last executing test programs:

1.827206164s ago: executing program 2 (id=3872):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
epoll_create1(0x0)
unshare(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

1.706185725s ago: executing program 4 (id=3875):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x1000})
epoll_create1(0x0)
unshare(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0)

1.430405789s ago: executing program 4 (id=3881):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x182200)
ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000040))
socket(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r6 = syz_open_pts(r5, 0x141601)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r6, r5, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)

1.423559789s ago: executing program 2 (id=3882):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xdfffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = getpid()
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r4}}, 0x40)
bind$tipc(r3, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]})
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x103ff, 0x1})

1.34798514s ago: executing program 3 (id=3887):
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000030c0)={{0x1, 0x1, 0x71}, './file1\x00'})

1.288358531s ago: executing program 3 (id=3889):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_create1(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

1.287890151s ago: executing program 4 (id=3891):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0xa, 0x8, 0xff, 0x4}, {0x0, 0x1, 0x5, 0x3d}, {0x7eb3, 0x3, 0x0, 0x3}, {0x80, 0x8, 0x7, 0x2000007}, {0x0, 0x2, 0x9, 0x80000000}]})
syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00')
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc8", 0x2}], 0x1}}], 0x1, 0xc0)
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

1.220231802s ago: executing program 4 (id=3892):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x1000})
epoll_create1(0x0)
unshare(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0)

1.003334105s ago: executing program 3 (id=3894):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r3 = dup(r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3, 0xfffffffc, 0x1})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10)
r10 = io_uring_setup(0x4187, &(0x7f00000002c0)={0x0, 0x9d35, 0x82, 0x3})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000240)=[0x3, 0xffffffff], 0x2)
r11 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8, '\x00', r12, r3, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10)
close(r0)
r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r14, r14, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

906.500227ms ago: executing program 4 (id=3897):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x9, 0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x20}, 0x18)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
write$cgroup_devices(r2, &(0x7f0000010140)=ANY=[], 0xffdd)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r5}, 0x10)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10c24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}, 0x108002, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)=0x2)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@union={0x6, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x1, 0x3ff}, {0x7, 0x1, 0x3}, {0x10, 0x5, 0x7}, {0x9, 0x0, 0xfffffff8}]}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x61, 0x30]}}, &(0x7f0000000000), 0x65, 0x0, 0x0, 0x7, 0x10000, @value}, 0x28)
fchmod(r6, 0x180)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100000000000000e2000c00010094040000000000000c00010000010000000000000c0001000400000000000000080005", @ANYRES32, @ANYBLOB="080003"], 0x80}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

905.368206ms ago: executing program 1 (id=3898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)

822.088268ms ago: executing program 1 (id=3899):
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000030c0)={{0x1, 0x1, 0x71}, './file1\x00'})

763.321948ms ago: executing program 1 (id=3900):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve1\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x15, r1, 0x1, 0x7, 0x6, @remote}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7}, 0x18)
statfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

754.197019ms ago: executing program 0 (id=3902):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x4, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x7, 0x0, 0x6}, {}, {}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x8, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x100000}, {0x80}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5, 0x0, 0xe3e8}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000, 0x0, 0xfffffffa}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

751.762569ms ago: executing program 3 (id=3903):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r2=>r0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
chroot(&(0x7f0000000000)='./bus\x00')
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0xa, &(0x7f00000004c0)=@raw=[@call={0x85, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94)
r5 = gettid()
tkill(r5, 0x7)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="130527bd7000fedbdf250d00000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x407b7969c7597a6b}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00fddbdf25050000000800370c07e55ee5b108b43b806eaae3ee00040002bf"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r8 = shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
shmdt(r8)
r9 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_setup(0x1, &(0x7f0000000740))
syz_emit_ethernet(0x3e, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60008000000000000000000000000ffff0a010100fe8000000000000000000000000000aa3200000000000000434adf19"], 0x0)
shmdt(r8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="097f5c26c6ff4ced24edf0551878e2778356ce4dadd9e115576df877e9d7cd685e0d830a277f9f005d55a8494ae564728d1d99b50e26cab6cee2fb62033cf18d9acc8a70ff52271c425a57b86d4144ad3a6be68f3f097d79047a", 0x5a}, {&(0x7f0000000700)="945b0e00f3f8d98b342262850af45ee56fdc2fd50b1f4a16b57b8b07f679664d4e2a82cef35208d7e90b3ca38ec3318fecb557d50ee83e352b8755fe9649c604", 0x40}, {&(0x7f0000000580)="6be082d6b260c713e29cd869b161624aba0606487d5fb329868af10d7fd91f0f989f05f74b8134b07322fdc26e8fe7cc6f44627684aca0be7bd85f33f948df1ae218f460a524cb90db1f47ad10a4d83aeb96bf2a3da175003106f356727da183f328f30b3605072d8b5948c1993a0a81dab17f85b16c6d1185d0f31780e7c5b60fd76c2fb4a5d4707d7671e5daf8d21bbec82786d4dfbfd75bfce13fce3a350604b7e2e27a72152b4cafce30592c1944243e28898f74cb7e6364da13e3b3e5e33dccedd35d92e47d001b6fc7c238259a58c1e422d73867166a53455e6c0eba7beec7027cc940daabbe14c4e253fea47e1693727129e237841f58ebca03a2", 0xfe}], 0x3, &(0x7f0000000a80)=ANY=[@ANYRES16], 0xb0}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r2, @ANYRES8=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
rt_sigqueueinfo(0x0, 0x23, 0x0)

737.536709ms ago: executing program 1 (id=3904):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_create1(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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")

650.7728ms ago: executing program 0 (id=3905):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
epoll_create1(0x0)
unshare(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r4}, 0x10)
llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=""/101, 0x65)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==")

362.993124ms ago: executing program 1 (id=3906):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x842, 0x487, 0x9, 0xfc, 0x1, 0x2, 0x3, 0x3a, 0x9, 0x80000000, 0xfffffffe, 0x8, 0x8, 0xfa, 0x8, [0x1154, 0xb]}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18)
timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast1, 0x80000001}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025600000000c0a0103000000000000000007000008090002005f797a31000000000900010073797a30000000003400038030000080080017400000000224000b80200001800c000100636f756e74657200100002800c0001400000000000000004140000001000010000000000000000000084000a"], 0xe4}}, 0x0)

285.022665ms ago: executing program 3 (id=3907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="36fe0a477bcd21930749da8c65182de9abdfc481c9d48815fed376bdc390a8b67eef3b363c01edce0fd4a78589ec55a74e64592e68de549ef436ed909e2b96fb3b34ecf427d8043a37fb2518030b5d202a0ea7120e4f8e52", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x2, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
write$selinux_validatetrans(r2, &(0x7f00000004c0)={'system_u:object_r:utempter_exec_t:s0', 0x20, 'system_u:object_r:lirc_device_t:s0', 0x20, 0x3, 0x20, '/usr/sbin/cupsd\x00'}, 0x6d)
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
r7 = socket$inet(0x2, 0x3, 0x3)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x48844)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x801)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001ec0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000001900], 0xff00, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000065230000000000000000000000000000feffffff00000000"]}, 0x108)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0xfe1e, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, 0x0)
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
pidfd_getfd(r12, 0xffffffffffffffff, 0x0)

284.409825ms ago: executing program 2 (id=3908):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x1000})
epoll_create1(0x0)
unshare(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00'}, 0x10)
syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0)

235.288216ms ago: executing program 0 (id=3909):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18)
add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb)

228.110436ms ago: executing program 4 (id=3910):
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
epoll_create1(0x0)
unshare(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==")

176.904917ms ago: executing program 0 (id=3911):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)

160.949037ms ago: executing program 2 (id=3912):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)

105.440708ms ago: executing program 0 (id=3913):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f0000000040)="02102d7b8899fe203edb782d419ef9f58e7038f4c6d1b7a1ebf999ce60c3dd594eab768b6241af995d75", 0x2a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r5=>0x0})
getegid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

105.045858ms ago: executing program 2 (id=3914):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000019580)='kfree\x00', r6}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000001aa00)={{r5}, &(0x7f000001a980), &(0x7f000001a9c0)=r4}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, <r10=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}]}]}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
semop(0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r2, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x44}}, 0x44004)
pwritev(r1, &(0x7f0000000080), 0x0, 0x5, 0x7)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x80000001, @mcast1, 0xd}, 0x1c)

104.561048ms ago: executing program 1 (id=3915):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = io_uring_setup(0x5ae4, 0x0)
r1 = epoll_create1(0x0)
unshare(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10)
llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=""/101, 0x65)
dup3(r1, r0, 0x0)
epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

47.544249ms ago: executing program 3 (id=3916):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)
write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x8c, 0x9, 0x5c5, 0x7, 0x7, 0x5, "d995531410861e16ce833688f53ffeb787a4d22113f0e7a97c3bd357e7b675ad6fad5e85c073071632df2189f5ee8a2ebff40adbb85ffa469a7edbb2d84aef93491eea5ac9d360d26d7f0e5523ac457af1cc3b4c27f8d959672d0e3f739d12d583c07360f043974045b158ed2f869c2a54d9c985984a3a8915a5faaf8538a061111ceab2a46d7ad21ae1d0a8"}}, 0x1a4)

46.431738ms ago: executing program 2 (id=3917):
creat(&(0x7f00000001c0)='./file2\x00', 0x24)
execve(0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
semget$private(0x0, 0x1, 0x12a)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000100)='./file2\x00', 0x20005d, &(0x7f0000000580)={[{@abort}, {@errors_continue}, {@oldalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@dioread_nolock}, {@errors_remount}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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")
creat(&(0x7f00000001c0)='./file2\x00', 0x24) (async)
execve(0x0, 0x0, 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
semget$private(0x0, 0x1, 0x12a) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) (async)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000100)='./file2\x00', 0x20005d, &(0x7f0000000580)={[{@abort}, {@errors_continue}, {@oldalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@dioread_nolock}, {@errors_remount}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$eJzs3MtvVNUfAPDvvX3w4/XriPjgoVTRSDS2tKCycAFGExeamOgCl7UtBCnU0JoIIVpc4NKQuDcuTfwLXOnGqCsTt7o3JMSwAV1dc2fu7WM6MxmGgWmZzye59Jz7yDnfnntmzj2H2wD61mj+TxKxIyL+iIiRWnbtCaO1H7dvXp7+5+bl6SSy7N2/k+p5t25eni5PLa/bXmaWavl9DcpduHjp7NTc3OyFIj++eO6j8YWLl148c27q9Ozp2fOTx44dPTLxysuTLzWvfNJ+nHmdbu39dH7/njffv/b29MlrH/zyXVLGXxdHl4w22DdQJp7tcmG9tnNVOhksEgM9qgxty5sob66hav8fiYEYXD42Em983tPKAfdUlmXZlmYHk1jKgAdYEr2uAdAb5Vd9/vxbbvdt8LEB3DhRewDK475dbLUjg5EW5wzVPd92U/60dXLp36/zLe7NPAQAwBo/nKj9XD/+S+PRVecdL9aGKhHxUETsioiHI2J3RDwSUT33sYh4fOWSrJ3lmfpFkvXjn/R6h6G1JR//vVqsba0d/5Wjv6gMFLmd1fiHklNn5mYPR8T/I+JQDG3J8xMtyvjx9d+/bHZsNCIrx3/5lpdfjgWLeqT118xMLU51HvFaN65E7B1sFH+yvBKQt+OeiNh7oLMyzjz/7f5mx0ZXjX8bx9/CYGf1WS37JuK5WvsvRV38paT1+uT4/2Ju9vB4eVes9+tvV99pVv5dxd8Feftva3j/L8dfSVav1y5U9627J1u5+ucXDZ9phtqKP70+WDdBnd//w8l71fRwse+TqcXFCxMRw8lbxf7jK/snV64t8+X5efyHDjbu/7ti5TexLyLym/iJiHgyIg4UdX8qIp6OiIMt4v/5tWc+bHZsI7T/zB21/50nBs7+9P2aQist4k+iQfsfraYOFXva+fxrXp2VOY88rE5/bwAAALCZpBGxI5J0bDmdpmNjtf8vvzu2pXPzC4svnJr/+PxM7R2BSgyl5UzXyKr50IlixqDMTxaP+WX+SDFv/NXA1mp+bHp+bqbXwUOf296k/+f+8v4GPPi6sI4GbFKd9v8syz7rclWA+8z3P/Qv/R/6V4P+v7Uu3/RvBACbW6Pvfw/20B+M/6F/6f/Qv/R/6F/6P/Slu3mvv0hcafGyfXuJ/PPnrqtxHxNZ1qPSh3sf+3Ii0g1RjXuViMpGqEald6X3+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4LAAD//wYf47Q=") (async)

