id=3685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000})
syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300), &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e00000040000081002000860000000000000000000001ff02800000000000000000000000000187009078ff020000000000000000000000000001"], 0x0)

0s ago: executing program 2 (id=3686):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000085000000500000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

78.194033][   T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.215623][T12474] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.259962][T12474] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.283648][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.305930][T12487] siw: device registration error -23
[  278.316466][T12487] loop3: detected capacity change from 0 to 512
[  278.365481][T12497] FAULT_INJECTION: forcing a failure.
[  278.365481][T12497] name failslab, interval 1, probability 0, space 0, times 0
[  278.378248][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.2.2926 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  278.378293][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  278.378308][T12497] Call Trace:
[  278.378316][T12497]  <TASK>
[  278.378322][T12497]  __dump_stack+0x1d/0x30
[  278.378357][T12497]  dump_stack_lvl+0xe8/0x140
[  278.378479][T12497]  dump_stack+0x15/0x1b
[  278.378495][T12497]  should_fail_ex+0x265/0x280
[  278.378534][T12497]  should_failslab+0x8c/0xb0
[  278.378626][T12497]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  278.378673][T12497]  ? __d_alloc+0x3d/0x340
[  278.378713][T12497]  __d_alloc+0x3d/0x340
[  278.378785][T12497]  d_alloc+0x2e/0x100
[  278.378852][T12497]  lookup_one_qstr_excl+0x99/0x250
[  278.378892][T12497]  do_unlinkat+0x176/0x480
[  278.378952][T12497]  __x64_sys_unlinkat+0x97/0xb0
[  278.378981][T12497]  x64_sys_call+0x2eed/0x3000
[  278.379006][T12497]  do_syscall_64+0xd2/0x200
[  278.379031][T12497]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  278.379106][T12497]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  278.379146][T12497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.379171][T12497] RIP: 0033:0x7f314cb4f749
[  278.379189][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.379251][T12497] RSP: 002b:00007f314b5af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  278.379338][T12497] RAX: ffffffffffffffda RBX: 00007f314cda5fa0 RCX: 00007f314cb4f749
[  278.379353][T12497] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c
[  278.379373][T12497] RBP: 00007f314b5af090 R08: 0000000000000000 R09: 0000000000000000
[  278.379388][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.379402][T12497] R13: 00007f314cda6038 R14: 00007f314cda5fa0 R15: 00007ffe129a2a38
[  278.379425][T12497]  </TASK>
[  278.380520][T12487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.382065][T12474] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.417088][T12487] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  278.435473][T12493] loop4: detected capacity change from 0 to 8192
[  278.687977][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.698129][T12493]  loop4: p1 p2 p3 p4
[  278.702268][T12493] loop4: p1 start 51379968 is beyond EOD, truncated
[  278.708956][T12493] loop4: p2 start 4293394690 is beyond EOD, truncated
[  278.715845][T12493] loop4: p3 size 100663552 extends beyond EOD, truncated
[  278.723686][T12493] loop4: p4 size 50331648 extends beyond EOD, truncated
[  278.869115][   T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.939199][   T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.951022][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  278.966914][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  279.045476][   T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.182715][T12038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.213978][T12516] loop0: detected capacity change from 0 to 764
[  279.224766][   T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.248482][T12516] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  279.515734][T12528] lo speed is unknown, defaulting to 1000
[  279.634505][T12528] wg1 speed is unknown, defaulting to 1000
[  279.946566][T12533] syz_tun: entered promiscuous mode
[  279.962820][T12533] macvtap1: entered promiscuous mode
[  279.993008][T12538] __nla_validate_parse: 4 callbacks suppressed
[  279.993094][T12538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2936'.
[  280.012259][T12533] syz_tun: left promiscuous mode
[  280.156010][T12541] loop0: detected capacity change from 0 to 256
[  280.184132][T12541] vfat: Unknown parameter 'kfree'
[  280.211342][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'.
[  280.263880][T12544] loop5: detected capacity change from 0 to 8192
[  280.336771][T11359]  loop5: p1 p2 p3 p4
[  280.340999][T11359] loop5: p1 start 51379968 is beyond EOD, truncated
[  280.347696][T11359] loop5: p2 start 4293394690 is beyond EOD, truncated
[  280.354598][T11359] loop5: p3 size 100663552 extends beyond EOD, truncated
[  280.355228][T12552] netlink: 'syz.2.2942': attribute type 3 has an invalid length.
[  280.372479][T12550] 9pnet_fd: Insufficient options for proto=fd
[  280.386047][T12548] lo speed is unknown, defaulting to 1000
[  280.394385][T11359] loop5: p4 size 50331648 extends beyond EOD, truncated
[  280.415108][T12544]  loop5: p1 p2 p3 p4
[  280.419196][T12544] loop5: p1 start 51379968 is beyond EOD, truncated
[  280.426008][T12544] loop5: p2 start 4293394690 is beyond EOD, truncated
[  280.432797][T12544] loop5: p3 size 100663552 extends beyond EOD, truncated
[  280.479061][T12559] loop3: detected capacity change from 0 to 764
[  280.491749][T12561] netlink: 'syz.0.2946': attribute type 4 has an invalid length.
[  280.498596][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'.
[  280.509385][T12544] loop5: p4 size 50331648 extends beyond EOD, truncated
[  280.527376][ T3394] lo speed is unknown, defaulting to 1000
[  280.533145][ T3394] syz1: Port: 1 Link DOWN
[  280.533164][T12559] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  280.547064][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'.
[  280.556107][   T36] lo speed is unknown, defaulting to 1000
[  280.635385][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  280.637562][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  280.666984][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2948'.
[  280.697495][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  280.697522][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  280.768516][T12572] syz_tun: entered promiscuous mode
[  280.793843][T12572] macvtap1: entered promiscuous mode
[  280.810376][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'.
[  280.823283][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2951'.
[  280.833267][T12572] syz_tun: left promiscuous mode
[  280.852231][T12548] wg1 speed is unknown, defaulting to 1000
[  280.902332][T12582] netlink: 'syz.3.2954': attribute type 3 has an invalid length.
[  280.964211][T12588] 9pnet_fd: Insufficient options for proto=fd
[  280.998834][T12590] loop5: detected capacity change from 0 to 764
[  281.018492][T12586] loop3: detected capacity change from 0 to 8192
[  281.032686][T12590] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  281.062965][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2958'.
[  281.073783][ T3303]  loop3: p1 p2 p3 p4
[  281.077979][ T3303] loop3: p1 start 51379968 is beyond EOD, truncated
[  281.084666][ T3303] loop3: p2 start 4293394690 is beyond EOD, truncated
[  281.091449][ T3303] loop3: p3 size 100663552 extends beyond EOD, truncated
[  281.114296][T12596] siw: device registration error -23
[  281.119530][ T3303] loop3: p4 size 50331648 extends beyond EOD, truncated
[  281.140677][T12586]  loop3: p1 p2 p3 p4
[  281.145059][T12586] loop3: p1 start 51379968 is beyond EOD, truncated
[  281.151702][T12586] loop3: p2 start 4293394690 is beyond EOD, truncated
[  281.158535][T12586] loop3: p3 size 100663552 extends beyond EOD, truncated
[  281.172386][T12586] loop3: p4 size 50331648 extends beyond EOD, truncated
[  281.196290][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'.
[  281.215266][T12586] bridge_slave_1: left allmulticast mode
[  281.221070][T12586] bridge_slave_1: left promiscuous mode
[  281.226862][T12586] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.254182][T12586] bridge_slave_0: left allmulticast mode
[  281.259889][T12586] bridge_slave_0: left promiscuous mode
[  281.265631][T12586] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.484919][T12600] 9pnet_fd: Insufficient options for proto=fd
[  281.508124][T12600] lo speed is unknown, defaulting to 1000
[  281.564323][T12607] loop4: detected capacity change from 0 to 764
[  281.578784][T12607] rock: directory entry would overflow storage
[  281.585064][T12607] rock: sig=0x4f50, size=4, remaining=3
[  281.590630][T12607] iso9660: Corrupted directory entry in block 6 of inode 1792
[  281.618042][T12607] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.628895][T12600] wg1 speed is unknown, defaulting to 1000
[  281.700608][T12607] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.855778][T12607] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.972942][T12607] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.012975][T12619] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2967'.
[  282.056694][   T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.078269][   T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.191090][T12620] lo speed is unknown, defaulting to 1000
[  282.214964][   T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.223217][   T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.362192][T12620] wg1 speed is unknown, defaulting to 1000
[  282.486339][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  282.486353][   T29] audit: type=1400 audit(1764096707.576:13534): avc:  denied  { ioctl } for  pid=12625 comm="syz.4.2968" path="socket:[50851]" dev="sockfs" ino=50851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  282.570592][T12629] kernel profiling enabled (shift: 17)
[  282.840990][   T29] audit: type=1326 audit(1764096707.926:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.2.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  282.864776][   T29] audit: type=1326 audit(1764096707.926:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.2.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  282.913915][T12633] loop0: detected capacity change from 0 to 764
[  282.950797][T12633] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  282.959015][   T29] audit: type=1400 audit(1764096708.026:13537): avc:  denied  { write } for  pid=12634 comm="syz.3.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  282.986927][T12637] 9pnet_fd: Insufficient options for proto=fd
[  283.081857][   T29] audit: type=1400 audit(1764096708.066:13538): avc:  denied  { allowed } for  pid=12634 comm="syz.3.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  283.101455][   T29] audit: type=1400 audit(1764096708.066:13539): avc:  denied  { create } for  pid=12634 comm="syz.3.2969" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  283.101701][T12647] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  283.122994][   T29] audit: type=1400 audit(1764096708.066:13540): avc:  denied  { map } for  pid=12634 comm="syz.3.2969" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  283.154087][   T29] audit: type=1400 audit(1764096708.066:13541): avc:  denied  { read write } for  pid=12634 comm="syz.3.2969" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  283.179353][   T29] audit: type=1400 audit(1764096708.076:13542): avc:  denied  { module_request } for  pid=12632 comm="syz.0.2971" kmod="ip6table_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  283.201192][   T29] audit: type=1400 audit(1764096708.126:13543): avc:  denied  { create } for  pid=12641 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  283.212939][T12645] netlink: 'syz.0.2974': attribute type 6 has an invalid length.
