last executing test programs:

4m11.138792908s ago: executing program 3 (id=4909):
r0 = socket(0x27, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x10}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1, 0x781}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xabf28f584c99c57, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000ff0f0000020000000300000044000000", @ANYRES32, @ANYBLOB=' \r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
listen(r1, 0x2)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r5)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x87d, 0x401, 0x0)

4m10.332815586s ago: executing program 3 (id=4923):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

4m10.316672057s ago: executing program 3 (id=4924):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}}, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x73, "e49b16b0ff325e58036197f6f131b791966fbb2bded61c0d793eb652e8958b584bfb1d47f7ed4a3d25b3c19a0192e957b1a47a9a007c27f0d69ed7ecbdd9bfc9435ace322e75b830adf04e37d25117b6b44fc9802b2acce3b7dc602205b43da507b9ce685031624e5757604a4a12216ad0bf6f"}, &(0x7f0000000400)=0x97)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1)

4m9.457139739s ago: executing program 3 (id=4949):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]})
timer_delete(0x0)

4m9.431158332s ago: executing program 3 (id=4951):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
symlink(&(0x7f0000000340)='./file0/../file0\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)

4m8.151375384s ago: executing program 3 (id=4958):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')

4m8.113785658s ago: executing program 32 (id=4958):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')

3m20.909427992s ago: executing program 0 (id=5836):
r0 = socket(0x27, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x10}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1, 0x781}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xabf28f584c99c57, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000ff0f0000020000000300000044000000", @ANYRES32, @ANYBLOB=' \r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
listen(r1, 0x2)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x87d, 0x401, 0x0)

3m20.060498403s ago: executing program 0 (id=5852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

3m20.033703716s ago: executing program 0 (id=5853):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

3m19.98549904s ago: executing program 0 (id=5856):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x40}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r6 = memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xec\x86kfO\x80\xb8!\a\x00\x00\x00\x00\x00\x00\x00\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x18\xd8\xbf\xbb\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xa3\xab\xa2\xf0\av\x88\x13\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed\x80\xff\xff\xff\xff\xff\xff\xff\x9d#\x9al\xe8\x02\xa2n\xbeJ\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x3)
write(r6, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac47f7b00000000000000000000200000f8bf54da33", 0x41)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380", @ANYRESHEX=r7], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
readlinkat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000032240)=""/102400, 0x19000)

3m19.887357689s ago: executing program 0 (id=5859):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x60}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)

3m19.587838229s ago: executing program 0 (id=5864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

3m19.562213861s ago: executing program 33 (id=5864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

4.527175236s ago: executing program 2 (id=9243):
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280))
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x2000)

3.678511207s ago: executing program 2 (id=9255):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000200000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

3.642013241s ago: executing program 2 (id=9256):
r0 = socket(0x27, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x10}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1, 0x781}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xabf28f584c99c57, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000ff0f0000020000000300000044000000", @ANYRES32, @ANYBLOB=' \r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
listen(r1, 0x2)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x1, 0x0)
fchdir(r6)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x87d, 0x401, 0x0)

2.795612892s ago: executing program 2 (id=9261):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x400000000000007, 0x10001}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r2, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)