0s ago: executing program 0 (id=3918):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
munmap(&(0x7f0000000000/0x3000)=nil, 0x3000)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1)

kernel console output (not intermixed with test programs):

 p2 p3
[  128.222477][T10456] syz0: rxe_newlink: already configured on bond0
[  128.274997][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.283445][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.324417][T10456] ALSA: seq fatal error: cannot create timer (-19)
[  128.403067][T10456] lo speed is unknown, defaulting to 1000
[  128.427196][T10461] loop2: detected capacity change from 0 to 2048
[  128.481568][T10461] Alternate GPT is invalid, using primary GPT.
[  128.488986][T10461]  loop2: p1 p2 p3
[  128.802453][T10481] loop4: detected capacity change from 0 to 2048
[  128.841115][T10483] loop2: detected capacity change from 0 to 2048
[  128.861943][T10481] Alternate GPT is invalid, using primary GPT.
[  128.870541][T10481]  loop4: p1 p2 p3
[  128.884057][T10494] rdma_rxe: rxe_newlink: failed to add bond0
[  128.897298][T10494] loop3: detected capacity change from 0 to 1024
[  128.905506][T10483] Alternate GPT is invalid, using primary GPT.
[  128.913016][T10483]  loop2: p1 p2 p3
[  128.931245][T10494] EXT4-fs: Ignoring removed nobh option
[  128.937020][T10494] EXT4-fs: Ignoring removed bh option
[  128.976449][T10494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.998396][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.007768][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.049203][T10509] __nla_validate_parse: 19 callbacks suppressed
[  129.049221][T10509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2856'.
[  129.066227][T10494] ALSA: seq fatal error: cannot create timer (-19)
[  129.148203][T10494] lo speed is unknown, defaulting to 1000
[  129.203086][T10522] loop2: detected capacity change from 0 to 1024
[  129.210652][T10522] EXT4-fs: Ignoring removed nobh option
[  129.213738][T10512] rdma_rxe: rxe_newlink: failed to add bond0
[  129.216519][T10522] EXT4-fs: Ignoring removed bh option
[  129.253236][T10522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.292482][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.301413][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.332964][T10512] ALSA: seq fatal error: cannot create timer (-19)
[  129.381174][T10512] lo speed is unknown, defaulting to 1000
[  129.805519][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.856026][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2869'.
[  130.039916][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.111531][T10573] rdma_rxe: rxe_newlink: failed to add bond0
[  130.123138][T10573] loop2: detected capacity change from 0 to 1024
[  130.129889][T10573] EXT4-fs: Ignoring removed nobh option
[  130.135653][T10573] EXT4-fs: Ignoring removed bh option
[  130.176179][T10573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.226262][T10569] lo speed is unknown, defaulting to 1000
[  130.232229][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.245623][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.312926][T10573] ALSA: seq fatal error: cannot create timer (-19)
[  130.380395][T10569] chnl_net:caif_netlink_parms(): no params data found
[  130.416237][T10573] lo speed is unknown, defaulting to 1000
[  130.444021][T10569] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.451241][T10569] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.460934][T10569] bridge_slave_0: entered allmulticast mode
[  130.467628][T10569] bridge_slave_0: entered promiscuous mode
[  130.474618][T10569] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.481928][T10569] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.512429][T10569] bridge_slave_1: entered allmulticast mode
[  130.519844][T10569] bridge_slave_1: entered promiscuous mode
[  130.627428][T10569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.629098][T10569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.660812][T10601] rdma_rxe: rxe_newlink: failed to add bond0
[  130.673259][T10601] loop0: detected capacity change from 0 to 1024
[  130.676312][T10569] team0: Port device team_slave_0 added
[  130.680257][T10601] EXT4-fs: Ignoring removed nobh option
[  130.690830][T10601] EXT4-fs: Ignoring removed bh option
[  130.696585][T10569] team0: Port device team_slave_1 added
[  130.717411][T10601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.731760][T10569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.733275][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.738765][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.747286][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.773037][T10569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.817586][T10569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.824672][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.850689][T10569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.888225][T10569] hsr_slave_0: entered promiscuous mode
[  130.889441][T10601] ALSA: seq fatal error: cannot create timer (-19)
[  130.894349][T10569] hsr_slave_1: entered promiscuous mode
[  130.917494][T10569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.926399][T10569] Cannot create hsr debugfs directory
[  131.028152][T10601] lo speed is unknown, defaulting to 1000
[  131.061343][T10569] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.091852][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  131.091868][   T29] audit: type=1326 audit(1743155837.768:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.130481][T10569] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.140904][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.143717][   T29] audit: type=1326 audit(1743155837.798:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.173648][   T29] audit: type=1326 audit(1743155837.798:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.197297][   T29] audit: type=1326 audit(1743155837.798:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.221000][   T29] audit: type=1326 audit(1743155837.798:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.244531][   T29] audit: type=1326 audit(1743155837.798:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.267914][   T29] audit: type=1326 audit(1743155837.798:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.2887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.291903][   T29] audit: type=1326 audit(1743155837.908:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.315527][   T29] audit: type=1326 audit(1743155837.908:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.315554][   T29] audit: type=1326 audit(1743155837.908:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.1.2889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36cd1d169 code=0x7ffc0000
[  131.396674][T10569] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.449580][ T3377] IPVS: starting estimator thread 0...
[  131.467873][T10569] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.512048][T10631] netlink: 'syz.3.2894': attribute type 1 has an invalid length.
[  131.544692][T10631] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.554831][T10623] IPVS: using max 2544 ests per chain, 127200 per kthread
[  131.582529][T10569] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.599431][T10569] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.610005][T10569] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.621165][T10569] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.678794][T10569] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.700109][T10569] 8021q: adding VLAN 0 to HW filter on device team0
[  131.712005][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.719121][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.729076][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.736172][ T8590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.787272][T10569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.846110][T10569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.886718][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.940614][T10640] loop2: detected capacity change from 0 to 2048
[  131.990245][T10640] Alternate GPT is invalid, using primary GPT.
[  131.998316][T10640]  loop2: p1 p2 p3
[  132.001903][T10569] veth0_vlan: entered promiscuous mode
[  132.027437][T10569] veth1_vlan: entered promiscuous mode
[  132.055185][T10668] loop0: detected capacity change from 0 to 512
[  132.071763][T10668] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  132.074354][T10569] veth0_macvtap: entered promiscuous mode
[  132.092980][T10668] EXT4-fs (loop0): mount failed
[  132.099249][T10569] veth1_macvtap: entered promiscuous mode
[  132.137489][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.148245][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.158177][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.168799][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.178677][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.189275][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.199426][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.209982][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.219891][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.230436][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.244238][T10569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.269559][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.280061][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.290152][T10569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.294202][T10680] loop2: detected capacity change from 0 to 512
[  132.300582][T10569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.322428][T10569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.336736][T10569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.345641][T10569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.346867][T10680] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  132.354374][T10569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.371685][T10680] EXT4-fs (loop2): mount failed
[  132.377767][T10569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.544322][T10707] loop3: detected capacity change from 0 to 512
[  132.566666][T10707] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  132.584159][T10707] EXT4-fs (loop3): mount failed
[  132.786093][T10736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2932'.
[  132.834515][T10727] loop2: detected capacity change from 0 to 2048
[  132.858734][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'.
[  132.872400][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'.
[  132.881642][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2934'.
[  132.898606][T10727] Alternate GPT is invalid, using primary GPT.
[  132.907097][T10727]  loop2: p1 p2 p3
[  133.122622][T10764] loop2: detected capacity change from 0 to 512
[  133.134123][T10761] netlink: 'syz.1.2942': attribute type 1 has an invalid length.
[  133.138156][T10764] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  133.149196][T10761] 8021q: adding VLAN 0 to HW filter on device bond8
[  133.156664][T10764] EXT4-fs (loop2): mount failed
[  133.203793][T10773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2945'.
[  133.442665][T10796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2956'.
[  133.510230][   T36] IPVS: starting estimator thread 0...
[  133.541093][T10809] loop3: detected capacity change from 0 to 512
[  133.557684][T10809] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  133.581413][T10809] EXT4-fs (loop3): mount failed
[  133.637064][T10807] IPVS: using max 2016 ests per chain, 100800 per kthread
[  133.721984][T10828] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2969'.
[  133.853330][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  134.109799][T10842] loop2: detected capacity change from 0 to 2048
[  134.144591][T10852] __nla_validate_parse: 2 callbacks suppressed
[  134.144607][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2980'.
[  134.176671][T10842] Alternate GPT is invalid, using primary GPT.
[  134.183952][T10842]  loop2: p1 p2 p3
[  134.281925][T10866] loop0: detected capacity change from 0 to 512
[  134.337797][T10866] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  134.356746][ T3309] bridge0: port 3(syz_tun) entered disabled state
[  134.364371][T10866] EXT4-fs (loop0): mount failed
[  134.370744][ T3309] syz_tun (unregistering): left allmulticast mode
[  134.377337][ T3309] syz_tun (unregistering): left promiscuous mode
[  134.383731][ T3309] bridge0: port 3(syz_tun) entered disabled state
[  134.496932][T10894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2996'.
[  134.518973][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'.
[  134.528031][T10896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2997'.
[  134.567749][T10872] lo speed is unknown, defaulting to 1000
[  134.637403][T10906] loop0: detected capacity change from 0 to 512
[  134.664226][T10906] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  134.720804][T10905] loop3: detected capacity change from 0 to 2048
[  134.728610][T10906] EXT4-fs (loop0): mount failed
[  134.769429][T10905] Alternate GPT is invalid, using primary GPT.
[  134.777157][T10905]  loop3: p1 p2 p3
[  134.817190][T10872] chnl_net:caif_netlink_parms(): no params data found
[  134.912330][T10872] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.919542][T10872] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.956607][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3013'.
[  134.958738][T10930] loop0: detected capacity change from 0 to 2048
[  134.972983][T10872] bridge_slave_0: entered allmulticast mode
[  134.973498][T10872] bridge_slave_0: entered promiscuous mode
[  134.989061][T10872] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.996206][T10872] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.007845][T10872] bridge_slave_1: entered allmulticast mode
[  135.014449][T10872] bridge_slave_1: entered promiscuous mode
[  135.034510][T10930] Alternate GPT is invalid, using primary GPT.
[  135.043021][T10930]  loop0: p1 p2 p3
[  135.063579][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.086104][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.113149][T10872] team0: Port device team_slave_0 added
[  135.114153][T10872] team0: Port device team_slave_1 added