[  283.256445][T12645] lo speed is unknown, defaulting to 1000
[  283.372970][T12645] wg1 speed is unknown, defaulting to 1000
[  283.480900][T12659] lo speed is unknown, defaulting to 1000
[  283.624208][T12659] wg1 speed is unknown, defaulting to 1000
[  283.989471][T12670] loop0: detected capacity change from 0 to 256
[  283.996368][T12666] loop5: detected capacity change from 0 to 8192
[  284.005496][T12670] vfat: Unknown parameter 'kfree'
[  284.071830][T12666]  loop5: p1 p2 p3 p4
[  284.079447][T12666] loop5: p1 start 51379968 is beyond EOD, truncated
[  284.086151][T12666] loop5: p2 start 4293394690 is beyond EOD, truncated
[  284.092946][T12666] loop5: p3 size 100663552 extends beyond EOD, truncated
[  284.127225][T12666] loop5: p4 size 50331648 extends beyond EOD, truncated
[  284.170848][T12666] bridge_slave_1: left allmulticast mode
[  284.176750][T12666] bridge_slave_1: left promiscuous mode
[  284.182567][T12666] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.204848][T12666] bridge_slave_0: left allmulticast mode
[  284.210553][T12666] bridge_slave_0: left promiscuous mode
[  284.216483][T12666] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.234964][T12672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.245880][T12672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.295252][T12677] netlink: 'syz.0.2985': attribute type 6 has an invalid length.
[  284.315407][T12680] lo speed is unknown, defaulting to 1000
[  284.321364][T12681] loop4: detected capacity change from 0 to 512
[  284.355027][T12681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.370909][T12681] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.458860][T12680] wg1 speed is unknown, defaulting to 1000
[  284.477654][T12690] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  284.485043][T12690] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  284.498019][T12690] siw: device registration error -23
[  284.515983][T12690] loop5: detected capacity change from 0 to 512
[  284.537159][T12690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.554761][T12690] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.601602][T12698] loop0: detected capacity change from 0 to 1024
[  284.642458][T12698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.686013][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.775816][T12705] syz_tun: entered promiscuous mode
[  284.781243][T12705] macvtap0: entered promiscuous mode
[  284.788382][T12705] syz_tun: left promiscuous mode
[  285.076001][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.143252][T12715] lo speed is unknown, defaulting to 1000
[  285.182589][T12723] __nla_validate_parse: 14 callbacks suppressed
[  285.182609][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'.
[  285.287057][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.321790][T12715] wg1 speed is unknown, defaulting to 1000
[  285.427469][T12735] loop4: detected capacity change from 0 to 1024
[  285.446207][T12738] syz_tun: entered promiscuous mode
[  285.454319][T12738] macvtap1: entered promiscuous mode
[  285.462269][T12738] syz_tun: left promiscuous mode
[  285.469081][T12735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.489301][T12739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.507320][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3004'.
[  285.517215][T12735] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3002'.
[  285.553361][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.588414][T12739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.625996][T12747] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3006'.
[  285.688261][T12739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.744029][T12752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.760388][T12750] loop5: detected capacity change from 0 to 2048
[  285.768120][T12752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.777163][T12739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.795028][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3008'.
[  285.819690][T12750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.846484][T12750] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.953665][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.974132][   T58] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.994585][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3011'.
[  286.003117][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.027810][   T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.061587][   T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.083790][   T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.388531][T12795] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3019'.
[  286.404048][T12797] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3021'.
[  287.544116][   T29] kauditd_printk_skb: 275 callbacks suppressed
[  287.544136][   T29] audit: type=1400 audit(1764096712.406:13819): avc:  denied  { unmount } for  pid=12794 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  288.085697][   T29] audit: type=1326 audit(1764096713.166:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.115921][   T29] audit: type=1326 audit(1764096713.176:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.139706][   T29] audit: type=1326 audit(1764096713.176:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.163818][   T29] audit: type=1326 audit(1764096713.196:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  288.187419][   T29] audit: type=1326 audit(1764096713.196:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  288.211153][   T29] audit: type=1326 audit(1764096713.196:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.234827][   T29] audit: type=1326 audit(1764096713.196:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.258480][   T29] audit: type=1326 audit(1764096713.196:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.282121][   T29] audit: type=1326 audit(1764096713.196:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12819 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7264bf749 code=0x7ffc0000
[  288.383631][T10651] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[  288.398458][T10651] EXT4-fs (loop5): Remounting filesystem read-only
[  288.426161][T12839] syz_tun: entered promiscuous mode
[  288.437646][T12839] macvtap1: entered promiscuous mode
[  288.450906][T12839] syz_tun: left promiscuous mode
[  288.470071][T12847] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3029'.
[  288.482955][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3028'.
[  288.522950][T12843] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  288.633047][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.082696][T12866] loop5: detected capacity change from 0 to 764
[  289.214410][T12866] rock: directory entry would overflow storage
[  289.220620][T12866] rock: sig=0x4f50, size=4, remaining=3
[  289.226336][T12866] iso9660: Corrupted directory entry in block 6 of inode 1792
[  289.277772][T12866] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.354529][T12879] netlink: 'syz.2.3036': attribute type 4 has an invalid length.
[  289.392328][T12866] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.560984][T12866] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.669618][T12866] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.155698][ T3442] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.197229][ T3442] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.241688][T12894] __nla_validate_parse: 1 callbacks suppressed
[  290.241705][T12894] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3040'.
[  290.263508][ T3442] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.277879][ T3442] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.384900][T12912] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3044'.
[  290.422088][T12910] netlink: 'syz.0.3046': attribute type 3 has an invalid length.
[  290.601078][T12918] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3048'.
[  290.610470][T12918] hsr_slave_0: left promiscuous mode
[  290.617228][T12918] hsr_slave_1: left promiscuous mode
[  291.459784][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'.
[  291.605293][T12931] 9pnet_fd: Insufficient options for proto=fd
[  291.697983][T12937] loop4: detected capacity change from 0 to 1024
[  291.775237][T12932] loop0: detected capacity change from 0 to 2048
[  291.789669][T12937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.814154][T12937] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3053'.
[  291.835499][T12932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.864954][T12932] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.876164][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.972996][T12932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.029589][T12932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.112996][T12957] loop4: detected capacity change from 0 to 764
[  292.135975][T12957] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  292.492558][T12962] 9pnet_fd: Insufficient options for proto=fd
[  292.513174][T12962] lo speed is unknown, defaulting to 1000
[  292.592981][T12962] wg1 speed is unknown, defaulting to 1000
[  292.672445][T12970] 9pnet_fd: Insufficient options for proto=fd
[  292.849736][T12978] loop5: detected capacity change from 0 to 764
[  292.934021][T12980] lo speed is unknown, defaulting to 1000
[  293.054772][T12980] wg1 speed is unknown, defaulting to 1000
[  293.240683][T12979] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.268695][T12978] rock: directory entry would overflow storage
[  293.274934][T12978] rock: sig=0x4f50, size=4, remaining=3
[  293.280518][T12978] iso9660: Corrupted directory entry in block 6 of inode 1792
[  293.358612][T12979] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.390723][   T29] kauditd_printk_skb: 274 callbacks suppressed
[  293.390742][   T29] audit: type=1326 audit(1764096718.476:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.4.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6b4df749 code=0x7ffc0000
[  293.421905][   T29] audit: type=1326 audit(1764096718.476:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.4.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2c6b4df749 code=0x7ffc0000
[  293.445609][   T29] audit: type=1326 audit(1764096718.476:14105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.4.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6b4df749 code=0x7ffc0000
[  293.469407][   T29] audit: type=1326 audit(1764096718.486:14106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.4.3069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c6b4df749 code=0x7ffc0000
[  293.493117][   T58] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[  293.509510][T12979] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.540872][T12988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3071'.
[  293.556243][   T58] EXT4-fs (loop0): Remounting filesystem read-only
[  293.604487][T12990] loop3: detected capacity change from 0 to 256
[  293.611191][T12990] vfat: Unknown parameter 'kfree'
[  293.618986][T12979] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.634845][   T29] audit: type=1400 audit(1764096718.726:14107): avc:  denied  { setopt } for  pid=12989 comm="syz.3.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  293.656473][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3072'.
[  293.666250][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.703755][   T29] audit: type=1400 audit(1764096718.756:14108): avc:  denied  { firmware_load } for  pid=12989 comm="syz.3.3072" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  293.749068][T12988] loop4: detected capacity change from 0 to 2048
[  293.766646][T12988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.778949][T12988] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.790355][T12997] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  293.870180][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.879792][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.928410][T13003] loop3: detected capacity change from 0 to 764
[  293.950308][T13003] rock: directory entry would overflow storage
[  293.956696][T13003] rock: sig=0x4f50, size=4, remaining=3
[  293.962296][T13003] iso9660: Corrupted directory entry in block 6 of inode 1792
[  293.984509][T13003] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.046235][T13003] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.105550][T13003] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.156030][T13003] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.179415][   T29] audit: type=1400 audit(1764096719.266:14109): avc:  denied  { prog_load } for  pid=13007 comm="syz.2.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  294.198956][   T29] audit: type=1400 audit(1764096719.266:14110): avc:  denied  { bpf } for  pid=13007 comm="syz.2.3077" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  294.219848][   T29] audit: type=1400 audit(1764096719.266:14111): avc:  denied  { perfmon } for  pid=13007 comm="syz.2.3077" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  294.226887][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3077'.
[  294.241019][   T29] audit: type=1400 audit(1764096719.266:14112): avc:  denied  { prog_run } for  pid=13007 comm="syz.2.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  294.281036][   T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.292057][   T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.304044][   T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.317676][   T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.557020][T13017] lo speed is unknown, defaulting to 1000
[  294.679988][T13017] wg1 speed is unknown, defaulting to 1000
[  294.872346][  T124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set
[  294.892738][  T124] EXT4-fs (loop4): Remounting filesystem read-only
[  294.986381][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.244243][T13026] syz_tun: entered promiscuous mode
[  295.249639][T13026] macvtap1: entered promiscuous mode
[  295.258176][T13026] syz_tun: left promiscuous mode
[  295.290984][T13028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3083'.
[  295.398925][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'.
[  295.408319][T13036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'.
[  295.417456][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3087'.
[  295.431765][T13036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'.
[  295.440805][T13036] netlink: 'syz.3.3087': attribute type 6 has an invalid length.
[  295.451051][   T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.463106][   T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.475635][   T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.481805][T13038] 9pnet_fd: Insufficient options for proto=fd
[  295.504055][   T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.525085][T13036] lo speed is unknown, defaulting to 1000
[  295.548514][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'.
[  295.557611][T13041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3089'.
[  295.566644][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'.
[  295.597125][T13043] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3090'.
[  295.606447][T13041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3089'.
[  295.615453][T13041] netlink: 'syz.2.3089': attribute type 6 has an invalid length.
