last executing test programs:

9m41.278314839s ago: executing program 4 (id=5727):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008040)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m41.159869474s ago: executing program 4 (id=5730):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x8000}, 0x8110, 0x7, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000123500000000007110370000000000950000000000007881f8e3b3674d3da71ba560702630b7a5548e9b021d2965540eb8b6b07247d3bd24fd938beceb4a4d2a82746d8543f31eb218e15e603ec5cb7bca1138ab487935ab1fd029a01f680ce60c76819aae4caacbaa31151c103c328c1ff8c03b3464904d59628a4293257ac3a1c98d160a1bbcb4036119c724857ccc8bd3c302d70675b35dac49a041d7dbd52494b64c5e78e100d40ec112ec2652c50a2276ff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xfffffffffffffe7b}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x120)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)

9m41.03158771s ago: executing program 4 (id=5735):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a00002"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYBLOB="00000100"/18, @ANYRES32=0x0, @ANYBLOB="0200000004000000050000000000000000"], 0x50)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x4}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'dummy0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0xd, 0x12, 0x6, 0x0, 0xfffffff8, {0xe61a, 0x8000, 0x18006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
munlockall()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

9m40.317156984s ago: executing program 4 (id=5743):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000100030000008500000800000000850000007d0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1)
read(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

9m39.307761416s ago: executing program 4 (id=5758):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
fcntl$setlease(r0, 0x400, 0x0) (async)
close(r0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='page_pool_release\x00', r2, 0x0, 0x4a4}, 0x18) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "908a26c5"}, 0xf)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) (async)
ioperm(0x0, 0x9d, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0)

9m39.241948694s ago: executing program 4 (id=5761):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)

9m24.223084715s ago: executing program 32 (id=5761):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB])
splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe)

6m54.576947787s ago: executing program 3 (id=9093):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async)
r1 = getpid()
sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x20008000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03113875c492b796ffffff00000004001801000020206925000000"], &(0x7f0000000600)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x29) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

6m54.372196274s ago: executing program 3 (id=9096):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'erspan0\x00', <r0=>0x0, 0x8000, 0x700, 0xffffffff, 0x8, {{0x13, 0x4, 0x3, 0x4, 0x4c, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x1b, 0x1, [{0x5, 0x12, "bf561a5c4ef9dd4aec4da941f2efe989"}, {0x0, 0x3, "1c"}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x8, "b9243f982cdf"}, @timestamp={0x44, 0x10, 0x89, 0x0, 0x5, [0x6, 0xb8, 0xc]}]}}}}})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xd, 0x8, 0x1, 0x9, 0x6}}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0xb, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5e, '\x00', r0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f0000000c80)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x3b, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa2000000d8efe6b0020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000013bdf60e02f7c200000020c02b4f895e", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_mark_inode_dirty\x00', r9, 0x0, 0xa91}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040))
timer_delete(0x0)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="6085c1b5", @ANYRES16=r7, @ANYBLOB="00022dbd7000fcdbdf250300000005000d0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

6m54.159247172s ago: executing program 3 (id=9097):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9fb228b267eda82aa412e218000000000000000c0000000c0000000500000002000000000000080200ee8941ea1f9303666f36e9ad9021a852d52c6ef6be9e9f42a455d333c764a6c3041666d382b75d85a6a3064528d9a3d54c1cf81b49ba57890683830dbdcbc2608f9134743f66f6cbbecc38eda21b4ad46d0a0f4420b5392030696510fdf4c7b78dd1649e0400000000000000a11f00fe5e23"], &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ")
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0xa97)
r4 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00'}, 0x18)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x404d800)

6m54.069927213s ago: executing program 3 (id=9098):
socket(0x11, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
socket$inet(0xa, 0x801, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xffffffffffffffe4, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_MPLS, @AF_BRIDGE, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @empty}]}, @AF_BRIDGE]}]}, 0x50}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"})
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x3000, &(0x7f0000000f80)=ANY=[])
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x0, 0x31, 0x0, 0x1, 0xafe}, 0x28)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

6m53.969446346s ago: executing program 3 (id=9099):
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x9e, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x4e24, 0xd560000, @mcast1}, 0xffffffffffffffff, {[0x2, 0x3, 0xb014, 0x6, 0x24c, 0x2, 0x7fffffff, 0x7]}}, 0x5c)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}})

6m53.673280525s ago: executing program 3 (id=9100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000fffffffffffffff0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) (async)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='J', 0x1, 0x4048000, 0x0, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve1\x00', <r3=>0x0}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) (async)
migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setresuid(0xee00, 0xee00, 0x0)
r6 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x80079af, 0x1, 0x8000, 0x408652}, &(0x7f0000000640)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)

6m53.672859555s ago: executing program 33 (id=9100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="000000000000fffffffffffffff0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) (async)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000100)='J', 0x1, 0x4048000, 0x0, 0xe) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve1\x00', <r3=>0x0}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) (async)
migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setresuid(0xee00, 0xee00, 0x0)
r6 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x80079af, 0x1, 0x8000, 0x408652}, &(0x7f0000000640)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51})
io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)

6m12.438205237s ago: executing program 5 (id=9872):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

6m12.277107938s ago: executing program 5 (id=9873):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40010)

6m12.1060595s ago: executing program 5 (id=9879):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000740)=[@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000000000000700ebff84100000f8ffffff07834b6b0000000018140000", @ANYRES32, @ANYBLOB="00000000000000d4c400008000000000000000000000c58218dd768228aa63bbca183313503c8ec8800f48e62c"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000340)=""/202, 0x41000, 0xf, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r0], 0x0, 0x10, 0x7}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd84, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]})
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f00000000c0)=0x80007)
write$ppp(r3, &(0x7f0000000140)="7eff81940ab6a5b25498eff7f316536364c511f8ec1f5dec3956e1e5ca0f97e9b5df63a332925b7a7b43c99242e4a919b850c06b024365756115c8e97d2be6d1525e9cbc5e0fad3b2f835be755e350cc5a466f1d4f462a6cc8364dbf81ec06155341054190", 0x3)
ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00'}, 0x18)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)

6m11.983115007s ago: executing program 5 (id=9884):
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xffffffffffffffe4, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_MPLS, @AF_BRIDGE, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @empty}]}, @AF_BRIDGE]}]}, 0x50}}, 0x0)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"})
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x3000, &(0x7f0000000f80)=ANY=[])
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x0, 0x31, 0x0, 0x1, 0xafe}, 0x28)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

6m10.969389569s ago: executing program 5 (id=9893):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000}, 0x28)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='sched_switch\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x2, 0x3, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)

6m10.257493652s ago: executing program 5 (id=9901):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000000000000025", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6m10.204941759s ago: executing program 34 (id=9901):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000000000000025", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.732112972s ago: executing program 6 (id=18002):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f0000001480)='syzkaller\x00', 0x10, 0x43}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) (async)
syz_io_uring_setup(0xed1, &(0x7f00000004c0)={0x0, 0x3c06, 0x10300, 0xfffffffe, 0x59}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) (async)
gettid() (async)
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @thr={&(0x7f0000000200)="315ced875fabac78d046c1523a0e623cd1be28ab0cea93bec444a9e2ab4901cc04af1db7d5923582ee5c759851b78c3de2b6cc3c64e79fb20efc382bd22397b418b30306efbb1ecd0264d7320bd488fa32114f3acbf2ee919700915aec9ee809e2b02d47508ffbf6", &(0x7f00000003c0)="ec43ac1fdc60e516b17774a4eb9a23c85a514bf7594cd9c303828a235f7e4602342fe540950e467e9c69607d6caa9381328c65bc252a91f9bc1ef0dd6428b74482ec22cf58fd195e3b60989cc6aa82fdfb0e7e16564576d55f7373ce4b5f455bae4dc7cb8eedd121e682e3145f43d3bb295ac28f1129df5c1d20a54cc625405def5ead61c6f76f8d7ed3e1235159ead307f1c3f314ef300dc71e4a01dadac894bf5e3606f4138e2a9fa29b6f26a589f38c9fbaa8"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
recvmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0)
flock(r4, 0x5) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60000, 0x80)
flock(r5, 0x1)
flock(r5, 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)

4.470152686s ago: executing program 6 (id=18010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

4.44419105s ago: executing program 6 (id=18011):
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x100, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000010c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.895372442s ago: executing program 1 (id=18040):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.820737902s ago: executing program 1 (id=18042):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a000000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10)
link(0x0, 0x0)
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x5, 0xa, 0x110c}})
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x62, @dev={0xac, 0x14, 0x14, 0x34}, 0x4e20, 0x3, 'lblcr\x00', 0x14, 0x200, 0x4f}, {@broadcast, 0x4e24, 0x0, 0x5, 0x4, 0x6}}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000023000000"], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f00000014c0), 0x3, 0x44f, &(0x7f0000000500)="$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")
mkdir(&(0x7f0000000000)='./control\x00', 0x81)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)

1.554910367s ago: executing program 1 (id=18044):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r1, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c)
shutdown(r1, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x44040001, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

1.510521903s ago: executing program 6 (id=18045):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r6)

1.421459444s ago: executing program 1 (id=18046):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1.420339414s ago: executing program 0 (id=18048):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.400296697s ago: executing program 0 (id=18049):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})

1.38286504s ago: executing program 0 (id=18050):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r1 = dup(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x32, 0x6, 0x580, 0x1b8, 0x3c8, 0x1b8, 0x3c8, 0x2d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @private0, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xffffff00], 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x3b, 0xf9, 0x2, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3b, 0x4, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x6, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r1, r3, 0x0, 0x13c42)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

1.38240431s ago: executing program 1 (id=18051):
r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x2880)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB="8500ddff8a00000095"], &(0x7f0000003240)='GPL\x00'}, 0x94)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0xd4, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x15}, 0x8010)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbc3}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x1003ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

1.268274864s ago: executing program 7 (id=18054):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000100000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000004c0)={0x3, 0xae, "903f946d3bcc3c15d9339f86d65afdac0dbb071b51c717b63c8fe7c017c0391eb1e89de7f6775394c667dc030c3d367ec1dfdc0ca8b7b658d347eb7fca0830c1cec702f51e009ce8b22f9e75b374cc5ef1f206bc6ed2e0377a27e90a5b186b85f4f01390f76f17b173ebfd3ee43075b35cc093c09467bed4294f4eac434143c034979f31601717fa65a6ae853cac19fb9d2aa1afcad4bd3d738c777a60333a6bf64e544d834389c2fb20180b5d6c"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
r4 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r6, r5, 0x0, 0x558410e9)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {0x4}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xad000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10)
r8 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x101000, 0x10, 0x1}, 0x18)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, 0x0, 0x0)

876.164525ms ago: executing program 7 (id=18057):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001140)={0x14, r1, 0x705, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000841}, 0x8004)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x600000, 0x0)
write$selinux_validatetrans(r3, &(0x7f00000010c0)={'system_u:object_r:sysfs_t:s0', 0x20, 'system_u:object_r:sendmail_exec_t:s0', 0x20, 0x5, 0x20, '/sbin/dhclient\x00'}, 0x66)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r2}, 0x18)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53df2b456239", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x1000}}}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r4 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0)
pread64(r7, &(0x7f0000000000)=""/4096, 0x1000, 0x4)
socketpair(0x2b, 0x800, 0x6, &(0x7f0000001000)={<r8=>0xffffffffffffffff})
connect$pppoe(r8, &(0x7f0000001040)={0x18, 0x0, {0x0, @empty, 'veth0_to_bond\x00'}}, 0x1e)

789.423077ms ago: executing program 7 (id=18058):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000001940)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff)
unlink(&(0x7f0000000100)='./file0/file1\x00')
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x1f, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x8, 0x20510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0xd}, 0x120, 0xfffe, 0x33f7, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
rmdir(&(0x7f0000000000)='./file0\x00')

575.956295ms ago: executing program 2 (id=18061):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

533.503661ms ago: executing program 6 (id=18062):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000840)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

486.740556ms ago: executing program 0 (id=18063):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18)
fsetxattr$security_selinux(r0, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x2)

480.287557ms ago: executing program 1 (id=18064):
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x72, "42dbe15e45c3a1077845c9662f976ccf078f14c54009aabdc0a0db7880a1ba509c96acee86af54e17cc25389ca45b958d70e294754f5abc6df9bc864670bce8999b73b14e5ad255e7291a62965ec1992646de5ed481de45e3c201a828e6b5a1922f03b8f537c26fedc8cdbcb63a328155069"}, &(0x7f0000000080)=0x7a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1c, "e4dc1e3fe07fff517bc3e7a8b37e081d27864f106e450ceecddd670d"}, &(0x7f0000000340)=0x24)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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")

476.745268ms ago: executing program 6 (id=18065):
socket(0x11, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
socket$inet(0xa, 0x801, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_BRIDGE={0x4}]}]}, 0x6c}}, 0x0)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"})
dup(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x3000, &(0x7f0000000f80)=ANY=[])
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x0, 0x31, 0x0, 0x1, 0xafe}, 0x28)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e24, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

