last executing test programs:

20.115028606s ago: executing program 4 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>0x0, 0x2f, 0xe0, 0x7, 0xf8b9, 0x40, @private0, @local, 0x1, 0x700, 0x1, 0x9}})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000640)=0x1)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="80fd", 0x2}], 0x1, 0xfb5f, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000a02000"/18, @ANYBLOB="2f83b655dbbc11c949622900d567cbc529de4f9addbee78abe5c5e6655758e775514f0f00c05725ad8ff9b45c8c2da1def0b65c756c05c54d5a4d70660f92d52c8be94b5d477daf2339b704bbfa5d4ab03c385960dc45283f8b12103bc979846bab67cee8fb2879e65ae729c80118ffc17389a932a8e7017a4b313a098c7f154a214ca7908584dad28adbb7f81749497ebdfecdf0696d913a6712ac0224343ee00ad1de33a3a40", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="050000000000c3f8f2b0236a0f491287d1000000000000cb08a6347bb510d99d1c5add188b925637838afa3d56d7b2eef4b4b254766fe39b9b8526d5a03c7445341df8aa55c19f32b7569219104da28e7375dbc54b98a98084104344288405a8aabe1e1ed0e745bac568f12233e475725d83888e93fcd9e3fe33a0861e56e8604bd88ffce229530361c6d7c123b9ee26bd3373bbe237dd0d763c67b5ed", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff12, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000004c0), &(0x7f0000000000)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000200))
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)

19.914393653s ago: executing program 4 (id=76):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r2, 0x1)

19.887070595s ago: executing program 4 (id=78):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)

19.8146424s ago: executing program 4 (id=81):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x100, 0x0)
getdents(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x6, 0xa1})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], &(0x7f0000000100)=[0x1236, 0x9, 0x3, 0xaf, 0x7fffffff, 0x9, 0x2], 0x1}, 0x20)
io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000200)={0x7}, 0x0)

19.435488072s ago: executing program 4 (id=90):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)
read$ptp(r2, &(0x7f0000000280)=""/176, 0xb0)

19.160201914s ago: executing program 4 (id=95):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x6) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) (async, rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pB    \x00'}, 0x20) (async, rerun: 32)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000001b00)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x18, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @alu={0x7, 0x1, 0x3, 0x2, 0x6, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], &(0x7f00000007c0)='syzkaller\x00', 0x23, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r4, r5], 0x0, 0x10, 0x6}, 0x94) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) (async)
r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r5}, &(0x7f0000000940), &(0x7f0000001b80)=r7}, 0x20)
fcntl$lock(r6, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5})
fcntl$lock(r6, 0x7, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394})
ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0xc000000000000000)
init_module(&(0x7f0000001240)={{0x7f, 0x45, 0x4c, 0x46, 0xbe, 0x6, 0xae, 0xb, 0x7f, 0x3, 0x3, 0x5, 0x2ca, 0x40, 0xb8, 0x9, 0x364f, 0x38, 0x1, 0x5, 0x6, 0x5}, [{0x2, 0x43, 0xae6, 0x7, 0x4, 0x7a5b, 0x8, 0x800}]}, 0x78, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xd148}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x1, 0x2, 0x8, 0x6, 0x80, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x3, 0x3, 0x1, 0xa, 0x6, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x8, 0xb1, &(0x7f0000000440)=""/177, 0x40f00, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0xfffff97d, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r1, r1], &(0x7f00000005c0)=[{0x0, 0x5, 0x0, 0x3}, {0x2, 0x2, 0xf, 0x3}, {0x3, 0x4, 0xe}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0xd1}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x60}]}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)='%-010d \x00'}, 0x20)

19.159960484s ago: executing program 32 (id=95):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket(0x10, 0x3, 0x6) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) (async, rerun: 32)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pB    \x00'}, 0x20) (async, rerun: 32)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000001b00)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x18, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @alu={0x7, 0x1, 0x3, 0x2, 0x6, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], &(0x7f00000007c0)='syzkaller\x00', 0x23, 0x1000, &(0x7f0000000a00)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r4, r5], 0x0, 0x10, 0x6}, 0x94) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) (async)
r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r5}, &(0x7f0000000940), &(0x7f0000001b80)=r7}, 0x20)
fcntl$lock(r6, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5})
fcntl$lock(r6, 0x7, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394})
ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0xc000000000000000)
init_module(&(0x7f0000001240)={{0x7f, 0x45, 0x4c, 0x46, 0xbe, 0x6, 0xae, 0xb, 0x7f, 0x3, 0x3, 0x5, 0x2ca, 0x40, 0xb8, 0x9, 0x364f, 0x38, 0x1, 0x5, 0x6, 0x5}, [{0x2, 0x43, 0xae6, 0x7, 0x4, 0x7a5b, 0x8, 0x800}]}, 0x78, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x13, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xd148}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x0, 0x1, 0x2, 0x8, 0x6, 0x80, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @ldst={0x0, 0x3, 0x3, 0x1, 0xa, 0x6, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x8, 0xb1, &(0x7f0000000440)=""/177, 0x40f00, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0xfffff97d, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r1, r1], &(0x7f00000005c0)=[{0x0, 0x5, 0x0, 0x3}, {0x2, 0x2, 0xf, 0x3}, {0x3, 0x4, 0xe}, {0x2, 0x3, 0x4, 0x2}], 0x10, 0xd1}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6, 0x60}]}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000180), &(0x7f0000000200)='%-010d \x00'}, 0x20)

18.267060616s ago: executing program 1 (id=106):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x7, 0x5, 0x5, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @empty, {[@noop, @lsrr={0x83, 0xf, 0xae, [@local, @private=0xa010102, @multicast1]}, @timestamp={0x44, 0x8, 0x43, 0x0, 0xc, [0x7fff]}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0x4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x1a}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x3, 0x0, 0x1}, {0x0, 0x4}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x9, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x200}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10)

18.070948153s ago: executing program 1 (id=111):
gettid()
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000001ed1000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000700)=""/123)
r3 = getpid()
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x3}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
capset(&(0x7f0000000140)={0x0, r3}, &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xfffffff7, 0x6, 0x3})

18.013786767s ago: executing program 1 (id=114):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0)

17.918357165s ago: executing program 1 (id=115):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

17.299153835s ago: executing program 1 (id=123):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0xd5, 0x9, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x8000, 0x70ff, 0x4}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0x4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x1a}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x3, 0x0, 0x1}, {0x0, 0x4}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x9, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x200}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0)

16.535948107s ago: executing program 1 (id=131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="06900200ffffffff"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
memfd_create(0x0, 0xe)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x20}}, 0x80)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, 0x0, &(0x7f0000000040))
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00'})

16.535671857s ago: executing program 33 (id=131):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="06900200ffffffff"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0})
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
memfd_create(0x0, 0xe)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x300, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x20}}, 0x80)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, 0x0, &(0x7f0000000040))
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00'})

1.613493379s ago: executing program 6 (id=437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000001000000000c0018"], 0x28}}, 0x0)

1.550193194s ago: executing program 6 (id=439):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x26020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1ea, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{0x0}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10032, 0x1000, 0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrandom(0x0, 0x0, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x20, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/174, 0xae}}, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000192c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000)

1.517792627s ago: executing program 0 (id=443):
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
capset(&(0x7f0000000140), &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xfffffff7, 0x6, 0x3})

1.495189219s ago: executing program 6 (id=444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000)

1.48570935s ago: executing program 0 (id=445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="28a80000", @ANYRES16=0x0, @ANYBLOB="010301000800fedbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900880c000025000000"], 0x28}, 0x1, 0x0, 0x0, 0x2008000}, 0x44)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r6}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)={0x24, r4, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}}, 0x24}}, 0x44)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8040180e}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002cbd7000020000004500000008000300", @ANYRES32=r9, @ANYBLOB="dc1b1a7a84e17f94bd3add5789d48f8dc16f468afaa7c6446ae80a759a587eacae5cc8fcd5"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001a3c0bf61b320494cd56747ad9c3bfdebf3890d2eef0eb88edfa8fbc40caa3eaa220651d41fb10675180b30ca888bbdde778d7851e4670a73fccfb5f27bd19b7498672604338f096b6", @ANYRES16=r12, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r12, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44854}, 0x80)

1.439917773s ago: executing program 6 (id=447):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) (fail_nth: 2)

1.144323407s ago: executing program 6 (id=451):
r0 = gettid()
r1 = eventfd2(0x0, 0x0)
write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.094294941s ago: executing program 0 (id=453):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)

1.072790373s ago: executing program 0 (id=454):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x26020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1ea, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{0x0}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10032, 0x1000, 0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrandom(0x0, 0x0, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x20, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/174, 0xae}}, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000192c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000)

933.401184ms ago: executing program 0 (id=457):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
r2 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)
read$ptp(r2, &(0x7f0000000280)=""/176, 0xb0)

871.215909ms ago: executing program 0 (id=459):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800)
syz_usb_disconnect(0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)
shutdown(r0, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020709000000000000000000000000000000000000150000"], 0x50)
r2 = syz_io_uring_setup(0x1dac, &(0x7f00000003c0)={0x0, 0xe872, 0x40, 0x3, 0x2d4}, &(0x7f0000000140), &(0x7f0000000300))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000240), &(0x7f00000002c0)=0x13)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={0x0}, 0x1)
syz_clone(0x801111, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x2a)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10)

695.899093ms ago: executing program 3 (id=468):
gettid()
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
capset(&(0x7f0000000140), &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xfffffff7, 0x6, 0x3})

625.74136ms ago: executing program 3 (id=469):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="5a7f290cd37449bd28a8fc1b824ea99d5a8626f29e6a764ae5a6d1544f345228e04b293f7bcce15b36b82d044153f89dac24b10664b916c1f803ef7a90a021d4bcc065cd9fbdead318215c3ba7e7a1471b68c4a3ff68"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000200)=[{0x3ff, 0x0, 0x8, 0x9}]})
open(0x0, 0x1c3bc2, 0x1c0)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
pipe(&(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fffffffffffffff}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000940)=0x2, 0x4)
getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000001500), &(0x7f0000000240)=0x5d)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
socket$netlink(0x10, 0x3, 0x0)

599.353681ms ago: executing program 2 (id=470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) (fail_nth: 2)

358.601691ms ago: executing program 2 (id=471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fedbdf250a"], 0x24}}, 0x20000050)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000)

357.336702ms ago: executing program 5 (id=472):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x6d, 0x0, &(0x7f0000001040))
r5 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={<r6=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@loopback, 0x80, r6})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xac, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xd, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x6c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x48050)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c)
shutdown(r1, 0x1)

341.017112ms ago: executing program 2 (id=474):
gettid()
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000001ed1000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0)

340.458132ms ago: executing program 6 (id=475):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r2, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

317.751474ms ago: executing program 2 (id=476):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x513, &(0x7f0000000440)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20000000)
ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x1})
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x61b1, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='kfree\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000980)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']:$'}}, {@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@permit_directio}, {@uid_gt}]}, 0x0, 0x72d, &(0x7f00000014c0)="$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")
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000c80))
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c844)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1e13c1, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r6)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})

283.839887ms ago: executing program 3 (id=477):
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0xd5, 0x9, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x8000, 0x70ff, 0x4}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0x4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x1a}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x3, 0x0, 0x1}, {0x0, 0x4}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x9, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x200}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0)

283.459137ms ago: executing program 3 (id=478):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x40000, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)

236.196011ms ago: executing program 5 (id=479):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x48)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x6976a9ce9123227e, 0x11, 0x3ba}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2007, @fd_index=0x7, 0x4, &(0x7f0000001680)=[{0x0}, {0x0}], 0x2, 0x24})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
socketpair(0x1, 0x1, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff020000000000000000000000000001320000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001cc0)='kfree\x00', r6, 0x0, 0x6eb}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)

232.041941ms ago: executing program 5 (id=480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
capset(&(0x7f0000000140), &(0x7f00000001c0)={0x1, 0x0, 0x1, 0xfffffff7, 0x6, 0x3})

227.573662ms ago: executing program 3 (id=481):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x26020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1ea, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{0x0}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10032, 0x1000, 0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrandom(0x0, 0x0, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x20, &(0x7f0000001840)={&(0x7f00000016c0)=""/152, 0x98, 0x0, 0x0}}, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000192c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000)

188.688945ms ago: executing program 5 (id=482):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0xd5, 0x9, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x8000, 0x70ff, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', r6, 0x8, 0x7, 0x5, 0x5, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @empty, {[@noop, @lsrr={0x83, 0xf, 0xae, [@local, @private=0xa010102, @multicast1]}, @timestamp={0x44, 0x8, 0x43, 0x0, 0xc, [0x7fff]}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r11, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x140, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0x4, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x1a}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x3, 0x0, 0x1}, {0x0, 0x4}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x9, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x200}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