[  295.645446][T13041] lo speed is unknown, defaulting to 1000
[  295.654989][T13036] wg1 speed is unknown, defaulting to 1000
[  295.765537][T13034] 9pnet_fd: Insufficient options for proto=fd
[  295.850038][T13041] wg1 speed is unknown, defaulting to 1000
[  295.852459][T13048] netlink: 'syz.3.3091': attribute type 4 has an invalid length.
[  295.876786][T13034] lo speed is unknown, defaulting to 1000
[  295.887890][T13050] loop5: detected capacity change from 0 to 1024
[  295.921509][T13050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.949158][T13050] hsr_slave_0: left promiscuous mode
[  295.971932][T13050] hsr_slave_1: left promiscuous mode
[  296.035460][T13034] wg1 speed is unknown, defaulting to 1000
[  296.051141][T13057] loop3: detected capacity change from 0 to 764
[  296.090492][T13057] rock: directory entry would overflow storage
[  296.096756][T13057] rock: sig=0x4f50, size=4, remaining=3
[  296.102329][T13057] iso9660: Corrupted directory entry in block 6 of inode 1792
[  296.139948][T13057] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.181957][T13061] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.271738][T13069] loop4: detected capacity change from 0 to 8192
[  296.297232][T13057] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.334680][T13069]  loop4: p1 p2 p3 p4
[  296.339135][T13069] loop4: p1 start 51379968 is beyond EOD, truncated
[  296.345888][T13069] loop4: p2 start 4293394690 is beyond EOD, truncated
[  296.352726][T13069] loop4: p3 size 100663552 extends beyond EOD, truncated
[  296.361468][T13061] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.364155][T13069] loop4: p4 size 50331648 extends beyond EOD, truncated
[  296.457368][T13073] lo speed is unknown, defaulting to 1000
[  296.589572][T13073] wg1 speed is unknown, defaulting to 1000
[  297.005072][T13082] netlink: 'syz.4.3101': attribute type 3 has an invalid length.
[  297.151271][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  297.178044][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  297.195191][T13057] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.246795][T13061] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.300338][T13057] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.314930][T13086] netlink: 'syz.0.3103': attribute type 6 has an invalid length.
[  297.324571][T13061] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.340646][T13088] bridge0: port 1(veth3) entered blocking state
[  297.347070][T13088] bridge0: port 1(veth3) entered disabled state
[  297.353628][T13088] veth3: entered allmulticast mode
[  297.359345][T13088] veth3: entered promiscuous mode
[  297.378599][T13086] lo speed is unknown, defaulting to 1000
[  297.417986][T13092] loop4: detected capacity change from 0 to 764
[  297.432556][T13092] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  297.446141][  T124] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.459216][  T124] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.486263][  T124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.504148][T10651] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.561743][T13086] wg1 speed is unknown, defaulting to 1000
[  297.699801][T13105] netlink: 'syz.4.3111': attribute type 6 has an invalid length.
[  297.720837][T13105] lo speed is unknown, defaulting to 1000
[  297.728761][T13099] 9pnet_fd: Insufficient options for proto=fd
[  297.762586][T13099] lo speed is unknown, defaulting to 1000
[  297.812963][T13105] wg1 speed is unknown, defaulting to 1000
[  297.871318][T13099] wg1 speed is unknown, defaulting to 1000
[  297.878478][T13107] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  298.018097][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.026963][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.050848][T13123] syz!: rxe_newlink: already configured on team_slave_0
[  298.581669][T13128] 9pnet_fd: Insufficient options for proto=fd
[  298.602296][T13130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.610821][T13130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.215272][T13134] FAULT_INJECTION: forcing a failure.
[  299.215272][T13134] name failslab, interval 1, probability 0, space 0, times 0
[  299.227998][T13134] CPU: 1 UID: 0 PID: 13134 Comm: syz.0.3121 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  299.228054][T13134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  299.228070][T13134] Call Trace:
[  299.228078][T13134]  <TASK>
[  299.228087][T13134]  __dump_stack+0x1d/0x30
[  299.228152][T13134]  dump_stack_lvl+0xe8/0x140
[  299.228178][T13134]  dump_stack+0x15/0x1b
[  299.228209][T13134]  should_fail_ex+0x265/0x280
[  299.228256][T13134]  should_failslab+0x8c/0xb0
[  299.228284][T13134]  kmem_cache_alloc_noprof+0x50/0x480
[  299.228355][T13134]  ? security_file_alloc+0x32/0x100
[  299.228390][T13134]  security_file_alloc+0x32/0x100
[  299.228424][T13134]  init_file+0x5c/0x1d0
[  299.228483][T13134]  alloc_empty_file+0x8b/0x200
[  299.228527][T13134]  path_openat+0x68/0x2170
[  299.228552][T13134]  ? _parse_integer_limit+0x170/0x190
[  299.228640][T13134]  ? kstrtoull+0x111/0x140
[  299.228688][T13134]  ? kstrtouint+0x76/0xc0
[  299.228730][T13134]  do_filp_open+0x109/0x230
[  299.228763][T13134]  do_sys_openat2+0xa6/0x110
[  299.228833][T13134]  __x64_sys_openat+0xf2/0x120
[  299.228902][T13134]  x64_sys_call+0x2eab/0x3000
[  299.228932][T13134]  do_syscall_64+0xd2/0x200
[  299.228960][T13134]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  299.228997][T13134]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  299.229042][T13134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.229070][T13134] RIP: 0033:0x7fd7264bf749
[  299.229084][T13134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.229102][T13134] RSP: 002b:00007fd724f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  299.229120][T13134] RAX: ffffffffffffffda RBX: 00007fd726715fa0 RCX: 00007fd7264bf749
[  299.229182][T13134] RDX: 0000000000105582 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  299.229202][T13134] RBP: 00007fd724f27090 R08: 0000000000000000 R09: 0000000000000000
[  299.229217][T13134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.229232][T13134] R13: 00007fd726716038 R14: 00007fd726715fa0 R15: 00007ffd61b8de48
[  299.229259][T13134]  </TASK>
[  299.459447][T13137] netlink: 'syz.0.3122': attribute type 6 has an invalid length.
[  299.477168][T13137] lo speed is unknown, defaulting to 1000
[  299.578848][T13137] wg1 speed is unknown, defaulting to 1000
[  299.606828][   T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.638232][   T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.770161][   T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.833940][   T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.917784][T13147] syz_tun: entered promiscuous mode
[  299.923275][T13147] macvtap0: entered promiscuous mode
[  299.932053][T13147] syz_tun: left promiscuous mode
[  299.966676][   T29] kauditd_printk_skb: 126 callbacks suppressed
[  299.966717][   T29] audit: type=1400 audit(1764096725.056:14239): avc:  denied  { read } for  pid=13146 comm="syz.0.3125" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  299.994970][   T29] audit: type=1400 audit(1764096725.056:14240): avc:  denied  { open } for  pid=13146 comm="syz.0.3125" path="net:[4026532626]" dev="nsfs" ino=4026532626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  300.063368][T13145] 9pnet_fd: Insufficient options for proto=fd
[  300.099560][T13145] lo speed is unknown, defaulting to 1000
[  300.210029][T13145] wg1 speed is unknown, defaulting to 1000
[  300.227112][   T29] audit: type=1400 audit(1764096725.316:14241): avc:  denied  { allowed } for  pid=13161 comm="syz.3.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  300.246765][   T29] audit: type=1400 audit(1764096725.316:14242): avc:  denied  { create } for  pid=13161 comm="syz.3.3130" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  300.268286][   T29] audit: type=1400 audit(1764096725.316:14243): avc:  denied  { map } for  pid=13161 comm="syz.3.3130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  300.292824][   T29] audit: type=1400 audit(1764096725.316:14244): avc:  denied  { read write } for  pid=13161 comm="syz.3.3130" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  300.331363][T13164] lo speed is unknown, defaulting to 1000
[  300.404327][T13164] wg1 speed is unknown, defaulting to 1000
[  300.478019][T13158] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  300.683348][T13168] netlink: 'syz.3.3131': attribute type 3 has an invalid length.
[  300.888047][T13171] loop4: detected capacity change from 0 to 764
[  300.984513][T13171] rock: directory entry would overflow storage
[  300.990864][T13171] rock: sig=0x4f50, size=4, remaining=3
[  300.996502][T13171] iso9660: Corrupted directory entry in block 6 of inode 1792
[  301.002301][   T29] audit: type=1400 audit(1764096726.076:14245): avc:  denied  { unmount } for  pid=12163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  301.024691][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.099543][T13177] syz_tun: entered promiscuous mode
[  301.105303][T13177] macvtap1: entered promiscuous mode
[  301.114859][T13180] __nla_validate_parse: 21 callbacks suppressed
[  301.114875][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3137'.
[  301.130856][T13177] syz_tun: left promiscuous mode
[  301.157440][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3136'.
[  301.192735][   T29] audit: type=1400 audit(1764096726.276:14246): avc:  denied  { read } for  pid=13178 comm="syz.0.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  301.265546][T13180] loop0: detected capacity change from 0 to 2048
[  301.282879][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3141'.
[  301.294256][T13180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.307464][T13180] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.318582][   T29] audit: type=1400 audit(1764096726.396:14247): avc:  denied  { mount } for  pid=13178 comm="syz.0.3137" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  301.349895][   T29] audit: type=1400 audit(1764096726.406:14248): avc:  denied  { add_name } for  pid=13178 comm="syz.0.3137" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  301.548775][T13195] loop3: detected capacity change from 0 to 2048
[  301.581880][T13195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.594663][T13195] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.674582][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.695306][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.820552][T13205] loop4: detected capacity change from 0 to 8192
[  301.875453][T13205]  loop4: p1 p2 p3 p4
[  301.879566][T13205] loop4: p1 start 51379968 is beyond EOD, truncated
[  301.886222][T13205] loop4: p2 start 4293394690 is beyond EOD, truncated
[  301.887676][T13200] lo speed is unknown, defaulting to 1000
[  301.893054][T13205] loop4: p3 size 100663552 extends beyond EOD, truncated
[  301.908772][T13205] loop4: p4 size 50331648 extends beyond EOD, truncated
[  301.926788][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3144'.
[  301.935763][T13205] veth3: left allmulticast mode
[  301.940678][T13205] veth3: left promiscuous mode
[  301.945686][T13205] bridge0: port 1(veth3) entered disabled state
[  301.989774][   T52] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  302.006723][   T52] EXT4-fs (loop0): Remounting filesystem read-only
[  302.086042][T13200] wg1 speed is unknown, defaulting to 1000
[  302.218124][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.239595][T13219] loop4: detected capacity change from 0 to 764
[  302.305329][T13219] rock: directory entry would overflow storage
[  302.311606][T13219] rock: sig=0x4f50, size=4, remaining=3
[  302.317282][T13219] iso9660: Corrupted directory entry in block 6 of inode 1792
[  302.326166][T13225] netlink: 516 bytes leftover after parsing attributes in process `syz.5.3151'.