458.34547ms ago: executing program 0 (id=18066):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
io_setup(0x58, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}])
write(r0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000200)=""/76, 0x4c}], 0x1, &(0x7f0000000280)}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/89, 0x59}, {0x0}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f0000000880)=""/77, 0x4d}, {&(0x7f0000000900)=""/18, 0x12}, {&(0x7f0000000940)=""/22, 0x16}, {&(0x7f0000000980)=""/33, 0x21}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/67, 0x43}], 0x8}}], 0x4, 0x180, 0x0)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

424.081695ms ago: executing program 2 (id=18067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x704a, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x339f, 0x49}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1})
io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x44040001, 0x1})
r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x100000, 0xd6d, 0x0, 0x0, 0x7, 0x0, 0xfffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11)
syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/cgroup\x00')
setns(r12, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r13}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x20, 0x0, [{0x0, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10)

234.591019ms ago: executing program 0 (id=18068):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)

172.978547ms ago: executing program 2 (id=18069):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port1\x00', 0xfa, 0x1d9a13, 0x2, 0x8000006, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x2, 0xc, 0xfd, 0x0, 0x1})

172.843328ms ago: executing program 2 (id=18070):
kexec_load(0x4, 0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
write$cgroup_int(r0, &(0x7f0000000740)=0x7, 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYBLOB="15edfb69d8270a0f41c6ad6499a03109d6e361f3d55e369709c0417276d3237ac5ea839e5f383b195d4db69629617df65096880869b4f4a2f1324a8df1cb21f891a64709d46ca0d211dd6a3cc6d706da36e781028579075903a7f7834ca9d8dfc3f45d82cfdc325356323015c38b5664ded3c6c61bbbc32bad292256c87fc998f9a999e03df027a7af0afd5220e04a115a928572db347e6a4880d43a394c7325c33b92283811d64421e24741e6b6d9090244597cb9f597edaa57a2334aeb988c3b5f21313450d9eb65a66397f0ff0aec613239bd4fec7530bd3c86d0133bd9e8588f3a80668f2f4e7947d0d322f71bdc348c6491", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

172.441867ms ago: executing program 7 (id=18071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e00000065000000500000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0)

142.804091ms ago: executing program 7 (id=18072):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18)
fsetxattr$security_selinux(r0, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x2)

127.909813ms ago: executing program 7 (id=18073):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x44040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r12, &(0x7f0000004200)='t', 0x1)
sendfile(r12, r11, 0x0, 0x1003ffff)
sendfile(r12, r11, 0x0, 0x7ffff000)
r13 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)

83.203209ms ago: executing program 2 (id=18074):
kexec_load(0x4, 0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
write$cgroup_int(r0, &(0x7f0000000740)=0x7, 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYBLOB="15edfb69d8270a0f41c6ad6499a03109d6e361f3d55e369709c0417276d3237ac5ea839e5f383b195d4db69629617df65096880869b4f4a2f1324a8df1cb21f891a64709d46ca0d211dd6a3cc6d706da36e781028579075903a7f7834ca9d8dfc3f45d82cfdc325356323015c38b5664ded3c6c61bbbc32bad292256c87fc998f9a999e03df027a7af0afd5220e04a115a928572db347e6a4880d43a394c7325c33b92283811d64421e24741e6b6d9090244597cb9f597edaa57a2334aeb988c3b5f21313450d9eb65a66397f0ff0aec613239bd4fec7530bd3c86d0133bd9e8588f3a80668f2f4e7947d0d322f71bdc348c6491", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

0s ago: executing program 2 (id=18075):
r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x2880)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB="8500ddff8a00000095"], &(0x7f0000003240)='GPL\x00'}, 0x94)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0xd4, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x15}, 0x8010)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0xbc3}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)
write(r3, &(0x7f0000004200)='t', 0x1)
sendfile(r3, r2, 0x0, 0x1003ffff)
sendfile(r3, r2, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