177.635436ms ago: executing program 3 (id=483):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f0000000580)={[{@orlov}, {@norecovery}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

120.29903ms ago: executing program 2 (id=484):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x26020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1ea, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000580)='kfree\x00', r0}, 0x18)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)=[{0x0}]}, &(0x7f00000000c0)="ff33501ef663", 0x0, 0x840804, 0x10032, 0x1000, 0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrandom(0x0, 0x0, 0x2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0x20, &(0x7f0000001840)={&(0x7f00000016c0)=""/152, 0x98, 0x0, 0x0}}, 0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0), 0x80000, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000192c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000)

70.111875ms ago: executing program 5 (id=485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>0x0, 0x2f, 0xe0, 0x7, 0xf8b9, 0x40, @private0, @local, 0x1, 0x700, 0x1, 0x9}})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000640)=0x1)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="80fd", 0x2}], 0x1, 0xfb5f, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000a02000"/20, @ANYBLOB="2f83b655dbbc11c949622900d567cbc529de4f9addbee78abe5c5e6655758e775514f0f00c05725ad8ff9b45c8c2da1def0b65c756c05c54d5a4d70660f92d52c8be94b5d477daf2339b704bbfa5d4ab03c385960dc45283f8b12103bc979846bab67cee8fb2879e65ae729c80118ffc17389a932a8e7017a4b313a098c7f154a214ca7908584dad28adbb7f81749497ebdfecdf0696d913a6712ac0224343ee00ad1de33a3a40", @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="050000000000c3f8f2b0236a0f491287d1000000000000cb08a6347bb510d99d1c5add188b925637838afa3d56d7b2eef4b4b254766fe39b9b8526d5a03c7445341df8aa55c19f32b7569219104da28e7375dbc54b98a98084104344288405a8aabe1e1ed0e745bac568f12233e475725d83888e93fcd9e3fe33a0861e56e8604bd88ffce229530361c6d7c123b9ee26bd3373bbe237dd0d763c67b5ed", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff12, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000004c0), &(0x7f0000000000)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000200))
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)

9.258619ms ago: executing program 2 (id=486):
r0 = gettid()
r1 = eventfd2(0x0, 0x0)
write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(r1, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 5 (id=487):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
listen(0xffffffffffffffff, 0x2000fff)
accept(0xffffffffffffffff, 0xfffffffffffffffd, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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")
chdir(&(0x7f0000000440)='./file0\x00')
execve(0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