[  302.332614][T13227] loop0: detected capacity change from 0 to 764
[  302.372513][T13227] rock: directory entry would overflow storage
[  302.378826][T13227] rock: sig=0x4f50, size=4, remaining=3
[  302.384519][T13227] iso9660: Corrupted directory entry in block 6 of inode 1792
[  302.791670][T13235] macvtap1: entered promiscuous mode
[  302.797165][T13235] macvtap1: entered allmulticast mode
[  303.012357][T13230] loop4: detected capacity change from 0 to 512
[  303.068739][  T124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set
[  303.113169][T13239] netlink: 'syz.2.3155': attribute type 4 has an invalid length.
[  303.178246][T13230] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.3153: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  303.201009][  T124] EXT4-fs (loop3): Remounting filesystem read-only
[  303.249119][T13230] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.3153: Bad quota inode: 3, type: 0
[  303.274049][T13230] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  303.334046][T13230] EXT4-fs (loop4): mount failed
[  303.383005][T12038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.456059][T13252] netlink: 'syz.5.3157': attribute type 3 has an invalid length.
[  303.656472][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'.
[  303.665513][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3165'.
[  303.674495][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'.
[  303.703492][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3165'.
[  303.712539][T13272] netlink: 'syz.3.3165': attribute type 6 has an invalid length.
[  303.764788][T13272] lo speed is unknown, defaulting to 1000
[  303.851145][T13261] lo speed is unknown, defaulting to 1000
[  303.914500][T13272] wg1 speed is unknown, defaulting to 1000
[  303.928010][T13276] lo speed is unknown, defaulting to 1000
[  304.001917][T13261] wg1 speed is unknown, defaulting to 1000
[  304.118618][T13276] wg1 speed is unknown, defaulting to 1000
[  304.168210][T13282] siw: device registration error -23
[  304.183013][T13282] loop3: detected capacity change from 0 to 512
[  304.201300][T13288] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3168'.
[  304.229375][T13282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.244061][T13282] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.853837][T13304] loop4: detected capacity change from 0 to 512
[  304.861919][T13301] loop5: detected capacity change from 0 to 764
[  304.893002][T13301] rock: directory entry would overflow storage
[  304.899370][T13301] rock: sig=0x4f50, size=4, remaining=3
[  304.905011][T13301] iso9660: Corrupted directory entry in block 6 of inode 1792
[  304.918001][T12038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.929371][T13304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.949529][T13304] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.005624][   T29] kauditd_printk_skb: 269 callbacks suppressed
[  305.005715][   T29] audit: type=1400 audit(1764096730.096:14518): avc:  denied  { unmount } for  pid=12163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  305.069659][   T29] audit: type=1326 audit(1764096730.096:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13287 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  305.093464][   T29] audit: type=1326 audit(1764096730.096:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13287 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314cb4f749 code=0x7ffc0000
[  305.117296][   T29] audit: type=1400 audit(1764096730.156:14521): avc:  denied  { create } for  pid=13318 comm="syz.3.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  305.136960][   T29] audit: type=1400 audit(1764096730.156:14522): avc:  denied  { ioctl } for  pid=13318 comm="syz.3.3176" path="socket:[54475]" dev="sockfs" ino=54475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  305.149396][T13320] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  305.161868][   T29] audit: type=1400 audit(1764096730.156:14523): avc:  denied  { bind } for  pid=13318 comm="syz.3.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  305.188199][   T29] audit: type=1400 audit(1764096730.156:14524): avc:  denied  { getopt } for  pid=13318 comm="syz.3.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  305.207893][   T29] audit: type=1400 audit(1764096730.156:14525): avc:  denied  { write } for  pid=13318 comm="syz.3.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  305.241890][   T29] audit: type=1400 audit(1764096730.326:14526): avc:  denied  { create } for  pid=13322 comm="syz.5.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  305.264570][   T29] audit: type=1400 audit(1764096730.346:14527): avc:  denied  { write } for  pid=13322 comm="syz.5.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  305.281255][T13324] netlink: 'syz.5.3177': attribute type 3 has an invalid length.
[  305.321322][T13327] netlink: 'syz.2.3179': attribute type 4 has an invalid length.
[  305.329534][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.823612][T13348] loop5: detected capacity change from 0 to 2048
[  305.855615][T13348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.883782][T13348] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.980833][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.021048][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.236852][T13355] __nla_validate_parse: 1 callbacks suppressed
[  306.236866][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3189'.
[  306.252070][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'.
[  306.261093][T13355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3189'.
[  306.295792][T13359] loop4: detected capacity change from 0 to 1024
[  306.325292][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3189'.
[  306.334385][T13355] netlink: 'syz.0.3189': attribute type 6 has an invalid length.
[  306.352982][T13359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.376879][T13360] lo speed is unknown, defaulting to 1000
[  306.419026][T13359] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3191'.
[  306.453752][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.491722][T13360] wg1 speed is unknown, defaulting to 1000
[  306.515711][T13368] siw: device registration error -23
[  306.533224][T13371] syz!: rxe_newlink: already configured on team_slave_0
[  306.724549][T13375] lo speed is unknown, defaulting to 1000
[  306.787295][T13375] wg1 speed is unknown, defaulting to 1000
[  306.797014][ T3442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.846134][ T3442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.871627][T13375] chnl_net:caif_netlink_parms(): no params data found
[  306.895996][ T3442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.923554][T13375] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.930678][T13375] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.937943][T13375] bridge_slave_0: entered allmulticast mode
[  306.944532][T13375] bridge_slave_0: entered promiscuous mode
[  306.951570][T13375] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.958764][T13375] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.966751][T13375] bridge_slave_1: entered allmulticast mode
[  306.973136][T13375] bridge_slave_1: entered promiscuous mode
[  306.980957][ T3442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.008673][T13375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.018728][T10651] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[  307.019749][T13375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.042602][T10651] EXT4-fs (loop5): Remounting filesystem read-only
[  307.063189][T13375] team0: Port device team_slave_0 added
[  307.070818][T13375] team0: Port device team_slave_1 added
[  307.123512][T13375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.130694][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.137906][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.156659][T13375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.177442][T13375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.184464][T13375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.210415][T13375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.362068][ T3442] bond0 (unregistering): (slave gretap1): Releasing active interface
[  307.403136][ T3442] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.423561][ T3442] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.441921][ T3442] .` (unregistering): Released all slaves
[  307.452064][ T3442] bond0 (unregistering): Released all slaves
[  307.564302][T13375] hsr_slave_0: entered promiscuous mode
[  307.581091][T13375] hsr_slave_1: entered promiscuous mode
[  307.712878][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.720390][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.729820][T13423] loop5: detected capacity change from 0 to 1024
[  307.740397][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.747914][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.766879][T13423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.801312][T13423] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3203'.
[  307.813137][ T3442] veth1_vlan: left promiscuous mode
[  307.818852][ T3442] veth0_vlan: left promiscuous mode
[  307.949088][  T124] smc: removing ib device syz1
[  307.967016][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'.
[  307.978749][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.062873][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.091667][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.115170][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'.
[  308.331876][T13456] wg1 speed is unknown, defaulting to 1000
[  308.455258][T13475] FAULT_INJECTION: forcing a failure.
[  308.455258][T13475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  308.468432][T13475] CPU: 0 UID: 0 PID: 13475 Comm: syz.3.3213 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  308.468485][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  308.468614][T13475] Call Trace:
[  308.468621][T13475]  <TASK>
[  308.468638][T13475]  __dump_stack+0x1d/0x30
[  308.468724][T13475]  dump_stack_lvl+0xe8/0x140
[  308.468798][T13475]  dump_stack+0x15/0x1b
[  308.468820][T13475]  should_fail_ex+0x265/0x280
[  308.468865][T13475]  should_fail+0xb/0x20
[  308.468885][T13475]  should_fail_usercopy+0x1a/0x20
[  308.468912][T13475]  _copy_to_user+0x20/0xa0
[  308.468982][T13475]  simple_read_from_buffer+0xb5/0x130
[  308.469007][T13475]  proc_fail_nth_read+0x10e/0x150
[  308.469044][T13475]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  308.469118][T13475]  vfs_read+0x1a8/0x770
[  308.469148][T13475]  ? __rcu_read_unlock+0x4f/0x70
[  308.469181][T13475]  ? __fget_files+0x184/0x1c0
[  308.469211][T13475]  ksys_read+0xda/0x1a0
[  308.469238][T13475]  __x64_sys_read+0x40/0x50
[  308.469325][T13475]  x64_sys_call+0x27c0/0x3000
[  308.469351][T13475]  do_syscall_64+0xd2/0x200
[  308.469371][T13475]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  308.469421][T13475]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  308.469495][T13475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.469522][T13475] RIP: 0033:0x7fae18d1e15c
[  308.469582][T13475] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  308.469605][T13475] RSP: 002b:00007fae17787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  308.469634][T13475] RAX: ffffffffffffffda RBX: 00007fae18f75fa0 RCX: 00007fae18d1e15c
[  308.469646][T13475] RDX: 000000000000000f RSI: 00007fae177870a0 RDI: 0000000000000004
[  308.469657][T13475] RBP: 00007fae17787090 R08: 0000000000000000 R09: 0000000000000000
[  308.469669][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.469680][T13475] R13: 00007fae18f76038 R14: 00007fae18f75fa0 R15: 00007ffe3bf0f578
[  308.469761][T13475]  </TASK>
[  308.746256][T13481] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3216'.
[  308.830335][T13375] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.866025][T13375] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.917189][T13375] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.937868][T13375] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  309.256405][T13375] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.305823][T13375] 8021q: adding VLAN 0 to HW filter on device team0
[  309.427407][T13375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.437912][T13375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.485772][T13505] 9pnet_fd: Insufficient options for proto=fd
[  309.644915][T13504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.675213][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.682328][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.718160][T13511] netlink: 'syz.5.3220': attribute type 3 has an invalid length.