z.6.17065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1026.042525][ T2115] loop1: detected capacity change from 0 to 128
[ 1026.412786][ T2159] xt_hashlimit: max too large, truncated to 1048576
[ 1026.432162][ T2159] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1026.463622][ T2149] wg1 speed is unknown, defaulting to 1000
[ 1027.091302][ T2198] wg1 speed is unknown, defaulting to 1000
[ 1027.424124][ T2198] Set syz1 is full, maxelem 65536 reached
[ 1027.576009][ T2240] xt_hashlimit: max too large, truncated to 1048576
[ 1027.583246][ T2240] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1027.593382][ T2235] wg1 speed is unknown, defaulting to 1000
[ 1027.752954][ T2258] loop1: detected capacity change from 0 to 128
[ 1027.763531][ T2258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1028.126440][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1028.144563][ T2291] xt_hashlimit: size too large, truncated to 1048576
[ 1028.151286][ T2291] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1028.187427][ T2291] blktrace: Concurrent blktraces are not allowed on loop1
[ 1028.685356][ T2329] loop1: detected capacity change from 0 to 8192
[ 1028.786569][ T2332] xt_hashlimit: size too large, truncated to 1048576
[ 1028.793325][ T2332] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1028.804145][ T2332] blktrace: Concurrent blktraces are not allowed on loop3
[ 1028.878294][ T2340] FAULT_INJECTION: forcing a failure.
[ 1028.878294][ T2340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1028.891527][ T2340] CPU: 1 UID: 0 PID: 2340 Comm: syz.1.17150 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1028.891567][ T2340] Tainted: [W]=WARN
[ 1028.891576][ T2340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1028.891588][ T2340] Call Trace:
[ 1028.891624][ T2340]  <TASK>
[ 1028.891631][ T2340]  __dump_stack+0x1d/0x30
[ 1028.891658][ T2340]  dump_stack_lvl+0x95/0xd0
[ 1028.891683][ T2340]  dump_stack+0x15/0x1b
[ 1028.891707][ T2340]  should_fail_ex+0x265/0x280
[ 1028.891786][ T2340]  should_fail+0xb/0x20
[ 1028.891804][ T2340]  should_fail_usercopy+0x1a/0x20
[ 1028.891840][ T2340]  _copy_from_iter+0xcf/0xe70
[ 1028.891865][ T2340]  ? __alloc_skb+0x396/0x4b0
[ 1028.891890][ T2340]  ? __alloc_skb+0x228/0x4b0
[ 1028.891996][ T2340]  netlink_sendmsg+0x471/0x6b0
[ 1028.892028][ T2340]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1028.892064][ T2340]  __sock_sendmsg+0x145/0x180
[ 1028.892088][ T2340]  ____sys_sendmsg+0x31e/0x4a0
[ 1028.892237][ T2340]  ___sys_sendmsg+0x17b/0x1d0
[ 1028.892340][ T2340]  __x64_sys_sendmsg+0xd4/0x160
[ 1028.892374][ T2340]  x64_sys_call+0x17ba/0x3000
[ 1028.892497][ T2340]  do_syscall_64+0xca/0x2b0
[ 1028.892535][ T2340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.892765][ T2340] RIP: 0033:0x7f3d348ff749
[ 1028.892783][ T2340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1028.892826][ T2340] RSP: 002b:00007f3d33367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1028.892848][ T2340] RAX: ffffffffffffffda RBX: 00007f3d34b55fa0 RCX: 00007f3d348ff749
[ 1028.892863][ T2340] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[ 1028.892904][ T2340] RBP: 00007f3d33367090 R08: 0000000000000000 R09: 0000000000000000
[ 1028.892917][ T2340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.892931][ T2340] R13: 00007f3d34b56038 R14: 00007f3d34b55fa0 R15: 00007ffeb009d068
[ 1028.892968][ T2340]  </TASK>
[ 1029.220210][ T2357] loop1: detected capacity change from 0 to 512
[ 1029.248311][ T2357] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1029.255012][ T2357] EXT4-fs: Ignoring removed bh option
[ 1029.296977][ T2357] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1029.334815][ T2357] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17156: corrupted inode contents
[ 1029.354066][ T2357] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.17156: mark_inode_dirty error
[ 1029.366079][ T2357] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17156: invalid indirect mapped block 1 (level 1)
[ 1029.379846][ T2357] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17156: corrupted inode contents
[ 1029.392321][ T2357] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1029.401067][ T2357] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17156: corrupted inode contents
[ 1029.413371][ T2357] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.17156: mark_inode_dirty error
[ 1029.424479][ T2365] xt_hashlimit: size too large, truncated to 1048576
[ 1029.427373][ T2357] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1029.431181][ T2365] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1029.442244][ T2357] EXT4-fs (loop1): 1 truncate cleaned up
[ 1029.454596][ T2357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1029.500205][ T2365] blktrace: Concurrent blktraces are not allowed on loop5
[ 1029.763378][ T2388] __nla_validate_parse: 20 callbacks suppressed
[ 1029.763396][ T2388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17171'.
[ 1029.778890][ T2388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17171'.
[ 1029.814038][ T2388] netlink: 'syz.0.17171': attribute type 4 has an invalid length.
[ 1029.872537][ T2394] SELinux:  Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped).
[ 1029.983433][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.039421][ T2400] loop1: detected capacity change from 0 to 128
[ 1030.281925][ T2416] loop1: detected capacity change from 0 to 1024
[ 1030.302069][ T2416] EXT4-fs: inline encryption not supported
[ 1030.335920][ T2416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.385442][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1030.547207][ T2434] loop1: detected capacity change from 0 to 512
[ 1030.554261][ T2434] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1030.560896][ T2434] EXT4-fs: Ignoring removed bh option
[ 1030.570385][ T2434] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1030.585282][ T2434] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17185: corrupted inode contents
[ 1030.601407][ T2434] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.17185: mark_inode_dirty error
[ 1030.613507][ T2434] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17185: invalid indirect mapped block 1 (level 1)
[ 1030.634245][ T2434] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17185: corrupted inode contents
[ 1030.680353][ T2434] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1030.698490][ T2434] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17185: corrupted inode contents
[ 1030.712522][ T2434] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.17185: mark_inode_dirty error
[ 1030.726534][ T2434] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1030.735665][ T2434] EXT4-fs (loop1): 1 truncate cleaned up
[ 1030.741777][ T2434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1030.791858][   T29] kauditd_printk_skb: 479 callbacks suppressed
[ 1030.791877][   T29] audit: type=1326 audit(1286.768:149813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.846178][ T2453] nfs4: Bad value for 'source'
[ 1030.851389][   T29] audit: type=1326 audit(1286.798:149814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.874582][   T29] audit: type=1326 audit(1286.798:149815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.897893][   T29] audit: type=1326 audit(1286.798:149816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.909920][ T2448] wg1 speed is unknown, defaulting to 1000
[ 1030.921111][   T29] audit: type=1326 audit(1286.798:149817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.950021][   T29] audit: type=1326 audit(1286.798:149818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.953753][ T2454] xt_hashlimit: max too large, truncated to 1048576
[ 1030.973260][   T29] audit: type=1326 audit(1286.798:149819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2447 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1030.980600][ T2454] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1031.002875][   T29] audit: type=1400 audit(1286.808:149820): avc:  denied  { write } for  pid=2450 comm="syz.7.17196" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1031.002905][   T29] audit: type=1400 audit(1286.828:149821): avc:  denied  { mounton } for  pid=2450 comm="syz.7.17196" path="/267/file0" dev="tmpfs" ino=1411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1031.054316][   T29] audit: type=1326 audit(1286.928:149822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2455 comm="syz.6.17195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f4a1b2005 code=0x7ffc0000
[ 1031.076294][ T2454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17195'.
[ 1031.326415][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17202'.
[ 1031.343601][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1031.365923][ T2477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17201'.
[ 1031.405355][ T2477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17201'.
[ 1031.554890][ T2492] loop1: detected capacity change from 0 to 512
[ 1031.565486][ T2492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1031.575432][ T2492] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[ 1031.706093][ T2500] loop1: detected capacity change from 0 to 512
[ 1031.747867][ T2500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1031.775539][ T2500] EXT4-fs (loop1): too many log groups per flexible block group
[ 1031.784230][ T2500] EXT4-fs (loop1): failed to initialize mballoc (-12)
[ 1031.791094][ T2500] EXT4-fs (loop1): mount failed
[ 1031.848235][ T2513] xt_hashlimit: max too large, truncated to 1048576
[ 1031.864959][ T2513] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1031.885603][ T2513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17213'.
[ 1031.954863][ T2507] wg1 speed is unknown, defaulting to 1000
[ 1031.965248][ T2521] SELinux:  Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped).
[ 1032.536290][ T2552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17226'.
[ 1032.555741][ T2552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17226'.
[ 1032.986067][ T2569] xt_hashlimit: size too large, truncated to 1048576
[ 1032.992895][ T2569] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1033.027446][ T2570] xt_hashlimit: size too large, truncated to 1048576
[ 1033.034222][ T2570] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1033.065238][ T2569] blktrace: Concurrent blktraces are not allowed on loop1
[ 1033.117062][ T2570] blktrace: Concurrent blktraces are not allowed on loop13
[ 1033.456920][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17241'.
[ 1033.540425][ T2604] loop1: detected capacity change from 0 to 512
[ 1033.547700][ T2604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1033.560336][ T2606] FAULT_INJECTION: forcing a failure.
[ 1033.560336][ T2606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1033.573662][ T2606] CPU: 0 UID: 0 PID: 2606 Comm: syz.0.17249 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1033.573700][ T2606] Tainted: [W]=WARN
[ 1033.573767][ T2606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1033.573782][ T2606] Call Trace:
[ 1033.573789][ T2606]  <TASK>
[ 1033.573799][ T2606]  __dump_stack+0x1d/0x30
[ 1033.573824][ T2606]  dump_stack_lvl+0x95/0xd0
[ 1033.573843][ T2606]  dump_stack+0x15/0x1b
[ 1033.573942][ T2606]  should_fail_ex+0x265/0x280
[ 1033.573999][ T2606]  should_fail+0xb/0x20
[ 1033.574018][ T2606]  should_fail_usercopy+0x1a/0x20
[ 1033.574053][ T2606]  _copy_from_iter+0xcf/0xe70
[ 1033.574079][ T2606]  ? __rcu_read_unlock+0x34/0x70
[ 1033.574101][ T2606]  ? bpf_has_frame_pointer+0x1c7/0x1e0
[ 1033.574124][ T2606]  ? __rcu_read_unlock+0x34/0x70
[ 1033.574202][ T2606]  ? __rcu_read_unlock+0x4f/0x70
[ 1033.574224][ T2606]  rawv6_sendmsg+0x81f/0xf70
[ 1033.574256][ T2606]  ? __pfx_rawv6_sendmsg+0x10/0x10
[ 1033.574277][ T2606]  inet_sendmsg+0xc5/0xd0
[ 1033.574357][ T2606]  __sock_sendmsg+0x102/0x180
[ 1033.574379][ T2606]  __sys_sendto+0x268/0x330
[ 1033.574414][ T2606]  __x64_sys_sendto+0x76/0x90
[ 1033.574442][ T2606]  x64_sys_call+0x29a7/0x3000
[ 1033.574498][ T2606]  do_syscall_64+0xca/0x2b0
[ 1033.574676][ T2606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1033.574700][ T2606] RIP: 0033:0x7fb9e3cbf749
[ 1033.574717][ T2606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1033.574738][ T2606] RSP: 002b:00007fb9e271f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1033.574760][ T2606] RAX: ffffffffffffffda RBX: 00007fb9e3f15fa0 RCX: 00007fb9e3cbf749
[ 1033.574775][ T2606] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000006
[ 1033.574868][ T2606] RBP: 00007fb9e271f090 R08: 0000000000000000 R09: 0000000000000000
[ 1033.574935][ T2606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1033.574949][ T2606] R13: 00007fb9e3f16038 R14: 00007fb9e3f15fa0 R15: 00007ffede1a2fd8
[ 1033.574969][ T2606]  </TASK>
[ 1033.672389][ T2604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1033.811947][ T2614] program syz.0.17251 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1033.843771][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1033.882938][ T2619] program syz.7.17253 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1033.971365][ T2618] loop1: detected capacity change from 0 to 8192
[ 1033.978127][ T2630] program syz.7.17258 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1034.084274][ T2638] xt_hashlimit: size too large, truncated to 1048576
[ 1034.091053][ T2638] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1034.112791][ T2637] hub 6-0:1.0: USB hub found
[ 1034.117779][ T2637] hub 6-0:1.0: 8 ports detected
[ 1034.154496][ T2638] blktrace: Concurrent blktraces are not allowed on loop3
[ 1034.217471][ T2644] syzkaller1: entered promiscuous mode
[ 1034.222983][ T2644] syzkaller1: entered allmulticast mode
[ 1034.254446][ T2646] syzkaller1: entered promiscuous mode
[ 1034.259959][ T2646] syzkaller1: entered allmulticast mode
[ 1034.267342][ T2644] hub 9-0:1.0: USB hub found
[ 1034.272068][ T2644] hub 9-0:1.0: 8 ports detected
[ 1034.287890][ T2646] hub 9-0:1.0: USB hub found
[ 1034.298907][ T2646] hub 9-0:1.0: 8 ports detected
[ 1034.457576][ T2666] loop1: detected capacity change from 0 to 128
[ 1034.499480][ T2666] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1034.636592][ T2683] syzkaller1: entered promiscuous mode
[ 1034.642150][ T2683] syzkaller1: entered allmulticast mode
[ 1034.685192][ T2683] hub 9-0:1.0: USB hub found
[ 1034.697582][ T2683] hub 9-0:1.0: 8 ports detected
[ 1034.938189][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1034.990169][ T2698] __nla_validate_parse: 3 callbacks suppressed
[ 1034.990187][ T2698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17285'.
[ 1035.043738][ T2717] netlink: 19 bytes leftover after parsing attributes in process `syz.2.17293'.
[ 1035.116920][ T2729] loop1: detected capacity change from 0 to 512
[ 1035.139252][ T2730] syzkaller1: entered promiscuous mode
[ 1035.144837][ T2730] syzkaller1: entered allmulticast mode
[ 1035.168673][ T2729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1035.188026][ T2730] hub 9-0:1.0: USB hub found
[ 1035.192841][ T2730] hub 9-0:1.0: 8 ports detected
[ 1035.229190][ T2711] wg1 speed is unknown, defaulting to 1000
[ 1035.275615][ T2740] FAULT_INJECTION: forcing a failure.
[ 1035.275615][ T2740] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1035.288915][ T2740] CPU: 0 UID: 0 PID: 2740 Comm: syz.7.17299 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1035.288984][ T2740] Tainted: [W]=WARN
[ 1035.288992][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1035.289005][ T2740] Call Trace:
[ 1035.289086][ T2740]  <TASK>
[ 1035.289095][ T2740]  __dump_stack+0x1d/0x30
[ 1035.289122][ T2740]  dump_stack_lvl+0x95/0xd0
[ 1035.289146][ T2740]  dump_stack+0x15/0x1b
[ 1035.289168][ T2740]  should_fail_ex+0x265/0x280
[ 1035.289194][ T2740]  should_fail_alloc_page+0xf2/0x100
[ 1035.289268][ T2740]  __alloc_frozen_pages_noprof+0x109/0x360
[ 1035.289307][ T2740]  alloc_pages_mpol+0xb3/0x260
[ 1035.289339][ T2740]  folio_alloc_mpol_noprof+0x39/0x80
[ 1035.289369][ T2740]  shmem_get_folio_gfp+0x3cf/0xd50
[ 1035.289456][ T2740]  ? simple_xattr_get+0xb9/0x120
[ 1035.289508][ T2740]  shmem_write_begin+0xfc/0x1f0
[ 1035.289537][ T2740]  generic_perform_write+0x184/0x490
[ 1035.289626][ T2740]  shmem_file_write_iter+0xc5/0xf0
[ 1035.289689][ T2740]  do_iter_readv_writev+0x4a1/0x540
[ 1035.289725][ T2740]  vfs_writev+0x2df/0x8b0
[ 1035.289760][ T2740]  __se_sys_pwritev2+0xfc/0x1c0
[ 1035.289788][ T2740]  __x64_sys_pwritev2+0x67/0x80
[ 1035.289817][ T2740]  x64_sys_call+0x2c9e/0x3000
[ 1035.289844][ T2740]  do_syscall_64+0xca/0x2b0
[ 1035.289920][ T2740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.289975][ T2740] RIP: 0033:0x7f92c320f749
[ 1035.290046][ T2740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1035.290067][ T2740] RSP: 002b:00007f92c1c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1035.290090][ T2740] RAX: ffffffffffffffda RBX: 00007f92c3465fa0 RCX: 00007f92c320f749