entered promiscuous mode
[   29.881082][ T3301] hsr_slave_1: entered promiscuous mode
[   29.914866][ T3306] team0: Port device team_slave_0 added
[   29.943715][ T3306] team0: Port device team_slave_1 added
[   29.949611][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.956804][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.965247][ T3302] bridge_slave_0: entered allmulticast mode
[   29.971875][ T3302] bridge_slave_0: entered promiscuous mode
[   29.978705][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.985800][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.992979][ T3302] bridge_slave_1: entered allmulticast mode
[   29.999496][ T3302] bridge_slave_1: entered promiscuous mode
[   30.005651][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.012832][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.020017][ T3310] bridge_slave_0: entered allmulticast mode
[   30.026504][ T3310] bridge_slave_0: entered promiscuous mode
[   30.058557][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.065634][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.072979][ T3310] bridge_slave_1: entered allmulticast mode
[   30.079425][ T3310] bridge_slave_1: entered promiscuous mode
[   30.088133][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.095222][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.102521][ T3309] bridge_slave_0: entered allmulticast mode
[   30.108955][ T3309] bridge_slave_0: entered promiscuous mode
[   30.115566][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.122640][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.148679][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.177539][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.184623][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.191844][ T3309] bridge_slave_1: entered allmulticast mode
[   30.198463][ T3309] bridge_slave_1: entered promiscuous mode
[   30.205212][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.212262][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.238222][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.250380][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.263127][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.290072][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.300260][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.319415][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.350752][ T3310] team0: Port device team_slave_0 added
[   30.357399][ T3310] team0: Port device team_slave_1 added
[   30.364341][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.397432][ T3302] team0: Port device team_slave_0 added
[   30.422919][ T3302] team0: Port device team_slave_1 added
[   30.434458][ T3309] team0: Port device team_slave_0 added
[   30.442729][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.449808][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.475804][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.487086][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.494077][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.520087][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.532990][ T3306] hsr_slave_0: entered promiscuous mode
[   30.539147][ T3306] hsr_slave_1: entered promiscuous mode
[   30.544930][ T3306] debugfs: 'hsr0' already exists in 'hsr'
[   30.550797][ T3306] Cannot create hsr debugfs directory
[   30.562544][ T3309] team0: Port device team_slave_1 added
[   30.585244][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.592432][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.618515][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.629913][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.637007][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.663020][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.695158][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.702174][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.728304][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.748203][ T3310] hsr_slave_0: entered promiscuous mode
[   30.754298][ T3310] hsr_slave_1: entered promiscuous mode
[   30.760176][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   30.765998][ T3310] Cannot create hsr debugfs directory
[   30.775590][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.782758][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.808675][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.853900][ T3302] hsr_slave_0: entered promiscuous mode
[   30.860008][ T3302] hsr_slave_1: entered promiscuous mode
[   30.865818][ T3302] debugfs: 'hsr0' already exists in 'hsr'
[   30.871601][ T3302] Cannot create hsr debugfs directory
[   30.904224][ T3309] hsr_slave_0: entered promiscuous mode
[   30.910856][ T3309] hsr_slave_1: entered promiscuous mode
[   30.916755][ T3309] debugfs: 'hsr0' already exists in 'hsr'
[   30.922524][ T3309] Cannot create hsr debugfs directory
[   30.951161][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.981133][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.998909][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.007805][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.109430][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.120974][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.130148][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.144569][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.164166][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.175717][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.187534][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.203438][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.234774][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.244668][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.256182][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.269361][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.292513][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.331210][ T3301] 8021q: adding VLAN 0 to HW filter on device team0
[   31.340975][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.350831][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.364522][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.374491][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.381602][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.390472][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.397526][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.410969][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.429768][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.444847][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   31.467345][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.484628][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.491736][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.506180][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.513274][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.524562][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   31.559177][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.566402][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.585376][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.592541][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.615699][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.650270][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.669591][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.688192][ T3302] 8021q: adding VLAN 0 to HW filter on device team0
[   31.701745][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   31.715069][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.722200][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.736597][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.747673][  T167] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.754812][  T167] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.763990][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.771104][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.780916][  T167] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.787992][  T167] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.834615][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.845066][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.859750][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.933513][ T3301] veth0_vlan: entered promiscuous mode
[   31.951611][ T3301] veth1_vlan: entered promiscuous mode
[   31.991450][ T3301] veth0_macvtap: entered promiscuous mode
[   32.023637][ T3306] veth0_vlan: entered promiscuous mode
[   32.035637][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.045888][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.055964][ T3301] veth1_macvtap: entered promiscuous mode
[   32.076954][ T3306] veth1_vlan: entered promiscuous mode
[   32.099169][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.115005][ T3306] veth0_macvtap: entered promiscuous mode
[   32.137278][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.151125][   T86] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.161058][ T3306] veth1_macvtap: entered promiscuous mode
[   32.182695][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.192365][   T86] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.201737][   T86] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.212199][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.222455][   T86] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.263252][   T86] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.282674][   T86] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.292068][ T3309] veth0_vlan: entered promiscuous mode
[   32.301951][   T86] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.318319][ T3310] veth0_vlan: entered promiscuous mode
[   32.324106][   T86] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.333931][ T3302] veth0_vlan: entered promiscuous mode
[   32.343351][ T3309] veth1_vlan: entered promiscuous mode
[   32.350346][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.373795][ T3302] veth1_vlan: entered promiscuous mode
[   32.382497][ T3310] veth1_vlan: entered promiscuous mode
[   32.422708][ T3310] veth0_macvtap: entered promiscuous mode
[   32.435158][ T3302] veth0_macvtap: entered promiscuous mode
[   32.436502][    C0] hrtimer: interrupt took 33599 ns
[   32.446814][ T3310] veth1_macvtap: entered promiscuous mode
[   32.460771][ T3302] veth1_macvtap: entered promiscuous mode
[   32.475886][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.489567][ T3309] veth0_macvtap: entered promiscuous mode
[   32.500598][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.517032][ T3309] veth1_macvtap: entered promiscuous mode
[   32.529784][   T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.541595][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.552619][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.573473][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.584861][ T3477] loop2: detected capacity change from 0 to 512
[   32.592970][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.601793][   T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.645027][   T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.663457][ T3473] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   32.671690][ T3473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.682906][ T3477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.704299][ T3477] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.718756][   T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.730562][ T3473] dummy0: entered promiscuous mode
[   32.750029][ T3473] bridge0: port 3(dummy0) entered blocking state
[   32.757496][ T3473] bridge0: port 3(dummy0) entered disabled state
[   32.760140][   T29] kauditd_printk_skb: 41 callbacks suppressed
[   32.760170][   T29] audit: type=1400 audit(1755854214.918:113): avc:  denied  { create } for  pid=3475 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.769282][ T3473] dummy0: entered allmulticast mode
[   32.770505][   T29] audit: type=1400 audit(1755854214.918:114): avc:  denied  { write } for  pid=3475 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.797070][ T3476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'.
[   32.831998][ T3473] bridge0: port 3(dummy0) entered blocking state
[   32.839381][ T3473] bridge0: port 3(dummy0) entered forwarding state
[   32.841525][ T3489] loop4: detected capacity change from 0 to 164
[   32.866175][ T3489] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   32.876746][   T29] audit: type=1400 audit(1755854215.048:115): avc:  denied  { mount } for  pid=3488 comm="syz.4.8" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   32.894061][ T3489] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   32.908247][ T3489] process 'syz.4.8' launched './file2' with NULL argv: empty string added
[   32.917626][   T86] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.954554][ T3493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.956341][   T86] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.967088][   T29] audit: type=1400 audit(1755854215.118:116): avc:  denied  { create } for  pid=3492 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.998911][   T86] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.024409][   T29] audit: type=1400 audit(1755854215.168:117): avc:  denied  { unmount } for  pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   33.036670][   T86] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.044628][   T29] audit: type=1400 audit(1755854215.168:118): avc:  denied  { write } for  pid=3492 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   33.069811][ T3473] syz.3.4 (3473) used greatest stack depth: 10824 bytes left
[   33.083234][   T86] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.088994][ T3495] loop4: detected capacity change from 0 to 164
[   33.092890][ T3498] Zero length message leads to an empty skb
[   33.103418][   T29] audit: type=1400 audit(1755854215.238:119): avc:  denied  { create } for  pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.123524][   T29] audit: type=1400 audit(1755854215.238:120): avc:  denied  { setopt } for  pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.123732][   T86] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.142919][   T29] audit: type=1400 audit(1755854215.238:121): avc:  denied  { write } for  pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.178318][ T3493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.191086][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   33.197010][ T3495] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.213524][ T3501] loop3: detected capacity change from 0 to 164
[   33.222400][   T29] audit: type=1400 audit(1755854215.318:122): avc:  denied  { read } for  pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   33.223622][ T3476] syz.2.6 (3476) used greatest stack depth: 10584 bytes left
[   33.255682][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.263320][   T86] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.269292][ T3501] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.300512][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.341443][ T3505] loop2: detected capacity change from 0 to 164
[   33.351111][ T3505] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.374930][ T3507] loop3: detected capacity change from 0 to 512
[   33.383444][ T3505] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.425236][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.449929][ T3507] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.504249][ T3514] loop2: detected capacity change from 0 to 164
[   33.513457][ T3514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.524478][ T3514] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.565161][ T3516] loop2: detected capacity change from 0 to 164
[   33.574680][ T3516] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.606018][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.633839][ T3518] loop2: detected capacity change from 0 to 512
[   33.646154][ T3520] loop3: detected capacity change from 0 to 512
[   33.657873][ T3523] loop4: detected capacity change from 0 to 164
[   33.674380][ T3523] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.678318][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.690428][ T3523] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   33.702604][ T3520] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.717793][ T3518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.765154][ T3518] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   33.802188][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.877764][ T3537] team0 (unregistering): Port device team_slave_0 removed
[   33.885729][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.898273][ T3537] team0 (unregistering): Port device team_slave_1 removed
[   34.038295][ T3549] loop1: detected capacity change from 0 to 1024
[   34.046720][ T3549] EXT4-fs: Ignoring removed orlov option
[   34.058411][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.169536][ T3554] loop0: detected capacity change from 0 to 164
[   34.179478][ T3554] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.189649][ T3554] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.226530][ T3557] loop0: detected capacity change from 0 to 164