[  309.831778][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.838929][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.863255][T13504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.980890][T13504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.086060][T13504] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.151779][T13375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.260576][T13505] wg1 speed is unknown, defaulting to 1000
[  310.266531][   T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.298249][   T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.313128][T13522] wg1 speed is unknown, defaulting to 1000
[  310.354835][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  310.354853][   T29] audit: type=1400 audit(1764096735.416:14787): avc:  denied  { getattr } for  pid=13486 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  310.386567][   T29] audit: type=1400 audit(1764096735.416:14788): avc:  denied  { add_name } for  pid=13486 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  310.409425][   T29] audit: type=1400 audit(1764096735.416:14789): avc:  denied  { create } for  pid=13486 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  310.432273][   T29] audit: type=1400 audit(1764096735.416:14790): avc:  denied  { write } for  pid=13486 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth7.link" dev="tmpfs" ino=15684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  310.458818][   T29] audit: type=1400 audit(1764096735.416:14791): avc:  denied  { append } for  pid=13486 comm="dhcpcd-run-hook" name="resolv.conf.eth7.link" dev="tmpfs" ino=15684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  310.527573][   T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.835152][T13538] netlink: 'syz.3.3225': attribute type 4 has an invalid length.
[  310.986393][T13547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3227'.
[  310.997776][   T29] audit: type=1400 audit(1764096735.586:14792): avc:  denied  { remove_name } for  pid=13528 comm="rm" name="resolv.conf.eth7.link" dev="tmpfs" ino=15684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  311.021533][   T29] audit: type=1400 audit(1764096735.586:14793): avc:  denied  { unlink } for  pid=13528 comm="rm" name="resolv.conf.eth7.link" dev="tmpfs" ino=15684 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  311.044986][   T29] audit: type=1400 audit(1764096735.726:14794): avc:  denied  { open } for  pid=13530 comm="syz.2.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  311.064503][   T29] audit: type=1400 audit(1764096735.726:14795): avc:  denied  { kernel } for  pid=13530 comm="syz.2.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  311.076329][T13547] netlink: 'syz.3.3227': attribute type 6 has an invalid length.
[  311.084142][   T29] audit: type=1400 audit(1764096735.836:14796): avc:  denied  { create } for  pid=13537 comm="syz.3.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  311.112156][   T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.152995][T13375] veth0_vlan: entered promiscuous mode
[  311.167178][T13375] veth1_vlan: entered promiscuous mode
[  311.200300][T13375] veth0_macvtap: entered promiscuous mode
[  311.223528][T13375] veth1_macvtap: entered promiscuous mode
[  311.248678][T13375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.258669][T13547] wg1 speed is unknown, defaulting to 1000
[  311.266661][T13375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.286079][T10651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.314547][T10651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.339108][T10651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.373722][T13571] __nla_validate_parse: 3 callbacks suppressed
[  311.373740][T13571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3230'.
[  311.404954][T10651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.561331][T13586] loop4: detected capacity change from 0 to 8192
[  311.606622][ T3303]  loop4: p1 p2 p3 p4
[  311.621153][ T3303] loop4: p1 start 51379968 is beyond EOD, truncated
[  311.627845][ T3303] loop4: p2 start 4293394690 is beyond EOD, truncated
[  311.634877][ T3303] loop4: p3 size 100663552 extends beyond EOD, truncated
[  311.659745][ T3303] loop4: p4 size 50331648 extends beyond EOD, truncated
[  311.669149][T13603] syz_tun: entered promiscuous mode
[  311.679293][T13586]  loop4: p1 p2 p3 p4
[  311.683461][T13586] loop4: p1 start 51379968 is beyond EOD, truncated
[  311.690233][T13586] loop4: p2 start 4293394690 is beyond EOD, truncated
[  311.697071][T13586] loop4: p3 size 100663552 extends beyond EOD, truncated
[  311.705763][T13603] macvtap1: entered promiscuous mode
[  311.715862][T13603] syz_tun: left promiscuous mode
[  311.756093][T13586] loop4: p4 size 50331648 extends beyond EOD, truncated
[  311.819145][T13618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3240'.
[  311.835736][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'.
[  311.927783][T13630] loop3: detected capacity change from 0 to 1024
[  311.972500][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  311.984128][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  312.009014][T13630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.028352][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  312.036012][T13630] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3243'.
[  312.050942][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  312.163526][T13640] wg1 speed is unknown, defaulting to 1000
[  312.337230][T13630] hsr_slave_0: left promiscuous mode
[  312.359461][T13630] hsr_slave_1: left promiscuous mode
[  312.373530][T13637] 9pnet_fd: Insufficient options for proto=fd
[  312.495225][T13600] 9pnet_fd: Insufficient options for proto=fd
[  312.525660][T12038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.587182][T13652] 9pnet_fd: Insufficient options for proto=fd
[  312.614130][T13600] wg1 speed is unknown, defaulting to 1000
[  312.656375][T13660] siw: device registration error -23
[  312.680414][T13653] loop5: detected capacity change from 0 to 512
[  312.812848][T13653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.837176][T13653] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  312.854600][T13674] loop3: detected capacity change from 0 to 764
[  312.865632][T13670] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3254'.
[  312.895154][T13674] rock: directory entry would overflow storage
[  312.901488][T13674] rock: sig=0x4f50, size=4, remaining=3
[  312.907119][T13674] iso9660: Corrupted directory entry in block 6 of inode 1792
[  312.934534][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'.
[  312.946948][T13673] bridge_slave_1: left allmulticast mode
[  312.952669][T13673] bridge_slave_1: left promiscuous mode
[  312.958554][T13673] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.993579][T13673] bridge_slave_0: left allmulticast mode
[  312.999343][T13673] bridge_slave_0: left promiscuous mode
[  313.005228][T13673] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.151789][T13680] loop3: detected capacity change from 0 to 1024
[  313.180077][T13680] ext4: Unknown parameter 'noacl'
[  313.377658][T13678] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3256'.
[  313.434894][T13680] 9pnet_fd: Insufficient options for proto=fd
[  313.787528][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.805900][T13691] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3258'.
[  313.939002][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3262'.
[  313.989884][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3262'.
[  314.039351][T13697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13697 comm=syz.2.3260
[  314.351650][T13745] 9pnet_fd: Insufficient options for proto=fd
[  314.369059][T13743] loop3: detected capacity change from 0 to 8192
[  314.431036][T11359]  loop3: p1 p2 p3 p4
[  314.435638][T11359] loop3: p1 start 51379968 is beyond EOD, truncated
[  314.442287][T11359] loop3: p2 start 4293394690 is beyond EOD, truncated
[  314.449244][T11359] loop3: p3 size 100663552 extends beyond EOD, truncated
[  314.470301][T11359] loop3: p4 size 50331648 extends beyond EOD, truncated
[  314.530894][T13743]  loop3: p1 p2 p3 p4
[  314.535415][T13743] loop3: p1 start 51379968 is beyond EOD, truncated
[  314.542050][T13743] loop3: p2 start 4293394690 is beyond EOD, truncated
[  314.549047][T13743] loop3: p3 size 100663552 extends beyond EOD, truncated
[  314.557582][T13743] loop3: p4 size 50331648 extends beyond EOD, truncated
[  315.460782][T13762] wg1 speed is unknown, defaulting to 1000
[  315.483758][   T29] kauditd_printk_skb: 513 callbacks suppressed
[  315.483777][   T29] audit: type=1326 audit(1764096740.506:15310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712527f749 code=0x7ffc0000
[  315.513629][   T29] audit: type=1326 audit(1764096740.506:15311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13748 comm="syz.5.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712527f749 code=0x7ffc0000
[  315.663997][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  315.701304][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  315.718269][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  315.776312][   T29] audit: type=1400 audit(1764096740.856:15312): avc:  denied  { create } for  pid=13769 comm="syz.2.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  315.796743][   T29] audit: type=1400 audit(1764096740.856:15313): avc:  denied  { write } for  pid=13769 comm="syz.2.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  315.842309][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  315.854867][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  315.858679][   T29] audit: type=1400 audit(1764096740.906:15314): avc:  denied  { create } for  pid=13772 comm="syz.3.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  315.884458][   T29] audit: type=1400 audit(1764096740.906:15315): avc:  denied  { write } for  pid=13772 comm="syz.3.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  315.903988][   T29] audit: type=1400 audit(1764096740.916:15316): avc:  denied  { name_bind } for  pid=13772 comm="syz.3.3286" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  315.928337][   T29] audit: type=1400 audit(1764096740.916:15317): avc:  denied  { node_bind } for  pid=13772 comm="syz.3.3286" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  316.024695][   T29] audit: type=1400 audit(1764096741.086:15318): avc:  denied  { allowed } for  pid=13783 comm="syz.3.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  316.044348][   T29] audit: type=1400 audit(1764096741.086:15319): avc:  denied  { create } for  pid=13783 comm="syz.3.3291" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  316.225340][T13803] siw: device registration error -23
[  316.288665][T13816] 9pnet_fd: Insufficient options for proto=fd
[  316.297613][   T52] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.355184][   T52] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.374945][T13789] wg1 speed is unknown, defaulting to 1000
[  316.429700][   T52] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.482786][T13820] $Hÿ: renamed from bond0 (while UP)
[  316.490699][T13820] $Hÿ: entered promiscuous mode
[  316.495906][T13820] bond_slave_0: entered promiscuous mode
[  316.501649][T13820] bond_slave_1: entered promiscuous mode
[  316.528195][T13824] __nla_validate_parse: 10 callbacks suppressed
[  316.528213][T13824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'.
[  316.551792][   T52] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.581089][T13809] 9pnet_fd: Insufficient options for proto=fd
[  316.588661][T13820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'.
[  316.672065][T13789] chnl_net:caif_netlink_parms(): no params data found
[  316.715857][T13829] netlink: 'syz.0.3304': attribute type 30 has an invalid length.
[  316.824151][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.834717][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.845097][   T52] bond0 (unregistering): Released all slaves
[  316.857164][   T52] bond1 (unregistering): Released all slaves
[  316.890811][T13809] wg1 speed is unknown, defaulting to 1000
[  317.026410][T13789] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.033595][T13789] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.093834][T13789] bridge_slave_0: entered allmulticast mode
[  317.107839][T13789] bridge_slave_0: entered promiscuous mode
[  317.120325][T13856] netlink: 'syz.2.3308': attribute type 3 has an invalid length.
[  317.125806][T13789] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.135322][T13789] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.153196][T13789] bridge_slave_1: entered allmulticast mode
[  317.167828][T13789] bridge_slave_1: entered promiscuous mode
[  317.178764][ T3421] wg1 speed is unknown, defaulting to 1000
[  317.184757][ T3421] syz0: Port: 1 Link DOWN
[  317.200880][T13826] wg1 speed is unknown, defaulting to 1000
[  317.217964][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.241412][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3309'.
[  317.262298][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.269856][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.277438][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'.