[  135.152377][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.159478][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.185449][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.203886][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.210897][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.236857][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.290093][T10872] hsr_slave_0: entered promiscuous mode
[  135.297373][T10872] hsr_slave_1: entered promiscuous mode
[  135.304051][T10872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.313714][T10872] Cannot create hsr debugfs directory
[  135.407292][T10872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.466248][T10872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.496438][T10872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.557512][T10872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.633175][T10872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  135.641493][T10977] loop0: detected capacity change from 0 to 2048
[  135.643077][T10872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  135.657485][T10872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  135.666596][T10872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  135.685544][T10872] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.692732][T10872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.700085][T10872] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.707220][T10872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.718417][T10977] Alternate GPT is invalid, using primary GPT.
[  135.732767][T10977]  loop0: p1 p2 p3
[  135.761707][ T2059] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.777892][ T2059] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.801136][T10872] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.848299][T10872] 8021q: adding VLAN 0 to HW filter on device team0
[  135.872679][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.879819][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.906466][T10872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.916997][T10872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.930633][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.937816][ T8590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.998631][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.123108][T10872] veth0_vlan: entered promiscuous mode
[  136.140627][T10872] veth1_vlan: entered promiscuous mode
[  136.177126][T10872] veth0_macvtap: entered promiscuous mode
[  136.223497][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'.
[  136.233029][T10872] veth1_macvtap: entered promiscuous mode
[  136.254048][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.264770][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.274672][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.285129][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.295065][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.305600][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.315461][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.325955][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.335860][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.346387][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.356299][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.366753][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.377709][T10872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.390751][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.401329][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.411300][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.421773][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.431627][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.442164][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.468408][T10872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.480339][T10872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.489287][T10872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.498214][T10872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.506995][T10872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.707599][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'.
[  136.872739][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'.
[  136.881880][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'.
[  137.071106][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3073'.
[  137.449599][T11124] loop3: detected capacity change from 0 to 2048
[  137.501994][T11124] Alternate GPT is invalid, using primary GPT.
[  137.511843][T11124]  loop3: p1 p2 p3
[  137.531004][T11130] lo speed is unknown, defaulting to 1000
[  137.675917][T11130] chnl_net:caif_netlink_parms(): no params data found
[  137.738528][T11130] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.745780][T11130] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.753446][T11130] bridge_slave_0: entered allmulticast mode
[  137.760429][T11130] bridge_slave_0: entered promiscuous mode
[  137.769112][T11130] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.776233][T11130] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.783900][T11130] bridge_slave_1: entered allmulticast mode
[  137.790755][T11130] bridge_slave_1: entered promiscuous mode
[  137.813121][T11177] netlink: 'syz.2.3108': attribute type 1 has an invalid length.
[  137.818009][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.845575][T11177] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.858802][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.882183][T11130] team0: Port device team_slave_0 added
[  137.888893][T11130] team0: Port device team_slave_1 added
[  137.908883][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.915927][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.941954][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.953746][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.960891][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.986909][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.031378][T11130] hsr_slave_0: entered promiscuous mode
[  138.048421][T11130] hsr_slave_1: entered promiscuous mode
[  138.054568][T11130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.062945][T11130] Cannot create hsr debugfs directory
[  138.163618][T11130] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.226990][T11130] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.286543][T11130] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.377595][T11130] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.491102][T11130] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  138.501015][T11130] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.512281][T11130] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.521159][T11130] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.547925][T11220] rdma_rxe: rxe_newlink: failed to add bond0
[  138.559252][T11220] loop2: detected capacity change from 0 to 1024
[  138.564758][T11130] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.566360][T11220] EXT4-fs: Ignoring removed nobh option
[  138.578006][T11220] EXT4-fs: Ignoring removed bh option
[  138.588618][T11130] 8021q: adding VLAN 0 to HW filter on device team0
[  138.596852][T11220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.613549][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.617402][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.620649][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.629750][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.641166][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.651037][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.679723][T11220] ALSA: seq fatal error: cannot create timer (-19)
[  138.738076][T11220] lo speed is unknown, defaulting to 1000
[  138.747978][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.856587][T11130] veth0_vlan: entered promiscuous mode
[  138.864232][T11242] rdma_rxe: rxe_newlink: failed to add bond0
[  138.880698][T11242] loop3: detected capacity change from 0 to 1024
[  138.888361][T11130] veth1_vlan: entered promiscuous mode
[  138.903501][T11242] EXT4-fs: Ignoring removed nobh option
[  138.909184][T11242] EXT4-fs: Ignoring removed bh option
[  138.915815][T11130] veth0_macvtap: entered promiscuous mode
[  138.923504][T11130] veth1_macvtap: entered promiscuous mode
[  138.934046][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.944636][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.949167][T11242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.954558][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  138.976886][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.977403][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  138.987980][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.995582][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.013770][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.023667][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.034188][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.044226][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.053489][T11242] ALSA: seq fatal error: cannot create timer (-19)
[  139.054802][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.071335][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.082046][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.091931][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.102436][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.113453][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.126858][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.137385][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.147238][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.157696][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.167603][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.178171][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.188005][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.198442][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.209402][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.221322][T11130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.230203][T11130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.239001][T11130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.247841][T11130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.258328][T11242] lo speed is unknown, defaulting to 1000
[  139.439269][   T29] kauditd_printk_skb: 89 callbacks suppressed
[  139.439284][   T29] audit: type=1326 audit(1743155846.118:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.470153][   T29] audit: type=1326 audit(1743155846.118:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.493753][   T29] audit: type=1326 audit(1743155846.118:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.517345][   T29] audit: type=1326 audit(1743155846.118:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.540840][   T29] audit: type=1326 audit(1743155846.118:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.564292][   T29] audit: type=1326 audit(1743155846.118:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.587855][   T29] audit: type=1326 audit(1743155846.118:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.600187][T11268] __nla_validate_parse: 7 callbacks suppressed
[  139.600205][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'.
[  139.612022][   T29] audit: type=1326 audit(1743155846.118:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.650252][   T29] audit: type=1326 audit(1743155846.128:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11263 comm="syz.0.3138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  139.674460][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.688212][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3139'.
[  139.884694][T11287] rdma_rxe: rxe_newlink: failed to add bond0
[  139.896182][T11287] loop2: detected capacity change from 0 to 1024
[  139.902910][T11287] EXT4-fs: Ignoring removed nobh option
[  139.908644][T11287] EXT4-fs: Ignoring removed bh option
[  139.926674][T11287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.942488][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.951948][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.960411][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.987613][T11287] ALSA: seq fatal error: cannot create timer (-19)
[  140.049562][T11287] lo speed is unknown, defaulting to 1000
[  140.079420][T11293] loop4: detected capacity change from 0 to 2048
[  140.139572][T11293] Alternate GPT is invalid, using primary GPT.
[  140.146889][T11293]  loop4: p1 p2 p3
[  140.289837][T11300] loop4: detected capacity change from 0 to 2048
[  140.339424][T11300] Alternate GPT is invalid, using primary GPT.
[  140.347705][T11300]  loop4: p1 p2 p3
[  140.355735][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'.
[  140.361658][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'.
[  140.429687][ T1041] IPVS: starting estimator thread 0...
[  140.492795][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'.
[  140.504447][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3158'.
[  140.524954][T11305] IPVS: using max 2496 ests per chain, 124800 per kthread
[  140.548581][T11319] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.572671][   T29] audit: type=1326 audit(1743155847.248:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11321 comm="syz.1.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa391efd169 code=0x7ffc0000
[  140.614954][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'.
[  140.623909][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'.
[  140.674335][ T1041] IPVS: starting estimator thread 0...
[  140.708788][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.727206][T11324] loop4: detected capacity change from 0 to 2048
[  140.778049][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3171'.
[  140.779288][T11331] IPVS: using max 2736 ests per chain, 136800 per kthread
[  140.805821][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3171'.
[  140.828767][T11324] Alternate GPT is invalid, using primary GPT.
[  140.836727][T11324]  loop4: p1 p2 p3
[  141.022923][T11342] loop3: detected capacity change from 0 to 2048
[  141.031692][T11363] 9pnet_fd: Insufficient options for proto=fd
[  141.090199][T11342] Alternate GPT is invalid, using primary GPT.
[  141.100392][T11342]  loop3: p1 p2 p3
[  141.301765][T11386] rdma_rxe: rxe_newlink: failed to add bond0
[  141.313848][T11386] loop2: detected capacity change from 0 to 1024
[  141.320972][T11386] EXT4-fs: Ignoring removed nobh option
[  141.326615][T11386] EXT4-fs: Ignoring removed bh option
[  141.332111][T11392] loop3: detected capacity change from 0 to 2048