[   34.234146][ T3557] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.339275][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.534767][ T3571] loop1: detected capacity change from 0 to 164
[   34.546264][ T3571] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.917890][ T3595] loop1: detected capacity change from 0 to 164
[   34.925784][ T3595] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   34.935077][ T3595] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   35.025354][ T3600] loop2: detected capacity change from 0 to 1024
[   35.041866][ T3600] EXT4-fs: Ignoring removed orlov option
[   35.050358][ T3600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.069347][ T3604] loop3: detected capacity change from 0 to 512
[   35.089381][ T3604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.105797][ T3604] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.152434][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.238650][ T3611] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   35.247401][ T3611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.52'.
[   35.259155][ T3611] dummy0: entered promiscuous mode
[   35.264940][ T3619] loop0: detected capacity change from 0 to 164
[   35.273962][ T3619] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   35.293089][ T3621] loop3: detected capacity change from 0 to 164
[   35.301042][ T3619] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   35.303255][ T3611] bridge0: port 3(dummy0) entered blocking state
[   35.316306][ T3611] bridge0: port 3(dummy0) entered disabled state
[   35.324729][ T3621] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   35.325310][ T3611] dummy0: entered allmulticast mode
[   35.355808][ T3611] bridge0: port 3(dummy0) entered blocking state
[   35.363001][ T3611] bridge0: port 3(dummy0) entered forwarding state
[   35.509106][ T3629] netlink: 'syz.3.61': attribute type 10 has an invalid length.
[   35.517505][ T3629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'.
[   35.529104][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.540605][ T3634] team0 (unregistering): Port device team_slave_0 removed
[   35.552958][ T3634] team0 (unregistering): Port device team_slave_1 removed
[   35.650407][ T3645] loop2: detected capacity change from 0 to 512
[   35.674632][ T3649] team0 (unregistering): Port device team_slave_0 removed
[   35.684727][ T3651] loop3: detected capacity change from 0 to 164
[   35.685062][ T3649] team0 (unregistering): Port device team_slave_1 removed
[   35.692681][ T3651] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   35.705028][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.719629][ T3645] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.740026][ T3658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.71'.
[   35.761045][ T3642] syz.2.65 (3642) used greatest stack depth: 10552 bytes left
[   35.787982][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.824285][ T3665] team0 (unregistering): Port device team_slave_0 removed
[   35.837009][ T3665] team0 (unregistering): Port device team_slave_1 removed
[   35.872679][ T3675] loop4: detected capacity change from 0 to 512
[   35.889950][ T3675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.903102][ T3675] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.926694][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.944523][ T3684] FAULT_INJECTION: forcing a failure.
[   35.944523][ T3684] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   35.950386][ T3687] loop4: detected capacity change from 0 to 512
[   35.958358][ T3684] CPU: 0 UID: 0 PID: 3684 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.958394][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   35.958411][ T3684] Call Trace:
[   35.958419][ T3684]  <TASK>
[   35.958428][ T3684]  __dump_stack+0x1d/0x30
[   35.958460][ T3684]  dump_stack_lvl+0xe8/0x140
[   35.958520][ T3684]  dump_stack+0x15/0x1b
[   35.958542][ T3684]  should_fail_ex+0x265/0x280
[   35.958572][ T3684]  should_fail+0xb/0x20
[   35.958658][ T3684]  should_fail_usercopy+0x1a/0x20
[   35.958688][ T3684]  strncpy_from_user+0x25/0x230
[   35.958727][ T3684]  ? kmem_cache_alloc_noprof+0x186/0x310
[   35.958766][ T3684]  ? getname_flags+0x80/0x3b0
[   35.958881][ T3684]  getname_flags+0xae/0x3b0
[   35.959034][ T3684]  __x64_sys_linkat+0x66/0xa0
[   35.959067][ T3684]  x64_sys_call+0x28fb/0x2ff0
[   35.959098][ T3684]  do_syscall_64+0xd2/0x200
[   35.959134][ T3684]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   35.959218][ T3684]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   35.959281][ T3684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.959312][ T3684] RIP: 0033:0x7f0252f7ebe9
[   35.959350][ T3684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.959375][ T3684] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[   35.959405][ T3684] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   35.959422][ T3684] RDX: ffffffffffffffff RSI: 0000200000000040 RDI: ffffffffffffffff
[   35.959520][ T3684] RBP: 00007f02519df090 R08: 0000000000001000 R09: 0000000000000000
[   35.959538][ T3684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.959555][ T3684] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   35.959580][ T3684]  </TASK>
[   36.008691][ T3686] loop1: detected capacity change from 0 to 164
[   36.016632][ T3687] EXT4-fs: Ignoring removed bh option
[   36.022952][ T3686] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   36.033177][ T3687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   36.072159][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   36.073740][ T3687] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   36.073758][ T3687] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   36.204741][ T3687] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   36.214113][ T3687] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   36.222731][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.286205][ T3696] loop0: detected capacity change from 0 to 164
[   36.305794][ T3696] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   36.308795][ T3310] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /13/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[   36.319055][ T3696] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   36.346551][ T3700] loop1: detected capacity change from 0 to 512
[   36.363966][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.376938][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.399736][ T3700] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.481788][ T3707] loop2: detected capacity change from 0 to 512
[   36.498549][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.511170][ T3707] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.537178][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.552126][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.553391][   T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.603641][ T3715] FAULT_INJECTION: forcing a failure.
[   36.603641][ T3715] name failslab, interval 1, probability 0, space 0, times 0
[   36.616719][ T3715] CPU: 1 UID: 0 PID: 3715 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.616804][ T3715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.616821][ T3715] Call Trace:
[   36.616851][ T3715]  <TASK>
[   36.616860][ T3715]  __dump_stack+0x1d/0x30
[   36.616886][ T3715]  dump_stack_lvl+0xe8/0x140
[   36.616972][ T3715]  dump_stack+0x15/0x1b
[   36.616993][ T3715]  should_fail_ex+0x265/0x280
[   36.617018][ T3715]  should_failslab+0x8c/0xb0
[   36.617116][ T3715]  __kmalloc_cache_node_noprof+0x54/0x320
[   36.617162][ T3715]  ? __get_vm_area_node+0x106/0x1d0
[   36.617238][ T3715]  __get_vm_area_node+0x106/0x1d0
[   36.617276][ T3715]  __vmalloc_node_range_noprof+0x273/0xe00
[   36.617359][ T3715]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.617398][ T3715]  ? avc_has_perm_noaudit+0x1b1/0x200
[   36.617481][ T3715]  ? cred_has_capability+0x210/0x280
[   36.617508][ T3715]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.617542][ T3715]  __vmalloc_noprof+0x83/0xc0
[   36.617586][ T3715]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.617620][ T3715]  bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.617652][ T3715]  ? bpf_prog_alloc+0x2a/0x150
[   36.617730][ T3715]  bpf_prog_alloc+0x3c/0x150
[   36.617762][ T3715]  bpf_prog_load+0x514/0x1070
[   36.617867][ T3715]  ? security_bpf+0x2b/0x90
[   36.617944][ T3715]  __sys_bpf+0x462/0x7b0
[   36.617986][ T3715]  __x64_sys_bpf+0x41/0x50
[   36.618070][ T3715]  x64_sys_call+0x2aea/0x2ff0
[   36.618243][ T3715]  do_syscall_64+0xd2/0x200
[   36.618277][ T3715]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   36.618360][ T3715]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   36.618389][ T3715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.618415][ T3715] RIP: 0033:0x7f0252f7ebe9
[   36.618433][ T3715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.618454][ T3715] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.618514][ T3715] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   36.618528][ T3715] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   36.618558][ T3715] RBP: 00007f02519df090 R08: 0000000000000000 R09: 0000000000000000
[   36.618572][ T3715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.618587][ T3715] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   36.618609][ T3715]  </TASK>
[   36.618618][ T3715] syz.2.93: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[   36.873408][ T3715] CPU: 1 UID: 0 PID: 3715 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   36.873435][ T3715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   36.873447][ T3715] Call Trace:
[   36.873454][ T3715]  <TASK>
[   36.873460][ T3715]  __dump_stack+0x1d/0x30
[   36.873501][ T3715]  dump_stack_lvl+0xe8/0x140
[   36.873519][ T3715]  dump_stack+0x15/0x1b
[   36.873538][ T3715]  warn_alloc+0x12b/0x1a0
[   36.873584][ T3715]  __vmalloc_node_range_noprof+0x297/0xe00
[   36.873640][ T3715]  ? avc_has_perm_noaudit+0x1b1/0x200
[   36.873675][ T3715]  ? cred_has_capability+0x210/0x280
[   36.873704][ T3715]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.873770][ T3715]  __vmalloc_noprof+0x83/0xc0
[   36.873807][ T3715]  ? bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.873877][ T3715]  bpf_prog_alloc_no_stats+0x47/0x3a0
[   36.873912][ T3715]  ? bpf_prog_alloc+0x2a/0x150
[   36.873944][ T3715]  bpf_prog_alloc+0x3c/0x150
[   36.874016][ T3715]  bpf_prog_load+0x514/0x1070
[   36.874061][ T3715]  ? security_bpf+0x2b/0x90
[   36.874103][ T3715]  __sys_bpf+0x462/0x7b0
[   36.874151][ T3715]  __x64_sys_bpf+0x41/0x50
[   36.874213][ T3715]  x64_sys_call+0x2aea/0x2ff0
[   36.874240][ T3715]  do_syscall_64+0xd2/0x200
[   36.874342][ T3715]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   36.874467][ T3715]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   36.874498][ T3715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.874564][ T3715] RIP: 0033:0x7f0252f7ebe9
[   36.874581][ T3715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.874664][ T3715] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   36.874684][ T3715] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   36.874808][ T3715] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005
[   36.874824][ T3715] RBP: 00007f02519df090 R08: 0000000000000000 R09: 0000000000000000
[   36.874839][ T3715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.874855][ T3715] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   36.874878][ T3715]  </TASK>
[   36.874897][ T3715] Mem-Info:
[   36.984924][ T3723] netlink: 'syz.0.97': attribute type 10 has an invalid length.
[   36.988446][ T3715] active_anon:3826 inactive_anon:0 isolated_anon:0
[   36.988446][ T3715]  active_file:8966 inactive_file:2185 isolated_file:0
[   36.988446][ T3715]  unevictable:0 dirty:1516 writeback:4
[   36.988446][ T3715]  slab_reclaimable:3073 slab_unreclaimable:13407
[   36.988446][ T3715]  mapped:28992 shmem:245 pagetables:1037
[   36.988446][ T3715]  sec_pagetables:0 bounce:0
[   36.988446][ T3715]  kernel_misc_reclaimable:0
[   36.988446][ T3715]  free:1905129 free_pcp:7691 free_cma:0
[   36.992974][ T3723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.97'.
[   36.999042][ T3715] Node 0 active_anon:15304kB inactive_anon:0kB active_file:35864kB inactive_file:8740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115968kB dirty:6064kB writeback:16kB shmem:980kB kernel_stack:3232kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   37.178974][ T3715] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   37.208767][ T3715] lowmem_reserve[]: 0 2883 7862 7862
[   37.214103][ T3715] Node 0 DMA32 free:2949308kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB
[   37.244359][ T3715] lowmem_reserve[]: 0 0 4978 4978
[   37.249458][ T3715] Node 0 Normal free:4655848kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15304kB inactive_anon:0kB active_file:35864kB inactive_file:8740kB unevictable:0kB writepending:6080kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27232kB local_pcp:10636kB free_cma:0kB
[   37.281459][ T3715] lowmem_reserve[]: 0 0 0 0
[   37.286057][ T3715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   37.299139][ T3715] Node 0 DMA32: 5*4kB (M) 5*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949308kB
[   37.315349][ T3715] Node 0 Normal: 4*4kB (M) 3*8kB (UME) 6*16kB (UME) 6*32kB (UME) 4*64kB (UME) 15*128kB (ME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (ME) 1134*4096kB (M) = 4655816kB
[   37.332807][ T3715] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   37.342128][ T3715] 11391 total pagecache pages
[   37.346891][ T3715] 0 pages in swap cache
[   37.351043][ T3715] Free swap  = 124996kB
[   37.355186][ T3715] Total swap = 124996kB
[   37.359352][ T3715] 2097051 pages RAM
[   37.363191][ T3715] 0 pages HighMem/MovableOnly
[   37.368095][ T3715] 80441 pages reserved
[   37.389607][   T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.450796][ T3735] loop2: detected capacity change from 0 to 164
[   37.453239][ T3740] loop0: detected capacity change from 0 to 512
[   37.489493][ T3735] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   37.500539][   T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.531276][ T3740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.544823][ T3740] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.558652][ T3735] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   37.590123][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.612013][ T3753] loop2: detected capacity change from 0 to 164
[   37.619330][ T3753] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   37.629846][   T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.687209][ T3716] chnl_net:caif_netlink_parms(): no params data found
[   37.756318][   T37] bridge_slave_1: left allmulticast mode
[   37.762076][   T37] bridge_slave_1: left promiscuous mode
[   37.768411][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.799581][   T37] bridge_slave_0: left allmulticast mode
[   37.805368][   T37] bridge_slave_0: left promiscuous mode
[   37.811102][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.834377][ T3771] loop1: detected capacity change from 0 to 512
[   37.866009][ T3775] loop2: detected capacity change from 0 to 512
[   37.874738][ T3771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.888045][ T3771] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.900617][ T3775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.913629][ T3775] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   37.916158][ T3780] netlink: 'syz.0.113': attribute type 10 has an invalid length.
[   37.931858][ T3780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'.
[   37.941402][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   37.951256][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   37.961047][   T37] bond0 (unregistering): Released all slaves
[   37.986520][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.993636][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.002968][ T3716] bridge_slave_0: entered allmulticast mode
[   38.011155][ T3716] bridge_slave_0: entered promiscuous mode
[   38.018320][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.026005][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.033774][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.034987][ T3716] bridge_slave_1: entered allmulticast mode
[   38.050033][ T3716] bridge_slave_1: entered promiscuous mode
[   38.075082][   T37] hsr_slave_0: left promiscuous mode
[   38.082480][   T37] hsr_slave_1: left promiscuous mode
[   38.089456][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   38.096967][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[   38.106169][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   38.113626][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[   38.126503][   T37] veth1_macvtap: left promiscuous mode
[   38.132115][   T37] veth0_macvtap: left promiscuous mode
[   38.132304][ T3785] loop0: detected capacity change from 0 to 164
[   38.137890][   T37] veth1_vlan: left promiscuous mode
[   38.149785][   T37] veth0_vlan: left promiscuous mode
[   38.151810][ T3785] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   38.158292][   T29] kauditd_printk_skb: 1468 callbacks suppressed