[  317.286743][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.294242][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.309400][   T52] veth1_macvtap: left promiscuous mode
[  317.323745][   T52] veth0_macvtap: left promiscuous mode
[  317.330723][   T52] veth1_vlan: left promiscuous mode
[  317.336120][   T52] veth0_vlan: left promiscuous mode
[  317.440023][T13305] smc: removing ib device syz!
[  317.474500][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.546277][T13789] team0: Port device team_slave_0 added
[  317.552077][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'.
[  317.561115][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'.
[  317.570221][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3310'.
[  317.593642][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3310'.
[  317.602755][T13884] netlink: 'syz.0.3310': attribute type 6 has an invalid length.
[  317.622448][T13789] team0: Port device team_slave_1 added
[  317.700300][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.707358][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.733474][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.752430][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.759526][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.785501][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.857368][T13789] hsr_slave_0: entered promiscuous mode
[  317.863613][T13789] hsr_slave_1: entered promiscuous mode
[  317.870559][T13789] debugfs: 'hsr0' already exists in 'hsr'
[  317.876397][T13789] Cannot create hsr debugfs directory
[  317.885823][T13908] IPv6: NLM_F_CREATE should be specified when creating new route
[  317.959379][T13909] infiniband syz!: set active
[  317.959555][T13914] 9pnet_fd: Insufficient options for proto=fd
[  317.964151][T13909] infiniband syz!: added team_slave_0
[  318.001992][T13909] RDS/IB: syz!: added
[  318.023797][T13909] smc: adding ib device syz! with port count 1
[  318.029999][T13909] smc:    ib device syz! port 1 has no pnetid
[  318.190978][T13934] loop5: detected capacity change from 0 to 128
[  318.215840][T13934] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  318.289585][T13946] 9pnet_fd: Insufficient options for proto=fd
[  318.438083][T13789] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  318.450856][T13789] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  318.470780][T13789] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  318.488701][T13789] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  318.503039][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'.
[  318.581031][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.610205][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.632367][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3329'.
[  318.643398][T13789] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.666174][T13789] 8021q: adding VLAN 0 to HW filter on device team0
[  318.695659][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.702756][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.727368][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.734504][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.885646][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.148247][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.161180][T13789] veth0_vlan: entered promiscuous mode
[  319.174043][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.194905][T13789] veth1_vlan: entered promiscuous mode
[  319.234842][T13789] veth0_macvtap: entered promiscuous mode
[  319.255346][T13789] veth1_macvtap: entered promiscuous mode
[  319.272809][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.285176][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.296217][   T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.333209][   T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.346584][   T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.367655][T14048] netlink: 'syz.2.3337': attribute type 3 has an invalid length.
[  319.385822][   T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.714568][T14067] 9pnet_fd: Insufficient options for proto=fd
[  319.717629][T14063] loop4: detected capacity change from 0 to 2048
[  319.764195][T14063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.776748][T14063] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.852003][T14076] wg1 speed is unknown, defaulting to 1000
[  319.860402][T14076] wg1 speed is unknown, defaulting to 1000
[  319.865965][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.874874][T14076] wg1 speed is unknown, defaulting to 1000
[  319.881507][T14076] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  319.893999][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.906706][T14080] loop5: detected capacity change from 0 to 512
[  319.919737][T14076] wg1 speed is unknown, defaulting to 1000
[  319.936656][T14076] wg1 speed is unknown, defaulting to 1000
[  319.942907][T14076] wg1 speed is unknown, defaulting to 1000
[  319.949457][T14076] wg1 speed is unknown, defaulting to 1000
[  319.955688][T14076] wg1 speed is unknown, defaulting to 1000
[  319.961911][T14076] wg1 speed is unknown, defaulting to 1000
[  319.968400][T14076] wg1 speed is unknown, defaulting to 1000
[  320.144704][T14080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.173506][T14080] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.207587][T14084] netlink: 'syz.2.3344': attribute type 4 has an invalid length.
[  320.218409][T14088] netlink: 'syz.0.3345': attribute type 6 has an invalid length.
[  320.303488][T14088] wg1 speed is unknown, defaulting to 1000
[  320.355043][T14091] netlink: 'syz.2.3346': attribute type 4 has an invalid length.
[  320.433404][T14098] netlink: 'syz.2.3349': attribute type 3 has an invalid length.
[  320.501154][   T29] kauditd_printk_skb: 200 callbacks suppressed
[  320.501172][   T29] audit: type=1400 audit(1764096745.586:15520): avc:  denied  { mounton } for  pid=14103 comm="syz.2.3352" path="/128/file0" dev="tmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  320.531199][T14104] 9pnet_fd: Insufficient options for proto=fd
[  320.552156][   T29] audit: type=1400 audit(1764096745.596:15521): avc:  denied  { ioctl } for  pid=12038 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.578441][   T29] audit: type=1400 audit(1764096745.636:15522): avc:  denied  { read write } for  pid=12038 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.602882][   T29] audit: type=1400 audit(1764096745.636:15523): avc:  denied  { open } for  pid=12038 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.627307][   T29] audit: type=1400 audit(1764096745.636:15524): avc:  denied  { ioctl } for  pid=12038 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  320.653336][   T29] audit: type=1400 audit(1764096745.636:15525): avc:  denied  { create } for  pid=14109 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  320.676334][   T29] audit: type=1400 audit(1764096745.666:15526): avc:  denied  { write } for  pid=14109 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  320.696978][   T29] audit: type=1400 audit(1764096745.666:15527): avc:  denied  { prog_load } for  pid=14109 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  320.716268][   T29] audit: type=1400 audit(1764096745.666:15528): avc:  denied  { bpf } for  pid=14109 comm="syz.2.3355" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  320.737063][   T29] audit: type=1400 audit(1764096745.666:15529): avc:  denied  { perfmon } for  pid=14109 comm="syz.2.3355" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  320.770771][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.795047][   T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  320.821357][   T52] EXT4-fs (loop4): Remounting filesystem read-only
[  320.867284][T14124] netlink: 'syz.0.3362': attribute type 3 has an invalid length.
[  320.900258][T14122] netlink: 'syz.5.3357': attribute type 6 has an invalid length.
[  320.974427][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.024708][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.036568][T14134] loop3: detected capacity change from 0 to 2048
[  321.038374][T14122] wg1 speed is unknown, defaulting to 1000
[  321.043895][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.057153][T14141] 9pnet_fd: Insufficient options for proto=fd
[  321.086582][T14134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.100878][T14134] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.182547][T14134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.201327][T14134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.526222][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.539091][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.688060][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.697175][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.715261][T14160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.722540][T14160] IPv6: NLM_F_CREATE should be set when creating new route
[  321.729861][T14160] IPv6: NLM_F_CREATE should be set when creating new route
[  321.737417][T14160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.803582][T14164] validate_nla: 1 callbacks suppressed
[  321.803632][T14164] netlink: 'syz.2.3374': attribute type 3 has an invalid length.
[  321.892724][T14174] 9pnet_fd: Insufficient options for proto=fd
[  322.088019][T14181] syz!: rxe_newlink: already configured on team_slave_0
[  322.323199][  T124] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set
[  322.338455][  T124] EXT4-fs (loop3): Remounting filesystem read-only
[  322.383254][T14201] 9pnet_fd: Insufficient options for proto=fd
[  322.438500][T14206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.446643][T12038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.527291][T14206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.569594][T14206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.593029][T14208] 9pnet_fd: Insufficient options for proto=fd
[  322.643973][T14208] wg1 speed is unknown, defaulting to 1000
[  322.654857][T14206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.740900][T14219] __nla_validate_parse: 14 callbacks suppressed
[  322.740915][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3396'.
[  322.756358][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3396'.
[  322.766848][  T124] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.788971][  T124] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.813252][  T124] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.828066][T14226] netlink: 'syz.3.3397': attribute type 11 has an invalid length.
[  322.844441][  T124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.886321][  T124] Bluetooth: hci0: Frame reassembly failed (-84)
[  322.916090][T14235] 9pnet_fd: Insufficient options for proto=fd
[  322.945278][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3403'.
[  322.990229][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3401'.
[  323.187434][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.207281][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.440853][T14253] 9pnet_fd: Insufficient options for proto=fd
[  323.484545][T14253] wg1 speed is unknown, defaulting to 1000
[  323.661109][T14271] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  323.946797][T14275] wg1 speed is unknown, defaulting to 1000
[  324.226128][T14287] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3419'.
[  324.560961][T14289] wg1 speed is unknown, defaulting to 1000
[  324.958291][T14295] 9pnet_fd: Insufficient options for proto=fd
[  324.964569][T14233] Bluetooth: hci0: command 0x1003 tx timeout
[  324.966117][   T44] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  325.019489][T14299] loop4: detected capacity change from 0 to 256
[  325.028496][T14299] vfat: Unknown parameter 'kfree'
[  325.172183][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.181474][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.190559][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3428'.
[  325.269501][T14320] 9pnet_fd: Insufficient options for proto=fd
[  325.297307][T14322] random: crng reseeded on system resumption
[  325.310640][T14324] loop4: detected capacity change from 0 to 128
[  325.326653][T14324] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  325.508294][T14344] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  325.518399][   T29] kauditd_printk_skb: 266 callbacks suppressed
[  325.518416][   T29] audit: type=1400 audit(1764096750.596:15796): avc:  denied  { create } for  pid=14335 comm="syz.4.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  325.545496][   T29] audit: type=1400 audit(1764096750.596:15797): avc:  denied  { write } for  pid=14335 comm="syz.4.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  325.600288][   T29] audit: type=1400 audit(1764096750.686:15798): avc:  denied  { read write } for  pid=12038 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.624823][   T29] audit: type=1400 audit(1764096750.686:15799): avc:  denied  { open } for  pid=12038 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.649583][   T29] audit: type=1400 audit(1764096750.686:15800): avc:  denied  { ioctl } for  pid=12038 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.656288][T14353] 9pnet_fd: Insufficient options for proto=fd
[  325.676146][   T29] audit: type=1400 audit(1764096750.706:15801): avc:  denied  { prog_load } for  pid=14350 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  325.701252][   T29] audit: type=1400 audit(1764096750.716:15802): avc:  denied  { bpf } for  pid=14350 comm="syz.3.3446" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  325.722151][   T29] audit: type=1400 audit(1764096750.716:15803): avc:  denied  { create } for  pid=14350 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.743020][   T29] audit: type=1400 audit(1764096750.716:15804): avc:  denied  { perfmon } for  pid=14350 comm="syz.3.3446" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  325.764332][   T29] audit: type=1400 audit(1764096750.716:15805): avc:  denied  { write } for  pid=14350 comm="syz.3.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  325.883652][T14367] loop3: detected capacity change from 0 to 8192
[  325.885254][T14371] SELinux:  Context system_u:object_r:man_t:s0 is not valid (left unmapped).