[  141.342726][T11386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.359625][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.368247][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.386730][T11392] Alternate GPT is invalid, using primary GPT.
[  141.393057][T11392]  loop3: p1 p2 p3
[  141.444894][T11386] ALSA: seq fatal error: cannot create timer (-19)
[  141.548268][T11386] lo speed is unknown, defaulting to 1000
[  141.724791][T11416] loop3: detected capacity change from 0 to 2048
[  141.772628][T11416] Alternate GPT is invalid, using primary GPT.
[  141.780140][T11416]  loop3: p1 p2 p3
[  142.180947][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.316463][T11454] loop2: detected capacity change from 0 to 2048
[  142.368170][T11454] Alternate GPT is invalid, using primary GPT.
[  142.375232][T11454]  loop2: p1 p2 p3
[  142.488992][T11466] netlink: 'syz.0.3225': attribute type 1 has an invalid length.
[  142.505109][T11466] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.529485][T11471] syzkaller1: entered promiscuous mode
[  142.535079][T11471] syzkaller1: entered allmulticast mode
[  142.596497][T11464] loop2: detected capacity change from 0 to 2048
[  142.661313][T11464] Alternate GPT is invalid, using primary GPT.
[  142.668060][T11480] rdma_rxe: rxe_newlink: failed to add bond0
[  142.674492][T11480] loop3: detected capacity change from 0 to 1024
[  142.674987][T11480] EXT4-fs: Ignoring removed nobh option
[  142.686664][T11480] EXT4-fs: Ignoring removed bh option
[  142.692268][T11464]  loop2: p1 p2 p3
[  142.698934][T11480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.720186][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.729483][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.748178][T11480] ALSA: seq fatal error: cannot create timer (-19)
[  142.771231][T11487] loop2: detected capacity change from 0 to 512
[  142.778589][T11487] EXT4-fs: Ignoring removed nomblk_io_submit option
[  142.789230][T11487] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  142.797407][T11480] lo speed is unknown, defaulting to 1000
[  142.797922][T11487] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  142.813260][T11487] EXT4-fs (loop2): 1 truncate cleaned up
[  142.819573][T11487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.837594][T11487] EXT4-fs error (device loop2): ext4_map_blocks:672: inode #2: block 4: comm syz.2.3233: lblock 0 mapped to illegal pblock 4 (length 1)
[  142.852362][T11487] EXT4-fs (loop2): Remounting filesystem read-only
[  142.873362][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.001506][T11500] netlink: 'syz.4.3239': attribute type 1 has an invalid length.
[  143.021790][T11500] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.042534][T11491] loop2: detected capacity change from 0 to 2048
[  143.089927][T11491] Alternate GPT is invalid, using primary GPT.
[  143.098548][T11491]  loop2: p1 p2 p3
[  143.243169][T11512] ALSA: seq fatal error: cannot create timer (-22)
[  143.393837][T11529] netlink: 'syz.2.3251': attribute type 1 has an invalid length.
[  143.407041][T11529] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.492431][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.552474][T11544] FAULT_INJECTION: forcing a failure.
[  143.552474][T11544] name failslab, interval 1, probability 0, space 0, times 0
[  143.565249][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.3.3258 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  143.565280][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.565293][T11544] Call Trace:
[  143.565299][T11544]  <TASK>
[  143.565327][T11544]  dump_stack_lvl+0xf6/0x150
[  143.565354][T11544]  dump_stack+0x15/0x1a
[  143.565370][T11544]  should_fail_ex+0x261/0x270
[  143.565438][T11544]  should_failslab+0x8f/0xb0
[  143.565461][T11544]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  143.565493][T11544]  ? __alloc_skb+0x10d/0x320
[  143.565603][T11544]  __alloc_skb+0x10d/0x320
[  143.565628][T11544]  netlink_alloc_large_skb+0xad/0xe0
[  143.565661][T11544]  netlink_sendmsg+0x3da/0x720
[  143.565737][T11544]  ? __pfx_netlink_sendmsg+0x10/0x10
[  143.565764][T11544]  __sock_sendmsg+0x140/0x180
[  143.565802][T11544]  ____sys_sendmsg+0x350/0x4e0
[  143.565836][T11544]  __sys_sendmsg+0x1a0/0x240
[  143.565942][T11544]  __x64_sys_sendmsg+0x46/0x50
[  143.565972][T11544]  x64_sys_call+0x26f3/0x2e10
[  143.566045][T11544]  do_syscall_64+0xc9/0x1c0
[  143.566081][T11544]  ? clear_bhb_loop+0x25/0x80
[  143.566107][T11544]  ? clear_bhb_loop+0x25/0x80
[  143.566134][T11544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.566159][T11544] RIP: 0033:0x7f45298dd169
[  143.566177][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.566277][T11544] RSP: 002b:00007f4527f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.566299][T11544] RAX: ffffffffffffffda RBX: 00007f4529af5fa0 RCX: 00007f45298dd169
[  143.566310][T11544] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004
[  143.566321][T11544] RBP: 00007f4527f47090 R08: 0000000000000000 R09: 0000000000000000
[  143.566335][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.566345][T11544] R13: 0000000000000000 R14: 00007f4529af5fa0 R15: 00007fff57e0c7a8
[  143.566362][T11544]  </TASK>
[  143.772530][T11536] loop0: detected capacity change from 0 to 2048
[  143.809914][T11536] Alternate GPT is invalid, using primary GPT.
[  143.819329][T11536]  loop0: p1 p2 p3
[  143.925749][T11559] netlink: 'syz.0.3265': attribute type 21 has an invalid length.
[  144.002653][T11568] FAULT_INJECTION: forcing a failure.
[  144.002653][T11568] name failslab, interval 1, probability 0, space 0, times 0
[  144.015365][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.3.3269 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  144.015457][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.015468][T11568] Call Trace:
[  144.015475][T11568]  <TASK>
[  144.015481][T11568]  dump_stack_lvl+0xf6/0x150
[  144.015508][T11568]  dump_stack+0x15/0x1a
[  144.015522][T11568]  should_fail_ex+0x261/0x270
[  144.015632][T11568]  should_failslab+0x8f/0xb0
[  144.015709][T11568]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  144.015741][T11568]  ? __alloc_skb+0x10d/0x320
[  144.015765][T11568]  __alloc_skb+0x10d/0x320
[  144.015789][T11568]  netlink_alloc_large_skb+0xad/0xe0
[  144.015896][T11568]  netlink_sendmsg+0x3da/0x720
[  144.015925][T11568]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.015982][T11568]  __sock_sendmsg+0x140/0x180
[  144.016016][T11568]  ____sys_sendmsg+0x350/0x4e0
[  144.016049][T11568]  __sys_sendmsg+0x1a0/0x240
[  144.016092][T11568]  __x64_sys_sendmsg+0x46/0x50
[  144.016120][T11568]  x64_sys_call+0x26f3/0x2e10
[  144.016204][T11568]  do_syscall_64+0xc9/0x1c0
[  144.016226][T11568]  ? clear_bhb_loop+0x25/0x80
[  144.016249][T11568]  ? clear_bhb_loop+0x25/0x80
[  144.016274][T11568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.016342][T11568] RIP: 0033:0x7f45298dd169
[  144.016355][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.016372][T11568] RSP: 002b:00007f4527f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.016389][T11568] RAX: ffffffffffffffda RBX: 00007f4529af5fa0 RCX: 00007f45298dd169
[  144.016401][T11568] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003
[  144.016414][T11568] RBP: 00007f4527f47090 R08: 0000000000000000 R09: 0000000000000000
[  144.016460][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.016474][T11568] R13: 0000000000000000 R14: 00007f4529af5fa0 R15: 00007fff57e0c7a8
[  144.016539][T11568]  </TASK>
[  144.303703][T11573] netlink: 'syz.3.3271': attribute type 6 has an invalid length.
[  144.550402][T11587] loop4: detected capacity change from 0 to 2048
[  144.593508][T11587] Alternate GPT is invalid, using primary GPT.
[  144.601889][T11587]  loop4: p1 p2 p3
[  144.768561][T11595] loop3: detected capacity change from 0 to 2048
[  144.793077][   T29] kauditd_printk_skb: 41 callbacks suppressed
[  144.793112][   T29] audit: type=1326 audit(1743155851.468:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11563 comm="syz.0.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  144.822876][   T29] audit: type=1326 audit(1743155851.468:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11563 comm="syz.0.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  144.873630][T11595] Alternate GPT is invalid, using primary GPT.
[  144.882391][T11595]  loop3: p1 p2 p3
[  144.971186][   T29] audit: type=1326 audit(1743155851.648:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11604 comm="syz.0.3286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x0
[  145.068363][T11617] __nla_validate_parse: 14 callbacks suppressed
[  145.068383][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'.
[  145.071844][T11614] loop2: detected capacity change from 0 to 128
[  145.074698][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3291'.
[  145.088888][T11614] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.114097][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[  145.126314][T11614] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.169533][T11614] bridge0: port 3(syz_tun) entered blocking state
[  145.176251][T11614] bridge0: port 3(syz_tun) entered disabled state
[  145.183058][T11614] syz_tun: entered allmulticast mode
[  145.189110][T11614] syz_tun: entered promiscuous mode
[  145.194534][T11614] bridge0: port 3(syz_tun) entered blocking state
[  145.201027][T11614] bridge0: port 3(syz_tun) entered forwarding state
[  145.218241][   T29] audit: type=1326 audit(1743155851.898:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.241904][   T29] audit: type=1326 audit(1743155851.898:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.265674][   T29] audit: type=1326 audit(1743155851.898:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.289290][   T29] audit: type=1326 audit(1743155851.898:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.312953][   T29] audit: type=1326 audit(1743155851.898:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.336591][   T29] audit: type=1326 audit(1743155851.898:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.360144][   T29] audit: type=1326 audit(1743155851.898:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.0.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  145.507990][T11631] lo speed is unknown, defaulting to 1000
[  145.525699][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'.
[  145.579837][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'.
[  145.588895][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3306'.
[  145.657939][T11631] chnl_net:caif_netlink_parms(): no params data found
[  145.719592][T11631] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.726751][T11631] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.734022][T11631] bridge_slave_0: entered allmulticast mode
[  145.740750][T11631] bridge_slave_0: entered promiscuous mode
[  145.747736][T11631] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.754854][T11631] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.762105][T11631] bridge_slave_1: entered allmulticast mode
[  145.768792][T11631] bridge_slave_1: entered promiscuous mode
[  145.798349][T11631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.809200][T11631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.820226][T11673] FAULT_INJECTION: forcing a failure.
[  145.820226][T11673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.833429][T11673] CPU: 0 UID: 0 PID: 11673 Comm: syz.2.3309 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  145.833487][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  145.833498][T11673] Call Trace:
[  145.833504][T11673]  <TASK>
[  145.833511][T11673]  dump_stack_lvl+0xf6/0x150
[  145.833542][T11673]  dump_stack+0x15/0x1a
[  145.833611][T11673]  should_fail_ex+0x261/0x270
[  145.833642][T11673]  should_fail+0xb/0x10
[  145.833663][T11673]  should_fail_usercopy+0x1a/0x20
[  145.833687][T11673]  _copy_from_user+0x1c/0xa0
[  145.833798][T11673]  kstrtouint_from_user+0x84/0x100
[  145.833907][T11673]  ? 0xffffffff81000000
[  145.833923][T11673]  ? selinux_file_permission+0x22d/0x360
[  145.834018][T11673]  proc_fail_nth_write+0x54/0x160
[  145.834073][T11673]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  145.834095][T11673]  vfs_write+0x295/0x950
[  145.834140][T11673]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.834162][T11673]  ? __fget_files+0x186/0x1c0
[  145.834186][T11673]  ksys_write+0xeb/0x1b0
[  145.834219][T11673]  __x64_sys_write+0x42/0x50
[  145.834260][T11673]  x64_sys_call+0x2a45/0x2e10
[  145.834282][T11673]  do_syscall_64+0xc9/0x1c0
[  145.834305][T11673]  ? clear_bhb_loop+0x25/0x80
[  145.834330][T11673]  ? clear_bhb_loop+0x25/0x80
[  145.834459][T11673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.834485][T11673] RIP: 0033:0x7f13e86abc1f
[  145.834502][T11673] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  145.834538][T11673] RSP: 002b:00007f13e6d0f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  145.834569][T11673] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f13e86abc1f
[  145.834584][T11673] RDX: 0000000000000001 RSI: 00007f13e6d0f0a0 RDI: 0000000000000006
[  145.834599][T11673] RBP: 00007f13e6d0f090 R08: 0000000000000000 R09: 0000000000000000
[  145.834688][T11673] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  145.834700][T11673] R13: 0000000000000000 R14: 00007f13e88c5fa0 R15: 00007ffd320a33d8
[  145.834722][T11673]  </TASK>
[  146.047056][T11631] team0: Port device team_slave_0 added
[  146.057540][T11631] team0: Port device team_slave_1 added
[  146.079056][T11631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.086143][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.112158][T11631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.123715][T11631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.130830][T11631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.156775][T11631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.179350][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.209011][T11631] hsr_slave_0: entered promiscuous mode
[  146.216125][T11631] hsr_slave_1: entered promiscuous mode
[  146.222334][T11631] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.230610][T11631] Cannot create hsr debugfs directory
[  146.296263][T11680] netlink: 'syz.2.3313': attribute type 2 has an invalid length.
[  146.309829][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  146.324700][T11631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.358704][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'.