[ 1035.290105][ T2740] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000006
[ 1035.290132][ T2740] RBP: 00007f92c1c6f090 R08: 0000000000000000 R09: 0000000000000000
[ 1035.290147][ T2740] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001
[ 1035.290161][ T2740] R13: 00007f92c3466038 R14: 00007f92c3465fa0 R15: 00007ffd05c55598
[ 1035.290182][ T2740]  </TASK>
[ 1035.619851][ T2750] siw: device registration error -23
[ 1035.654152][ T2757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17300'.
[ 1035.675219][ T2757] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17300'.
[ 1035.727858][ T2753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17303'.
[ 1035.942411][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.010069][   T29] kauditd_printk_skb: 554 callbacks suppressed
[ 1036.010085][   T29] audit: type=1326 audit(1291.988:150377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.060681][   T29] audit: type=1326 audit(1292.018:150378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.084037][   T29] audit: type=1326 audit(1292.018:150379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.107266][   T29] audit: type=1326 audit(1292.018:150380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.123136][ T2784] blktrace: Concurrent blktraces are not allowed on loop15
[ 1036.130501][   T29] audit: type=1326 audit(1292.018:150381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.160813][   T29] audit: type=1326 audit(1292.018:150382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.184012][   T29] audit: type=1326 audit(1292.028:150383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.207329][   T29] audit: type=1326 audit(1292.028:150384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.230688][   T29] audit: type=1326 audit(1292.028:150385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.253901][   T29] audit: type=1326 audit(1292.028:150386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2777 comm="syz.6.17311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1036.406235][ T2794] loop1: detected capacity change from 0 to 1024
[ 1036.438948][ T2794] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1036.476438][ T2790] wg1 speed is unknown, defaulting to 1000
[ 1036.482843][ T2794] JBD2: no valid journal superblock found
[ 1036.488645][ T2794] EXT4-fs (loop1): Could not load journal inode
[ 1036.582500][ T2806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17319'.
[ 1036.616338][ T2806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17319'.
[ 1036.691795][ T2818] xt_hashlimit: max too large, truncated to 1048576
[ 1036.699731][ T2818] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1036.731276][ T2818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17322'.
[ 1036.755675][ T2817] xt_hashlimit: max too large, truncated to 1048576
[ 1036.787891][ T2817] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1036.804420][ T2817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17323'.
[ 1036.871229][ T2808] wg1 speed is unknown, defaulting to 1000
[ 1036.899592][ T2821] FAULT_INJECTION: forcing a failure.
[ 1036.899592][ T2821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1036.912738][ T2821] CPU: 1 UID: 0 PID: 2821 Comm: syz.6.17325 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1036.912867][ T2821] Tainted: [W]=WARN
[ 1036.912876][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1036.912890][ T2821] Call Trace:
[ 1036.912898][ T2821]  <TASK>
[ 1036.912907][ T2821]  __dump_stack+0x1d/0x30
[ 1036.912935][ T2821]  dump_stack_lvl+0x95/0xd0
[ 1036.912959][ T2821]  dump_stack+0x15/0x1b
[ 1036.912986][ T2821]  should_fail_ex+0x265/0x280
[ 1036.913012][ T2821]  should_fail+0xb/0x20
[ 1036.913032][ T2821]  should_fail_usercopy+0x1a/0x20
[ 1036.913060][ T2821]  _copy_to_user+0x20/0xa0
[ 1036.913117][ T2821]  simple_read_from_buffer+0xb5/0x130
[ 1036.913143][ T2821]  proc_fail_nth_read+0x10e/0x150
[ 1036.913170][ T2821]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1036.913286][ T2821]  vfs_read+0x1a8/0x770
[ 1036.913307][ T2821]  ? __rcu_read_unlock+0x4f/0x70
[ 1036.913330][ T2821]  ? __fget_files+0x184/0x1c0
[ 1036.913380][ T2821]  ? mutex_lock+0x58/0x90
[ 1036.913413][ T2821]  ksys_read+0xda/0x1a0
[ 1036.913436][ T2821]  __x64_sys_read+0x40/0x50
[ 1036.913454][ T2821]  x64_sys_call+0x2889/0x3000
[ 1036.913500][ T2821]  do_syscall_64+0xca/0x2b0
[ 1036.913540][ T2821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.913566][ T2821] RIP: 0033:0x7f5f4a17e15c
[ 1036.913581][ T2821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1036.913622][ T2821] RSP: 002b:00007f5f48bdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1036.913724][ T2821] RAX: ffffffffffffffda RBX: 00007f5f4a3d5fa0 RCX: 00007f5f4a17e15c
[ 1036.913739][ T2821] RDX: 000000000000000f RSI: 00007f5f48bdf0a0 RDI: 0000000000000003
[ 1036.913754][ T2821] RBP: 00007f5f48bdf090 R08: 0000000000000000 R09: 0000000000000000
[ 1036.913768][ T2821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1036.913782][ T2821] R13: 00007f5f4a3d6038 R14: 00007f5f4a3d5fa0 R15: 00007ffe64495f08
[ 1036.913803][ T2821]  </TASK>
[ 1037.040255][ T2812] wg1 speed is unknown, defaulting to 1000
[ 1037.236423][ T2830] loop1: detected capacity change from 0 to 1024
[ 1037.360547][ T2842] xt_connbytes: Forcing CT accounting to be enabled
[ 1037.455002][ T2849] siw: device registration error -23
[ 1037.534072][ T2860] xt_hashlimit: size too large, truncated to 1048576
[ 1037.540840][ T2860] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1037.550443][ T2858] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in;
[ 1037.550443][ T2858]    program syz.1.17337 not setting count and/or reply_len properly
[ 1037.593530][ T2860] blktrace: Concurrent blktraces are not allowed on loop13
[ 1037.699811][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.707403][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.714862][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.722268][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.729700][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.737152][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.744615][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.752057][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.759474][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.766918][T10901] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0
[ 1037.778388][T10901] hid-generic 0000:0000:0004.0004: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[ 1037.918810][ T2877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17344'.
[ 1037.966898][ T2888] syzkaller1: entered promiscuous mode
[ 1037.972470][ T2888] syzkaller1: entered allmulticast mode
[ 1037.993024][ T2888] hub 9-0:1.0: USB hub found
[ 1038.003551][ T2888] hub 9-0:1.0: 8 ports detected
[ 1038.023359][ T2891] xt_hashlimit: max too large, truncated to 1048576
[ 1038.031277][ T2891] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1038.058633][ T2884] wg1 speed is unknown, defaulting to 1000
[ 1038.149369][ T2902] syzkaller1: entered promiscuous mode
[ 1038.154963][ T2902] syzkaller1: entered allmulticast mode
[ 1038.170035][ T2902] hub 9-0:1.0: USB hub found
[ 1038.174868][ T2902] hub 9-0:1.0: 8 ports detected
[ 1038.252210][ T2909] siw: device registration error -23
[ 1038.450924][ T2933] FAULT_INJECTION: forcing a failure.
[ 1038.450924][ T2933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1038.464186][ T2933] CPU: 0 UID: 0 PID: 2933 Comm: syz.6.17361 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1038.464222][ T2933] Tainted: [W]=WARN
[ 1038.464260][ T2933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1038.464275][ T2933] Call Trace:
[ 1038.464283][ T2933]  <TASK>
[ 1038.464293][ T2933]  __dump_stack+0x1d/0x30
[ 1038.464324][ T2933]  dump_stack_lvl+0x95/0xd0
[ 1038.464350][ T2933]  dump_stack+0x15/0x1b
[ 1038.464371][ T2933]  should_fail_ex+0x265/0x280
[ 1038.464465][ T2933]  should_fail+0xb/0x20
[ 1038.464489][ T2933]  should_fail_usercopy+0x1a/0x20
[ 1038.464518][ T2933]  _copy_from_user+0x1c/0xb0
[ 1038.464572][ T2933]  ___sys_sendmsg+0xc1/0x1d0
[ 1038.464610][ T2933]  __x64_sys_sendmsg+0xd4/0x160
[ 1038.464641][ T2933]  x64_sys_call+0x17ba/0x3000
[ 1038.464697][ T2933]  do_syscall_64+0xca/0x2b0
[ 1038.464737][ T2933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.464763][ T2933] RIP: 0033:0x7f5f4a17f749
[ 1038.464782][ T2933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1038.464804][ T2933] RSP: 002b:00007f5f48bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1038.464880][ T2933] RAX: ffffffffffffffda RBX: 00007f5f4a3d5fa0 RCX: 00007f5f4a17f749
[ 1038.464893][ T2933] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000006
[ 1038.464906][ T2933] RBP: 00007f5f48bdf090 R08: 0000000000000000 R09: 0000000000000000
[ 1038.464918][ T2933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1038.464932][ T2933] R13: 00007f5f4a3d6038 R14: 00007f5f4a3d5fa0 R15: 00007ffe64495f08
[ 1038.465027][ T2933]  </TASK>
[ 1038.693502][ T2938] loop1: detected capacity change from 0 to 1024
[ 1038.836155][ T2951] xt_hashlimit: max too large, truncated to 1048576
[ 1038.853487][ T2951] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1038.904958][ T2942] wg1 speed is unknown, defaulting to 1000
[ 1039.524384][ T2985] loop1: detected capacity change from 0 to 1024
[ 1039.557212][ T2985] EXT4-fs: Ignoring removed orlov option
[ 1039.587536][ T2985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1039.613299][ T2994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.626972][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1039.663724][ T2996] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported
[ 1039.749541][ T2994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.838315][ T2994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.938618][ T2994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.011657][ T3003] loop1: detected capacity change from 0 to 512
[ 1040.115183][ T3009] xt_hashlimit: max too large, truncated to 1048576
[ 1040.151847][ T3009] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1040.171680][ T3003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1040.176799][T21567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.217142][ T3005] __nla_validate_parse: 4 callbacks suppressed
[ 1040.217225][ T3005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17381'.
[ 1040.252727][T21567] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.283352][T21567] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.302920][T21567] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1040.439059][ T3007] wg1 speed is unknown, defaulting to 1000
[ 1040.693054][ T3032] xt_hashlimit: size too large, truncated to 1048576
[ 1040.699867][ T3032] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1040.732376][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.743760][ T3037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17388'.
[ 1040.769977][ T3032] blktrace: Concurrent blktraces are not allowed on loop13
[ 1041.054050][   T29] kauditd_printk_skb: 403 callbacks suppressed
[ 1041.054070][   T29] audit: type=1326 audit(1297.018:150790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.083496][   T29] audit: type=1326 audit(1297.018:150791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.103069][ T3077] xt_hashlimit: max too large, truncated to 1048576
[ 1041.106679][   T29] audit: type=1326 audit(1297.018:150792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.136471][   T29] audit: type=1326 audit(1297.018:150793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.159549][   T29] audit: type=1326 audit(1297.018:150794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.159615][ T3077] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1041.173216][ T3077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17399'.
[ 1041.182740][   T29] audit: type=1326 audit(1297.018:150795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1041.192997][ T3082] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17401'.
[ 1041.261570][ T3081] loop1: detected capacity change from 0 to 512
[ 1041.319773][ T3081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1041.471180][ T3101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17407'.
[ 1041.491385][ T3101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.17407'.
[ 1041.513534][ T3069] wg1 speed is unknown, defaulting to 1000
[ 1041.542934][   T29] audit: type=1326 audit(1297.518:150796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3102 comm="syz.2.17399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7faea4492005 code=0x7ffc0000
[ 1041.600533][   T29] audit: type=1326 audit(1297.568:150797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3103 comm="syz.0.17419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1041.623759][   T29] audit: type=1326 audit(1297.568:150798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3103 comm="syz.0.17419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1041.647117][   T29] audit: type=1326 audit(1297.568:150799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3103 comm="syz.0.17419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1041.741497][ T3113] blktrace: Concurrent blktraces are not allowed on loop5
[ 1041.773006][ T3117] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17413'.
[ 1041.790337][ T3117] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1041.856629][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.876541][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17415'.
[ 1042.023098][ T3144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17418'.
[ 1042.070357][ T3146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17420'.
[ 1042.092186][ T3146] loop1: detected capacity change from 0 to 128
[ 1042.120210][ T3146] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1042.368932][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1042.404690][ T3155] hub 9-0:1.0: USB hub found
[ 1042.414140][ T3155] hub 9-0:1.0: 8 ports detected
[ 1042.571697][ T3178] loop1: detected capacity change from 0 to 512
[ 1042.590110][ T3178] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1042.600048][ T3178] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[ 1042.818739][ T3204] loop1: detected capacity change from 0 to 128
[ 1042.847344][ T3204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1042.869635][ T3186] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1042.876064][ T3186] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1042.943278][ T3216] xt_hashlimit: size too large, truncated to 1048576
[ 1042.950164][ T3216] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1042.969741][ T3216] blktrace: Concurrent blktraces are not allowed on loop13
[ 1043.095751][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1043.178101][ T3226] xt_hashlimit: size too large, truncated to 1048576
[ 1043.185005][ T3226] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1043.210254][ T3226] blktrace: Concurrent blktraces are not allowed on loop15
[ 1043.365095][ T3243] xt_hashlimit: max too large, truncated to 1048576
[ 1043.381594][ T3239] wg1 speed is unknown, defaulting to 1000
[ 1043.394860][ T3243] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1043.487242][ T3248] loop1: detected capacity change from 0 to 512
[ 1043.494726][ T3248] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1043.504726][ T3248] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[ 1043.594341][ T3258] xt_hashlimit: size too large, truncated to 1048576
[ 1043.601132][ T3258] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1043.638135][ T3258] blktrace: Concurrent blktraces are not allowed on loop1
[ 1043.855583][ T3287] loop1: detected capacity change from 0 to 512
[ 1043.867363][ T3287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.904170][ T3282] rdma_op ffff88811261dd80 conn xmit_rdma 0000000000000000
[ 1043.937401][ T3295] xt_hashlimit: max too large, truncated to 1048576
[ 1043.963485][ T3295] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1044.061250][ T3284] wg1 speed is unknown, defaulting to 1000
[ 1044.362612][ T3328] xt_hashlimit: size too large, truncated to 1048576
[ 1044.369459][ T3328] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1044.415418][ T3328] blktrace: Concurrent blktraces are not allowed on loop15
[ 1044.659821][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.808784][ T3356] xt_hashlimit: max too large, truncated to 1048576
[ 1044.835714][ T3356] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1044.914629][ T3349] wg1 speed is unknown, defaulting to 1000
[ 1044.950269][ T3365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.018487][ T3365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.048592][ T3372] siw: device registration error -23