[  325.954397][T14367]  loop3: p1 p2 p3 p4
[  325.958561][T14367] loop3: p1 start 51379968 is beyond EOD, truncated
[  325.965437][T14367] loop3: p2 start 4293394690 is beyond EOD, truncated
[  325.972245][T14367] loop3: p3 size 100663552 extends beyond EOD, truncated
[  326.008702][T14367] loop3: p4 size 50331648 extends beyond EOD, truncated
[  326.015671][T14382] 9pnet_fd: Insufficient options for proto=fd
[  326.108482][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3451'.
[  326.248350][T11359] udevd[11359]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  326.248386][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  326.264823][T14405] random: crng reseeded on system resumption
[  326.381859][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.390884][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.400537][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3469'.
[  326.552451][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3473'.
[  326.586757][T14428] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3473'.
[  326.678225][T14433] loop5: detected capacity change from 0 to 512
[  326.697006][T14433] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  326.712076][T14433] EXT4-fs (loop5): mount failed
[  326.738069][T14433] loop5: detected capacity change from 0 to 256
[  326.760097][T14433] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  326.824305][T14440] delete_channel: no stack
[  326.830210][T14439] delete_channel: no stack
[  327.036822][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.046222][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.185894][T14452] loop4: detected capacity change from 0 to 2048
[  327.254338][T14452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.267200][T14452] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.283071][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.292616][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.482710][T14476] netlink: 'syz.0.3491': attribute type 6 has an invalid length.
[  327.533061][T14476] wg1 speed is unknown, defaulting to 1000
[  327.552716][T14482] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  327.592928][T14484] netlink: 'syz.0.3494': attribute type 4 has an invalid length.
[  327.855258][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.125253][T14511] __nla_validate_parse: 8 callbacks suppressed
[  328.125268][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'.
[  328.140491][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'.
[  328.149793][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'.
[  328.159114][T14511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'.
[  328.168206][T14511] netlink: 'syz.3.3505': attribute type 6 has an invalid length.
[  328.218285][T14511] wg1 speed is unknown, defaulting to 1000
[  328.682686][T14530] siw: device registration error -23
[  328.705342][T14534] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  328.745348][T14529] wg1 speed is unknown, defaulting to 1000
[  328.816986][T14541] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3515'.
[  328.866739][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3517'.
[  329.392609][T14555] loop5: detected capacity change from 0 to 1024
[  329.408208][T14555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.426655][T14555] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3520'.
[  329.447205][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.482221][T14560] netlink: 'syz.4.3521': attribute type 4 has an invalid length.
[  329.499838][T14562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=14562 comm=syz.2.3523
[  329.513206][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3523'.
[  329.532970][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  329.543593][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.555997][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3524'.
[  329.805781][T14580] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  329.882659][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'.
[  329.891786][T14583] netlink: 'syz.0.3530': attribute type 6 has an invalid length.
[  329.943129][T14583] wg1 speed is unknown, defaulting to 1000
[  330.339395][T14596] wg1 speed is unknown, defaulting to 1000
[  330.634785][T14605] audit_log_lost: 326 callbacks suppressed
[  330.634799][T14605] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[  330.649071][T14605] audit: out of memory in audit_log_start
[  330.657427][   T29] audit: type=1400 audit(1764096755.726:16131): avc:  denied  { create } for  pid=14604 comm="syz.3.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  330.713889][   T29] audit: type=1326 audit(1764096755.796:16132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.861418][   T29] audit: type=1326 audit(1764096755.846:16133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.885145][   T29] audit: type=1326 audit(1764096755.846:16134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.908961][   T29] audit: type=1326 audit(1764096755.846:16135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.932613][   T29] audit: type=1326 audit(1764096755.846:16136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.956220][   T29] audit: type=1326 audit(1764096755.846:16137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  330.979941][   T29] audit: type=1326 audit(1764096755.846:16138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae18d1f749 code=0x7ffc0000
[  331.212922][T14600] wg1 speed is unknown, defaulting to 1000
[  331.533226][T14635] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.585847][T14641] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.683364][T14650] loop4: detected capacity change from 0 to 512
[  331.707111][T14650] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  331.748556][T14656] loop3: detected capacity change from 0 to 512
[  331.769110][T14650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a057c11c, mo2=0002]
[  331.782091][T14650] System zones: 1-12
[  331.786875][T14650] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.3554: corrupted in-inode xattr: e_value size too large
[  331.816088][T14656] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  331.830967][T14650] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3554: couldn't read orphan inode 15 (err -117)
[  331.922814][T14661] wg1 speed is unknown, defaulting to 1000
[  332.072600][T14650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.109476][T14656] EXT4-fs (loop3): mount failed
[  332.263103][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.536360][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.562339][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.578912][T14690] netlink: 'syz.2.3567': attribute type 3 has an invalid length.
[  333.009780][T14700] netlink: 'syz.5.3570': attribute type 4 has an invalid length.
[  333.287269][T14715] __nla_validate_parse: 11 callbacks suppressed
[  333.287285][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3577'.
[  333.392819][T14727] netlink: 'syz.4.3582': attribute type 3 has an invalid length.
[  333.659546][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3587'.
[  333.828574][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  333.848069][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.063169][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3591'.
[  334.173034][T14754] wg1 speed is unknown, defaulting to 1000
[  334.283465][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3594'.
[  334.345971][T14766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3596'.
[  334.347666][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.394250][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.408668][T14768] loop5: detected capacity change from 0 to 764
[  334.461546][T14768] rock: directory entry would overflow storage
[  334.467817][T14768] rock: sig=0x4f50, size=4, remaining=3
[  334.473391][T14768] iso9660: Corrupted directory entry in block 6 of inode 1792
[  334.493889][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'.
[  334.535008][T14768] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.645086][T14768] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.697573][T14768] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.765898][T14768] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.777861][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.786924][T14778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  334.794171][T14778] IPv6: NLM_F_CREATE should be set when creating new route
[  334.801383][T14778] IPv6: NLM_F_CREATE should be set when creating new route
[  334.821510][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.834167][T14778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  334.939866][ T3442] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.955664][ T3442] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.964644][ T3442] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.972906][ T3442] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.127617][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'.
[  335.226161][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3607'.
[  335.285181][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3609'.
[  335.387052][T14809] loop4: detected capacity change from 0 to 2048
[  335.406750][T14813] netlink: 'syz.0.3613': attribute type 39 has an invalid length.
[  335.426564][T14809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.462651][T14809] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.544472][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.559248][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.631940][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'.
[  335.690815][   T29] kauditd_printk_skb: 295 callbacks suppressed
[  335.690851][   T29] audit: type=1400 audit(1764096760.776:16433): avc:  denied  { ioctl } for  pid=14826 comm="syz.0.3618" path="socket:[61806]" dev="sockfs" ino=61806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  335.730107][   T29] audit: type=1400 audit(1764096760.816:16434): avc:  denied  { bind } for  pid=14826 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  335.749672][   T29] audit: type=1400 audit(1764096760.816:16435): avc:  denied  { getopt } for  pid=14826 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  335.769703][   T29] audit: type=1400 audit(1764096760.816:16436): avc:  denied  { write } for  pid=14826 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  335.791644][T14828] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  335.791980][   T29] audit: type=1400 audit(1764096760.876:16437): avc:  denied  { create } for  pid=14826 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  335.818871][   T29] audit: type=1400 audit(1764096760.876:16438): avc:  denied  { write } for  pid=14826 comm="syz.0.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  335.962981][T14840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.972715][T14840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.982248][T14842] loop5: detected capacity change from 0 to 128
[  335.997266][T14842] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  336.011635][   T29] audit: type=1400 audit(1764096761.096:16439): avc:  denied  { mount } for  pid=14841 comm="syz.5.3624" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  336.037837][   T29] audit: type=1400 audit(1764096761.096:16440): avc:  denied  { create } for  pid=14832 comm="syz.2.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  336.057642][   T29] audit: type=1400 audit(1764096761.126:16441): avc:  denied  { allowed } for  pid=14841 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  336.077187][   T29] audit: type=1400 audit(1764096761.126:16442): avc:  denied  { create } for  pid=14841 comm="syz.5.3624" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  336.190841][T14848] loop5: detected capacity change from 0 to 2048
[  336.205095][T14848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.217304][T14848] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.285512][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.294026][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.376670][T14840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.385695][T14840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.449075][T10651] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set
[  336.464140][T10651] EXT4-fs (loop4): Remounting filesystem read-only
[  336.515356][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.543739][T14852] netlink: 'syz.4.3626': attribute type 6 has an invalid length.
[  336.591112][T14852] wg1 speed is unknown, defaulting to 1000
[  336.750659][T14861] bridge_slave_1: left allmulticast mode
[  336.756504][T14861] bridge_slave_1: left promiscuous mode
[  336.762322][T14861] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.771594][T14861] bridge_slave_0: left allmulticast mode
[  336.777359][T14861] bridge_slave_0: left promiscuous mode
[  336.783069][T14861] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.018897][T14863] wg1 speed is unknown, defaulting to 1000
[  337.372187][   T58] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set
[  337.387201][   T58] EXT4-fs (loop5): Remounting filesystem read-only
[  337.430299][T14878] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.445691][T14876] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  337.453169][T14876] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  337.464000][T14876] siw: device registration error -23
[  337.472085][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.497214][T14876] loop4: detected capacity change from 0 to 512
[  337.536599][T14876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.554161][T14876] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  337.641871][T14897] netlink: 'syz.3.3643': attribute type 3 has an invalid length.
[  337.662854][T14895] netlink: 'syz.5.3642': attribute type 4 has an invalid length.
[  337.718351][T14905] loop3: detected capacity change from 0 to 512
[  337.737063][T14905] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  337.753053][T14905] EXT4-fs (loop3): mount failed
[  337.791926][T14905] loop3: detected capacity change from 0 to 256
[  337.804493][T14905] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  337.953210][T14929] loop5: detected capacity change from 0 to 128
[  337.965575][T14929] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  338.157917][T14948] loop5: detected capacity change from 0 to 512
[  338.182428][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.192883][T14948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.319120][T14960] loop4: detected capacity change from 0 to 512
[  338.361459][T14960] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  338.372060][T14948] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  338.513264][T14960] EXT4-fs (loop4): mount failed
[  338.562652][T14960] loop4: detected capacity change from 0 to 256
[  338.588913][T14960] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  338.661030][T14980] __nla_validate_parse: 8 callbacks suppressed
[  338.661046][T14980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3677'.