[  146.367695][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3317'.
[  146.382084][T11631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.427878][T11631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.492557][T11631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.602111][T11631] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  146.613388][T11703] netlink: 'syz.0.3323': attribute type 6 has an invalid length.
[  146.624345][T11631] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  146.638975][T11631] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  146.648785][T11631] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  146.716659][T11631] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.736401][T11631] 8021q: adding VLAN 0 to HW filter on device team0
[  146.751717][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.758888][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.770411][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.777512][ T8590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.789033][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3327'.
[  146.901070][T11631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.016606][T11631] veth0_vlan: entered promiscuous mode
[  147.027972][T11631] veth1_vlan: entered promiscuous mode
[  147.058188][T11631] veth0_macvtap: entered promiscuous mode
[  147.077431][T11631] veth1_macvtap: entered promiscuous mode
[  147.088653][T11724] loop4: detected capacity change from 0 to 2048
[  147.102435][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.112974][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.122823][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.133293][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.143149][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.153667][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.163498][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.173941][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.183784][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.194272][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.204117][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.214616][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.224444][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.234898][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.245796][T11631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.254460][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.265078][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.274961][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.285465][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.295308][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.305852][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.315704][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.326205][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.336043][T11631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.346547][T11631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.357547][T11631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.373020][T11631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.381858][T11631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.390645][T11631] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.397583][T11724] Alternate GPT is invalid, using primary GPT.
[  147.399478][T11631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.417463][T11724]  loop4: p1 p2 p3
[  147.756548][T11780] loop4: detected capacity change from 0 to 4096
[  147.768174][T11780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.840372][T11787] program syz.4.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.891117][T11786] loop2: detected capacity change from 0 to 2048
[  147.911566][T11789] macvtap1: entered promiscuous mode
[  147.948512][T11786] Alternate GPT is invalid, using primary GPT.
[  147.956752][T11786]  loop2: p1 p2 p3
[  148.089049][T11791] loop0: detected capacity change from 0 to 2048
[  148.122673][T11793] loop2: detected capacity change from 0 to 4096
[  148.132373][T11793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.147884][T11791] Alternate GPT is invalid, using primary GPT.
[  148.160088][T11791]  loop0: p1 p2 p3
[  148.357090][T11797] loop0: detected capacity change from 0 to 2048
[  148.400558][T11797] Alternate GPT is invalid, using primary GPT.
[  148.408083][T11797]  loop0: p1 p2 p3
[  148.417028][   T36] IPVS: starting estimator thread 0...
[  148.457685][T11802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11802 comm=syz.0.3360
[  148.517058][T11800] IPVS: using max 2496 ests per chain, 124800 per kthread
[  148.575850][T10569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.681368][T11823] FAULT_INJECTION: forcing a failure.
[  148.681368][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.694609][T11823] CPU: 1 UID: 0 PID: 11823 Comm: syz.1.3370 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  148.694635][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  148.694651][T11823] Call Trace:
[  148.694657][T11823]  <TASK>
[  148.694664][T11823]  dump_stack_lvl+0xf6/0x150
[  148.694761][T11823]  dump_stack+0x15/0x1a
[  148.694780][T11823]  should_fail_ex+0x261/0x270
[  148.694806][T11823]  should_fail+0xb/0x10
[  148.694827][T11823]  should_fail_usercopy+0x1a/0x20
[  148.694853][T11823]  _copy_from_iter+0xd8/0xd10
[  148.694933][T11823]  ? kmalloc_reserve+0x16e/0x190
[  148.694953][T11823]  ? __build_skb_around+0x199/0x1f0
[  148.694973][T11823]  ? __alloc_skb+0x227/0x320
[  148.694991][T11823]  ? __virt_addr_valid+0x1ed/0x250
[  148.695016][T11823]  ? __check_object_size+0x367/0x510
[  148.695046][T11823]  netlink_sendmsg+0x492/0x720
[  148.695121][T11823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  148.695217][T11823]  __sock_sendmsg+0x140/0x180
[  148.695253][T11823]  ____sys_sendmsg+0x350/0x4e0
[  148.695281][T11823]  __sys_sendmsg+0x1a0/0x240
[  148.695394][T11823]  __x64_sys_sendmsg+0x46/0x50
[  148.695418][T11823]  x64_sys_call+0x26f3/0x2e10
[  148.695438][T11823]  do_syscall_64+0xc9/0x1c0
[  148.695503][T11823]  ? clear_bhb_loop+0x25/0x80
[  148.695524][T11823]  ? clear_bhb_loop+0x25/0x80
[  148.695544][T11823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.695565][T11823] RIP: 0033:0x7fa391efd169
[  148.695579][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.695620][T11823] RSP: 002b:00007fa39055f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.695638][T11823] RAX: ffffffffffffffda RBX: 00007fa392115fa0 RCX: 00007fa391efd169
[  148.695650][T11823] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  148.695662][T11823] RBP: 00007fa39055f090 R08: 0000000000000000 R09: 0000000000000000
[  148.695674][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.695685][T11823] R13: 0000000000000000 R14: 00007fa392115fa0 R15: 00007ffe208128f8
[  148.695704][T11823]  </TASK>
[  148.967894][T11828] rdma_rxe: rxe_newlink: failed to add bond0
[  148.979326][T11828] loop4: detected capacity change from 0 to 1024
[  148.986230][T11828] EXT4-fs: Ignoring removed nobh option
[  148.991906][T11828] EXT4-fs: Ignoring removed bh option
[  149.008848][T11828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.022690][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.035616][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.045750][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.228670][T11856] netlink: 'syz.3.3383': attribute type 11 has an invalid length.
[  149.248548][T11860] loop9: detected capacity change from 0 to 7
[  149.255127][T11860] Buffer I/O error on dev loop9, logical block 0, async page read
[  149.263438][T11860] Buffer I/O error on dev loop9, logical block 0, async page read
[  149.271401][T11860]  loop9: unable to read partition table
[  149.277576][T11860] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[  149.277576][T11860] 
U�������) failed (rc=-5)
[  149.304005][T11828] ALSA: seq fatal error: cannot create timer (-19)
[  149.390447][T11828] lo speed is unknown, defaulting to 1000
[  149.452596][T11865] loop3: detected capacity change from 0 to 2048
[  149.549988][T11865] Alternate GPT is invalid, using primary GPT.
[  149.557622][T11865]  loop3: p1 p2 p3
[  149.795303][   T29] kauditd_printk_skb: 176 callbacks suppressed
[  149.795320][   T29] audit: type=1326 audit(1743155856.478:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.825183][   T29] audit: type=1326 audit(1743155856.478:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.848739][   T29] audit: type=1326 audit(1743155856.478:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.894641][   T29] audit: type=1326 audit(1743155856.568:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.901896][T11895] SELinux:  Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped).
[  149.918382][   T29] audit: type=1326 audit(1743155856.568:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.952404][   T29] audit: type=1326 audit(1743155856.568:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  149.982011][   T29] audit: type=1400 audit(1743155856.608:2975): avc:  denied  { relabelto } for  pid=11894 comm="syz.2.3397" name="cgroup" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:hald_sonypic_exec_t:s0"
[  150.009895][   T29] audit: type=1400 audit(1743155856.608:2976): avc:  denied  { associate } for  pid=11894 comm="syz.2.3397" name="cgroup" dev="tmpfs" ino=659 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_sonypic_exec_t:s0"
[  150.038017][   T29] audit: type=1326 audit(1743155856.608:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  150.061428][   T29] audit: type=1326 audit(1743155856.608:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.0.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  150.206971][T10569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.212531][T11907] FAULT_INJECTION: forcing a failure.
[  150.212531][T11907] name failslab, interval 1, probability 0, space 0, times 0
[  150.228877][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.0.3402 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  150.228911][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  150.228932][T11907] Call Trace:
[  150.228941][T11907]  <TASK>
[  150.228951][T11907]  dump_stack_lvl+0xf6/0x150
[  150.229013][T11907]  dump_stack+0x15/0x1a
[  150.229027][T11907]  should_fail_ex+0x261/0x270
[  150.229055][T11907]  should_failslab+0x8f/0xb0
[  150.229159][T11907]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  150.229219][T11907]  ? __alloc_skb+0x10d/0x320
[  150.229239][T11907]  __alloc_skb+0x10d/0x320
[  150.229303][T11907]  netlink_alloc_large_skb+0xad/0xe0
[  150.229338][T11907]  netlink_sendmsg+0x3da/0x720
[  150.229368][T11907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.229395][T11907]  __sock_sendmsg+0x140/0x180
[  150.229474][T11907]  ____sys_sendmsg+0x350/0x4e0
[  150.229507][T11907]  __sys_sendmsg+0x1a0/0x240
[  150.229585][T11907]  __x64_sys_sendmsg+0x46/0x50
[  150.229614][T11907]  x64_sys_call+0x26f3/0x2e10
[  150.229639][T11907]  do_syscall_64+0xc9/0x1c0
[  150.229717][T11907]  ? clear_bhb_loop+0x25/0x80
[  150.229743][T11907]  ? clear_bhb_loop+0x25/0x80
[  150.229769][T11907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.229794][T11907] RIP: 0033:0x7f47cdb7d169
[  150.229864][T11907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.229951][T11907] RSP: 002b:00007f47cc1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.229973][T11907] RAX: ffffffffffffffda RBX: 00007f47cdd95fa0 RCX: 00007f47cdb7d169
[  150.229988][T11907] RDX: 0000000004040084 RSI: 0000200000000000 RDI: 0000000000000003
[  150.230019][T11907] RBP: 00007f47cc1df090 R08: 0000000000000000 R09: 0000000000000000
[  150.230033][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.230062][T11907] R13: 0000000000000000 R14: 00007f47cdd95fa0 R15: 00007ffc18b533d8
[  150.230083][T11907]  </TASK>
[  150.538429][T11924] __nla_validate_parse: 9 callbacks suppressed
[  150.538447][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'.
[  150.553689][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'.
[  150.595753][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3411'.
[  150.614938][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3411'.
[  150.633830][T11916] loop2: detected capacity change from 0 to 2048
[  150.658444][T11916] Alternate GPT is invalid, using primary GPT.
[  150.666315][T11916]  loop2: p1 p2 p3
[  150.828748][T11946] FAULT_INJECTION: forcing a failure.
[  150.828748][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.841884][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.1.3418 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  150.841909][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  150.841922][T11946] Call Trace:
[  150.841929][T11946]  <TASK>
[  150.841936][T11946]  dump_stack_lvl+0xf6/0x150
[  150.841993][T11946]  dump_stack+0x15/0x1a
[  150.842010][T11946]  should_fail_ex+0x261/0x270
[  150.842036][T11946]  should_fail+0xb/0x10
[  150.842058][T11946]  should_fail_usercopy+0x1a/0x20
[  150.842161][T11946]  strncpy_from_user+0x25/0x230
[  150.842179][T11946]  ? getname_flags+0x81/0x3b0
[  150.842203][T11946]  getname_flags+0xb0/0x3b0
[  150.842230][T11946]  user_path_at+0x26/0x140
[  150.842288][T11946]  do_faccessat+0x3aa/0x6e0
[  150.842313][T11946]  ? ksys_write+0x180/0x1b0
[  150.842412][T11946]  __x64_sys_faccessat2+0x51/0x60
[  150.842436][T11946]  x64_sys_call+0x2af9/0x2e10
[  150.842458][T11946]  do_syscall_64+0xc9/0x1c0
[  150.842491][T11946]  ? clear_bhb_loop+0x25/0x80
[  150.842558][T11946]  ? clear_bhb_loop+0x25/0x80
[  150.842581][T11946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.842603][T11946] RIP: 0033:0x7fa391efd169
[  150.842622][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.842648][T11946] RSP: 002b:00007fa39055f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[  150.842665][T11946] RAX: ffffffffffffffda RBX: 00007fa392115fa0 RCX: 00007fa391efd169
[  150.842678][T11946] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffffff
[  150.842691][T11946] RBP: 00007fa39055f090 R08: 0000000000000000 R09: 0000000000000000
[  150.842704][T11946] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000001
[  150.842717][T11946] R13: 0000000000000000 R14: 00007fa392115fa0 R15: 00007ffe208128f8
[  150.842733][T11946]  </TASK>
[  151.264176][T11961] netlink: 24 bytes leftover after parsing attributes in process `+}[@'.
[  151.383660][T11976] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  151.529937][T11980] lo speed is unknown, defaulting to 1000