[ 1045.089416][ T3365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.127718][ T3365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.212775][   T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.226901][   T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.240921][   T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.253395][   T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1045.340447][ T3396] __nla_validate_parse: 7 callbacks suppressed
[ 1045.340465][ T3396] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17512'.
[ 1045.505466][ T3418] xt_hashlimit: max too large, truncated to 1048576
[ 1045.531358][ T3418] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1045.545206][ T3411] wg1 speed is unknown, defaulting to 1000
[ 1045.551718][ T3418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17516'.
[ 1045.878785][ T3458] syzkaller1: entered promiscuous mode
[ 1045.884440][ T3458] syzkaller1: entered allmulticast mode
[ 1045.896709][ T3458] hub 9-0:1.0: USB hub found
[ 1045.901822][ T3458] hub 9-0:1.0: 8 ports detected
[ 1045.954436][ T3465] hub 9-0:1.0: USB hub found
[ 1045.959302][ T3465] hub 9-0:1.0: 8 ports detected
[ 1046.041915][ T3481] FAULT_INJECTION: forcing a failure.
[ 1046.041915][ T3481] name failslab, interval 1, probability 0, space 0, times 0
[ 1046.054673][ T3481] CPU: 0 UID: 0 PID: 3481 Comm: syz.0.17541 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1046.054718][ T3481] Tainted: [W]=WARN
[ 1046.054725][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1046.054737][ T3481] Call Trace:
[ 1046.054744][ T3481]  <TASK>
[ 1046.054752][ T3481]  __dump_stack+0x1d/0x30
[ 1046.054781][ T3481]  dump_stack_lvl+0x95/0xd0
[ 1046.054807][ T3481]  dump_stack+0x15/0x1b
[ 1046.054859][ T3481]  should_fail_ex+0x265/0x280
[ 1046.054880][ T3481]  ? __pfx_proc_alloc_inode+0x10/0x10
[ 1046.054909][ T3481]  should_failslab+0x8c/0xb0
[ 1046.054938][ T3481]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[ 1046.054965][ T3481]  ? proc_alloc_inode+0x34/0x90
[ 1046.055000][ T3481]  ? __d_lookup_rcu+0x28b/0x2d0
[ 1046.055032][ T3481]  ? __pfx_proc_alloc_inode+0x10/0x10
[ 1046.055125][ T3481]  proc_alloc_inode+0x34/0x90
[ 1046.055153][ T3481]  alloc_inode+0x40/0x170
[ 1046.055212][ T3481]  new_inode+0x1d/0xe0
[ 1046.055235][ T3481]  proc_pid_make_inode+0x1f/0xd0
[ 1046.055270][ T3481]  proc_pident_instantiate+0x44/0x180
[ 1046.055358][ T3481]  proc_pident_lookup+0x115/0x1a0
[ 1046.055382][ T3481]  proc_tgid_base_lookup+0x2b/0x40
[ 1046.055430][ T3481]  __lookup_slow+0x193/0x250
[ 1046.055536][ T3481]  lookup_slow+0x3c/0x60
[ 1046.055567][ T3481]  link_path_walk+0x946/0xe30
[ 1046.055595][ T3481]  path_openat+0x1c0/0x23b0
[ 1046.055631][ T3481]  ? _parse_integer_limit+0x170/0x190
[ 1046.055655][ T3481]  do_filp_open+0x109/0x230
[ 1046.055683][ T3481]  ? __pfx_kfree_link+0x10/0x10
[ 1046.055705][ T3481]  do_sys_openat2+0xa6/0x150
[ 1046.055777][ T3481]  __x64_sys_openat+0xf2/0x120
[ 1046.055898][ T3481]  x64_sys_call+0x2b07/0x3000
[ 1046.055920][ T3481]  do_syscall_64+0xca/0x2b0
[ 1046.055982][ T3481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1046.056002][ T3481] RIP: 0033:0x7fb9e3cbdf90
[ 1046.056017][ T3481] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[ 1046.056073][ T3481] RSP: 002b:00007fb9e271ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 1046.056092][ T3481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9e3cbdf90
[ 1046.056104][ T3481] RDX: 0000000000000000 RSI: 00007fb9e3d4407e RDI: 00000000ffffff9c
[ 1046.056178][ T3481] RBP: 00007fb9e3d4407e R08: 0000000000000000 R09: 0000000000000000
[ 1046.056190][ T3481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1046.056201][ T3481] R13: 00007fb9e3f16038 R14: 00007fb9e3f15fa0 R15: 00007ffede1a2fd8
[ 1046.056218][ T3481]  </TASK>
[ 1046.330712][ T3485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17543'.
[ 1046.344184][   T29] kauditd_printk_skb: 984 callbacks suppressed
[ 1046.344203][   T29] audit: type=1326 audit(1302.328:151784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.373798][   T29] audit: type=1326 audit(1302.328:151785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.397062][   T29] audit: type=1326 audit(1302.328:151786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.420331][   T29] audit: type=1326 audit(1302.328:151787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.443718][   T29] audit: type=1326 audit(1302.328:151788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.466912][   T29] audit: type=1326 audit(1302.328:151789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.490083][   T29] audit: type=1326 audit(1302.328:151790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.513302][   T29] audit: type=1326 audit(1302.328:151791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.543531][   T29] audit: type=1326 audit(1302.518:151792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.566831][   T29] audit: type=1326 audit(1302.518:151793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.2.17543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea445f749 code=0x7ffc0000
[ 1046.570327][ T3490] siw: device registration error -23
[ 1047.161324][ T3525] xt_hashlimit: size too large, truncated to 1048576
[ 1047.168135][ T3525] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1047.226800][ T3527] blktrace: Concurrent blktraces are not allowed on loop13
[ 1047.480353][ T3547] siw: device registration error -23
[ 1047.512580][ T3550] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.599426][ T3550] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.637969][ T3550] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.698164][ T3550] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.776753][T21573] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.794016][T21573] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.815065][ T3560] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17571'.
[ 1047.824498][T21573] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.832710][T21573] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1048.012304][ T3572] xt_hashlimit: size too large, truncated to 1048576
[ 1048.019110][ T3572] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1048.031353][ T3572] blktrace: Concurrent blktraces are not allowed on loop13
[ 1048.180081][ T3586] hub 9-0:1.0: USB hub found
[ 1048.185146][ T3586] hub 9-0:1.0: 8 ports detected
[ 1048.296664][ T3602] syzkaller1: entered promiscuous mode
[ 1048.302186][ T3602] syzkaller1: entered allmulticast mode
[ 1048.317721][ T3602] hub 9-0:1.0: USB hub found
[ 1048.322483][ T3602] hub 9-0:1.0: 8 ports detected
[ 1048.480934][ T3590] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1048.487412][ T3590] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1048.573009][ T3604] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1048.579480][ T3604] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1048.775698][ T3623] siw: device registration error -23
[ 1049.095003][ T3628] wg1 speed is unknown, defaulting to 1000
[ 1049.161142][ T3628] chnl_net:caif_netlink_parms(): no params data found
[ 1049.189998][T21584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.219156][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.226572][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.233791][ T3628] bridge_slave_0: entered allmulticast mode
[ 1049.240256][ T3628] bridge_slave_0: entered promiscuous mode
[ 1049.250033][T21584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.261573][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.268698][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.276055][ T3628] bridge_slave_1: entered allmulticast mode
[ 1049.282372][ T3628] bridge_slave_1: entered promiscuous mode
[ 1049.302338][T21584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.315228][ T3628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1049.326478][ T3628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1049.349587][T21584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.362072][ T3628] team0: Port device team_slave_0 added
[ 1049.368993][ T3628] team0: Port device team_slave_1 added
[ 1049.386452][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1049.393419][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1049.419498][ T3628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1049.431248][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1049.438226][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1049.464199][ T3628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1049.496230][ T3628] hsr_slave_0: entered promiscuous mode
[ 1049.502559][ T3628] hsr_slave_1: entered promiscuous mode
[ 1049.508442][ T3628] debugfs: 'hsr0' already exists in 'hsr'
[ 1049.514191][ T3628] Cannot create hsr debugfs directory
[ 1049.536656][T21584] bridge_slave_1: left allmulticast mode
[ 1049.542404][T21584] bridge_slave_1: left promiscuous mode
[ 1049.548067][T21584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.556512][T21584] bridge_slave_0: left allmulticast mode
[ 1049.562211][T21584] bridge_slave_0: left promiscuous mode
[ 1049.567957][T21584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.727546][T21584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1049.738620][T21584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1049.750081][T21584] bond0 (unregistering): Released all slaves
[ 1049.759244][T21584] bond1 (unregistering): Released all slaves
[ 1049.759961][ T3661] loop1: detected capacity change from 0 to 128
[ 1049.768014][T21584] bond2 (unregistering): Released all slaves
[ 1049.777568][ T3661] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1049.778466][ T3661] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.17604: No space for directory leaf checksum. Please run e2fsck -D.
[ 1049.792413][T21584] bond3 (unregistering): Released all slaves
[ 1049.805088][ T3661] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.17604: checksumming directory block 0
[ 1049.809566][ T3661] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.17604: No space for directory leaf checksum. Please run e2fsck -D.
[ 1049.838609][ T3661] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.17604: checksumming directory block 0
[ 1049.851820][ T3661] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.17604: No space for directory leaf checksum. Please run e2fsck -D.
[ 1049.867294][ T3661] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.17604: checksumming directory block 0
[ 1049.894734][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1050.000599][T21584] hsr_slave_0: left promiscuous mode
[ 1050.013440][T21584] hsr_slave_1: left promiscuous mode
[ 1050.027336][T21584] veth1_macvtap: left promiscuous mode
[ 1050.032837][T21584] veth0_macvtap: left promiscuous mode
[ 1050.038447][T21584] veth1_vlan: left promiscuous mode
[ 1050.043681][T21584] veth0_vlan: left promiscuous mode
[ 1050.161243][ T3682] syzkaller1: entered promiscuous mode
[ 1050.166791][ T3682] syzkaller1: entered allmulticast mode
[ 1050.177858][ T3682] hub 9-0:1.0: USB hub found
[ 1050.182525][ T3682] hub 9-0:1.0: 8 ports detected
[ 1050.291117][ T3675] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1050.297581][ T3675] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1050.351302][ T3628] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1050.363474][T21584] IPVS: stop unused estimator thread 0...
[ 1050.372616][ T3628] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1050.381818][ T3628] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1050.391262][ T3628] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1050.429699][ T3628] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.442676][ T3628] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.461067][T21584] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.468177][T21584] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.485285][T21584] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.492396][T21584] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.559435][ T3628] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1050.625238][ T3628] veth0_vlan: entered promiscuous mode
[ 1050.632157][ T3717] loop1: detected capacity change from 0 to 512
[ 1050.633150][ T3628] veth1_vlan: entered promiscuous mode
[ 1050.644390][ T3717] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1050.651073][ T3717] EXT4-fs: Ignoring removed bh option
[ 1050.654264][ T3628] veth0_macvtap: entered promiscuous mode
[ 1050.664335][ T3628] veth1_macvtap: entered promiscuous mode
[ 1050.664622][ T3717] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1050.675242][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1050.692685][ T3717] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17618: corrupted inode contents
[ 1050.694327][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.713761][ T3717] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.17618: mark_inode_dirty error
[ 1050.725815][ T3717] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17618: invalid indirect mapped block 1 (level 1)
[ 1050.726841][T21574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.739348][ T3717] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17618: corrupted inode contents
[ 1050.760256][ T3717] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1050.760486][T21574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.778524][ T3717] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17618: corrupted inode contents
[ 1050.791832][T21574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.792103][ T3717] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.17618: mark_inode_dirty error
[ 1050.813318][T21574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.813467][ T3717] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1050.831357][ T3717] EXT4-fs (loop1): 1 truncate cleaned up
[ 1050.837739][ T3717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1051.192003][ T3744] pimreg3: entered allmulticast mode
[ 1051.208253][ T3744] bridge_slave_0: left allmulticast mode
[ 1051.214167][ T3744] bridge_slave_0: left promiscuous mode
[ 1051.219945][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.229467][ T3744] bridge_slave_1: left allmulticast mode
[ 1051.235191][ T3744] bridge_slave_1: left promiscuous mode
[ 1051.240808][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1051.249973][ T3744] bond0: (slave bond_slave_0): Releasing backup interface
[ 1051.259464][ T3744] bond0: (slave bond_slave_1): Releasing backup interface
[ 1051.270859][ T3744] team0: Port device team_slave_0 removed
[ 1051.279267][ T3744] team0: Port device team_slave_1 removed
[ 1051.285924][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1051.293298][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1051.301580][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.309021][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.317962][ T3744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1051.381094][   T29] kauditd_printk_skb: 948 callbacks suppressed
[ 1051.381110][   T29] audit: type=1326 audit(1307.358:152742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1051.412960][   T29] audit: type=1326 audit(1307.368:152743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1051.436430][   T29] audit: type=1326 audit(1307.368:152744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1051.460091][   T29] audit: type=1326 audit(1307.368:152745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1051.483349][   T29] audit: type=1326 audit(1307.368:152746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5f4a17f783 code=0x7ffc0000
[ 1051.506393][   T29] audit: type=1326 audit(1307.368:152747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f4a17e1ff code=0x7ffc0000
[ 1051.529477][   T29] audit: type=1326 audit(1307.368:152748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.6.17631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5f4a17f7d7 code=0x7ffc0000
[ 1051.562185][   T29] audit: type=1326 audit(1307.418:152749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.0.17629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1051.563124][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1051.585476][   T29] audit: type=1326 audit(1307.418:152750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.0.17629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1051.617650][   T29] audit: type=1326 audit(1307.418:152751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3745 comm="syz.0.17629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e3cbf749 code=0x7ffc0000
[ 1051.648504][ T3746] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1051.654971][ T3746] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1051.818547][ T3763] loop1: detected capacity change from 0 to 8192
[ 1051.925872][ T3774] xt_hashlimit: size too large, truncated to 1048576
[ 1051.932610][ T3774] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1051.961529][ T3774] blktrace: Concurrent blktraces are not allowed on loop3
[ 1051.965617][ T3775] xt_hashlimit: size too large, truncated to 1048576