2.053983973s ago: executing program 1 (id=9275):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_open_procfs(0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_iso={0x0, {0xd}, 0xffffffff, 0x1, &(0x7f00000009c0)="883650", 0x3, 0x3, 0x40, 0x6e, 0x5, 0x10000, 0x0, [{0x752a, 0x7, 0x6}, {0x8001, 0x0, 0x2c}, {0x4, 0x7fff, 0x8}, {0xf, 0x7, 0xfffffbff}, {0xffffffff, 0xe0f, 0x400}, {0x401, 0x4, 0x8}, {0x10, 0xffffffff, 0x6}, {0xa8c, 0x6, 0x8}, {0x5, 0x3, 0x401}, {0x3, 0x0, 0xfffffffe}, {0x1, 0xffffffff, 0x8}, {0x0, 0x1, 0x8}, {0xfff, 0x14dc, 0x2}, {0x2, 0x9, 0x1}, {0x5, 0x5, 0x6}, {0x7, 0xc73, 0x3}, {0x5, 0x1, 0x9}, {0x400, 0x5, 0x9}, {0x7, 0x7f, 0x239f4aa6}, {0x1, 0x6, 0xffffffff}, {0x1, 0xfffffffc, 0xb4}, {0x1, 0x10, 0x24}, {0x7fffffff, 0x8, 0xffff}, {0x2, 0x2, 0x2}, {0x5, 0x0, 0x3}, {0x7fffffff, 0x9, 0x3}, {0x6, 0x2, 0xffffffff}, {0x52, 0x9, 0x1}, {0x3ff, 0xfffff800, 0x114}, {0x4, 0x80000001, 0x3}, {0x4, 0x83, 0x1}, {0x7, 0x10, 0x2}, {0x0, 0x1, 0x6}, {0xda7d, 0x0, 0x8}, {0x6, 0x2, 0x7}, {0xf7, 0x5, 0x8}, {0x7, 0xff, 0x2}, {0x1, 0xd8, 0x1}, {0xc74, 0x10, 0x6}, {0x1, 0x1, 0xa9f}, {0x7f, 0x22, 0xa}, {0x0, 0x200}, {0x2, 0x3, 0xff}, {0x5, 0x3, 0x5}, {0x2, 0x5, 0x1000}, {0x7d, 0x7fff, 0x1}, {0x8, 0x81, 0x830000}, {0xb, 0xfffffff7, 0x8}, {0x9, 0x3, 0x8}, {0x4}, {0xffffffff, 0x9, 0x5}, {0x1, 0x7f, 0x6}, {0xffffffff, 0x4, 0x1}, {0x6, 0x7, 0x6152}, {0x3, 0x1, 0x4}, {0x3, 0xc1, 0x3}, {0x1000, 0x2, 0xffff}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x3ff}, {0x10000, 0x7, 0x4}, {0x3, 0x0, 0x7}, {0xd, 0xffffffff, 0x8}, {0x4, 0x90000000, 0x8}, {0x0, 0xecc9, 0x7}, {0x8, 0x8000, 0xd}, {0xffff, 0x9, 0x10000}, {0x6, 0x0, 0x7}, {0xd, 0x8, 0x40}, {0x2, 0x6e2, 0x7fffffff}, {0x3, 0x0, 0x7}, {0x6, 0x1, 0x3}, {0xffffe9c1, 0x80, 0x7f}, {0x100, 0x7, 0x5}, {0x45, 0x1, 0x7}, {0x9, 0x200, 0x5}, {0x7ff, 0x40, 0x86e}, {0x9, 0x8, 0x1ff}, {0x5ff, 0x2, 0x94}, {0x80000001, 0xff, 0x401}, {0x6, 0x1, 0x10001}, {0xa, 0x0, 0xd}, {0xfffffffa, 0x1, 0xd0}, {0x283, 0x5, 0x401}, {0x3, 0x9, 0x9}, {0x1, 0x8, 0x7}, {0xaba, 0xff, 0x7}, {0x100, 0x1, 0x400}, {0x2, 0x7fff, 0x3}, {0x5, 0x8, 0xa19a37}, {0x2, 0x0, 0x4}, {0x80, 0x8000}, {0x1, 0xfff, 0x5}, {0x4, 0x6, 0xd}, {0x41, 0x18000000, 0x7fff}, {0xffff, 0x6, 0x4}, {0x4, 0x7, 0x5}, {0x6, 0xc, 0x7}, {0x5, 0x401, 0x2}, {0x5, 0x2, 0xc}, {0xfffffffa, 0x9, 0x5}, {0xcf2f, 0xae3, 0x9}, {0x3, 0x9, 0x10}, {0x0, 0x6, 0x5}, {0x83, 0x4, 0x2}, {0x9, 0x3, 0x2}, {0x6, 0x12}, {0x4, 0x9, 0xc}, {0x9, 0x47c4, 0x2}, {0x1, 0x1, 0x3}, {0x401, 0x80000001, 0xca9b5c9}]})

2.053542953s ago: executing program 1 (id=9276):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)

2.052461573s ago: executing program 1 (id=9277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