[  151.600334][T11986] rdma_rxe: rxe_newlink: failed to add bond0
[  151.612641][T11986] loop3: detected capacity change from 0 to 1024
[  151.613075][T11986] EXT4-fs: Ignoring removed nobh option
[  151.613118][T11986] EXT4-fs: Ignoring removed bh option
[  151.641430][T11997] rdma_rxe: rxe_newlink: failed to add bond0
[  151.649726][T11986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.656568][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.673270][T11997] loop4: detected capacity change from 0 to 1024
[  151.673785][T11997] EXT4-fs: Ignoring removed nobh option
[  151.673814][T11997] EXT4-fs: Ignoring removed bh option
[  151.676623][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.721115][T11997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.747726][T12007] xt_recent: Unsupported userspace flags (000000da)
[  151.755917][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3440'.
[  151.776808][T11986] ALSA: seq fatal error: cannot create timer (-19)
[  151.800529][T11992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.829022][T11992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.881647][T11986] lo speed is unknown, defaulting to 1000
[  151.921737][T11992] ALSA: seq fatal error: cannot create timer (-19)
[  152.045352][T11992] lo speed is unknown, defaulting to 1000
[  152.278700][T12025] rdma_rxe: rxe_newlink: failed to add bond0
[  152.288946][T12025] loop2: detected capacity change from 0 to 1024
[  152.296115][T12025] EXT4-fs: Ignoring removed nobh option
[  152.301793][T12025] EXT4-fs: Ignoring removed bh option
[  152.326303][T12025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.341723][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.350356][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.380092][T12025] ALSA: seq fatal error: cannot create timer (-19)
[  152.419960][T12025] lo speed is unknown, defaulting to 1000
[  152.678809][T11631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.710251][T10569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.829039][T12035] loop4: detected capacity change from 0 to 2048
[  152.878192][T12035] Alternate GPT is invalid, using primary GPT.
[  152.886002][T12035]  loop4: p1 p2 p3
[  153.040973][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.124321][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'.
[  153.133408][T12062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3463'.
[  153.172091][T12046] loop4: detected capacity change from 0 to 2048
[  153.221462][T12046] Alternate GPT is invalid, using primary GPT.
[  153.228595][T12046]  loop4: p1 p2 p3
[  153.265892][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3467'.
[  153.318213][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3467'.
[  153.834096][T12109] loop2: detected capacity change from 0 to 2048
[  153.847635][T12115] FAULT_INJECTION: forcing a failure.
[  153.847635][T12115] name failslab, interval 1, probability 0, space 0, times 0
[  153.860472][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.1.3485 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  153.860525][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  153.860585][T12115] Call Trace:
[  153.860593][T12115]  <TASK>
[  153.860603][T12115]  dump_stack_lvl+0xf6/0x150
[  153.860634][T12115]  dump_stack+0x15/0x1a
[  153.860653][T12115]  should_fail_ex+0x261/0x270
[  153.860684][T12115]  should_failslab+0x8f/0xb0
[  153.860767][T12115]  kmem_cache_alloc_noprof+0x59/0x340
[  153.860794][T12115]  ? audit_log_start+0x37f/0x6e0
[  153.860819][T12115]  audit_log_start+0x37f/0x6e0
[  153.860845][T12115]  ? kstrtouint+0x7b/0xc0
[  153.860873][T12115]  audit_seccomp+0x4b/0x130
[  153.860930][T12115]  __seccomp_filter+0x694/0x10e0
[  153.860959][T12115]  ? vfs_write+0x669/0x950
[  153.861003][T12115]  __secure_computing+0x7e/0x160
[  153.861088][T12115]  syscall_trace_enter+0xcf/0x1f0
[  153.861117][T12115]  do_syscall_64+0xaa/0x1c0
[  153.861141][T12115]  ? clear_bhb_loop+0x25/0x80
[  153.861185][T12115]  ? clear_bhb_loop+0x25/0x80
[  153.861205][T12115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.861230][T12115] RIP: 0033:0x7fa391efd169
[  153.861247][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.861269][T12115] RSP: 002b:00007fa39055f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000111
[  153.861288][T12115] RAX: ffffffffffffffda RBX: 00007fa392115fa0 RCX: 00007fa391efd169
[  153.861303][T12115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  153.861318][T12115] RBP: 00007fa39055f090 R08: 0000000000000000 R09: 0000000000000000
[  153.861329][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.861340][T12115] R13: 0000000000000000 R14: 00007fa392115fa0 R15: 00007ffe208128f8
[  153.861361][T12115]  </TASK>
[  154.060913][T12061] netlink: zone id is out of range
[  154.066128][T12061] netlink: zone id is out of range
[  154.072019][T12061] netlink: zone id is out of range
[  154.078246][T12061] netlink: zone id is out of range
[  154.083478][T12061] netlink: zone id is out of range
[  154.089985][T12109] Alternate GPT is invalid, using primary GPT.
[  154.092059][T12061] netlink: set zone limit has 8 unknown bytes
[  154.100553][T12109]  loop2: p1 p2 p3
[  154.291697][T12138] loop0: detected capacity change from 0 to 1024
[  154.317265][T12138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.356741][T11130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.525658][T12150] loop4: detected capacity change from 0 to 2048
[  154.568592][T12150] Alternate GPT is invalid, using primary GPT.
[  154.577212][T12150]  loop4: p1 p2 p3
[  154.704567][T12174] loop4: detected capacity change from 0 to 764
[  154.870204][T12183] loop3: detected capacity change from 0 to 1024
[  154.877351][T12183] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  154.888430][T12183] EXT4-fs (loop3): group descriptors corrupted!
[  154.961220][   T29] kauditd_printk_skb: 295 callbacks suppressed
[  154.961251][   T29] audit: type=1326 audit(1743155861.608:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5018d169 code=0x7ffc0000
[  154.991121][   T29] audit: type=1326 audit(1743155861.608:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5018d169 code=0x7ffc0000
[  155.130250][   T29] audit: type=1400 audit(1743155861.808:3274): avc:  denied  { read } for  pid=12182 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  155.179183][   T29] audit: type=1326 audit(1743155861.858:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.1.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa391efd169 code=0x7ffc0000
[  155.212447][   T29] audit: type=1326 audit(1743155861.858:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.1.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa391efd169 code=0x7ffc0000
[  155.282628][T12190] loop4: detected capacity change from 0 to 2048
[  155.335827][T12190] Alternate GPT is invalid, using primary GPT.
[  155.344278][T12190]  loop4: p1 p2 p3
[  155.469769][T12211] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  155.658403][T12215] loop0: detected capacity change from 0 to 2048
[  155.727016][T12215] Alternate GPT is invalid, using primary GPT.
[  155.734022][T12215]  loop0: p1 p2 p3
[  155.742497][   T29] audit: type=1326 audit(1743155862.418:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.3.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  155.742534][   T29] audit: type=1326 audit(1743155862.418:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.3.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  155.742843][   T29] audit: type=1326 audit(1743155862.418:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.3.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  155.742876][   T29] audit: type=1326 audit(1743155862.418:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.3.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  155.742908][   T29] audit: type=1326 audit(1743155862.418:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.3.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  155.986921][T12231] lo speed is unknown, defaulting to 1000
[  156.017697][T12236] __nla_validate_parse: 12 callbacks suppressed
[  156.017715][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'.
[  156.033857][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3533'.
[  156.155533][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'.
[  156.164470][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3539'.
[  156.233609][T12246] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3540'.
[  156.481979][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3546'.
[  156.498516][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3546'.
[  156.613456][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'.
[  156.620182][T12271] lo speed is unknown, defaulting to 1000
[  156.622549][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'.
[  156.681030][T12277] loop2: detected capacity change from 0 to 1024
[  156.713290][T12277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.735199][T12277] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.851495][T12289] loop3: detected capacity change from 0 to 2048
[  156.859264][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3561'.
[  156.908925][T12289] Alternate GPT is invalid, using primary GPT.
[  156.913471][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.917326][T12289]  loop3: p1 p2 p3
[  156.986044][T12308] FAULT_INJECTION: forcing a failure.
[  156.986044][T12308] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.999220][T12308] CPU: 0 UID: 0 PID: 12308 Comm: syz.2.3564 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  156.999245][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.999257][T12308] Call Trace:
[  156.999262][T12308]  <TASK>
[  156.999269][T12308]  dump_stack_lvl+0xf6/0x150
[  156.999362][T12308]  dump_stack+0x15/0x1a
[  156.999388][T12308]  should_fail_ex+0x261/0x270
[  156.999412][T12308]  should_fail+0xb/0x10
[  156.999468][T12308]  should_fail_usercopy+0x1a/0x20
[  156.999507][T12308]  _copy_from_user+0x1c/0xa0
[  156.999533][T12308]  memdup_user+0x6b/0xd0
[  156.999645][T12308]  strndup_user+0x68/0xa0
[  156.999665][T12308]  __se_sys_add_key+0x135/0x330
[  156.999690][T12308]  ? fput+0x99/0xd0
[  156.999733][T12308]  __x64_sys_add_key+0x67/0x80
[  156.999764][T12308]  x64_sys_call+0x1f10/0x2e10
[  156.999796][T12308]  do_syscall_64+0xc9/0x1c0
[  156.999825][T12308]  ? clear_bhb_loop+0x25/0x80
[  156.999846][T12308]  ? clear_bhb_loop+0x25/0x80
[  156.999871][T12308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.999899][T12308] RIP: 0033:0x7f13e86ad169
[  156.999914][T12308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.999988][T12308] RSP: 002b:00007f13e6d0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  157.000009][T12308] RAX: ffffffffffffffda RBX: 00007f13e88c5fa0 RCX: 00007f13e86ad169
[  157.000023][T12308] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040
[  157.000037][T12308] RBP: 00007f13e6d0f090 R08: ffffffffffffffff R09: 0000000000000000
[  157.000050][T12308] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001
[  157.000063][T12308] R13: 0000000000000000 R14: 00007f13e88c5fa0 R15: 00007ffd320a33d8
[  157.000083][T12308]  </TASK>
[  157.180739][T12309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.223681][T12310] netlink: 'syz.1.3566': attribute type 10 has an invalid length.
[  157.258038][T12310] team0: Port device geneve1 added
[  157.295870][T12309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.362608][T12309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.449660][T12309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.493086][T12318] xt_CT: No such helper "syz0"
[  157.559292][T12309] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.572131][T12345] loop0: detected capacity change from 0 to 2048
[  157.606918][T12345] Alternate GPT is invalid, using primary GPT.
[  157.613335][T12345]  loop0: p1 p2 p3
[  157.651817][T12309] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.678708][T12309] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.701028][T12309] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.922100][T12377] loop0: detected capacity change from 0 to 2048
[  157.963457][T12369] loop4: detected capacity change from 0 to 2048
[  157.977860][T12377] Alternate GPT is invalid, using primary GPT.
[  157.984144][T12377]  loop0: p1 p2 p3
[  158.012444][T12369] Alternate GPT is invalid, using primary GPT.
[  158.021347][T12369]  loop4: p1 p2 p3
[  158.101131][T12383] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  158.153370][T12379] loop0: detected capacity change from 0 to 2048
[  158.207953][T12379] Alternate GPT is invalid, using primary GPT.
[  158.218376][T12379]  loop0: p1 p2 p3
[  158.262431][T12400] rdma_rxe: rxe_newlink: failed to add bond0
[  158.273344][T12400] loop2: detected capacity change from 0 to 1024
[  158.282831][T12400] EXT4-fs: Ignoring removed nobh option
[  158.288585][T12400] EXT4-fs: Ignoring removed bh option
[  158.302545][T12400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.332586][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.343487][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.370097][T12406] loop0: detected capacity change from 0 to 2048
[  158.371767][T12400] ALSA: seq fatal error: cannot create timer (-19)
[  158.416591][T12406] Alternate GPT is invalid, using primary GPT.
[  158.422911][T12406]  loop0: p1 p2 p3
[  158.432353][T12400] lo speed is unknown, defaulting to 1000
[  158.629097][T12422] FAULT_INJECTION: forcing a failure.
[  158.629097][T12422] name failslab, interval 1, probability 0, space 0, times 0
[  158.641848][T12422] CPU: 0 UID: 0 PID: 12422 Comm: syz.4.3611 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  158.641875][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  158.641887][T12422] Call Trace:
[  158.641893][T12422]  <TASK>
[  158.641900][T12422]  dump_stack_lvl+0xf6/0x150
[  158.641926][T12422]  dump_stack+0x15/0x1a
[  158.641941][T12422]  should_fail_ex+0x261/0x270
[  158.641969][T12422]  should_failslab+0x8f/0xb0
[  158.642043][T12422]  kmem_cache_alloc_noprof+0x59/0x340
[  158.642075][T12422]  ? security_inode_alloc+0x37/0x100
[  158.642111][T12422]  security_inode_alloc+0x37/0x100
[  158.642144][T12422]  inode_init_always_gfp+0x4a2/0x4f0
[  158.642241][T12422]  ? __pfx_proc_alloc_inode+0x10/0x10
[  158.642268][T12422]  alloc_inode+0x86/0x170
[  158.642288][T12422]  new_inode+0x1e/0xe0
[  158.642316][T12422]  proc_pid_make_inode+0x1d/0xd0
[  158.642416][T12422]  proc_ns_instantiate+0x35/0xb0
[  158.642438][T12422]  proc_fill_cache+0x1bd/0x240