[   38.158313][   T29] audit: type=1400 audit(1755854220.318:1589): avc:  denied  { mount } for  pid=3782 comm="syz.2.118" name="/" dev="ramfs" ino=6390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   38.168587][ T3785] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   38.352645][ T3716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.416066][ T3716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.451223][   T29] audit: type=1400 audit(1755854220.618:1590): avc:  denied  { remove_name } for  pid=3302 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.451726][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.475507][   T29] audit: type=1400 audit(1755854220.618:1591): avc:  denied  { rmdir } for  pid=3302 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   38.538618][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.553479][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.605181][   T29] audit: type=1326 audit(1755854220.658:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.628739][   T29] audit: type=1326 audit(1755854220.658:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.631569][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.652203][   T29] audit: type=1326 audit(1755854220.658:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.689325][   T29] audit: type=1326 audit(1755854220.658:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.691086][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.713148][   T29] audit: type=1326 audit(1755854220.658:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.749487][   T29] audit: type=1326 audit(1755854220.658:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.749908][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.772816][   T29] audit: type=1326 audit(1755854220.658:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97594cebe9 code=0x7ffc0000
[   38.820322][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.833890][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.848849][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.849984][ T3716] team0: Port device team_slave_0 added
[   38.862461][ T3302] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[   38.877383][ T3716] team0: Port device team_slave_1 added
[   38.931820][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.938903][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   38.964889][ T3716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.977504][ T3716] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.984497][ T3716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.010811][ T3716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.068319][ T3716] hsr_slave_0: entered promiscuous mode
[   39.078140][ T3807] netlink: 'syz.3.128': attribute type 10 has an invalid length.
[   39.087546][ T3807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.128'.
[   39.097846][ T3716] hsr_slave_1: entered promiscuous mode
[   39.103839][ T3716] debugfs: 'hsr0' already exists in 'hsr'
[   39.109678][ T3716] Cannot create hsr debugfs directory
[   39.178524][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.233374][   T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.286762][   T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.302759][ T3716] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   39.320274][ T3716] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   39.340209][ T3820] lo speed is unknown, defaulting to 1000
[   39.354624][   T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.365956][ T3716] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   39.383044][ T3820] lo speed is unknown, defaulting to 1000
[   39.394922][   T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   39.412203][ T3716] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   39.423001][ T3820] lo speed is unknown, defaulting to 1000
[   39.441769][ T3820] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   39.490378][ T3820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   39.521925][   T37] dummy0: left allmulticast mode
[   39.527395][   T37] bridge0: port 3(dummy0) entered disabled state
[   39.535716][   T37] bridge_slave_1: left allmulticast mode
[   39.541481][   T37] bridge_slave_1: left promiscuous mode
[   39.547268][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.571886][   T37] bridge_slave_0: left allmulticast mode
[   39.577746][   T37] bridge_slave_0: left promiscuous mode
[   39.583546][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.669806][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   39.680072][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   39.689564][   T37] bond0 (unregistering): Released all slaves
[   39.718495][ T3716] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.727878][ T3820] lo speed is unknown, defaulting to 1000
[   39.752965][ T3716] 8021q: adding VLAN 0 to HW filter on device team0
[   39.760530][ T3820] lo speed is unknown, defaulting to 1000
[   39.777179][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.784300][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.794041][ T3820] lo speed is unknown, defaulting to 1000
[   39.802233][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.809438][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.818248][ T3844] loop2: detected capacity change from 0 to 512
[   39.825186][ T3823] lo speed is unknown, defaulting to 1000
[   39.840487][ T3820] lo speed is unknown, defaulting to 1000
[   39.855054][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.861562][ T3820] lo speed is unknown, defaulting to 1000
[   39.868809][ T3844] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.910333][ T3820] lo speed is unknown, defaulting to 1000
[   39.928457][ T3820] lo speed is unknown, defaulting to 1000
[   39.949420][   T37] hsr_slave_0: left promiscuous mode
[   39.955574][   T37] hsr_slave_1: left promiscuous mode
[   39.961668][ T3844] syz.2.139 (3844) used greatest stack depth: 10472 bytes left
[   39.962704][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   39.976930][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[   39.984520][ T3820] syz.3.135 (3820) used greatest stack depth: 10376 bytes left
[   39.992662][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   40.000237][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[   40.017904][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.033347][   T37] veth1_macvtap: left promiscuous mode
[   40.040111][   T37] veth0_macvtap: left promiscuous mode
[   40.046000][   T37] veth1_vlan: left promiscuous mode
[   40.051768][   T37] veth0_vlan: left promiscuous mode
[   40.068926][ T3858] siw: device registration error -23
[   40.120367][ T3864] siw: device registration error -23
[   40.210763][ T3823] chnl_net:caif_netlink_parms(): no params data found
[   40.232070][ T3872] loop3: detected capacity change from 0 to 164
[   40.248507][ T3872] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   40.263708][ T3872] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   40.268843][ T3716] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.315818][ T3862] lo speed is unknown, defaulting to 1000
[   40.346986][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.354177][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.382361][ T3823] bridge_slave_0: entered allmulticast mode
[   40.395949][ T3886] loop2: detected capacity change from 0 to 1024
[   40.404752][ T3823] bridge_slave_0: entered promiscuous mode
[   40.414090][ T3886] =======================================================
[   40.414090][ T3886] WARNING: The mand mount option has been deprecated and
[   40.414090][ T3886]          and is ignored by this kernel. Remove the mand
[   40.414090][ T3886]          option from the mount to silence this warning.
[   40.414090][ T3886] =======================================================
[   40.459531][ T3887] loop3: detected capacity change from 0 to 512
[   40.479280][ T3886] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   40.490575][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.497723][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.516783][ T3823] bridge_slave_1: entered allmulticast mode
[   40.523964][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.524830][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.536805][ T3823] bridge_slave_1: entered promiscuous mode
[   40.556531][ T3886] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.570142][ T3887] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.589252][ T3883] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 13)
[   40.611445][ T3883] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   40.623879][ T3883] EXT4-fs (loop2): This should not happen!! Data will be lost
[   40.623879][ T3883] 
[   40.645072][ T3823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.668227][ T3823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.691244][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.707296][ T3883] serio: Serial port ptm0
[   40.730823][ T3823] team0: Port device team_slave_0 added
[   40.741104][ T3823] team0: Port device team_slave_1 added
[   40.780431][ T3823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.787594][ T3823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.813670][ T3823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.831844][ T3823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.838845][ T3823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.864815][ T3823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.894065][ T3907] siw: device registration error -23
[   40.899186][ T3823] hsr_slave_0: entered promiscuous mode
[   40.905765][ T3823] hsr_slave_1: entered promiscuous mode
[   40.911968][ T3823] debugfs: 'hsr0' already exists in 'hsr'
[   40.917843][ T3823] Cannot create hsr debugfs directory
[   40.931645][ T3716] veth0_vlan: entered promiscuous mode
[   40.957183][ T3716] veth1_vlan: entered promiscuous mode
[   41.021850][ T3911] loop0: detected capacity change from 0 to 512
[   41.040087][ T3911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.052744][ T3911] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.071537][ T3716] veth0_macvtap: entered promiscuous mode
[   41.085096][ T3823] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   41.095071][ T3716] veth1_macvtap: entered promiscuous mode
[   41.101909][ T3823] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   41.122442][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.132876][ T3823] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   41.145065][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.157544][ T3823] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   41.160467][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.176203][ T3716] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.199981][ T1089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.220677][ T1089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.240313][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.267523][ T1089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.311978][ T3823] 8021q: adding VLAN 0 to HW filter on device bond0
[   41.333943][ T3823] 8021q: adding VLAN 0 to HW filter on device team0
[   41.340983][ T3930] loop5: detected capacity change from 0 to 1024
[   41.348939][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.356019][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.356856][ T3930] EXT4-fs: Ignoring removed orlov option
[   41.367538][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.376050][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.391653][ T3930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.483599][ T3823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.558781][ T3949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.159'.
[   41.563832][ T3942] netlink: 'syz.2.158': attribute type 10 has an invalid length.
[   41.579853][ T3942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'.
[   41.609046][ T3942] dummy0: entered promiscuous mode
[   41.621831][ T3942] bridge0: port 3(dummy0) entered blocking state
[   41.637463][ T3942] bridge0: port 3(dummy0) entered disabled state
[   41.652783][ T3942] dummy0: entered allmulticast mode
[   41.674354][ T3942] bridge0: port 3(dummy0) entered blocking state
[   41.681654][ T3942] bridge0: port 3(dummy0) entered forwarding state
[   41.774682][ T3964] loop0: detected capacity change from 0 to 164
[   41.800334][ T3960] loop3: detected capacity change from 0 to 512
[   41.811793][ T3964] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.820528][ T3823] veth0_vlan: entered promiscuous mode
[   41.827232][ T3964] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   41.832057][ T3823] veth1_vlan: entered promiscuous mode
[   41.855674][ T3823] veth0_macvtap: entered promiscuous mode
[   41.862869][ T3960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.873715][ T3823] veth1_macvtap: entered promiscuous mode
[   41.892078][ T3823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.901168][ T3823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.909083][ T3960] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.923870][   T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.948455][   T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.966138][   T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.977191][   T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.036174][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.056952][ T3977] team0 (unregistering): Port device team_slave_0 removed
[   42.066082][ T3977] team0 (unregistering): Port device team_slave_1 removed
[   42.111371][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.149840][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'.
[   42.158992][ T3989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'.
[   42.167927][ T3989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'.
[   42.177399][ T3989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'.
[   42.186577][ T3989] netlink: 'syz.0.173': attribute type 6 has an invalid length.
[   42.199766][ T3992] loop5: detected capacity change from 0 to 512
[   42.224440][ T3992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.235970][ T3987] netlink: 'syz.3.172': attribute type 10 has an invalid length.
[   42.245694][ T3987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'.
[   42.265246][ T3992] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.285419][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.294416][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.349524][ T4003] loop3: detected capacity change from 0 to 164
[   42.358885][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.368425][ T4003] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.379709][ T4003] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.469980][ T4011] siw: device registration error -23
[   42.483393][ T4012] loop3: detected capacity change from 0 to 512
[   42.500275][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.514131][ T4012] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.587447][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.608569][ T4018] loop3: detected capacity change from 0 to 1024
[   42.615275][ T4018] EXT4-fs: Ignoring removed orlov option
[   42.624365][ T4018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.855840][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.910110][ T4043] loop3: detected capacity change from 0 to 164
[   42.921440][ T4043] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.933194][ T4043] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   42.942696][ T4045] siw: device registration error -23
[   42.986768][ T4046] loop0: detected capacity change from 0 to 512
[   42.998834][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.001177][ T4050] siw: device registration error -23
[   43.011598][ T4046] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.069216][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.129425][ T4062] loop0: detected capacity change from 0 to 1024
[   43.136091][ T4062] EXT4-fs: Ignoring removed orlov option
[   43.141284][ T4064] loop2: detected capacity change from 0 to 736
[   43.149902][ T4062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.164260][ T4064] rock: directory entry would overflow storage
[   43.170563][ T4064] rock: sig=0x3b10, size=4, remaining=3
[   43.177188][   T29] kauditd_printk_skb: 340 callbacks suppressed
[   43.177203][   T29] audit: type=1326 audit(1755854225.348:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0252f7d550 code=0x7ffc0000
[   43.206773][   T29] audit: type=1326 audit(1755854225.348:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0252f7d937 code=0x7ffc0000
[   43.230117][   T29] audit: type=1326 audit(1755854225.348:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0252f7d550 code=0x7ffc0000
[   43.253628][   T29] audit: type=1326 audit(1755854225.348:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.277068][   T29] audit: type=1326 audit(1755854225.348:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.309931][   T29] audit: type=1326 audit(1755854225.378:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.333321][   T29] audit: type=1326 audit(1755854225.398:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.338249][ T4068] FAULT_INJECTION: forcing a failure.