2.034379975s ago: executing program 1 (id=9278):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000001780)={0x80000001, 0x1, 0x8, 0xfffff000, 0x519, 0x0, 0x9})
semop(0x0, 0x0, 0x0)
rt_sigpending(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$eJzs3EtvG0UcAPD/bpK+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRqiIBoXJE/QTAEYlPwAkuCDiBuMIdIVWoF1oOaNHaa9c4dmrHTp3Gv5+02ZndtWf+3h17dsZOAH1rNP+TROyKiN8iYjgiBuoPGC2vbly/PHPz+uWZJLLszb+S/GHx9/XLM5VDk2K9s8iMpRHpJ0kcaFDuwsVLZ6fn5mYvFPmJxXPvTSxcvPTcmXPTp2dPz56fOnbs6JHJF1+Yer4rce7O67r/w/mD+46/ffX1mRNX3/nx67y+u4r9tXGUjXRc5miMVl+Tek92/Owby+5i3SxeNqa8rQ9GxFCp/Q/HQClXNhyvfdzTygHrKsuybOuKrdUewHIGbGJJ9LoGQG9UPujz+9/Kcge7Hz137eXyDVAe941iKe8ZjLQ4Zqjm/rbbRiPixPI/n+dLNByHAADorm/z/s+zjfp/aTxQc9w9xdzQSETcGxF7IuK+iNgbEfdHlI59MCIearP80br8yv7PL9vXFFiL8v7fS8Xc1v/7f5XeX4wMFLndpfiHklNn5mYPF6/JWAxtzfOTq5Tx3au/ftZsX23/L1/y8it9waIefw7WDdCdnF6c7iTmWtc+Ko0BLq2MP6nOBCQRsS8i9q/h+bdFxJmnvzrYbP/t41/F4BoqVCf7MuKp8vlfjrr4K5LV5ycntsXc7OGJylWx0k8/X3mjWfkdxd8F+fnf0fD6r8Y/ktTO1y60X8aV3z9tek+z1ut/S/JWKb2l2PbB9OLihcmILcnyyu1Ttx5byVeOz+MfO9Qg/ptZ/h737xfF4w5ERH4RPxwRj0TEo0XdH4uIxyPiUIPYsqXy+odXnnh37fGvrzz+k22d//YTA2e//6ZZ+a2d/6Ol1FixpZX3v1Yr2MlrBwAAAHeLtPQd+CQdr6bTdHy8/B3+vbEjnZtfWHzm1Pz750+Wvys/EkNpZaRruGY8dLIYG67kp+ryR0rjxlmWZdtL+fGZ+bn1mlMHWrOzSfvP/THQ69oB666teTS/8IJNpQvz6MBdSvuH/qX9Q//S/qF/NWr/SxE3elAV4A67zef/rf8SAGw6+v/Qv7R/6F/aP/SlTn7Xv1piz/H1eubNlhjYGNVoOxHphqhGS4mh4mqvbkk3SMVKia0R0erBS3GnKtbjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+S8AAP//28vuNQ==")

1.966528221s ago: executing program 1 (id=9279):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = getpid()
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
io_uring_setup(0xaae, &(0x7f00000003c0)={0x0, 0xffffeffa, 0x800, 0x7, 0x2})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)

1.897986398s ago: executing program 2 (id=9280):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
getrandom(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="8b332ebd700000000000150000000cf537800d942b8eee009900040000003700000010001d800c00008008000d88040001800dde54cecfa18a0767f14fd503e3cb8dbe7c43620c937c6581739250f76e6c98943e2bf861368849a7162a1fdfed14ebf1c39089bce3df56c55e5606f5e43d048f195a7a6587b3c31f3374f3c4bbd066b61c84cf9bcff4f6c4dea49ee7194ef1df0578d5521b426e5cf99b4a7f520f3190a3df910fc322d309bd7cb7984fcdd49573a38c3d42bc976df68f81de7a427a23d4d5a6af4ab51684863ca3bdac6a6e2723"], 0x30}}, 0x40000)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', 0x0)

1.8745756s ago: executing program 2 (id=9281):
socket$tipc(0x1e, 0x5, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x8804, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', <r0=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x74f5, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.216429793s ago: executing program 6 (id=9283):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

1.070590557s ago: executing program 6 (id=9285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe20, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41fd)