[ 1051.975440][ T3775] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1052.012240][ T3775] blktrace: Concurrent blktraces are not allowed on loop13
[ 1052.163944][ T3780] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1052.193054][ T3780] FAULT_INJECTION: forcing a failure.
[ 1052.193054][ T3780] name failslab, interval 1, probability 0, space 0, times 0
[ 1052.205767][ T3780] CPU: 1 UID: 0 PID: 3780 Comm: syz.7.17642 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1052.205838][ T3780] Tainted: [W]=WARN
[ 1052.205845][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1052.205856][ T3780] Call Trace:
[ 1052.205862][ T3780]  <TASK>
[ 1052.205870][ T3780]  __dump_stack+0x1d/0x30
[ 1052.205922][ T3780]  dump_stack_lvl+0x95/0xd0
[ 1052.205947][ T3780]  dump_stack+0x15/0x1b
[ 1052.205969][ T3780]  should_fail_ex+0x265/0x280
[ 1052.205997][ T3780]  should_failslab+0x8c/0xb0
[ 1052.206100][ T3780]  __kmalloc_noprof+0xb9/0x5a0
[ 1052.206126][ T3780]  ? genl_family_rcv_msg_attrs_parse+0x75/0x190
[ 1052.206160][ T3780]  genl_family_rcv_msg_attrs_parse+0x75/0x190
[ 1052.206228][ T3780]  genl_family_rcv_msg_doit+0x48/0x1b0
[ 1052.206256][ T3780]  ? selinux_capable+0x31/0x40
[ 1052.206292][ T3780]  ? security_capable+0x83/0x90
[ 1052.206422][ T3780]  ? ns_capable+0x7d/0xb0
[ 1052.206530][ T3780]  genl_rcv_msg+0x422/0x460
[ 1052.206574][ T3780]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1052.206608][ T3780]  ? __pfx_nl80211_reload_regdb+0x10/0x10
[ 1052.206703][ T3780]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1052.206799][ T3780]  netlink_rcv_skb+0x123/0x220
[ 1052.206865][ T3780]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1052.206896][ T3780]  genl_rcv+0x28/0x40
[ 1052.206920][ T3780]  netlink_unicast+0x5c0/0x690
[ 1052.206996][ T3780]  netlink_sendmsg+0x58b/0x6b0
[ 1052.207035][ T3780]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1052.207102][ T3780]  __sock_sendmsg+0x145/0x180
[ 1052.207127][ T3780]  ____sys_sendmsg+0x31e/0x4a0
[ 1052.207163][ T3780]  ___sys_sendmsg+0x17b/0x1d0
[ 1052.207256][ T3780]  __x64_sys_sendmsg+0xd4/0x160
[ 1052.207298][ T3780]  x64_sys_call+0x17ba/0x3000
[ 1052.207323][ T3780]  do_syscall_64+0xca/0x2b0
[ 1052.207392][ T3780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1052.207438][ T3780] RIP: 0033:0x7f92c320f749
[ 1052.207515][ T3780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1052.207532][ T3780] RSP: 002b:00007f92c1c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1052.207552][ T3780] RAX: ffffffffffffffda RBX: 00007f92c3466090 RCX: 00007f92c320f749
[ 1052.207567][ T3780] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005
[ 1052.207579][ T3780] RBP: 00007f92c1c4e090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.207590][ T3780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.207602][ T3780] R13: 00007f92c3466128 R14: 00007f92c3466090 R15: 00007ffd05c55598
[ 1052.207644][ T3780]  </TASK>
[ 1052.581350][ T3796] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.603174][ T3797] xt_hashlimit: max too large, truncated to 1048576
[ 1052.612466][ T3797] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1052.627988][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17649'.
[ 1052.638350][ T3796] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.685843][ T3796] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.700777][ T3792] wg1 speed is unknown, defaulting to 1000
[ 1052.781064][ T3807] hub 9-0:1.0: USB hub found
[ 1052.785864][ T3807] hub 9-0:1.0: 8 ports detected
[ 1052.803104][ T3796] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.854717][T21568] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.897310][ T3817] x_tables: duplicate underflow at hook 4
[ 1052.904359][T21568] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.912571][T21568] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.944244][T21568] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1053.682513][ T3850] syzkaller1: entered promiscuous mode
[ 1053.688109][ T3850] syzkaller1: entered allmulticast mode
[ 1053.700092][ T3850] hub 9-0:1.0: USB hub found
[ 1053.705180][ T3850] hub 9-0:1.0: 8 ports detected
[ 1053.792881][ T3850] loop1: detected capacity change from 0 to 512
[ 1053.827495][ T3850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1053.847235][ T3854] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.888474][ T3850] EXT4-fs (loop1): too many log groups per flexible block group
[ 1053.916646][ T3850] EXT4-fs (loop1): failed to initialize mballoc (-12)
[ 1053.928913][ T3850] EXT4-fs (loop1): mount failed
[ 1053.956491][ T3854] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.018904][ T3854] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.106168][ T3854] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.232658][ T3883] xt_hashlimit: max too large, truncated to 1048576
[ 1054.272936][ T3883] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1054.307666][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17682'.
[ 1054.321090][ T3877] wg1 speed is unknown, defaulting to 1000
[ 1054.367103][ T3889] x_tables: duplicate underflow at hook 4
[ 1055.464172][ T3910] loop1: detected capacity change from 0 to 2048
[ 1055.502879][ T3910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1055.555307][ T3910] 9p: Bad value for 'wfdno'
[ 1055.595432][ T3910] FAULT_INJECTION: forcing a failure.
[ 1055.595432][ T3910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1055.608540][ T3910] CPU: 0 UID: 0 PID: 3910 Comm: syz.1.17691 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1055.608572][ T3910] Tainted: [W]=WARN
[ 1055.608580][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1055.608626][ T3910] Call Trace:
[ 1055.608634][ T3910]  <TASK>
[ 1055.608642][ T3910]  __dump_stack+0x1d/0x30
[ 1055.608678][ T3910]  dump_stack_lvl+0x95/0xd0
[ 1055.608697][ T3910]  dump_stack+0x15/0x1b
[ 1055.608790][ T3910]  should_fail_ex+0x265/0x280
[ 1055.608813][ T3910]  should_fail+0xb/0x20
[ 1055.608858][ T3910]  should_fail_usercopy+0x1a/0x20
[ 1055.608940][ T3910]  strncpy_from_user+0x27/0x260
[ 1055.608967][ T3910]  ? bpf_bprintf_cleanup+0x75/0xb0
[ 1055.608990][ T3910]  strncpy_from_user_nofault+0x68/0xf0
[ 1055.609059][ T3910]  bpf_probe_read_compat_str+0xb4/0x130
[ 1055.609091][ T3910]  bpf_prog_59ea531272c1e515+0x3e/0x44
[ 1055.609109][ T3910]  bpf_trace_run3+0x10f/0x1e0
[ 1055.609151][ T3910]  ? audit_log_end+0x23d/0x250
[ 1055.609266][ T3910]  ? audit_log_end+0x23d/0x250
[ 1055.609322][ T3910]  __traceiter_kmem_cache_free+0x38/0x60
[ 1055.609429][ T3910]  ? audit_log_end+0x23d/0x250
[ 1055.609470][ T3910]  kmem_cache_free+0x327/0x3a0
[ 1055.609494][ T3910]  audit_log_end+0x23d/0x250
[ 1055.609514][ T3910]  audit_seccomp+0xdc/0x100
[ 1055.609551][ T3910]  __seccomp_filter+0x843/0x1260
[ 1055.609581][ T3910]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1055.609607][ T3910]  ? vfs_write+0x7e8/0x960
[ 1055.609634][ T3910]  __secure_computing+0x82/0x150
[ 1055.609694][ T3910]  syscall_trace_enter+0xcf/0x1e0
[ 1055.609784][ T3910]  do_syscall_64+0xa4/0x2b0
[ 1055.609868][ T3910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.609888][ T3910] RIP: 0033:0x7f3d348ff749
[ 1055.609904][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1055.609982][ T3910] RSP: 002b:00007f3d33367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1055.610003][ T3910] RAX: ffffffffffffffda RBX: 00007f3d34b55fa0 RCX: 00007f3d348ff749
[ 1055.610019][ T3910] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009
[ 1055.610034][ T3910] RBP: 00007f3d33367090 R08: 0000000000000000 R09: 0000000000000000
[ 1055.610123][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1055.610138][ T3910] R13: 00007f3d34b56038 R14: 00007f3d34b55fa0 R15: 00007ffeb009d068
[ 1055.610161][ T3910]  </TASK>
[ 1055.864144][ T3920] xt_hashlimit: size too large, truncated to 1048576
[ 1055.870880][ T3920] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1055.894457][ T3910] team0: left allmulticast mode
[ 1055.899367][ T3910] team_slave_0: left allmulticast mode
[ 1055.904938][ T3910] team_slave_1: left allmulticast mode
[ 1055.910433][ T3910] team0: left promiscuous mode
[ 1055.915263][ T3910] team_slave_0: left promiscuous mode
[ 1055.920785][ T3910] team_slave_1: left promiscuous mode
[ 1055.925223][ T3920] blktrace: Concurrent blktraces are not allowed on loop15
[ 1055.926435][ T3910] bridge0: port 3(team0) entered disabled state
[ 1055.953061][ T3910] bridge_slave_0: left allmulticast mode
[ 1055.958846][ T3910] bridge_slave_0: left promiscuous mode
[ 1055.965025][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.986284][ T3910] bridge_slave_1: left allmulticast mode
[ 1055.991981][ T3910] bridge_slave_1: left promiscuous mode
[ 1055.997729][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.016415][ T3910] bond0: (slave bond_slave_0): Releasing backup interface
[ 1056.026833][ T3910] bond0: (slave bond_slave_1): Releasing backup interface
[ 1056.040422][ T3910] team0: Port device team_slave_0 removed
[ 1056.050724][ T3910] team0: Port device team_slave_1 removed
[ 1056.060618][ T3910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1056.077173][T10901] wg1 speed is unknown, defaulting to 1000
[ 1056.086180][ T3926] syzkaller1: entered promiscuous mode
[ 1056.091688][ T3926] syzkaller1: entered allmulticast mode
[ 1056.108489][ T3923] hub 9-0:1.0: USB hub found
[ 1056.113159][ T3923] hub 9-0:1.0: 8 ports detected
[ 1056.128788][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1056.159634][ T3932] loop1: detected capacity change from 0 to 128
[ 1056.396148][   T29] kauditd_printk_skb: 483 callbacks suppressed
[ 1056.396165][   T29] audit: type=1326 audit(1312.378:153235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.429089][   T29] audit: type=1326 audit(1312.408:153236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92c31ab829 code=0x7ffc0000
[ 1056.452265][   T29] audit: type=1326 audit(1312.408:153237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.475605][   T29] audit: type=1326 audit(1312.408:153238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.499494][   T29] audit: type=1326 audit(1312.478:153239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.522924][   T29] audit: type=1326 audit(1312.478:153240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.530154][ T3943] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1056.546155][   T29] audit: type=1326 audit(1312.478:153241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.552423][ T3943] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1056.581920][   T29] audit: type=1326 audit(1312.478:153242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.605171][   T29] audit: type=1326 audit(1312.478:153243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.628314][   T29] audit: type=1326 audit(1312.478:153244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.7.17705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1056.697280][ T3960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17710'.
[ 1056.709667][ T3960] loop1: detected capacity change from 0 to 128
[ 1056.718691][ T3960] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1056.786446][ T3972] xt_hashlimit: size too large, truncated to 1048576
[ 1056.793180][ T3972] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1056.844621][ T3967] blktrace: Concurrent blktraces are not allowed on loop5
[ 1056.855321][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1056.892443][ T3979] syzkaller1: entered promiscuous mode
[ 1056.898086][ T3979] syzkaller1: entered allmulticast mode
[ 1056.911586][ T3979] hub 9-0:1.0: USB hub found
[ 1056.916367][ T3979] hub 9-0:1.0: 8 ports detected
[ 1056.930700][ T3980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17715'.
[ 1057.263376][ T4010] xt_hashlimit: size too large, truncated to 1048576
[ 1057.270270][ T4010] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1057.281116][ T4010] blktrace: Concurrent blktraces are not allowed on loop1
[ 1057.357073][ T4017] loop1: detected capacity change from 0 to 512
[ 1057.375319][ T4017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1057.396211][ T4017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1057.522541][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.546308][ T4026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17731'.
[ 1058.029984][ T1662] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.057170][ T1662] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.079963][ T1662] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.106998][ T1662] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.245600][ T4050] xt_hashlimit: size too large, truncated to 1048576
[ 1058.252328][ T4050] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1058.273935][ T4050] blktrace: Concurrent blktraces are not allowed on loop1
[ 1058.370395][ T4063] loop1: detected capacity change from 0 to 512
[ 1058.380171][ T4063] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1058.386843][ T4063] EXT4-fs: Ignoring removed bh option
[ 1058.405324][ T4063] /dev/loop1: Can't open blockdev
[ 1058.448871][ T4072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.526976][ T4072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.567400][ T4072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.626470][ T4072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1058.717421][ T1662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.738265][ T1662] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.771872][ T1662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1058.792056][ T1662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.070265][ T4094] loop1: detected capacity change from 0 to 1024
[ 1059.078198][ T4094] EXT4-fs: Ignoring removed orlov option
[ 1059.088361][ T4094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1059.152094][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1059.264409][ T4108] syzkaller1: entered promiscuous mode
[ 1059.269933][ T4108] syzkaller1: entered allmulticast mode
[ 1059.300473][ T4108] hub 9-0:1.0: USB hub found
[ 1059.305415][ T4108] hub 9-0:1.0: 8 ports detected
[ 1059.327933][ T4108] loop1: detected capacity change from 0 to 512
[ 1059.337503][ T4108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1059.356529][ T4108] EXT4-fs (loop1): too many log groups per flexible block group
[ 1059.449525][ T4118] xt_hashlimit: size too large, truncated to 1048576
[ 1059.456300][ T4118] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1059.480047][ T4102] blktrace: Concurrent blktraces are not allowed on loop5
[ 1059.491685][ T4108] EXT4-fs (loop1): failed to initialize mballoc (-12)
[ 1059.506340][ T4108] EXT4-fs (loop1): mount failed
[ 1059.734150][ T4148] xt_hashlimit: max too large, truncated to 1048576
[ 1059.769399][ T4140] wg1 speed is unknown, defaulting to 1000
[ 1059.781997][ T4148] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1059.793688][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17779'.
[ 1060.018386][ T4160] xt_hashlimit: size too large, truncated to 1048576
[ 1060.025153][ T4160] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1060.050736][ T4160] blktrace: Concurrent blktraces are not allowed on loop13
[ 1060.094258][ T4163] hub 9-0:1.0: USB hub found
[ 1060.117278][ T4163] hub 9-0:1.0: 8 ports detected
[ 1060.242787][ T4177] netlink: 'syz.6.17789': attribute type 1 has an invalid length.
[ 1060.260284][ T4177] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1060.267894][ T4173] wg1 speed is unknown, defaulting to 1000
[ 1060.278366][ T4177] ip6erspan0: entered promiscuous mode
[ 1060.288516][ T4177] bond1: (slave ip6erspan0): making interface the new active one
[ 1060.297531][ T4177] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1060.319642][ T4177] macvlan2: entered promiscuous mode
[ 1060.327096][ T4177] bond1: entered promiscuous mode
[ 1060.332570][ T4177] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1060.340879][ T4177] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1060.357411][ T4177] bond1: left promiscuous mode
[ 1060.561050][ T4194] xt_hashlimit: max too large, truncated to 1048576
[ 1060.575483][ T4194] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1060.601628][ T4194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17794'.
[ 1060.638005][ T4186] wg1 speed is unknown, defaulting to 1000
[ 1060.689313][ T4206] hub 9-0:1.0: USB hub found
[ 1060.707962][ T4206] hub 9-0:1.0: 8 ports detected
[ 1060.738480][ T4209] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.787510][ T4209] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.856680][ T4209] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.927486][ T4209] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.938598][ T4224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17807'.