[   43.338249][ T4068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.356775][   T29] audit: type=1326 audit(1755854225.418:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.370156][ T4068] CPU: 1 UID: 0 PID: 4068 Comm: syz.3.200 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.370246][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   43.370264][ T4068] Call Trace:
[   43.370273][ T4068]  <TASK>
[   43.370284][ T4068]  __dump_stack+0x1d/0x30
[   43.370315][ T4068]  dump_stack_lvl+0xe8/0x140
[   43.370375][ T4068]  dump_stack+0x15/0x1b
[   43.370399][ T4068]  should_fail_ex+0x265/0x280
[   43.370428][ T4068]  should_fail+0xb/0x20
[   43.370453][ T4068]  should_fail_usercopy+0x1a/0x20
[   43.370545][ T4068]  _copy_from_user+0x1c/0xb0
[   43.370582][ T4068]  __sys_connect+0xd0/0x2b0
[   43.370633][ T4068]  __x64_sys_connect+0x3f/0x50
[   43.370680][ T4068]  x64_sys_call+0x2c08/0x2ff0
[   43.370711][ T4068]  do_syscall_64+0xd2/0x200
[   43.370829][ T4068]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.370861][ T4068]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.370896][ T4068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.370955][ T4068] RIP: 0033:0x7f60440cebe9
[   43.370976][ T4068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.371000][ T4068] RSP: 002b:00007f6042b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   43.371025][ T4068] RAX: ffffffffffffffda RBX: 00007f60442f5fa0 RCX: 00007f60440cebe9
[   43.371042][ T4068] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000004
[   43.371089][ T4068] RBP: 00007f6042b2f090 R08: 0000000000000000 R09: 0000000000000000
[   43.371106][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.371122][ T4068] R13: 00007f60442f6038 R14: 00007f60442f5fa0 R15: 00007ffc0f4f4518
[   43.371146][ T4068]  </TASK>
[   43.565426][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.610559][ T4074] loop2: detected capacity change from 0 to 164
[   43.617777][ T4074] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.627812][ T4074] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   43.713164][   T29] audit: type=1326 audit(1755854225.878:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.2.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.736649][   T29] audit: type=1326 audit(1755854225.878:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.2.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   43.765186][ T4083] loop3: detected capacity change from 0 to 256
[   43.773871][ T4083] FAT-fs (loop3): Directory bread(block 1285) failed
[   43.782441][ T4083] FAT-fs (loop3): Directory bread(block 1285) failed
[   43.892660][ T4093] FAULT_INJECTION: forcing a failure.
[   43.892660][ T4093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.905787][ T4093] CPU: 0 UID: 0 PID: 4093 Comm: syz.5.211 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   43.905885][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   43.905898][ T4093] Call Trace:
[   43.905904][ T4093]  <TASK>
[   43.905911][ T4093]  __dump_stack+0x1d/0x30
[   43.905954][ T4093]  dump_stack_lvl+0xe8/0x140
[   43.905986][ T4093]  dump_stack+0x15/0x1b
[   43.906006][ T4093]  should_fail_ex+0x265/0x280
[   43.906032][ T4093]  should_fail+0xb/0x20
[   43.906053][ T4093]  should_fail_usercopy+0x1a/0x20
[   43.906079][ T4093]  _copy_from_user+0x1c/0xb0
[   43.906128][ T4093]  ___sys_sendmsg+0xc1/0x1d0
[   43.906169][ T4093]  __x64_sys_sendmsg+0xd4/0x160
[   43.906258][ T4093]  x64_sys_call+0x191e/0x2ff0
[   43.906329][ T4093]  do_syscall_64+0xd2/0x200
[   43.906374][ T4093]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.906455][ T4093]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   43.906494][ T4093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.906525][ T4093] RIP: 0033:0x7f5d1e1debe9
[   43.906569][ T4093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.906590][ T4093] RSP: 002b:00007f5d1cc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.906611][ T4093] RAX: ffffffffffffffda RBX: 00007f5d1e405fa0 RCX: 00007f5d1e1debe9
[   43.906625][ T4093] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000005
[   43.906654][ T4093] RBP: 00007f5d1cc47090 R08: 0000000000000000 R09: 0000000000000000
[   43.906667][ T4093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.906690][ T4093] R13: 00007f5d1e406038 R14: 00007f5d1e405fa0 R15: 00007ffcccface58
[   43.906712][ T4093]  </TASK>
[   44.081112][ T4094] loop3: detected capacity change from 0 to 1024
[   44.100854][ T4096] loop6: detected capacity change from 0 to 1024
[   44.108023][ T4096] EXT4-fs: Ignoring removed orlov option
[   44.115924][ T4096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.129722][ T4094] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   44.139809][ T4094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.152180][ T4094] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.171528][ T4094] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.210: lblock 3 mapped to illegal pblock 3 (length 13)
[   44.196763][ T4094] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   44.209449][ T4094] EXT4-fs (loop3): This should not happen!! Data will be lost
[   44.209449][ T4094] 
[   44.230052][ T4094] serio: Serial port ptm0
[   44.244186][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.213'.
[   44.384415][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.398622][ T4107] loop5: detected capacity change from 0 to 512
[   44.431332][ T4109] loop6: detected capacity change from 0 to 512
[   44.434802][ T4113] loop0: detected capacity change from 0 to 128
[   44.444542][ T4107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.445737][ T4113] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   44.459913][ T4107] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.470430][ T4113] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.483570][ T4109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.503475][ T4109] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.529516][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.659419][ T4123] FAULT_INJECTION: forcing a failure.
[   44.659419][ T4123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.672693][ T4123] CPU: 0 UID: 0 PID: 4123 Comm: syz.5.221 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.672726][ T4123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   44.672742][ T4123] Call Trace:
[   44.672749][ T4123]  <TASK>
[   44.672757][ T4123]  __dump_stack+0x1d/0x30
[   44.672851][ T4123]  dump_stack_lvl+0xe8/0x140
[   44.672874][ T4123]  dump_stack+0x15/0x1b
[   44.672894][ T4123]  should_fail_ex+0x265/0x280
[   44.672919][ T4123]  should_fail+0xb/0x20
[   44.672940][ T4123]  should_fail_usercopy+0x1a/0x20
[   44.673019][ T4123]  _copy_from_user+0x1c/0xb0
[   44.673052][ T4123]  perf_copy_attr+0x145/0x610
[   44.673084][ T4123]  __se_sys_perf_event_open+0x67/0x11c0
[   44.673142][ T4123]  ? vfs_write+0x7e8/0x960
[   44.673168][ T4123]  ? __rcu_read_unlock+0x4f/0x70
[   44.673196][ T4123]  __x64_sys_perf_event_open+0x67/0x80
[   44.673304][ T4123]  x64_sys_call+0x7bd/0x2ff0
[   44.673330][ T4123]  do_syscall_64+0xd2/0x200
[   44.673410][ T4123]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   44.673438][ T4123]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   44.673485][ T4123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.673509][ T4123] RIP: 0033:0x7f5d1e1debe9
[   44.673540][ T4123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.673629][ T4123] RSP: 002b:00007f5d1cc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   44.673653][ T4123] RAX: ffffffffffffffda RBX: 00007f5d1e405fa0 RCX: 00007f5d1e1debe9
[   44.673669][ T4123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   44.673724][ T4123] RBP: 00007f5d1cc47090 R08: 0000000000000000 R09: 0000000000000000
[   44.673737][ T4123] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   44.673752][ T4123] R13: 00007f5d1e406038 R14: 00007f5d1e405fa0 R15: 00007ffcccface58
[   44.673774][ T4123]  </TASK>
[   44.677804][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.738363][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.223'.
[   44.891495][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.911140][ T4134] loop2: detected capacity change from 0 to 164
[   44.925125][ T4134] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   44.940296][ T4134] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   44.956190][ T4136] loop5: detected capacity change from 0 to 1024
[   44.974566][ T4136] EXT4-fs: Ignoring removed orlov option
[   44.982876][ T4136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.170505][ T4159] loop6: detected capacity change from 0 to 512
[   45.198032][ T4159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.213967][ T4159] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.242407][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.319648][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   45.331827][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.363846][ T4165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.234'.
[   45.533047][ T4181] siw: device registration error -23
[   45.635093][ T4195] syz.3.249 uses obsolete (PF_INET,SOCK_PACKET)
[   45.772747][ T4199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   45.779344][ T4199] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   45.787186][ T4199] vhci_hcd vhci_hcd.0: Device attached
[   45.832008][ T4211] smc: net device bond0 applied user defined pnetid SYZ0
[   45.843585][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[   45.906646][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[   45.938065][ T4233] loop2: detected capacity change from 0 to 1024
[   45.944959][ T4233] EXT4-fs: Ignoring removed orlov option
[   45.953896][ T4233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.056436][   T36] usb 2-1: SetAddress Request (2) to port 0
[   46.062552][   T36] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd
[   46.258706][ T4272] netlink: 'syz.6.258': attribute type 10 has an invalid length.
[   46.268796][ T4272] netlink: 40 bytes leftover after parsing attributes in process `syz.6.258'.
[   46.280384][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.281071][ T4272] dummy0: entered promiscuous mode
[   46.306979][ T4272] bridge0: port 3(dummy0) entered blocking state
[   46.314697][ T4272] bridge0: port 3(dummy0) entered disabled state
[   46.324984][ T4272] dummy0: entered allmulticast mode
[   46.344809][ T4272] bridge0: port 3(dummy0) entered blocking state
[   46.352895][ T4272] bridge0: port 3(dummy0) entered forwarding state
[   46.474981][ T4304] FAULT_INJECTION: forcing a failure.
[   46.474981][ T4304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.488229][ T4304] CPU: 0 UID: 0 PID: 4304 Comm: syz.6.261 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.488252][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   46.488263][ T4304] Call Trace:
[   46.488269][ T4304]  <TASK>
[   46.488276][ T4304]  __dump_stack+0x1d/0x30
[   46.488294][ T4304]  dump_stack_lvl+0xe8/0x140
[   46.488327][ T4304]  dump_stack+0x15/0x1b
[   46.488341][ T4304]  should_fail_ex+0x265/0x280
[   46.488359][ T4304]  should_fail+0xb/0x20
[   46.488373][ T4304]  should_fail_usercopy+0x1a/0x20
[   46.488422][ T4304]  _copy_from_user+0x1c/0xb0
[   46.488446][ T4304]  __sys_connect+0xd0/0x2b0
[   46.488539][ T4304]  __x64_sys_connect+0x3f/0x50
[   46.488565][ T4304]  x64_sys_call+0x2c08/0x2ff0
[   46.488664][ T4304]  do_syscall_64+0xd2/0x200
[   46.488688][ T4304]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   46.488709][ T4304]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   46.488739][ T4304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.488811][ T4304] RIP: 0033:0x7f184399ebe9
[   46.488824][ T4304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   46.488838][ T4304] RSP: 002b:00007f18423e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   46.488855][ T4304] RAX: ffffffffffffffda RBX: 00007f1843bc6090 RCX: 00007f184399ebe9
[   46.488917][ T4304] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000004
[   46.488928][ T4304] RBP: 00007f18423e6090 R08: 0000000000000000 R09: 0000000000000000
[   46.488938][ T4304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.488949][ T4304] R13: 00007f1843bc6128 R14: 00007f1843bc6090 R15: 00007ffc7fd18e98
[   46.488972][ T4304]  </TASK>
[   46.813287][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'.
[   46.944916][ T4339] loop3: detected capacity change from 0 to 1024
[   46.951820][ T4339] EXT4-fs: Ignoring removed orlov option
[   46.968676][ T4339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.231933][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.255457][ T4385] loop3: detected capacity change from 0 to 1024
[   47.262387][ T4385] EXT4-fs: Ignoring removed orlov option
[   47.270897][ T4385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.426711][ T4201] vhci_hcd: connection reset by peer
[   47.432378][   T37] vhci_hcd: stop threads
[   47.436703][   T37] vhci_hcd: release socket
[   47.441163][   T37] vhci_hcd: disconnect device
[   47.517890][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.534413][ T4409] loop6: detected capacity change from 0 to 512
[   47.541396][ T4411] loop3: detected capacity change from 0 to 1024
[   47.550552][ T4411] EXT4-fs: Ignoring removed orlov option
[   47.559192][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.573788][ T4409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.614477][ T4414] netlink: 'syz.2.272': attribute type 10 has an invalid length.
[   47.626588][ T4414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'.
[   47.637845][ T4409] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.707151][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.794489][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'.
[   47.804065][ T4430] FAULT_INJECTION: forcing a failure.
[   47.804065][ T4430] name failslab, interval 1, probability 0, space 0, times 0
[   47.816767][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.816800][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   47.816833][ T4430] Call Trace:
[   47.816841][ T4430]  <TASK>
[   47.816849][ T4430]  __dump_stack+0x1d/0x30
[   47.816882][ T4430]  dump_stack_lvl+0xe8/0x140
[   47.816912][ T4430]  dump_stack+0x15/0x1b
[   47.816930][ T4430]  should_fail_ex+0x265/0x280
[   47.816952][ T4430]  should_failslab+0x8c/0xb0
[   47.816977][ T4430]  kmem_cache_alloc_node_noprof+0x57/0x320
[   47.817072][ T4430]  ? __alloc_skb+0x101/0x320
[   47.817105][ T4430]  __alloc_skb+0x101/0x320
[   47.817137][ T4430]  netlink_dump+0x10d/0x8a0
[   47.817175][ T4430]  ? skb_free_head+0xb8/0x150
[   47.817209][ T4430]  netlink_recvmsg+0x420/0x550
[   47.817247][ T4430]  ? __pfx_netlink_recvmsg+0x10/0x10
[   47.817267][ T4430]  sock_recvmsg+0x139/0x170
[   47.817300][ T4430]  ____sys_recvmsg+0xf5/0x280
[   47.817345][ T4430]  ___sys_recvmsg+0x11f/0x370
[   47.817376][ T4430]  do_recvmmsg+0x1ef/0x540
[   47.817414][ T4430]  ? fput+0x8f/0xc0
[   47.817451][ T4430]  __x64_sys_recvmmsg+0xe5/0x170
[   47.817479][ T4430]  x64_sys_call+0x27a6/0x2ff0
[   47.817629][ T4430]  do_syscall_64+0xd2/0x200
[   47.817694][ T4430]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.817723][ T4430]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   47.817754][ T4430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.817779][ T4430] RIP: 0033:0x7f0252f7ebe9
[   47.817843][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.817860][ T4430] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   47.817878][ T4430] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   47.817928][ T4430] RDX: 0000000000000318 RSI: 0000200000007700 RDI: 0000000000000003
[   47.817952][ T4430] RBP: 00007f02519df090 R08: 0000000000000000 R09: 0000000000000000
[   47.817967][ T4430] R10: 0000000000000fc0 R11: 0000000000000246 R12: 0000000000000001
[   47.817980][ T4430] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   47.818002][ T4430]  </TASK>
[   48.046546][ T4432] FAULT_INJECTION: forcing a failure.
[   48.046546][ T4432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.059698][ T4432] CPU: 0 UID: 0 PID: 4432 Comm: syz.6.278 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.059725][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.059738][ T4432] Call Trace:
[   48.059744][ T4432]  <TASK>
[   48.059751][ T4432]  __dump_stack+0x1d/0x30
[   48.059772][ T4432]  dump_stack_lvl+0xe8/0x140
[   48.059869][ T4432]  dump_stack+0x15/0x1b
[   48.059884][ T4432]  should_fail_ex+0x265/0x280
[   48.059905][ T4432]  should_fail+0xb/0x20
[   48.059921][ T4432]  should_fail_usercopy+0x1a/0x20
[   48.059955][ T4432]  _copy_from_iter+0xcf/0xe40
[   48.060104][ T4432]  ? alloc_pages_mpol+0x201/0x250
[   48.060145][ T4432]  copy_page_from_iter+0x178/0x2a0
[   48.060174][ T4432]  tun_get_user+0x679/0x2680
[   48.060263][ T4432]  ? ref_tracker_alloc+0x1f2/0x2f0
[   48.060290][ T4432]  tun_chr_write_iter+0x15e/0x210
[   48.060329][ T4432]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   48.060390][ T4432]  vfs_write+0x52a/0x960
[   48.060415][ T4432]  ksys_write+0xda/0x1a0
[   48.060442][ T4432]  __x64_sys_write+0x40/0x50
[   48.060529][ T4432]  x64_sys_call+0x27fe/0x2ff0
[   48.060550][ T4432]  do_syscall_64+0xd2/0x200