1.022540172s ago: executing program 6 (id=9287):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_open_procfs(0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_iso={0x0, {0xd}, 0xffffffff, 0x1, &(0x7f00000009c0)="883650", 0x3, 0x3, 0x40, 0x6e, 0x5, 0x10000, 0x0, [{0x752a, 0x7, 0x6}, {0x8001, 0x0, 0x2c}, {0x4, 0x7fff, 0x8}, {0xf, 0x7, 0xfffffbff}, {0xffffffff, 0xe0f, 0x400}, {0x401, 0x4, 0x8}, {0x10, 0xffffffff, 0x6}, {0xa8c, 0x6, 0x8}, {0x5, 0x3, 0x401}, {0x3, 0x0, 0xfffffffe}, {0x1, 0xffffffff, 0x8}, {0x0, 0x1, 0x8}, {0xfff, 0x14dc, 0x2}, {0x2, 0x9, 0x1}, {0x5, 0x5, 0x6}, {0x7, 0xc73, 0x3}, {0x5, 0x1, 0x9}, {0x400, 0x5, 0x9}, {0x7, 0x7f, 0x239f4aa6}, {0x1, 0x6, 0xffffffff}, {0x1, 0xfffffffc, 0xb4}, {0x1, 0x10, 0x24}, {0x7fffffff, 0x8, 0xffff}, {0x2, 0x2, 0x2}, {0x5, 0x0, 0x3}, {0x7fffffff, 0x9, 0x3}, {0x6, 0x2, 0xffffffff}, {0x52, 0x9, 0x1}, {0x3ff, 0xfffff800, 0x114}, {0x4, 0x80000001, 0x3}, {0x4, 0x83, 0x1}, {0x7, 0x10, 0x2}, {0x0, 0x1, 0x6}, {0xda7d, 0x0, 0x8}, {0x6, 0x2, 0x7}, {0xf7, 0x5, 0x8}, {0x7, 0xff, 0x2}, {0x1, 0xd8, 0x1}, {0xc74, 0x10, 0x6}, {0x1, 0x1, 0xa9f}, {0x7f, 0x22, 0xa}, {0x0, 0x200}, {0x2, 0x3, 0xff}, {0x5, 0x3, 0x5}, {0x2, 0x5, 0x1000}, {0x7d, 0x7fff, 0x1}, {0x8, 0x81, 0x830000}, {0xb, 0xfffffff7, 0x8}, {0x9, 0x3, 0x8}, {0x4}, {0xffffffff, 0x9, 0x5}, {0x1, 0x7f, 0x6}, {0xffffffff, 0x4, 0x1}, {0x6, 0x7, 0x6152}, {0x3, 0x1, 0x4}, {0x3, 0xc1, 0x3}, {0x1000, 0x2, 0xffff}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x3ff}, {0x10000, 0x7, 0x4}, {0x3, 0x0, 0x7}, {0xd, 0xffffffff, 0x8}, {0x4, 0x90000000, 0x8}, {0x0, 0xecc9, 0x7}, {0x8, 0x8000, 0xd}, {0xffff, 0x9, 0x10000}, {0x6, 0x0, 0x7}, {0xd, 0x8, 0x40}, {0x2, 0x6e2, 0x7fffffff}, {0x3, 0x0, 0x7}, {0x6, 0x1, 0x3}, {0xffffe9c1, 0x80, 0x7f}, {0x100, 0x7, 0x5}, {0x45, 0x1, 0x7}, {0x9, 0x200, 0x5}, {0x7ff, 0x40, 0x86e}, {0x9, 0x8, 0x1ff}, {0x5ff, 0x2, 0x94}, {0x80000001, 0xff, 0x401}, {0x6, 0x1, 0x10001}, {0xa, 0x0, 0xd}, {0xfffffffa, 0x1, 0xd0}, {0x283, 0x5, 0x401}, {0x3, 0x9, 0x9}, {0x1, 0x8, 0x7}, {0xaba, 0xff, 0x7}, {0x100, 0x1, 0x400}, {0x2, 0x7fff, 0x3}, {0x5, 0x8, 0xa19a37}, {0x2, 0x0, 0x4}, {0x80, 0x8000}, {0x1, 0xfff, 0x5}, {0x4, 0x6, 0xd}, {0x41, 0x18000000, 0x7fff}, {0xffff, 0x6, 0x4}, {0x4, 0x7, 0x5}, {0x6, 0xc, 0x7}, {0x5, 0x401, 0x2}, {0x5, 0x2, 0xc}, {0xfffffffa, 0x9, 0x5}, {0xcf2f, 0xae3, 0x9}, {0x3, 0x9, 0x10}, {0x0, 0x6, 0x5}, {0x83, 0x4, 0x2}, {0x9, 0x3, 0x2}, {0x6, 0x12}, {0x4, 0x9, 0xc}, {0x9, 0x47c4, 0x2}, {0x1, 0x1, 0x3}, {0x401, 0x80000001, 0xca9b5c9}]})

988.154235ms ago: executing program 6 (id=9289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

951.255268ms ago: executing program 6 (id=9291):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x400000000000007, 0x10001}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r2, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0x1, 0xff1f, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)

678.502705ms ago: executing program 5 (id=9297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe20, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41fd)