[ 1060.970027][ T4226] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.042216][ T4226] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.105064][ T4226] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.184732][ T4226] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.244927][T21582] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.259089][T21582] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.275236][T21582] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.290656][T21582] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.357453][ T4243] hub 9-0:1.0: USB hub found
[ 1061.362210][ T4243] hub 9-0:1.0: 8 ports detected
[ 1061.414990][   T29] kauditd_printk_skb: 689 callbacks suppressed
[ 1061.415008][   T29] audit: type=1326 audit(1317.398:153934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.457060][   T29] audit: type=1326 audit(1317.398:153935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.480285][   T29] audit: type=1326 audit(1317.398:153936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.503570][   T29] audit: type=1326 audit(1317.398:153937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.526777][   T29] audit: type=1326 audit(1317.398:153938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.549901][   T29] audit: type=1326 audit(1317.398:153939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.573211][   T29] audit: type=1326 audit(1317.398:153940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.596461][   T29] audit: type=1326 audit(1317.398:153941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.619732][   T29] audit: type=1326 audit(1317.398:153942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.642804][   T29] audit: type=1326 audit(1317.398:153943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4244 comm="syz.2.17816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f325411f749 code=0x7ffc0000
[ 1061.771711][T21582] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.794945][ T4261] xt_hashlimit: max too large, truncated to 1048576
[ 1061.804098][ T4250] wg1 speed is unknown, defaulting to 1000
[ 1061.818499][T21582] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.821744][ T4261] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1061.838323][ T4261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17818'.
[ 1061.848943][T21582] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.857320][T21582] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1061.878551][ T4263] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17820'.
[ 1062.692666][ T4290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.759036][ T4290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.841362][ T4290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.928922][ T4290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.992774][T21582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.004869][T21582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.020982][ T4299] x_tables: duplicate underflow at hook 4
[ 1063.021078][T21582] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.035485][T21582] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1063.113481][ T4302] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.197082][ T4302] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.229782][ T4311] xt_hashlimit: max too large, truncated to 1048576
[ 1063.635112][ T4315] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17838'.
[ 1063.649561][ T4311] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1063.660166][ T4302] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.699496][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17836'.
[ 1063.736414][ T4302] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.811163][ T4303] wg1 speed is unknown, defaulting to 1000
[ 1064.403610][ T4351] loop1: detected capacity change from 0 to 128
[ 1064.416016][ T4352] netlink: 'syz.7.17848': attribute type 1 has an invalid length.
[ 1064.448411][ T4351] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1064.469910][ T4352] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1064.516098][ T4352] ip6erspan0: entered promiscuous mode
[ 1064.527252][ T4352] bond2: (slave ip6erspan0): making interface the new active one
[ 1064.536416][ T4352] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 1064.563478][ T4348] wg1 speed is unknown, defaulting to 1000
[ 1064.596326][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1064.610729][ T4337] wg1 speed is unknown, defaulting to 1000
[ 1064.651403][ T4363] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.699479][ T4363] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.726248][ T4337] chnl_net:caif_netlink_parms(): no params data found
[ 1064.772192][ T4363] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.799690][ T4379] hub 9-0:1.0: USB hub found
[ 1064.811178][ T4379] hub 9-0:1.0: 8 ports detected
[ 1064.821477][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1064.828641][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.851780][ T4337] bridge_slave_0: entered allmulticast mode
[ 1064.860517][ T4337] bridge_slave_0: entered promiscuous mode
[ 1064.869599][ T4363] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.880812][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1064.888015][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.896892][ T4337] bridge_slave_1: entered allmulticast mode
[ 1064.903558][ T4337] bridge_slave_1: entered promiscuous mode
[ 1064.929340][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1064.940389][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1064.963613][ T4337] team0: Port device team_slave_0 added
[ 1064.969950][ T4388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17857'.
[ 1064.971286][ T4337] team0: Port device team_slave_1 added
[ 1064.994606][ T4388] loop1: detected capacity change from 0 to 128
[ 1065.002958][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.010029][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1065.036188][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.037519][ T4388] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1065.047884][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.065833][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1065.091803][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1065.119217][ T4337] hsr_slave_0: entered promiscuous mode
[ 1065.125472][ T4337] hsr_slave_1: entered promiscuous mode
[ 1065.197687][ T4337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.225399][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1065.245904][ T4337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.260743][ T4395] loop1: detected capacity change from 0 to 128
[ 1065.268917][ T4395] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1065.295733][ T4337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.348326][T28284] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1065.359065][ T4337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.426707][ T4337] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1065.436182][ T4337] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1065.445893][ T4337] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1065.455462][ T4337] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1065.488337][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.495456][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1065.502792][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.509868][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1065.541390][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1065.552914][T21578] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.561248][T21578] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.572596][ T4337] 8021q: adding VLAN 0 to HW filter on device team0
[ 1065.584236][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.591334][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1065.602087][T21578] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.609154][T21578] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1065.639874][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1065.701023][ T4415] xt_hashlimit: max too large, truncated to 1048576
[ 1065.711381][ T4415] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1065.716323][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1065.736508][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17862'.
[ 1065.750886][ T4408] wg1 speed is unknown, defaulting to 1000
[ 1065.815672][ T4337] veth0_vlan: entered promiscuous mode
[ 1065.823846][ T4337] veth1_vlan: entered promiscuous mode
[ 1065.840101][ T4337] veth0_macvtap: entered promiscuous mode
[ 1065.847937][ T4337] veth1_macvtap: entered promiscuous mode
[ 1065.858983][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1065.872358][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1065.888202][ T1662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.897409][ T1662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.906497][ T1662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.917060][   T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.080352][ T4444] netlink: 'syz.1.17870': attribute type 1 has an invalid length.
[ 1066.100061][ T4444] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1066.131080][ T4444] ip6erspan1: entered promiscuous mode
[ 1066.154668][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17868'.
[ 1066.171714][ T4449] netlink: 'syz.1.17871': attribute type 1 has an invalid length.
[ 1066.186869][ T4449] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1066.400376][ T4468] xt_hashlimit: max too large, truncated to 1048576
[ 1066.420209][ T4468] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1066.420389][ T4465] wg1 speed is unknown, defaulting to 1000
[ 1066.436655][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17877'.
[ 1066.466105][   T29] kauditd_printk_skb: 148 callbacks suppressed
[ 1066.466123][   T29] audit: type=1326 audit(1322.448:154090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.7.17877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92c3242005 code=0x7ffc0000
[ 1066.551011][   T61] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.566427][   T61] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.584143][   T61] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.596521][   T61] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.608751][   T29] audit: type=1326 audit(1322.588:154091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.651828][   T29] audit: type=1326 audit(1322.588:154092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.675066][   T29] audit: type=1326 audit(1322.588:154093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.698381][   T29] audit: type=1326 audit(1322.588:154094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.721763][   T29] audit: type=1326 audit(1322.588:154095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.745087][   T29] audit: type=1326 audit(1322.588:154096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.768624][   T29] audit: type=1326 audit(1322.588:154097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.791885][   T29] audit: type=1326 audit(1322.588:154098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.815077][   T29] audit: type=1326 audit(1322.588:154099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4481 comm="syz.6.17883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1066.880864][ T4490] netlink: 'syz.6.17887': attribute type 1 has an invalid length.
[ 1066.903330][ T4490] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1066.936672][ T4493] hub 9-0:1.0: USB hub found
[ 1066.943021][ T4493] hub 9-0:1.0: 8 ports detected
[ 1067.011736][ T4506] x_tables: duplicate underflow at hook 4
[ 1067.169307][ T4519] xt_hashlimit: max too large, truncated to 1048576
[ 1067.197653][ T4519] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1067.637683][ T4512] wg1 speed is unknown, defaulting to 1000
[ 1067.648799][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17896'.
[ 1067.821484][ T4528] x_tables: duplicate underflow at hook 4
[ 1069.034969][T21578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.047988][T21578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.101252][T21578] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.114364][T21578] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1069.140026][ T4556] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1069.212590][ T4556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17909'.
[ 1069.341347][ T4571] loop1: detected capacity change from 0 to 512
[ 1069.377695][ T4573] hub 9-0:1.0: USB hub found
[ 1069.387184][ T4571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1069.397145][ T4571] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[ 1069.414048][ T4573] hub 9-0:1.0: 8 ports detected
[ 1069.460978][ T4575] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[ 1069.472537][ T4575] netlink: 124 bytes leftover after parsing attributes in process `syz.6.17908'.
[ 1069.543122][ T4580] netlink: 'syz.0.17918': attribute type 1 has an invalid length.
[ 1069.543829][ T4581] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.636588][ T4581] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.686043][ T4581] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.745966][ T4581] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.870933][ T4595] xt_hashlimit: size too large, truncated to 1048576
[ 1069.877737][ T4595] xt_hashlimit: overflow, try lower: 18446744073709551610/3
[ 1069.955521][ T4595] blktrace: Concurrent blktraces are not allowed on loop1
[ 1070.076570][ T4612] syzkaller1: entered promiscuous mode
[ 1070.082097][ T4612] syzkaller1: entered allmulticast mode
[ 1070.105094][ T4612] hub 9-0:1.0: USB hub found
[ 1070.114079][ T4612] hub 9-0:1.0: 8 ports detected
[ 1070.246227][ T4605] netlink: 'syz.2.17928': attribute type 13 has an invalid length.
[ 1070.287352][ T4605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1070.303340][ T4616] syzkaller1: entered promiscuous mode
[ 1070.308914][ T4616] syzkaller1: entered allmulticast mode
[ 1070.325779][ T4616] hub 9-0:1.0: USB hub found
[ 1070.335096][ T4616] hub 9-0:1.0: 8 ports detected
[ 1070.376898][ T4618] loop1: detected capacity change from 0 to 1024
[ 1070.383614][ T4618] EXT4-fs: Ignoring removed orlov option
[ 1070.393169][ T4618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1070.596908][ T4639] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.625851][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1070.647340][ T4643] loop1: detected capacity change from 0 to 512
[ 1070.655838][ T4643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1070.676595][ T4643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1070.697557][ T4639] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.724930][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1070.737340][ T4650] xt_hashlimit: max too large, truncated to 1048576
[ 1070.745061][ T4650] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1070.754767][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17943'.
[ 1070.785230][ T4639] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.799197][ T4646] wg1 speed is unknown, defaulting to 1000
[ 1070.845938][ T4639] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1070.901441][T21573] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.913017][T21573] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.923745][T21573] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.932113][ T4659] loop1: detected capacity change from 0 to 512
[ 1070.932394][ T4659] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1070.945369][ T4659] EXT4-fs: Ignoring removed bh option
[ 1070.954369][T21573] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.963622][ T4659] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1070.985806][ T4659] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17946: corrupted inode contents
[ 1071.007758][ T4659] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.17946: mark_inode_dirty error
[ 1071.020323][ T4659] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.17946: invalid indirect mapped block 1 (level 1)
[ 1071.034415][ T4659] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17946: corrupted inode contents
[ 1071.047448][ T4659] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1071.056908][ T4659] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.17946: corrupted inode contents
[ 1071.069715][ T4659] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.17946: mark_inode_dirty error
[ 1071.081331][ T4659] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1071.096450][ T4659] EXT4-fs (loop1): 1 truncate cleaned up
[ 1071.105319][ T4659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1071.735486][T28284] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.801011][T21568] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.821589][T21568] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.840493][T21568] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.859015][T21568] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1072.065344][   T29] kauditd_printk_skb: 201 callbacks suppressed