[   48.060583][ T4432]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.060610][ T4432]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.060656][ T4432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.060682][ T4432] RIP: 0033:0x7f184399d69f
[   48.060701][ T4432] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   48.060761][ T4432] RSP: 002b:00007f1842407000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   48.060779][ T4432] RAX: ffffffffffffffda RBX: 00007f1843bc5fa0 RCX: 00007f184399d69f
[   48.060792][ T4432] RDX: 0000000000000066 RSI: 0000200000000300 RDI: 00000000000000c8
[   48.060804][ T4432] RBP: 00007f1842407090 R08: 0000000000000000 R09: 0000000000000000
[   48.060815][ T4432] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001
[   48.060827][ T4432] R13: 00007f1843bc6038 R14: 00007f1843bc5fa0 R15: 00007ffc7fd18e98
[   48.060909][ T4432]  </TASK>
[   48.071195][ T4434] loop2: detected capacity change from 0 to 164
[   48.223583][ T4440] loop0: detected capacity change from 0 to 512
[   48.237075][ T4434] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.245888][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.258923][ T4434] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   48.270630][ T4440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.323257][ T4440] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.350303][   T29] kauditd_printk_skb: 244 callbacks suppressed
[   48.350320][   T29] audit: type=1400 audit(1755854230.518:2193): avc:  denied  { create } for  pid=4448 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.391972][   T29] audit: type=1400 audit(1755854230.548:2194): avc:  denied  { write } for  pid=4448 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.411484][   T29] audit: type=1400 audit(1755854230.548:2195): avc:  denied  { connect } for  pid=4448 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.431049][   T29] audit: type=1400 audit(1755854230.548:2196): avc:  denied  { name_connect } for  pid=4448 comm="syz.3.287" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   48.453175][   T29] audit: type=1400 audit(1755854230.548:2197): avc:  denied  { shutdown } for  pid=4448 comm="syz.3.287" lport=48547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.474097][   T29] audit: type=1400 audit(1755854230.628:2198): avc:  denied  { write } for  pid=4450 comm="syz.3.288" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   48.474729][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.518448][ T4451] loop3: detected capacity change from 0 to 512
[   48.525283][ T4451] EXT4-fs: Ignoring removed bh option
[   48.533280][ T4447] netlink: 'syz.2.286': attribute type 10 has an invalid length.
[   48.541498][ T4451] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.541571][ T4451] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   48.542228][ T4451] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   48.542356][ T4451] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   48.543014][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.551558][ T4447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'.
[   48.613815][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.631987][ T4457] loop3: detected capacity change from 0 to 512
[   48.638859][ T4457] EXT4-fs: Ignoring removed bh option
[   48.644963][ T4457] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   48.654139][ T4457] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   48.674001][ T4457] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   48.684093][ T4457] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   48.695156][ T4457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.701454][   T29] audit: type=1400 audit(1755854230.868:2199): avc:  denied  { bind } for  pid=4462 comm="syz.2.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   48.731062][ T4463] FAULT_INJECTION: forcing a failure.
[   48.731062][ T4463] name failslab, interval 1, probability 0, space 0, times 0
[   48.743745][ T4463] CPU: 1 UID: 0 PID: 4463 Comm: syz.2.292 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.743807][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.743825][ T4463] Call Trace:
[   48.743833][ T4463]  <TASK>
[   48.743890][ T4463]  __dump_stack+0x1d/0x30
[   48.743917][ T4463]  dump_stack_lvl+0xe8/0x140
[   48.743942][ T4463]  dump_stack+0x15/0x1b
[   48.744027][ T4463]  should_fail_ex+0x265/0x280
[   48.744054][ T4463]  should_failslab+0x8c/0xb0
[   48.744161][ T4463]  kmem_cache_alloc_node_noprof+0x57/0x320
[   48.744242][ T4463]  ? __alloc_skb+0x101/0x320
[   48.744284][ T4463]  __alloc_skb+0x101/0x320
[   48.744325][ T4463]  fdb_notify+0x6e/0x120
[   48.744436][ T4463]  fdb_delete+0x686/0x820
[   48.744473][ T4463]  fdb_delete_local+0x230/0x2f0
[   48.744515][ T4463]  br_fdb_delete_by_port+0x169/0x220
[   48.744558][ T4463]  br_dev_delete+0x86/0xe0
[   48.744624][ T4463]  br_del_bridge+0x97/0xc0
[   48.744651][ T4463]  br_ioctl_stub+0x535/0x860
[   48.744685][ T4463]  ? ioctl_has_perm+0x257/0x2a0
[   48.744711][ T4463]  ? __pfx_br_ioctl_stub+0x10/0x10
[   48.744734][ T4463]  sock_ioctl+0x399/0x610
[   48.744775][ T4463]  ? __pfx_sock_ioctl+0x10/0x10
[   48.744805][ T4463]  __se_sys_ioctl+0xce/0x140
[   48.744848][ T4463]  __x64_sys_ioctl+0x43/0x50
[   48.744886][ T4463]  x64_sys_call+0x1816/0x2ff0
[   48.744944][ T4463]  do_syscall_64+0xd2/0x200
[   48.744972][ T4463]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.745035][ T4463]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.745143][ T4463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.745171][ T4463] RIP: 0033:0x7f0252f7ebe9
[   48.745189][ T4463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.745263][ T4463] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   48.745324][ T4463] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   48.745336][ T4463] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004
[   48.745348][ T4463] RBP: 00007f02519df090 R08: 0000000000000000 R09: 0000000000000000
[   48.745363][ T4463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.745378][ T4463] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   48.745471][ T4463]  </TASK>
[   48.975078][ T4457] FAULT_INJECTION: forcing a failure.
[   48.975078][ T4457] name failslab, interval 1, probability 0, space 0, times 0
[   48.987805][ T4457] CPU: 1 UID: 0 PID: 4457 Comm: syz.3.290 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   48.987929][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   48.987945][ T4457] Call Trace:
[   48.987953][ T4457]  <TASK>
[   48.987963][ T4457]  __dump_stack+0x1d/0x30
[   48.987989][ T4457]  dump_stack_lvl+0xe8/0x140
[   48.988066][ T4457]  dump_stack+0x15/0x1b
[   48.988082][ T4457]  should_fail_ex+0x265/0x280
[   48.988105][ T4457]  should_failslab+0x8c/0xb0
[   48.988142][ T4457]  kmem_cache_alloc_node_noprof+0x57/0x320
[   48.988248][ T4457]  ? __alloc_skb+0x101/0x320
[   48.988281][ T4457]  __alloc_skb+0x101/0x320
[   48.988337][ T4457]  netlink_alloc_large_skb+0xba/0xf0
[   48.988440][ T4457]  netlink_sendmsg+0x3cf/0x6b0
[   48.988468][ T4457]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.988493][ T4457]  __sock_sendmsg+0x145/0x180
[   48.988549][ T4457]  ____sys_sendmsg+0x31e/0x4e0
[   48.988575][ T4457]  ___sys_sendmsg+0x17b/0x1d0
[   48.988688][ T4457]  __x64_sys_sendmsg+0xd4/0x160
[   48.988712][ T4457]  x64_sys_call+0x191e/0x2ff0
[   48.988741][ T4457]  do_syscall_64+0xd2/0x200
[   48.988772][ T4457]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.988858][ T4457]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   48.988884][ T4457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.988905][ T4457] RIP: 0033:0x7f60440cebe9
[   48.988921][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.988996][ T4457] RSP: 002b:00007f6042b2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.989021][ T4457] RAX: ffffffffffffffda RBX: 00007f60442f5fa0 RCX: 00007f60440cebe9
[   48.989034][ T4457] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[   48.989046][ T4457] RBP: 00007f6042b2f090 R08: 0000000000000000 R09: 0000000000000000
[   48.989058][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.989069][ T4457] R13: 00007f60442f6038 R14: 00007f60442f5fa0 R15: 00007ffc0f4f4518
[   48.989088][ T4457]  </TASK>
[   49.200858][   T29] audit: type=1400 audit(1755854231.368:2200): avc:  denied  { map } for  pid=4466 comm="syz.0.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.224955][   T29] audit: type=1400 audit(1755854231.368:2201): avc:  denied  { read write } for  pid=4466 comm="syz.0.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   49.251690][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.271587][ T4472] loop3: detected capacity change from 0 to 164
[   49.278778][ T4472] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   49.292093][ T4472] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   49.375199][ T4479] loop3: detected capacity change from 0 to 512
[   49.385449][ T4483] Illegal XDP return value 4294967294 on prog  (id 221) dev N/A, expect packet loss!
[   49.399381][ T4479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.412211][ T4479] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   49.453644][ T4473] loop6: detected capacity change from 0 to 512
[   49.467103][ T4473] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.471321][   T29] audit: type=1326 audit(1755854231.618:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   49.501014][ T4473] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[   49.522675][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.542073][ T4489] netlink: 'syz.0.303': attribute type 10 has an invalid length.
[   49.550660][ T4489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'.
[   49.584309][ T4473] EXT4-fs (loop6): 1 truncate cleaned up
[   49.592721][ T4497] loop3: detected capacity change from 0 to 1024
[   49.613508][ T4497] EXT4-fs: Ignoring removed orlov option
[   49.626675][ T4497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.640994][ T4473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.674229][ T4473] netlink: 48 bytes leftover after parsing attributes in process `syz.6.295'.
[   49.872436][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.919634][ T4515] loop3: detected capacity change from 0 to 164
[   49.926792][ T4515] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   49.935440][ T4515] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.078886][ T4537] loop5: detected capacity change from 0 to 1024
[   50.085650][ T4537] EXT4-fs: Ignoring removed orlov option
[   50.093443][ T4537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.119843][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.213240][ T4544] loop6: detected capacity change from 0 to 1024
[   50.220034][ T4544] EXT4-fs: Ignoring removed orlov option
[   50.232126][ T4544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.365121][ T4549] loop3: detected capacity change from 0 to 164
[   50.372345][ T4549] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.381168][ T4549] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.391644][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.496326][ T4561] FAULT_INJECTION: forcing a failure.
[   50.496326][ T4561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.509569][ T4561] CPU: 0 UID: 0 PID: 4561 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   50.509601][ T4561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   50.509623][ T4561] Call Trace:
[   50.509629][ T4561]  <TASK>
[   50.509636][ T4561]  __dump_stack+0x1d/0x30
[   50.509658][ T4561]  dump_stack_lvl+0xe8/0x140
[   50.509687][ T4561]  dump_stack+0x15/0x1b
[   50.509703][ T4561]  should_fail_ex+0x265/0x280
[   50.509725][ T4561]  should_fail+0xb/0x20
[   50.509797][ T4561]  should_fail_usercopy+0x1a/0x20
[   50.509820][ T4561]  _copy_from_user+0x1c/0xb0
[   50.509849][ T4561]  copy_from_sockptr+0x5e/0xa0
[   50.509870][ T4561]  do_ipv6_setsockopt+0x142c/0x2160
[   50.510002][ T4561]  ? kstrtoull+0x111/0x140
[   50.510023][ T4561]  ? __rcu_read_unlock+0x4f/0x70
[   50.510044][ T4561]  ? avc_has_perm_noaudit+0x1b1/0x200
[   50.510071][ T4561]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   50.510127][ T4561]  ipv6_setsockopt+0x59/0x130
[   50.510148][ T4561]  tcp_setsockopt+0x95/0xb0
[   50.510168][ T4561]  sock_common_setsockopt+0x69/0x80
[   50.510270][ T4561]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   50.510301][ T4561]  __sys_setsockopt+0x184/0x200
[   50.510323][ T4561]  __x64_sys_setsockopt+0x64/0x80
[   50.510344][ T4561]  x64_sys_call+0x20ec/0x2ff0
[   50.510427][ T4561]  do_syscall_64+0xd2/0x200
[   50.510454][ T4561]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.510479][ T4561]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   50.510504][ T4561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.510544][ T4561] RIP: 0033:0x7f97594cebe9
[   50.510559][ T4561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.510577][ T4561] RSP: 002b:00007f9757f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   50.510646][ T4561] RAX: ffffffffffffffda RBX: 00007f97596f5fa0 RCX: 00007f97594cebe9
[   50.510658][ T4561] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003
[   50.510670][ T4561] RBP: 00007f9757f37090 R08: 0000000000000020 R09: 0000000000000000
[   50.510682][ T4561] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.510694][ T4561] R13: 00007f97596f6038 R14: 00007f97596f5fa0 R15: 00007ffe00faf078
[   50.510713][ T4561]  </TASK>
[   50.512630][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[   50.744139][ T3823] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.797203][ T4576] loop2: detected capacity change from 0 to 1024
[   50.809565][ T4576] EXT4-fs: Ignoring removed orlov option
[   50.837025][ T4576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.896522][ T4583] loop6: detected capacity change from 0 to 164
[   50.905337][ T4583] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   50.932925][ T4583] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   51.090719][ T4594] loop3: detected capacity change from 0 to 128
[   51.126439][   T36] usb 2-1: device descriptor read/8, error -110
[   51.226462][ T4597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   51.233038][ T4597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   51.236429][   T36] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd
[   51.240607][ T4597] vhci_hcd vhci_hcd.0: Device attached
[   51.262739][ T4599] vhci_hcd: connection closed
[   51.285214][   T31] vhci_hcd: stop threads
[   51.294285][   T31] vhci_hcd: release socket
[   51.298805][   T31] vhci_hcd: disconnect device
[   51.316441][   T36] usb 2-1: enqueue for inactive port 0
[   51.322014][   T36] usb 2-1: enqueue for inactive port 0
[   51.339001][   T36] usb 2-1: enqueue for inactive port 0
[   51.348752][ T4610] loop2: detected capacity change from 0 to 512
[   51.376208][ T4612] FAULT_INJECTION: forcing a failure.
[   51.376208][ T4612] name failslab, interval 1, probability 0, space 0, times 0
[   51.389039][ T4612] CPU: 0 UID: 0 PID: 4612 Comm: syz.5.345 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   51.389073][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   51.389089][ T4612] Call Trace:
[   51.389097][ T4612]  <TASK>
[   51.389106][ T4612]  __dump_stack+0x1d/0x30
[   51.389209][ T4612]  dump_stack_lvl+0xe8/0x140
[   51.389228][ T4612]  dump_stack+0x15/0x1b
[   51.389244][ T4612]  should_fail_ex+0x265/0x280
[   51.389269][ T4612]  should_failslab+0x8c/0xb0
[   51.389368][ T4612]  kmem_cache_alloc_noprof+0x50/0x310
[   51.389418][ T4612]  ? audit_log_start+0x365/0x6c0
[   51.389448][ T4612]  audit_log_start+0x365/0x6c0
[   51.389488][ T4612]  audit_seccomp+0x48/0x100
[   51.389550][ T4612]  ? __seccomp_filter+0x68c/0x10d0
[   51.389572][ T4612]  __seccomp_filter+0x69d/0x10d0
[   51.389646][ T4612]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   51.389680][ T4612]  ? vfs_write+0x7e8/0x960
[   51.389707][ T4612]  ? __rcu_read_unlock+0x4f/0x70
[   51.389735][ T4612]  __secure_computing+0x82/0x150
[   51.389803][ T4612]  syscall_trace_enter+0xcf/0x1e0
[   51.389834][ T4612]  do_syscall_64+0xac/0x200
[   51.389869][ T4612]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.389909][ T4612]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   51.390009][ T4612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.390031][ T4612] RIP: 0033:0x7f5d1e1debe9
[   51.390049][ T4612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.390071][ T4612] RSP: 002b:00007f5d1cc47038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d
[   51.390094][ T4612] RAX: ffffffffffffffda RBX: 00007f5d1e405fa0 RCX: 00007f5d1e1debe9
[   51.390132][ T4612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003f
[   51.390147][ T4612] RBP: 00007f5d1cc47090 R08: 0000200000000a80 R09: 0000000000000000
[   51.390162][ T4612] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[   51.390177][ T4612] R13: 00007f5d1e406038 R14: 00007f5d1e405fa0 R15: 00007ffcccface58
[   51.390198][ T4612]  </TASK>
[   51.392806][ T4610] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.652025][ T4622] loop2: detected capacity change from 0 to 164
[   51.660568][ T4622] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   51.670326][ T4622] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   51.715366][ T4620] netlink: 'syz.0.347': attribute type 10 has an invalid length.
[   51.723435][ T4620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'.