[  158.642492][T12422]  ? __pfx_proc_ns_instantiate+0x10/0x10
[  158.642527][T12422]  proc_ns_dir_readdir+0x206/0x2c0
[  158.642620][T12422]  iterate_dir+0x11d/0x310
[  158.642660][T12422]  __se_sys_getdents+0x8c/0x1b0
[  158.642711][T12422]  ? __pfx_filldir+0x10/0x10
[  158.642731][T12422]  __x64_sys_getdents+0x43/0x50
[  158.642768][T12422]  x64_sys_call+0x2815/0x2e10
[  158.642788][T12422]  do_syscall_64+0xc9/0x1c0
[  158.642815][T12422]  ? clear_bhb_loop+0x25/0x80
[  158.642942][T12422]  ? clear_bhb_loop+0x25/0x80
[  158.643022][T12422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.643047][T12422] RIP: 0033:0x7f6d5018d169
[  158.643065][T12422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.643087][T12422] RSP: 002b:00007f6d4e7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  158.643109][T12422] RAX: ffffffffffffffda RBX: 00007f6d503a5fa0 RCX: 00007f6d5018d169
[  158.643122][T12422] RDX: 000000000000ff90 RSI: 0000200000000740 RDI: 0000000000000006
[  158.643133][T12422] RBP: 00007f6d4e7f7090 R08: 0000000000000000 R09: 0000000000000000
[  158.643184][T12422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.643197][T12422] R13: 0000000000000000 R14: 00007f6d503a5fa0 R15: 00007ffdd223ee38
[  158.643222][T12422]  </TASK>
[  159.078437][T12430] loop4: detected capacity change from 0 to 2048
[  159.136124][T12430] Alternate GPT is invalid, using primary GPT.
[  159.143507][T12430]  loop4: p1 p2 p3
[  159.234719][T12436] loop0: detected capacity change from 0 to 2048
[  159.291687][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.292462][T12436] Alternate GPT is invalid, using primary GPT.
[  159.308832][T12436]  loop0: p1 p2 p3
[  159.341130][T12450] syz.2.3623 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  159.494252][T12466] xt_hashlimit: max too large, truncated to 1048576
[  159.501634][T12462] lo speed is unknown, defaulting to 1000
[  159.517745][T12466] No such timeout policy "syz1"
[  159.623776][T12469] loop3: detected capacity change from 0 to 2048
[  159.681038][T12469] Alternate GPT is invalid, using primary GPT.
[  159.695438][T12469]  loop3: p1 p2 p3
[  159.804378][T12479] loop4: detected capacity change from 0 to 2048
[  159.871495][T12479] Alternate GPT is invalid, using primary GPT.
[  159.879025][T12479]  loop4: p1 p2 p3
[  159.989001][   T29] kauditd_printk_skb: 94 callbacks suppressed
[  159.989019][   T29] audit: type=1326 audit(1743155866.668:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  160.047896][   T29] audit: type=1326 audit(1743155866.668:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  160.071481][   T29] audit: type=1326 audit(1743155866.668:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  160.094953][   T29] audit: type=1326 audit(1743155866.668:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  160.118439][   T29] audit: type=1326 audit(1743155866.668:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.131776][T12509] loop0: detected capacity change from 0 to 2048
[  160.142031][   T29] audit: type=1326 audit(1743155866.668:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.171985][   T29] audit: type=1326 audit(1743155866.668:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.192332][T12513] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=12513 comm=syz.4.3652
[  160.195464][   T29] audit: type=1326 audit(1743155866.668:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.195520][   T29] audit: type=1326 audit(1743155866.668:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.233437][T12509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.255182][   T29] audit: type=1326 audit(1743155866.668:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12498 comm="syz.3.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  160.293381][T12509] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.345876][T12509] xt_hashlimit: max too large, truncated to 1048576
[  160.357437][T12509] No such timeout policy "syz1"
[  160.464698][T11130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.920819][T12560] loop3: detected capacity change from 0 to 512
[  160.923910][T12562] loop4: detected capacity change from 0 to 128
[  160.945403][T12562] syz.4.3672: attempt to access beyond end of device
[  160.945403][T12562] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[  160.948291][T12560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  160.959294][T12562] syz.4.3672: attempt to access beyond end of device
[  160.959294][T12562] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[  160.974077][T12560] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.985133][T12562] syz.4.3672: attempt to access beyond end of device
[  160.985133][T12562] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[  161.009307][T12562] syz.4.3672: attempt to access beyond end of device
[  161.009307][T12562] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[  161.022899][T12562] syz.4.3672: attempt to access beyond end of device
[  161.022899][T12562] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[  161.036464][T12562] syz.4.3672: attempt to access beyond end of device
[  161.036464][T12562] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[  161.050234][T12562] syz.4.3672: attempt to access beyond end of device
[  161.050234][T12562] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[  161.063946][T12562] syz.4.3672: attempt to access beyond end of device
[  161.063946][T12562] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[  161.077719][T12562] syz.4.3672: attempt to access beyond end of device
[  161.077719][T12562] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[  161.078908][T11631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  161.091231][T12562] syz.4.3672: attempt to access beyond end of device
[  161.091231][T12562] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[  161.306560][T12581] __nla_validate_parse: 11 callbacks suppressed
[  161.306575][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3680'.
[  162.009077][T12606] loop0: detected capacity change from 0 to 2048
[  162.049775][T12606] Alternate GPT is invalid, using primary GPT.
[  162.058314][T12606]  loop0: p1 p2 p3
[  162.182304][T12617] loop2: detected capacity change from 0 to 2048
[  162.207611][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'.
[  162.218056][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3699'.
[  162.229633][T12617] Alternate GPT is invalid, using primary GPT.
[  162.237499][T12617]  loop2: p1 p2 p3
[  162.384652][T12646] loop4: detected capacity change from 0 to 2048
[  162.424617][T12646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.510075][T12656] tipc: Started in network mode
[  162.515005][T12656] tipc: Node identity , cluster identity 4711
[  162.521155][T12656] tipc: Failed to obtain node identity
[  162.526740][T12656] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  162.552783][T12646] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.577118][T12646] xt_hashlimit: max too large, truncated to 1048576
[  162.583924][T12646] No such timeout policy "syz1"
[  162.613992][T12652] loop3: detected capacity change from 0 to 2048
[  162.680058][T12652] Alternate GPT is invalid, using primary GPT.
[  162.687777][T12652]  loop3: p1 p2 p3
[  162.692865][T10569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.925886][T12669] loop0: detected capacity change from 0 to 2048
[  162.954143][T12674] lo speed is unknown, defaulting to 1000
[  162.980361][T12669] Alternate GPT is invalid, using primary GPT.
[  162.988028][T12669]  loop0: p1 p2 p3
[  163.034978][T12673] loop4: detected capacity change from 0 to 2048
[  163.187417][T12673] Alternate GPT is invalid, using primary GPT.
[  163.194998][T12673]  loop4: p1 p2 p3
[  163.208965][T12681] vlan2: entered allmulticast mode
[  163.303072][T12693] loop3: detected capacity change from 0 to 2048
[  163.361228][T12693] Alternate GPT is invalid, using primary GPT.
[  163.367755][T12693]  loop3: p1 p2 p3
[  163.694951][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  163.742395][T12739] FAULT_INJECTION: forcing a failure.
[  163.742395][T12739] name failslab, interval 1, probability 0, space 0, times 0
[  163.755123][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.3.3745 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  163.755154][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  163.755206][T12739] Call Trace:
[  163.755213][T12739]  <TASK>
[  163.755223][T12739]  dump_stack_lvl+0xf6/0x150
[  163.755269][T12739]  dump_stack+0x15/0x1a
[  163.755365][T12739]  should_fail_ex+0x261/0x270
[  163.755423][T12739]  should_failslab+0x8f/0xb0
[  163.755520][T12739]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  163.755550][T12739]  ? __alloc_skb+0x10d/0x320
[  163.755577][T12739]  __alloc_skb+0x10d/0x320
[  163.755608][T12739]  netlink_alloc_large_skb+0xad/0xe0
[  163.755643][T12739]  netlink_sendmsg+0x3da/0x720
[  163.755673][T12739]  ? __pfx_netlink_sendmsg+0x10/0x10
[  163.755770][T12739]  __sock_sendmsg+0x140/0x180
[  163.755814][T12739]  ____sys_sendmsg+0x350/0x4e0
[  163.755843][T12739]  __sys_sendmsg+0x1a0/0x240
[  163.755919][T12739]  __x64_sys_sendmsg+0x46/0x50
[  163.755949][T12739]  x64_sys_call+0x26f3/0x2e10
[  163.755974][T12739]  do_syscall_64+0xc9/0x1c0
[  163.756064][T12739]  ? clear_bhb_loop+0x25/0x80
[  163.756088][T12739]  ? clear_bhb_loop+0x25/0x80
[  163.756125][T12739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.756150][T12739] RIP: 0033:0x7f6d8df6d169
[  163.756168][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.756190][T12739] RSP: 002b:00007f6d8c5cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.756227][T12739] RAX: ffffffffffffffda RBX: 00007f6d8e185fa0 RCX: 00007f6d8df6d169
[  163.756242][T12739] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  163.756254][T12739] RBP: 00007f6d8c5cf090 R08: 0000000000000000 R09: 0000000000000000
[  163.756266][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.756280][T12739] R13: 0000000000000000 R14: 00007f6d8e185fa0 R15: 00007ffe739d5948
[  163.756307][T12739]  </TASK>
[  163.974550][T12746] SELinux:  Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped).
[  164.046355][T12748] loop2: detected capacity change from 0 to 512
[  164.061446][T12748] EXT4-fs: Ignoring removed orlov option
[  164.068508][T12748] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.075177][T12748] EXT4-fs: Ignoring removed orlov option
[  164.084556][T12751] loop3: detected capacity change from 0 to 512
[  164.096552][T12748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c01c, mo2=0002]
[  164.104572][T12748] System zones: 1-12
[  164.108663][T12748] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.3748: inode #0: comm syz.2.3748: iget: illegal inode #
[  164.129017][T12748] EXT4-fs (loop2): get orphan inode failed
[  164.138825][T12748] EXT4-fs (loop2): mount failed
[  164.143910][T12751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.178021][T12751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.225008][T12751] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.468499][T11631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.616914][T12801] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  164.646129][T12770] loop2: detected capacity change from 0 to 2048
[  164.695919][T12770] Alternate GPT is invalid, using primary GPT.
[  164.703039][T12770]  loop2: p1 p2 p3
[  164.941815][T12831] lo speed is unknown, defaulting to 1000
[  164.980472][T12828] loop3: detected capacity change from 0 to 1024
[  164.988442][T12828] EXT4-fs: Ignoring removed nobh option
[  164.994038][T12828] EXT4-fs: Ignoring removed bh option
[  165.066383][T12835] rdma_rxe: rxe_newlink: failed to add bond0
[  165.101881][T12828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.117001][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.126041][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.147873][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  165.147941][   T29] audit: type=1326 audit(1743155871.828:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.165111][T12828] ALSA: seq fatal error: cannot create timer (-19)
[  165.177764][   T29] audit: type=1326 audit(1743155871.828:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.207909][   T29] audit: type=1326 audit(1743155871.828:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.231527][   T29] audit: type=1326 audit(1743155871.828:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.255226][   T29] audit: type=1326 audit(1743155871.828:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.278776][   T29] audit: type=1326 audit(1743155871.828:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.302221][   T29] audit: type=1326 audit(1743155871.828:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.0.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47cdb7d169 code=0x7ffc0000
[  165.363415][T12828] lo speed is unknown, defaulting to 1000
[  165.389505][   T29] audit: type=1326 audit(1743155872.058:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.4.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5018d169 code=0x7ffc0000
[  165.413190][   T29] audit: type=1326 audit(1743155872.058:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.4.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d50184127 code=0x7ffc0000
[  165.436965][   T29] audit: type=1326 audit(1743155872.058:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12794 comm="syz.4.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d50129359 code=0x7ffc0000
[  165.468321][T12863] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.563856][T12863] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.609007][T12871] vlan2: entered allmulticast mode
[  165.641699][T12875] loop0: detected capacity change from 0 to 2048
[  165.652082][T12863] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.705952][T12875] Alternate GPT is invalid, using primary GPT.
[  165.712389][T12875]  loop0: p1 p2 p3
[  165.729397][T12863] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.780492][T12874] lo speed is unknown, defaulting to 1000
[  165.804367][T12863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.829161][T12863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.840928][T12863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.852827][T12863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.963152][T12895] loop2: detected capacity change from 0 to 2048
[  165.982974][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'.
[  166.128929][T11631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.172732][T12897] rdma_rxe: rxe_newlink: failed to add bond0