[  338.661444][T14979] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3678'.
[  338.725594][T14985] FAULT_INJECTION: forcing a failure.
[  338.725594][T14985] name failslab, interval 1, probability 0, space 0, times 0
[  338.731138][T14981] loop3: detected capacity change from 0 to 764
[  338.738336][T14985] CPU: 1 UID: 0 PID: 14985 Comm: syz.0.3681 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  338.738424][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  338.738442][T14985] Call Trace:
[  338.738451][T14985]  <TASK>
[  338.738462][T14985]  __dump_stack+0x1d/0x30
[  338.738558][T14985]  dump_stack_lvl+0xe8/0x140
[  338.738589][T14985]  dump_stack+0x15/0x1b
[  338.738669][T14985]  should_fail_ex+0x265/0x280
[  338.738716][T14985]  should_failslab+0x8c/0xb0
[  338.738757][T14985]  __kmalloc_node_noprof+0xaa/0x580
[  338.738950][T14985]  ? __vmalloc_node_range_noprof+0x410/0xed0
[  338.739042][T14985]  __vmalloc_node_range_noprof+0x410/0xed0
[  338.739098][T14985]  ? cred_has_capability+0x210/0x280
[  338.739145][T14985]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  338.739221][T14985]  __vmalloc_noprof+0x83/0xc0
[  338.739265][T14985]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  338.739312][T14985]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  338.739359][T14985]  ? bpf_prog_alloc+0x2a/0x150
[  338.739562][T14985]  bpf_prog_alloc+0x3c/0x150
[  338.739608][T14985]  bpf_prog_load+0x506/0x1100
[  338.739650][T14985]  ? security_bpf+0x2b/0x90
[  338.739731][T14985]  __sys_bpf+0x469/0x7c0
[  338.739768][T14985]  __x64_sys_bpf+0x41/0x50
[  338.739812][T14985]  x64_sys_call+0x2aee/0x3000
[  338.739894][T14985]  do_syscall_64+0xd2/0x200
[  338.739981][T14985]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  338.740022][T14985]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  338.740069][T14985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.740130][T14985] RIP: 0033:0x7fe59eb9f749
[  338.740152][T14985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.740177][T14985] RSP: 002b:00007fe59d5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  338.740204][T14985] RAX: ffffffffffffffda RBX: 00007fe59edf5fa0 RCX: 00007fe59eb9f749
[  338.740222][T14985] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005
[  338.740240][T14985] RBP: 00007fe59d5ff090 R08: 0000000000000000 R09: 0000000000000000
[  338.740258][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.740294][T14985] R13: 00007fe59edf6038 R14: 00007fe59edf5fa0 R15: 00007fff8b40b698
[  338.740362][T14985]  </TASK>
[  338.740373][T14985] syz.0.3681: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  338.768022][T14985] ,cpuset=
[  338.891654][T14988] loop4: detected capacity change from 0 to 4096
[  338.895755][T14985] /,mems_allowed=0
[  338.984982][T14988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.985673][T14985] 
[  339.010587][T14985] CPU: 1 UID: 0 PID: 14985 Comm: syz.0.3681 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  339.010674][T14985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  339.010692][T14985] Call Trace:
[  339.010700][T14985]  <TASK>
[  339.010710][T14985]  __dump_stack+0x1d/0x30
[  339.010739][T14985]  dump_stack_lvl+0xe8/0x140
[  339.010761][T14985]  dump_stack+0x15/0x1b
[  339.010808][T14985]  warn_alloc+0x12b/0x1a0
[  339.010855][T14985]  __vmalloc_node_range_noprof+0x4b9/0xed0
[  339.010895][T14985]  ? cred_has_capability+0x210/0x280
[  339.010936][T14985]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  339.011000][T14985]  __vmalloc_noprof+0x83/0xc0
[  339.011039][T14985]  ? bpf_prog_alloc_no_stats+0x47/0x3b0
[  339.011134][T14985]  bpf_prog_alloc_no_stats+0x47/0x3b0
[  339.011176][T14985]  ? bpf_prog_alloc+0x2a/0x150
[  339.011254][T14985]  bpf_prog_alloc+0x3c/0x150
[  339.011321][T14985]  bpf_prog_load+0x506/0x1100
[  339.011351][T14985]  ? security_bpf+0x2b/0x90
[  339.011385][T14985]  __sys_bpf+0x469/0x7c0
[  339.011415][T14985]  __x64_sys_bpf+0x41/0x50
[  339.011503][T14985]  x64_sys_call+0x2aee/0x3000
[  339.011587][T14985]  do_syscall_64+0xd2/0x200
[  339.011608][T14985]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  339.011641][T14985]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  339.011690][T14985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.011716][T14985] RIP: 0033:0x7fe59eb9f749
[  339.011731][T14985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.011779][T14985] RSP: 002b:00007fe59d5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  339.011802][T14985] RAX: ffffffffffffffda RBX: 00007fe59edf5fa0 RCX: 00007fe59eb9f749
[  339.011898][T14985] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005
[  339.011917][T14985] RBP: 00007fe59d5ff090 R08: 0000000000000000 R09: 0000000000000000
[  339.011929][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.011941][T14985] R13: 00007fe59edf6038 R14: 00007fe59edf5fa0 R15: 00007fff8b40b698
[  339.011966][T14985]  </TASK>
[  339.011987][T14985] Mem-Info:
[  339.021894][T14985] active_anon:25684 inactive_anon:2 isolated_anon:0
[  339.021894][T14985]  active_file:24840 inactive_file:2742 isolated_file:0
[  339.021894][T14985]  unevictable:0 dirty:269 writeback:0
[  339.021894][T14985]  slab_reclaimable:3540 slab_unreclaimable:16660
[  339.021894][T14985]  mapped:30589 shmem:17730 pagetables:1442
[  339.021894][T14985]  sec_pagetables:0 bounce:0
[  339.021894][T14985]  kernel_misc_reclaimable:0
[  339.021894][T14985]  free:1856827 free_pcp:15185 free_cma:0
[  339.035240][T14985] Node 0 active_anon:102736kB inactive_anon:8kB active_file:99360kB inactive_file:10968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122356kB dirty:1076kB writeback:0kB shmem:70920kB kernel_stack:3664kB pagetables:5768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  339.042330][T14981] rock: directory entry would overflow storage
[  339.042513][T14985] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  339.047237][T14981] rock: sig=0x4f50, size=4, remaining=3
[  339.047255][T14981] iso9660: Corrupted directory entry in block 6 of inode 1792
[  339.066853][T14985] lowmem_reserve[]:
[  339.077105][T14985]  0 2881 7859 7859
[  339.351047][T14985] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB
[  339.382218][T14985] lowmem_reserve[]: 0 0 4978 4978
[  339.387396][T14985] Node 0 Normal free:4465220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102504kB inactive_anon:8kB active_file:99360kB inactive_file:12360kB unevictable:0kB writepending:2468kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:56044kB local_pcp:34252kB free_cma:0kB
[  339.420809][T14985] lowmem_reserve[]: 0 0 0 0
[  339.425450][T14985] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  339.438212][T14985] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB
[  339.454428][T14985] Node 0 Normal: 53*4kB (UME) 146*8kB (M) 8*16kB (M) 84*32kB (UM) 99*64kB (UME) 104*128kB (UME) 41*256kB (UME) 20*512kB (UME) 11*1024kB (UME) 23*2048kB (U) 1065*4096kB (UME) = 4465188kB
[  339.473051][T14985] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  339.482392][T14985] 45659 total pagecache pages
[  339.487125][T14985] 3 pages in swap cache
[  339.491381][T14985] Free swap  = 124984kB
[  339.495551][T14985] Total swap = 124996kB
[  339.499794][T14985] 2097051 pages RAM
[  339.503597][T14985] 0 pages HighMem/MovableOnly
[  339.508283][T14985] 81087 pages reserved
[  339.513095][T12163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.533167][T14981] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.555875][T13789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.619893][T14981] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.638954][T15001] loop4: detected capacity change from 0 to 128
[  339.655346][T14997] syzkaller0: entered promiscuous mode
[  339.660885][T14997] syzkaller0: entered allmulticast mode
[  339.674247][T15001] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  339.687597][T14981] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.708070][ T3003] ==================================================================
[  339.716195][ T3003] BUG: KCSAN: data-race in dentry_unlink_inode / step_into
[  339.723455][ T3003] 
[  339.725788][ T3003] write to 0xffff888107261c30 of 8 bytes by task 3303 on cpu 1:
[  339.733425][ T3003]  dentry_unlink_inode+0x65/0x260
[  339.738552][ T3003]  d_delete+0x164/0x180
[  339.742744][ T3003]  d_delete_notify+0x32/0x100
[  339.747436][ T3003]  vfs_unlink+0x30b/0x420
[  339.751778][ T3003]  do_unlinkat+0x24e/0x480
[  339.756210][ T3003]  __x64_sys_unlink+0x2e/0x40
[  339.760903][ T3003]  x64_sys_call+0x2dcf/0x3000
[  339.765590][ T3003]  do_syscall_64+0xd2/0x200
[  339.770112][ T3003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.776011][ T3003] 
[  339.778338][ T3003] read to 0xffff888107261c30 of 8 bytes by task 3003 on cpu 0:
[  339.785884][ T3003]  step_into+0x122/0x7f0
[  339.790136][ T3003]  walk_component+0x162/0x220
[  339.794837][ T3003]  path_lookupat+0xfe/0x2a0
[  339.799375][ T3003]  filename_lookup+0x147/0x340
[  339.804160][ T3003]  do_readlinkat+0x7d/0x320
[  339.808753][ T3003]  __x64_sys_readlink+0x47/0x60
[  339.813608][ T3003]  x64_sys_call+0x28de/0x3000
[  339.818292][ T3003]  do_syscall_64+0xd2/0x200
[  339.822805][ T3003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.828707][ T3003] 
[  339.831028][ T3003] value changed: 0xffff888104ac3aa0 -> 0x0000000000000000
[  339.838135][ T3003] 
[  339.840461][ T3003] Reported by Kernel Concurrency Sanitizer on:
[  339.846612][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[  339.855903][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  339.865959][ T3003] ==================================================================
[  339.882535][T14995] 9pnet_fd: Insufficient options for proto=fd
[  339.889449][T14981] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.941493][T14995] wg1 speed is unknown, defaulting to 1000
[  339.980609][  T124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.993867][T10651] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.004909][T10651] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.016605][T10651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0