[   51.807002][ T4619] netlink: 'syz.5.348': attribute type 10 has an invalid length.
[   51.815441][ T4619] netlink: 40 bytes leftover after parsing attributes in process `syz.5.348'.
[   51.826389][ T4619] dummy0: entered promiscuous mode
[   51.841700][ T4619] bridge0: port 3(dummy0) entered blocking state
[   51.849110][ T4619] bridge0: port 3(dummy0) entered disabled state
[   51.874138][ T4619] dummy0: entered allmulticast mode
[   51.893136][ T4619] bridge0: port 3(dummy0) entered blocking state
[   51.900057][ T4619] bridge0: port 3(dummy0) entered forwarding state
[   51.970777][ T4644] loop2: detected capacity change from 0 to 512
[   51.995678][ T4644] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.067581][ T4654] loop6: detected capacity change from 0 to 164
[   52.109112][ T4654] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.168370][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.360'.
[   52.220939][ T4665] netlink: 'syz.6.362': attribute type 10 has an invalid length.
[   52.229455][ T4665] netlink: 40 bytes leftover after parsing attributes in process `syz.6.362'.
[   52.351573][ T4684] siw: device registration error -23
[   52.357804][   T36] usb usb2-port1: attempt power cycle
[   52.391893][ T4685] netlink: 'syz.6.369': attribute type 10 has an invalid length.
[   52.402209][ T4685] netlink: 40 bytes leftover after parsing attributes in process `syz.6.369'.
[   52.464291][ T4693] loop6: detected capacity change from 0 to 164
[   52.471557][ T4693] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.480953][ T4693] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.481091][ T4689] netlink: 'syz.2.383': attribute type 10 has an invalid length.
[   52.505067][ T4689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.383'.
[   52.587807][ T4707] loop5: detected capacity change from 0 to 512
[   52.645923][ T4707] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.660255][ T4718] loop0: detected capacity change from 0 to 164
[   52.666869][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.382'.
[   52.678753][ T4718] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.713793][ T4721] loop6: detected capacity change from 0 to 512
[   52.729340][ T4721] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.740644][ T4728] loop2: detected capacity change from 0 to 164
[   52.766161][ T4728] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.777557][ T4728] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.789738][ T4722] netlink: 'syz.0.386': attribute type 10 has an invalid length.
[   52.865617][ T4730] loop5: detected capacity change from 0 to 512
[   52.890023][ T4730] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.943897][ T4739] netlink: 'syz.0.393': attribute type 10 has an invalid length.
[   52.975028][ T4751] loop2: detected capacity change from 0 to 164
[   52.979062][ T4753] loop5: detected capacity change from 0 to 164
[   52.988407][ T4751] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   52.997501][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.000867][ T4751] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.011227][ T4753] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.064870][ T4761] loop5: detected capacity change from 0 to 164
[   53.103274][ T4766] loop0: detected capacity change from 0 to 164
[   53.111705][ T4761] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.121271][ T4761] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.130386][ T4766] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.143652][ T4759] netlink: 'syz.2.410': attribute type 10 has an invalid length.
[   53.209777][ T4773] loop3: detected capacity change from 0 to 164
[   53.224914][ T4773] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.254398][ T4777] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002
[   53.349633][ T4793] loop2: detected capacity change from 0 to 128
[   53.402394][   T29] kauditd_printk_skb: 258 callbacks suppressed
[   53.402411][   T29] audit: type=1326 audit(1755854235.568:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   53.436490][ T4801] loop3: detected capacity change from 0 to 512
[   53.443473][   T29] audit: type=1326 audit(1755854235.578:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   53.466933][   T29] audit: type=1326 audit(1755854235.578:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   53.490306][   T29] audit: type=1326 audit(1755854235.578:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4798 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252f7ebe9 code=0x7ffc0000
[   53.523884][ T4806] loop2: detected capacity change from 0 to 164
[   53.532002][ T4806] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   53.541036][ T4801] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.640105][ T4814] FAULT_INJECTION: forcing a failure.
[   53.640105][ T4814] name failslab, interval 1, probability 0, space 0, times 0
[   53.643065][   T29] audit: type=1326 audit(1755854235.808:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60440cebe9 code=0x7ffc0000
[   53.652962][ T4814] CPU: 1 UID: 0 PID: 4814 Comm: syz.3.423 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   53.653042][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   53.653059][ T4814] Call Trace:
[   53.653067][ T4814]  <TASK>
[   53.653139][ T4814]  __dump_stack+0x1d/0x30
[   53.653170][ T4814]  dump_stack_lvl+0xe8/0x140
[   53.653198][ T4814]  dump_stack+0x15/0x1b
[   53.653221][ T4814]  should_fail_ex+0x265/0x280
[   53.653250][ T4814]  should_failslab+0x8c/0xb0
[   53.653285][ T4814]  kmem_cache_alloc_noprof+0x50/0x310
[   53.653335][ T4814]  ? audit_log_start+0x365/0x6c0
[   53.653378][ T4814]  audit_log_start+0x365/0x6c0
[   53.653489][ T4814]  audit_seccomp+0x48/0x100
[   53.653525][ T4814]  ? __seccomp_filter+0x68c/0x10d0
[   53.653629][ T4814]  __seccomp_filter+0x69d/0x10d0
[   53.653726][ T4814]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.653764][ T4814]  ? vfs_write+0x7e8/0x960
[   53.653794][ T4814]  ? __rcu_read_unlock+0x4f/0x70
[   53.653823][ T4814]  ? __fget_files+0x184/0x1c0
[   53.653861][ T4814]  __secure_computing+0x82/0x150
[   53.653908][ T4814]  syscall_trace_enter+0xcf/0x1e0
[   53.653941][ T4814]  do_syscall_64+0xac/0x200
[   53.654010][ T4814]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.654042][ T4814]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   53.654078][ T4814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.654107][ T4814] RIP: 0033:0x7f60440cebe9
[   53.654128][ T4814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.654212][ T4814] RSP: 002b:00007f6042b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000138
[   53.654238][ T4814] RAX: ffffffffffffffda RBX: 00007f60442f5fa0 RCX: 00007f60440cebe9
[   53.654255][ T4814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   53.654270][ T4814] RBP: 00007f6042b2f090 R08: ffffffffffffffff R09: 0000000000000000
[   53.654287][ T4814] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   53.654329][ T4814] R13: 00007f60442f6038 R14: 00007f60442f5fa0 R15: 00007ffc0f4f4518
[   53.654355][ T4814]  </TASK>
[   53.654365][ T4814] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[   53.676377][   T29] audit: type=1326 audit(1755854235.808:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60440cd550 code=0x7ffc0000
[   53.685984][ T4814] audit: out of memory in audit_log_start
[   53.696070][   T29] audit: type=1326 audit(1755854235.808:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f60440cd69f code=0x7ffc0000
[   53.943203][   T29] audit: type=1326 audit(1755854235.868:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f60440cd5fc code=0x7ffc0000
[   54.070032][ T4828] Process accounting resumed
[   54.095045][ T4841] tipc: Started in network mode
[   54.100021][ T4841] tipc: Node identity 7, cluster identity 4711
[   54.106202][ T4841] tipc: Node number set to 7
[   54.176588][   T36] usb usb2-port1: unable to enumerate USB device
[   54.315482][ T4875] FAULT_INJECTION: forcing a failure.
[   54.315482][ T4875] name failslab, interval 1, probability 0, space 0, times 0
[   54.328302][ T4875] CPU: 0 UID: 0 PID: 4875 Comm: syz.6.447 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.328368][ T4875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   54.328380][ T4875] Call Trace:
[   54.328386][ T4875]  <TASK>
[   54.328393][ T4875]  __dump_stack+0x1d/0x30
[   54.328413][ T4875]  dump_stack_lvl+0xe8/0x140
[   54.328437][ T4875]  dump_stack+0x15/0x1b
[   54.328457][ T4875]  should_fail_ex+0x265/0x280
[   54.328478][ T4875]  should_failslab+0x8c/0xb0
[   54.328554][ T4875]  kmem_cache_alloc_node_noprof+0x57/0x320
[   54.328588][ T4875]  ? __alloc_skb+0x101/0x320
[   54.328661][ T4875]  __alloc_skb+0x101/0x320
[   54.328695][ T4875]  netlink_alloc_large_skb+0xba/0xf0
[   54.328734][ T4875]  netlink_sendmsg+0x3cf/0x6b0
[   54.328787][ T4875]  ? __pfx_netlink_sendmsg+0x10/0x10
[   54.328809][ T4875]  __sock_sendmsg+0x145/0x180
[   54.328898][ T4875]  ____sys_sendmsg+0x31e/0x4e0
[   54.328999][ T4875]  ___sys_sendmsg+0x17b/0x1d0
[   54.329097][ T4875]  __x64_sys_sendmsg+0xd4/0x160
[   54.329126][ T4875]  x64_sys_call+0x191e/0x2ff0
[   54.329146][ T4875]  do_syscall_64+0xd2/0x200
[   54.329265][ T4875]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   54.329292][ T4875]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.329388][ T4875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.329429][ T4875] RIP: 0033:0x7f184399ebe9
[   54.329461][ T4875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.329553][ T4875] RSP: 002b:00007f1842407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.329574][ T4875] RAX: ffffffffffffffda RBX: 00007f1843bc5fa0 RCX: 00007f184399ebe9
[   54.329590][ T4875] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003
[   54.329605][ T4875] RBP: 00007f1842407090 R08: 0000000000000000 R09: 0000000000000000
[   54.329620][ T4875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.329635][ T4875] R13: 00007f1843bc6038 R14: 00007f1843bc5fa0 R15: 00007ffc7fd18e98
[   54.329659][ T4875]  </TASK>
[   54.544197][ T4880] loop5: detected capacity change from 0 to 128
[   54.575847][ T4873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4873 comm=syz.0.445
[   54.625123][ T4873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4873 comm=syz.0.445
[   54.684856][ T4880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   54.700910][ T4880] syz.5.450: attempt to access beyond end of device
[   54.700910][ T4880] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[   54.714597][ T4880] syz.5.450: attempt to access beyond end of device
[   54.714597][ T4880] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128
[   54.728352][ T4880] syz.5.450: attempt to access beyond end of device
[   54.728352][ T4880] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128
[   54.742070][ T4880] syz.5.450: attempt to access beyond end of device
[   54.742070][ T4880] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128
[   54.772093][ T4880] syz.5.450: attempt to access beyond end of device
[   54.772093][ T4880] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128
[   54.785696][ T4880] syz.5.450: attempt to access beyond end of device
[   54.785696][ T4880] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128
[   54.799318][ T4880] syz.5.450: attempt to access beyond end of device
[   54.799318][ T4880] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128
[   54.819064][ T4880] syz.5.450: attempt to access beyond end of device
[   54.819064][ T4880] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128
[   54.833063][ T4880] syz.5.450: attempt to access beyond end of device
[   54.833063][ T4880] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128
[   54.847021][ T4880] syz.5.450: attempt to access beyond end of device
[   54.847021][ T4880] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128
[   54.900376][ T4918] loop5: detected capacity change from 0 to 164
[   54.909572][ T4918] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   54.948331][ T4924] loop5: detected capacity change from 0 to 1024
[   54.955161][ T4924] EXT4-fs: Ignoring removed orlov option
[   55.080495][ T4929] netlink: 'syz.2.465': attribute type 10 has an invalid length.
[   55.093909][ T4929] __nla_validate_parse: 8 callbacks suppressed
[   55.093928][ T4929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.465'.
[   55.159024][ T4941] FAULT_INJECTION: forcing a failure.
[   55.159024][ T4941] name failslab, interval 1, probability 0, space 0, times 0
[   55.171768][ T4941] CPU: 1 UID: 0 PID: 4941 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.171803][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   55.171859][ T4941] Call Trace:
[   55.171865][ T4941]  <TASK>
[   55.171874][ T4941]  __dump_stack+0x1d/0x30
[   55.171900][ T4941]  dump_stack_lvl+0xe8/0x140
[   55.171924][ T4941]  dump_stack+0x15/0x1b
[   55.171944][ T4941]  should_fail_ex+0x265/0x280
[   55.171991][ T4941]  should_failslab+0x8c/0xb0
[   55.172039][ T4941]  kmem_cache_alloc_node_noprof+0x57/0x320
[   55.172138][ T4941]  ? __alloc_skb+0x101/0x320
[   55.172177][ T4941]  __alloc_skb+0x101/0x320
[   55.172224][ T4941]  netlink_alloc_large_skb+0xba/0xf0
[   55.172281][ T4941]  netlink_sendmsg+0x3cf/0x6b0
[   55.172309][ T4941]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.172334][ T4941]  __sock_sendmsg+0x145/0x180
[   55.172369][ T4941]  ____sys_sendmsg+0x31e/0x4e0
[   55.172400][ T4941]  ___sys_sendmsg+0x17b/0x1d0
[   55.172486][ T4941]  __x64_sys_sendmsg+0xd4/0x160
[   55.172518][ T4941]  x64_sys_call+0x191e/0x2ff0
[   55.172546][ T4941]  do_syscall_64+0xd2/0x200
[   55.172573][ T4941]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.172596][ T4941]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   55.172688][ T4941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.172715][ T4941] RIP: 0033:0x7f0252f7ebe9
[   55.172734][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.172794][ T4941] RSP: 002b:00007f02519df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.172813][ T4941] RAX: ffffffffffffffda RBX: 00007f02531a5fa0 RCX: 00007f0252f7ebe9
[   55.172827][ T4941] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003
[   55.172842][ T4941] RBP: 00007f02519df090 R08: 0000000000000000 R09: 0000000000000000
[   55.172857][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.172871][ T4941] R13: 00007f02531a6038 R14: 00007f02531a5fa0 R15: 00007ffd831138f8
[   55.172932][ T4941]  </TASK>
[   55.439973][ T4952] loop2: detected capacity change from 0 to 512
[   55.459530][ T4947] syz.5.472 (4947) used greatest stack depth: 10008 bytes left
[   55.470573][ T4952] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   55.490879][ T4960] siw: device registration error -23
[   55.556010][ T4952] capability: warning: `syz.2.476' uses deprecated v2 capabilities in a way that may be insecure
[   55.581376][ T4971] loop3: detected capacity change from 0 to 1024
[   55.588332][ T4971] EXT4-fs: Ignoring removed orlov option
[   55.618875][ T4969] netlink: 'syz.5.482': attribute type 10 has an invalid length.
[   55.627172][ T4969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.482'.
[   55.757179][ T4981] loop5: detected capacity change from 0 to 164
[   55.765020][ T4981] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   55.778915][ T4971] ==================================================================
[   55.787015][ T4971] BUG: KCSAN: data-race in filemap_read / filemap_read
[   55.793893][ T4971] 
[   55.796238][ T4971] read to 0xffff88811a5e9528 of 8 bytes by task 4975 on cpu 0:
[   55.803802][ T4971]  filemap_read+0x6f/0xa00
[   55.808239][ T4971]  generic_file_read_iter+0x79/0x330
[   55.813543][ T4971]  ext4_file_read_iter+0x1cc/0x290
[   55.818680][ T4971]  copy_splice_read+0x442/0x660
[   55.823566][ T4971]  splice_direct_to_actor+0x290/0x680
[   55.828938][ T4971]  do_splice_direct+0xda/0x150
[   55.833711][ T4971]  do_sendfile+0x380/0x650
[   55.838170][ T4971]  __x64_sys_sendfile64+0x105/0x150
[   55.843382][ T4971]  x64_sys_call+0x2bb0/0x2ff0
[   55.848085][ T4971]  do_syscall_64+0xd2/0x200
[   55.852615][ T4971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.858517][ T4971] 
[   55.860843][ T4971] write to 0xffff88811a5e9528 of 8 bytes by task 4971 on cpu 1:
[   55.868486][ T4971]  filemap_read+0x974/0xa00
[   55.873001][ T4971]  generic_file_read_iter+0x79/0x330
[   55.878294][ T4971]  ext4_file_read_iter+0x1cc/0x290
[   55.883435][ T4971]  copy_splice_read+0x442/0x660
[   55.888305][ T4971]  splice_direct_to_actor+0x290/0x680
[   55.893701][ T4971]  do_splice_direct+0xda/0x150
[   55.898467][ T4971]  do_sendfile+0x380/0x650
[   55.902894][ T4971]  __x64_sys_sendfile64+0x105/0x150
[   55.908118][ T4971]  x64_sys_call+0x2bb0/0x2ff0
[   55.912810][ T4971]  do_syscall_64+0xd2/0x200
[   55.917353][ T4971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.923272][ T4971] 
[   55.925596][ T4971] value changed: 0x000000000000031b -> 0x000000000000031c
[   55.932706][ T4971] 
[   55.935038][ T4971] Reported by Kernel Concurrency Sanitizer on:
[   55.941197][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: syz.3.483 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   55.950839][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   55.960993][ T4971] ==================================================================