[  166.185799][T12897] loop2: detected capacity change from 0 to 1024
[  166.204648][T12897] EXT4-fs: Ignoring removed nobh option
[  166.210394][T12897] EXT4-fs: Ignoring removed bh option
[  166.235487][T12897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.253948][T12897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.262976][T12897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.293968][T12897] ALSA: seq fatal error: cannot create timer (-19)
[  166.404050][T12897] lo speed is unknown, defaulting to 1000
[  167.014218][ T9955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.058933][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'.
[  167.097609][T12962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.109734][T12962] loop0: detected capacity change from 0 to 512
[  167.116422][T12962] EXT4-fs: Ignoring removed i_version option
[  167.122708][T12962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  167.134226][T12962] EXT4-fs (loop0): 1 truncate cleaned up
[  167.140286][T12962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.262801][T12965] FAULT_INJECTION: forcing a failure.
[  167.262801][T12965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  167.275922][T12965] CPU: 1 UID: 0 PID: 12965 Comm: syz.4.3834 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  167.275952][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  167.275964][T12965] Call Trace:
[  167.275970][T12965]  <TASK>
[  167.275978][T12965]  dump_stack_lvl+0xf6/0x150
[  167.276154][T12965]  dump_stack+0x15/0x1a
[  167.276171][T12965]  should_fail_ex+0x261/0x270
[  167.276218][T12965]  should_fail+0xb/0x10
[  167.276316][T12965]  should_fail_usercopy+0x1a/0x20
[  167.276376][T12965]  _copy_from_user+0x1c/0xa0
[  167.276404][T12965]  kstrtouint_from_user+0x84/0x100
[  167.276427][T12965]  ? 0xffffffff81000000
[  167.276438][T12965]  ? selinux_file_permission+0x22d/0x360
[  167.276536][T12965]  proc_fail_nth_write+0x54/0x160
[  167.276558][T12965]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  167.276684][T12965]  vfs_write+0x295/0x950
[  167.276720][T12965]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  167.276801][T12965]  ? __fget_files+0x186/0x1c0
[  167.276826][T12965]  ksys_write+0xeb/0x1b0
[  167.276857][T12965]  __x64_sys_write+0x42/0x50
[  167.276965][T12965]  x64_sys_call+0x2a45/0x2e10
[  167.276983][T12965]  do_syscall_64+0xc9/0x1c0
[  167.277004][T12965]  ? clear_bhb_loop+0x25/0x80
[  167.277021][T12965]  ? clear_bhb_loop+0x25/0x80
[  167.277092][T12965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.277156][T12965] RIP: 0033:0x7f6d5018bc1f
[  167.277168][T12965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  167.277183][T12965] RSP: 002b:00007f6d4e7f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  167.277264][T12965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6d5018bc1f
[  167.277274][T12965] RDX: 0000000000000001 RSI: 00007f6d4e7f70a0 RDI: 0000000000000004
[  167.277283][T12965] RBP: 00007f6d4e7f7090 R08: 0000000000000000 R09: 0000000000000000
[  167.277300][T12965] R10: 000000000000fef3 R11: 0000000000000293 R12: 0000000000000001
[  167.277310][T12965] R13: 0000000000000000 R14: 00007f6d503a5fa0 R15: 00007ffdd223ee38
[  167.277329][T12965]  </TASK>
[  167.591217][T12967] loop4: detected capacity change from 0 to 2048
[  167.647718][T12967] Alternate GPT is invalid, using primary GPT.
[  167.655251][T12967]  loop4: p1 p2 p3
[  167.822565][T12975] loop4: detected capacity change from 0 to 2048
[  167.881486][T12975] Alternate GPT is invalid, using primary GPT.
[  167.890068][T12975]  loop4: p1 p2 p3
[  167.941253][T11130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.205375][T13008] FAULT_INJECTION: forcing a failure.
[  168.205375][T13008] name failslab, interval 1, probability 0, space 0, times 0
[  168.218179][T13008] CPU: 1 UID: 0 PID: 13008 Comm: syz.2.3852 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  168.218303][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  168.218330][T13008] Call Trace:
[  168.218338][T13008]  <TASK>
[  168.218348][T13008]  dump_stack_lvl+0xf6/0x150
[  168.218371][T13008]  dump_stack+0x15/0x1a
[  168.218387][T13008]  should_fail_ex+0x261/0x270
[  168.218456][T13008]  should_failslab+0x8f/0xb0
[  168.218481][T13008]  kmem_cache_alloc_lru_noprof+0x5e/0x330
[  168.218550][T13008]  ? shmem_alloc_inode+0x34/0x50
[  168.218580][T13008]  shmem_alloc_inode+0x34/0x50
[  168.218665][T13008]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  168.218699][T13008]  alloc_inode+0x40/0x170
[  168.218725][T13008]  new_inode+0x1e/0xe0
[  168.218754][T13008]  shmem_get_inode+0x24e/0x730
[  168.218793][T13008]  __shmem_file_setup+0x127/0x1f0
[  168.218907][T13008]  shmem_file_setup+0x3b/0x50
[  168.218983][T13008]  __se_sys_memfd_create+0x2e1/0x5a0
[  168.219025][T13008]  __x64_sys_memfd_create+0x31/0x40
[  168.219061][T13008]  x64_sys_call+0x1163/0x2e10
[  168.219203][T13008]  do_syscall_64+0xc9/0x1c0
[  168.219234][T13008]  ? clear_bhb_loop+0x25/0x80
[  168.219261][T13008]  ? clear_bhb_loop+0x25/0x80
[  168.219288][T13008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.219372][T13008] RIP: 0033:0x7f13e86ad169
[  168.219392][T13008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.219414][T13008] RSP: 002b:00007f13e6d0ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  168.219438][T13008] RAX: ffffffffffffffda RBX: 0000000000000607 RCX: 00007f13e86ad169
[  168.219453][T13008] RDX: 00007f13e6d0edec RSI: 0000000000000000 RDI: 00007f13e872ec3c
[  168.219466][T13008] RBP: 0000200000001d40 R08: 00007f13e6d0eb07 R09: 00007f13e872f401
[  168.219477][T13008] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001
[  168.219488][T13008] R13: 00007f13e6d0edec R14: 00007f13e6d0edf0 R15: 00007ffd320a33d8
[  168.219606][T13008]  </TASK>
[  168.224162][T13011] netem: change failed
[  168.288875][T12990] loop0: detected capacity change from 0 to 2048
[  168.478507][T13019] 9pnet_fd: Insufficient options for proto=fd
[  168.490866][T12990] Alternate GPT is invalid, using primary GPT.
[  168.498286][T12990]  loop0: p1 p2 p3
[  168.753190][T13026] loop0: detected capacity change from 0 to 2048
[  168.811886][T13026] Alternate GPT is invalid, using primary GPT.
[  168.820545][T13026]  loop0: p1 p2 p3
[  168.930893][T13041] vlan2: entered allmulticast mode
[  168.981655][T13047] FAULT_INJECTION: forcing a failure.
[  168.981655][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.995063][T13047] CPU: 0 UID: 0 PID: 13047 Comm: syz.3.3865 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  168.995096][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  168.995111][T13047] Call Trace:
[  168.995146][T13047]  <TASK>
[  168.995155][T13047]  dump_stack_lvl+0xf6/0x150
[  168.995183][T13047]  dump_stack+0x15/0x1a
[  168.995202][T13047]  should_fail_ex+0x261/0x270
[  168.995234][T13047]  should_fail+0xb/0x10
[  168.995259][T13047]  should_fail_usercopy+0x1a/0x20
[  168.995348][T13047]  _copy_from_iter+0xd8/0xd10
[  168.995409][T13047]  ? kmalloc_reserve+0x16e/0x190
[  168.995430][T13047]  ? __build_skb_around+0x199/0x1f0
[  168.995452][T13047]  ? __alloc_skb+0x227/0x320
[  168.995470][T13047]  ? __virt_addr_valid+0x1ed/0x250
[  168.995491][T13047]  ? __check_object_size+0x367/0x510
[  168.995527][T13047]  netlink_sendmsg+0x492/0x720
[  168.995556][T13047]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.995597][T13047]  __sock_sendmsg+0x140/0x180
[  168.995629][T13047]  ____sys_sendmsg+0x350/0x4e0
[  168.995661][T13047]  __sys_sendmsg+0x1a0/0x240
[  168.995818][T13047]  __x64_sys_sendmsg+0x46/0x50
[  168.995856][T13047]  x64_sys_call+0x26f3/0x2e10
[  168.995888][T13047]  do_syscall_64+0xc9/0x1c0
[  168.995913][T13047]  ? clear_bhb_loop+0x25/0x80
[  168.995936][T13047]  ? clear_bhb_loop+0x25/0x80
[  168.995958][T13047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.995991][T13047] RIP: 0033:0x7f6d8df6d169
[  168.996009][T13047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.996030][T13047] RSP: 002b:00007f6d8c5cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.996071][T13047] RAX: ffffffffffffffda RBX: 00007f6d8e185fa0 RCX: 00007f6d8df6d169
[  168.996085][T13047] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  168.996100][T13047] RBP: 00007f6d8c5cf090 R08: 0000000000000000 R09: 0000000000000000
[  168.996168][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.996179][T13047] R13: 0000000000000000 R14: 00007f6d8e185fa0 R15: 00007ffe739d5948
[  168.996206][T13047]  </TASK>
[  169.260865][T13051] rdma_rxe: rxe_newlink: failed to add bond0
[  169.272412][T13051] loop0: detected capacity change from 0 to 1024
[  169.279301][T13051] EXT4-fs: Ignoring removed nobh option
[  169.285008][T13051] EXT4-fs: Ignoring removed bh option
[  169.308133][T13051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.346463][T13051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.391220][T13051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.425079][T13051] ALSA: seq fatal error: cannot create timer (-19)
[  169.497224][T13061] loop2: detected capacity change from 0 to 2048
[  169.531362][T13051] lo speed is unknown, defaulting to 1000
[  169.661985][T13061] Alternate GPT is invalid, using primary GPT.
[  169.669810][T13061]  loop2: p1 p2 p3
[  169.777471][T13094] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3885'.
[  170.034237][T13103] loop3: detected capacity change from 0 to 2048
[  170.100110][T13103] Alternate GPT is invalid, using primary GPT.
[  170.107666][T13103]  loop3: p1 p2 p3
[  170.160508][T13115] loop3: detected capacity change from 0 to 512
[  170.183555][T13115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.198466][T13115] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.226189][T11130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.246031][T13115] EXT4-fs error (device loop3): ext4_do_update_inode:5194: inode #2: comm syz.3.3894: corrupted inode contents
[  170.260280][T13115] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #2: comm syz.3.3894: mark_inode_dirty error
[  170.284172][T13115] EXT4-fs error (device loop3): ext4_do_update_inode:5194: inode #2: comm syz.3.3894: corrupted inode contents
[  170.302191][T13115] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3894: mark_inode_dirty error
[  170.396965][T11631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.462628][   T29] kauditd_printk_skb: 1024 callbacks suppressed
[  170.462645][   T29] audit: type=1326 audit(1743155877.138:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  170.563085][   T29] audit: type=1326 audit(1743155877.168:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  170.586767][   T29] audit: type=1326 audit(1743155877.168:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  170.610269][   T29] audit: type=1326 audit(1743155877.168:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  170.633721][   T29] audit: type=1326 audit(1743155877.168:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  170.657335][   T29] audit: type=1326 audit(1743155877.178:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6d8df6d169 code=0x7ffc0000
[  170.680958][   T29] audit: type=1326 audit(1743155877.178:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  170.704497][   T29] audit: type=1326 audit(1743155877.178:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  170.727922][   T29] audit: type=1326 audit(1743155877.178:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8df64127 code=0x7ffc0000
[  170.751463][   T29] audit: type=1326 audit(1743155877.178:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13142 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8df09359 code=0x7ffc0000
[  170.757608][T13145] loop0: detected capacity change from 0 to 2048
[  170.828662][T13145] Alternate GPT is invalid, using primary GPT.
[  170.837652][T13145]  loop0: p1 p2 p3
[  170.852888][T13151] loop3: detected capacity change from 0 to 1024
[  170.879586][T13151] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  170.929428][T13151] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  170.946854][T13151] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  171.057787][ T3376] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  171.065559][ T3376] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  171.073070][ T3376] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0
[  171.090475][ T3376] hid-generic 0000:0004:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  171.115521][T13176] loop2: detected capacity change from 0 to 512
[  171.122267][T13176] EXT4-fs: Ignoring removed oldalloc option
[  171.128580][T13176] EXT4-fs: Mount option(s) incompatible with ext3
[  171.151669][T13159] loop4: detected capacity change from 0 to 2048
[  171.162426][T13180] ==================================================================
[  171.170655][T13180] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[  171.177447][T13180] 
[  171.179776][T13180] write to 0xffff888109068700 of 8 bytes by task 13175 on cpu 0:
[  171.187538][T13180]  mas_wmb_replace+0x224/0x1510
[  171.192414][T13180]  mas_wr_store_entry+0x158c/0x2460
[  171.197628][T13180]  mas_store_prealloc+0x6d5/0x960
[  171.202668][T13180]  vma_complete+0x3a7/0x760
[  171.207187][T13180]  __split_vma+0x623/0x6a0
[  171.211618][T13180]  vma_modify+0x1a2/0x200
[  171.215958][T13180]  vma_modify_flags+0xf3/0x120
[  171.220732][T13180]  mprotect_fixup+0x323/0x600
[  171.225417][T13180]  do_mprotect_pkey+0x6ce/0x9a0
[  171.230278][T13180]  __x64_sys_mprotect+0x48/0x60
[  171.235144][T13180]  x64_sys_call+0x272f/0x2e10
[  171.239828][T13180]  do_syscall_64+0xc9/0x1c0
[  171.244339][T13180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.250235][T13180] 
[  171.252564][T13180] read to 0xffff888109068700 of 8 bytes by task 13180 on cpu 1:
[  171.260195][T13180]  mas_walk+0x123/0x320
[  171.264358][T13180]  lock_vma_under_rcu+0x97/0x290
[  171.269306][T13180]  exc_page_fault+0x150/0x650
[  171.273988][T13180]  asm_exc_page_fault+0x26/0x30
[  171.278844][T13180] 
[  171.281166][T13180] value changed: 0xffff88810005ddc1 -> 0xffff888109068700
[  171.288271][T13180] 
[  171.290604][T13180] Reported by Kernel Concurrency Sanitizer on:
[  171.296770][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.2.3917 Not tainted 6.14.0-syzkaller-07422-gacb4f33713b9 #0 PREEMPT(voluntary) 
[  171.308926][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  171.319001][T13180] ==================================================================
[  171.357195][T13159] Alternate GPT is invalid, using primary GPT.
[  171.364354][T13159]  loop4: p1 p2 p3