370.857714ms ago: executing program 5 (id=9298):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000006200)=ANY=[@ANYBLOB="0800000000000000000000000000000095000000000000007fe46cf719a16cec4c8636bb8224fd9401287b7e8aa862ffc4fca70adcbbe7ee42e20e288385cdb3e2f979cf3fee4d602c9ffd5dc592"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)

155.770785ms ago: executing program 5 (id=9300):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]})
r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x1}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xf5}, {0x7ff}, {0x0, 0x0, 0x0, 0x8000000, 0xfffffffe}, {}, {0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3, 0x10000006}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000001}, {}, {}, {0x0, 0x0, 0x0, 0xc1f5}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x80000001, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x3a006510, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x3, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000880)="53ad4f1deb27e70bf5212840ca2dc05eb338735ffd666a99abaddb83bc376c16b10ab326e38d4e11b69c134eb791affee469e22f8162b012f6b49dae6a0ccff6cc563432ef4f91d18e46f351f5658d37eff06223a347c7220909512a2a24b2b426f7848014e0282e9ca03da55975a6cd0cfca788409a6e5ef0685b271a5645ba4a5f6abdbd947b94ee993a67d7697971b446274b441999417b3b4a1d9352", 0x9e, 0x4004804, &(0x7f0000000ac0)={0x11, 0xc, 0x0, 0x1, 0x2, 0x6, @local}, 0x14)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0x24040845}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x39}}, 0x8010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

110.646169ms ago: executing program 4 (id=9301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)

109.615489ms ago: executing program 5 (id=9302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))

100.8574ms ago: executing program 4 (id=9303):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_iso={0x0, {0xd}, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x40, 0x73, 0x5, 0x10000, 0x0, [{0x752a, 0x7, 0x6}, {0x8001, 0x0, 0x2c}, {0x4, 0x7fff, 0x8}, {0xf, 0x7, 0xfffffbff}, {0xffffffff, 0xe0f, 0x400}, {0x401, 0x4, 0x8}, {0x10, 0xffffffff, 0x6}, {0xa8c, 0x6, 0x8}, {0x5, 0x3, 0x401}, {0x3, 0x0, 0xfffffffe}, {0x1, 0xffffffff, 0x8}, {0x0, 0x1, 0x8}, {0xfff, 0x14dc, 0x2}, {0x2, 0x9, 0x1}, {0x5, 0x5, 0x6}, {0x7, 0xc73, 0x3}, {0x5, 0x1, 0x9}, {0x400, 0x5, 0x9}, {0x7, 0x7f, 0x239f4aa6}, {0x1, 0x6, 0xffffffff}, {0x1, 0xfffffffc, 0xb4}, {0x1, 0x10, 0x24}, {0x7fffffff, 0x8, 0xffff}, {0x2, 0x2, 0x2}, {0x5, 0x0, 0x3}, {0x7fffffff, 0x9, 0x3}, {0x6, 0x2, 0xffffffff}, {0x52, 0x9, 0x1}, {0x3ff, 0xfffff800, 0x114}, {0x4, 0x80000001, 0x3}, {0x4, 0x83, 0x1}, {0x7, 0x10, 0x2}, {0x0, 0x1, 0x6}, {0xda7d, 0x0, 0x8}, {0x6, 0x2, 0x7}, {0xf7, 0x5, 0x8}, {0x7, 0xff, 0x2}, {0x1, 0xd8, 0x1}, {0xc74, 0x10, 0x6}, {0x1, 0x1, 0xa9f}, {0x7f, 0x22, 0xa}, {0x0, 0x200}, {0x2, 0x3, 0xff}, {0x5, 0x3, 0x5}, {0x2, 0x5, 0x1000}, {0x7d, 0x7fff, 0x1}, {0x8, 0x81, 0x830000}, {0xb, 0xfffffff7, 0x8}, {0x9, 0x3, 0x8}, {0x4}, {0xffffffff, 0x9, 0x5}, {0x1, 0x7f, 0x6}, {0xffffffff, 0x4, 0x1}, {0x6, 0x7, 0x6152}, {0x3, 0x1, 0x4}, {0x3, 0xc1, 0x3}, {0x1000, 0x2, 0xffff}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x3ff}, {0x10000, 0x7, 0x4}, {0x3, 0x0, 0x7}, {0xd, 0xffffffff, 0x8}, {0x4, 0x90000000, 0x8}, {0x0, 0xecc9, 0x7}, {0x8, 0x8000, 0xd}, {0xffff, 0x9, 0x10000}, {0x6, 0x0, 0x7}, {0xd, 0x8, 0x40}, {0x2, 0x6e2, 0x7fffffff}, {0x3, 0x0, 0x7}, {0x6, 0x1, 0x3}, {0xffffe9c1, 0x80, 0x7f}, {0x100, 0x7, 0x5}, {0x45, 0x1, 0x7}, {0x9, 0x200, 0x5}, {0x7ff, 0x40, 0x86e}, {0x9, 0x8, 0x1ff}, {0x5ff, 0x2, 0x94}, {0x80000001, 0xff, 0x401}, {0x6, 0x1, 0x10001}, {0xa, 0x0, 0xd}, {0xfffffffa, 0x1, 0xd0}, {0x283, 0x5, 0x401}, {0x3, 0x9, 0x9}, {0x1, 0x8, 0x7}, {0xaba, 0xff, 0x7}, {0x100, 0x1, 0x400}, {0x2, 0x7fff, 0x3}, {0x5, 0x8, 0xa19a37}, {0x2, 0x0, 0x4}, {0x80, 0x8000}, {0x1, 0xfff, 0x5}, {0x4, 0x6, 0xd}, {0x41, 0x18000000, 0x7fff}, {0xffff, 0x6, 0x4}, {0x4, 0x7, 0x5}, {0x6, 0xc, 0x7}, {0x5, 0x401, 0x2}, {0x5, 0x2, 0xc}, {0xfffffffa, 0x9, 0x5}, {0xcf2f, 0xae3, 0x9}, {0x3, 0x9, 0x10}, {0x0, 0x6, 0x5}, {0x3, 0x7, 0x100}, {0x83, 0x4, 0x2}, {0x9, 0x3, 0x2}, {0x0, 0x9b6}, {0xf7, 0x800, 0x10001}, {0x6, 0x8, 0x5}, {0x6, 0x12}, {0x4, 0x9, 0xc}, {0x9, 0x47c4, 0x2}, {0x2, 0x3, 0x5}, {0x3, 0x7fffffff, 0x7}, {0x1, 0x1, 0x3}]})