[ 1072.065364][   T29] audit: type=1326 audit(1328.048:154301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.068564][ T4678] wg1 speed is unknown, defaulting to 1000
[ 1072.091934][   T29] audit: type=1326 audit(1328.058:154302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.123710][   T29] audit: type=1326 audit(1328.058:154303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.146867][   T29] audit: type=1326 audit(1328.058:154304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.195007][   T29] audit: type=1326 audit(1328.148:154305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.218487][   T29] audit: type=1326 audit(1328.148:154306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.241641][   T29] audit: type=1326 audit(1328.148:154307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.17956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f4a17f749 code=0x7ffc0000
[ 1072.268245][ T4678] chnl_net:caif_netlink_parms(): no params data found
[ 1072.319215][   T29] audit: type=1326 audit(1328.258:154308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.17958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4575f749 code=0x7ffc0000
[ 1072.342444][   T29] audit: type=1326 audit(1328.258:154309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.17958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a4575f749 code=0x7ffc0000
[ 1072.365607][   T29] audit: type=1326 audit(1328.268:154310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.0.17958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a4575f749 code=0x7ffc0000
[ 1072.407466][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.414657][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1072.427390][ T4678] bridge_slave_0: entered allmulticast mode
[ 1072.435917][ T4678] bridge_slave_0: entered promiscuous mode
[ 1072.451259][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.458528][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.466098][ T4678] bridge_slave_1: entered allmulticast mode
[ 1072.472782][ T4678] bridge_slave_1: entered promiscuous mode
[ 1072.505813][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1072.518978][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1072.567406][ T4678] team0: Port device team_slave_0 added
[ 1072.576455][ T4678] team0: Port device team_slave_1 added
[ 1072.594287][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1072.601265][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.627396][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.639959][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.646954][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1072.672946][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.684974][T21578] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.716050][ T4678] hsr_slave_0: entered promiscuous mode
[ 1072.722190][ T4678] hsr_slave_1: entered promiscuous mode
[ 1072.728338][ T4678] debugfs: 'hsr0' already exists in 'hsr'
[ 1072.734125][ T4678] Cannot create hsr debugfs directory
[ 1072.741980][T21578] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.796193][T21578] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.857309][T21578] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.096382][T21578] bond0 (unregistering): Released all slaves
[ 1073.111206][T21578] bond1 (unregistering): Released all slaves
[ 1073.139396][T21578] bond2 (unregistering): Released all slaves
[ 1073.162065][T21578] bond3 (unregistering): Released all slaves
[ 1073.180088][T21578] bond4 (unregistering): Released all slaves
[ 1073.198018][T21578] bond5 (unregistering): Released all slaves
[ 1073.207650][T21578] bond6 (unregistering): Released all slaves
[ 1073.321334][ T4742] syzkaller1: entered promiscuous mode
[ 1073.327107][ T4742] syzkaller1: entered allmulticast mode
[ 1073.366158][ T3497] wg1 speed is unknown, defaulting to 1000
[ 1073.372010][ T3497] syz0: Port: 1 Link DOWN
[ 1073.381400][T21578] hsr_slave_0: left promiscuous mode
[ 1073.394968][ T4742] hub 9-0:1.0: USB hub found
[ 1073.397402][T21578] hsr_slave_1: left promiscuous mode
[ 1073.405023][ T4742] hub 9-0:1.0: 8 ports detected
[ 1073.440558][T21578] veth1_macvtap: left promiscuous mode
[ 1073.465300][T21578] veth0_macvtap: left promiscuous mode
[ 1073.476333][T21578] veth1_vlan: left promiscuous mode
[ 1073.491931][T21578] veth0_vlan: left promiscuous mode
[ 1073.671387][ T4749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.696426][ T4678] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1073.705153][ T4678] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1073.714375][ T4678] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1073.722681][ T4678] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1073.741073][ T4749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.796558][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1073.810116][ T4678] 8021q: adding VLAN 0 to HW filter on device team0
[ 1073.819373][T21582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.826485][T21582] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1073.839654][ T4749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.858213][T21582] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.865307][T21582] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1073.928192][ T4749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1073.953759][T21578] IPVS: stop unused estimator thread 0...
[ 1073.983384][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1074.012449][T21568] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.042590][T21568] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.070978][T21568] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.094653][T21568] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.104847][ T4678] veth0_vlan: entered promiscuous mode
[ 1074.127547][ T4787] syzkaller1: entered promiscuous mode
[ 1074.133115][ T4787] syzkaller1: entered allmulticast mode
[ 1074.148168][ T4678] veth1_vlan: entered promiscuous mode
[ 1074.154644][ T4787] hub 9-0:1.0: USB hub found
[ 1074.164219][ T4787] hub 9-0:1.0: 8 ports detected
[ 1074.179061][ T4678] veth0_macvtap: entered promiscuous mode
[ 1074.194909][ T4794] netlink: 'syz.0.17984': attribute type 1 has an invalid length.
[ 1074.207771][ T4678] veth1_macvtap: entered promiscuous mode
[ 1074.217380][ T4794] ip6erspan0: entered promiscuous mode
[ 1074.237006][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1074.249329][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1074.273231][T21582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.297830][T21582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.313765][T21582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.323219][T21582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1074.452245][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17953'.
[ 1074.470391][ T4816] loop1: detected capacity change from 0 to 128
[ 1074.494999][ T4816] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1074.755849][ T4678] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1074.815667][ T4851] loop1: detected capacity change from 0 to 128
[ 1074.842778][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18007'.
[ 1074.853513][ T4851] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1074.872100][ T4851] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.18005: No space for directory leaf checksum. Please run e2fsck -D.
[ 1074.887750][ T4851] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.18005: checksumming directory block 0
[ 1074.903486][ T4851] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.18005: No space for directory leaf checksum. Please run e2fsck -D.
[ 1074.919020][ T4851] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.18005: checksumming directory block 0
[ 1074.934179][ T4851] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.18005: No space for directory leaf checksum. Please run e2fsck -D.
[ 1074.949735][ T4851] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.18005: checksumming directory block 0
[ 1074.972543][ T4678] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1075.541635][ T4880] loop1: detected capacity change from 0 to 512
[ 1075.576709][ T4880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1075.637368][ T4880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1075.817753][ T4894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18017'.
[ 1075.852491][ T4678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1075.947696][ T4904] xt_hashlimit: max too large, truncated to 1048576
[ 1075.962827][ T4904] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1076.012235][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18022'.
[ 1076.266309][ T4913] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1076.274952][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18027'.
[ 1076.285240][ T4913] syz_tun: entered promiscuous mode
[ 1076.368367][ T4916] bridge_slave_0: left allmulticast mode
[ 1076.374129][ T4916] bridge_slave_0: left promiscuous mode
[ 1076.379911][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.394466][ T4921] netlink: 'syz.7.18028': attribute type 10 has an invalid length.
[ 1076.402438][ T4921] netlink: 40 bytes leftover after parsing attributes in process `syz.7.18028'.
[ 1076.416867][ T4916] bridge_slave_1: left allmulticast mode
[ 1076.422555][ T4916] bridge_slave_1: left promiscuous mode
[ 1076.428290][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.472611][ T4916] bond0: (slave bond_slave_0): Releasing backup interface
[ 1076.496487][ T4916] bond0: (slave bond_slave_1): Releasing backup interface
[ 1076.536772][ T4916] team0: Port device team_slave_0 removed
[ 1076.569946][ T4916] team0: Port device team_slave_1 removed
[ 1076.587673][ T4916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1076.626759][ T4921] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[ 1076.670489][ T4935] x_tables: duplicate underflow at hook 4
[ 1076.761365][ T4938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4938 comm=syz.7.18035
[ 1077.110734][   T29] kauditd_printk_skb: 283 callbacks suppressed
[ 1077.110770][   T29] audit: type=1326 audit(1333.088:154594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.223766][ T4951] xt_hashlimit: max too large, truncated to 1048576
[ 1077.277078][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18038'.
[ 1077.290778][ T4951] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1077.318217][   T29] audit: type=1326 audit(1333.118:154595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.341436][   T29] audit: type=1326 audit(1333.118:154596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.364679][   T29] audit: type=1326 audit(1333.118:154597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.387941][   T29] audit: type=1326 audit(1333.128:154598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.411114][   T29] audit: type=1326 audit(1333.128:154599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.434215][   T29] audit: type=1326 audit(1333.128:154600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.457419][   T29] audit: type=1326 audit(1333.128:154601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.480575][   T29] audit: type=1326 audit(1333.128:154602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f92c320f749 code=0x7ffc0000
[ 1077.589596][ T4960] hub 9-0:1.0: USB hub found
[ 1077.610129][ T4960] hub 9-0:1.0: 8 ports detected
[ 1077.661688][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18042'.
[ 1077.702427][ T4956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18039'.
[ 1077.783238][ T4969] loop1: detected capacity change from 0 to 512
[ 1077.800622][   T29] audit: type=1326 audit(1333.548:154603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4957 comm="syz.7.18038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92c3242005 code=0x7ffc0000
[ 1077.828953][ T4969] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1077.838867][ T4969] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[ 1077.912533][ T4968] syzkaller1: entered promiscuous mode
[ 1077.918151][ T4968] syzkaller1: entered allmulticast mode
[ 1077.960264][ T4968] hub 9-0:1.0: USB hub found
[ 1077.967284][ T4968] hub 9-0:1.0: 8 ports detected
[ 1077.973531][ T4974] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.008511][ T4976] loop1: detected capacity change from 0 to 128
[ 1078.046128][ T4974] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.082306][ T4986] x_tables: duplicate underflow at hook 4
[ 1078.095718][ T4987] loop1: detected capacity change from 0 to 1024
[ 1078.103584][ T4974] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.129732][ T4987] EXT4-fs: Ignoring removed orlov option
[ 1078.137765][ T4987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1078.206360][ T4974] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.758660][T21577] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.782401][ T5015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18058'.
[ 1078.807928][T21577] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.839221][T21577] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.858489][T21577] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1078.985794][ T4678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1079.045312][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18067'.
[ 1079.075100][ T5037] loop1: detected capacity change from 0 to 512
[ 1079.081706][ T5037] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1079.088646][ T5037] EXT4-fs: Ignoring removed bh option
[ 1079.099645][ T5037] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1079.114682][ T5037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.18064: corrupted inode contents
[ 1079.127199][ T5037] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #11: comm syz.1.18064: mark_inode_dirty error
[ 1079.138945][ T5037] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.18064: invalid indirect mapped block 1 (level 1)
[ 1079.152584][ T5037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.18064: corrupted inode contents
[ 1079.165095][ T5037] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1079.173922][ T5037] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #11: comm syz.1.18064: corrupted inode contents
[ 1079.186893][ T5037] EXT4-fs error (device loop1): ext4_truncate:4635: inode #11: comm syz.1.18064: mark_inode_dirty error
[ 1079.198678][ T5037] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1079.207986][ T5037] EXT4-fs (loop1): 1 truncate cleaned up
[ 1079.214159][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1079.456869][ T5060] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1079.624182][ T5054] ==================================================================
[ 1079.632312][ T5054] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps
[ 1079.640663][ T5054] 
[ 1079.642991][ T5054] write to 0xffff88816e1eef74 of 4 bytes by task 5058 on cpu 0:
[ 1079.650635][ T5054]  inode_update_timestamps+0x147/0x270
[ 1079.656111][ T5054]  file_update_time_flags+0x26c/0x310
[ 1079.661505][ T5054]  file_update_time+0x17/0x20
[ 1079.666219][ T5054]  shmem_file_write_iter+0x9c/0xf0
[ 1079.671345][ T5054]  iter_file_splice_write+0x66b/0xa20
[ 1079.676733][ T5054]  direct_splice_actor+0x156/0x2a0
[ 1079.681853][ T5054]  splice_direct_to_actor+0x312/0x680
[ 1079.687243][ T5054]  do_splice_direct+0xda/0x150
[ 1079.692022][ T5054]  do_sendfile+0x380/0x650
[ 1079.696464][ T5054]  __x64_sys_sendfile64+0x105/0x150
[ 1079.701685][ T5054]  x64_sys_call+0x2db1/0x3000
[ 1079.706381][ T5054]  do_syscall_64+0xca/0x2b0
[ 1079.710931][ T5054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.716849][ T5054] 
[ 1079.719180][ T5054] read to 0xffff88816e1eef74 of 4 bytes by task 5054 on cpu 1:
[ 1079.726723][ T5054]  atime_needs_update+0x2a8/0x3e0
[ 1079.731781][ T5054]  touch_atime+0x4a/0x340
[ 1079.736138][ T5054]  shmem_file_read_iter+0x477/0x540
[ 1079.741365][ T5054]  copy_splice_read+0x442/0x660
[ 1079.746235][ T5054]  splice_direct_to_actor+0x290/0x680
[ 1079.751630][ T5054]  do_splice_direct+0xda/0x150
[ 1079.756414][ T5054]  do_sendfile+0x380/0x650
[ 1079.760857][ T5054]  __x64_sys_sendfile64+0x105/0x150
[ 1079.766069][ T5054]  x64_sys_call+0x2db1/0x3000
[ 1079.770777][ T5054]  do_syscall_64+0xca/0x2b0
[ 1079.775310][ T5054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.781220][ T5054] 
[ 1079.783557][ T5054] value changed: 0x23a88428 -> 0x24411aa9
[ 1079.789372][ T5054] 
[ 1079.791706][ T5054] Reported by Kernel Concurrency Sanitizer on:
[ 1079.797860][ T5054] CPU: 1 UID: 0 PID: 5054 Comm: syz.7.18073 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[ 1079.809247][ T5054] Tainted: [W]=WARN
[ 1079.813062][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1079.823126][ T5054] ==================================================================
[ 1079.863416][ T4678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.