83.356392ms ago: executing program 1 (id=9304):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000060002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x6}, 0x18)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r6 = syz_open_pts(r5, 0x80)
ioctl$TIOCMBIS(r6, 0x5416, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xb0, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x6, @private2}, @in6={0xa, 0x4e22, 0x3ff, @mcast1, 0x6}, @in6={0xa, 0x4e21, 0x1755b7b4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000240)=0x10)

66.391403ms ago: executing program 4 (id=9305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

65.749593ms ago: executing program 5 (id=9306):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094)

45.059365ms ago: executing program 6 (id=9307):
r0 = socket(0x27, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x10}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1, 0x781}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xabf28f584c99c57, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000ff0f0000020000000300000044000000", @ANYRES32, @ANYBLOB=' \r\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
listen(0xffffffffffffffff, 0x2)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x87d, 0x401, 0x0)

37.561176ms ago: executing program 4 (id=9308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe20, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000200)}, 0x41fd)

15.253138ms ago: executing program 4 (id=9309):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
lsm_list_modules(&(0x7f0000002600)=[0x0], &(0x7f00000000c0)=0x8, 0x0)

14.491408ms ago: executing program 5 (id=9310):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000003140100000e000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f00000006c0)={<r4=>0xffffffffffffffff}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x0, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
r7 = fsmount(r4, 0x0, 0x70)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x80045400, &(0x7f0000000180))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006)

0s ago: executing program 4 (id=9311):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_open_procfs(0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_iso={0x0, {0xd}, 0xffffffff, 0x1, &(0x7f00000009c0)="883650", 0x3, 0x3, 0x40, 0x6e, 0x5, 0x10000, 0x0, [{0x752a, 0x7, 0x6}, {0x8001, 0x0, 0x2c}, {0x4, 0x7fff, 0x8}, {0xf, 0x7, 0xfffffbff}, {0xffffffff, 0xe0f, 0x400}, {0x401, 0x4, 0x8}, {0x10, 0xffffffff, 0x6}, {0xa8c, 0x6, 0x8}, {0x5, 0x3, 0x401}, {0x3, 0x0, 0xfffffffe}, {0x1, 0xffffffff, 0x8}, {0x0, 0x1, 0x8}, {0xfff, 0x14dc, 0x2}, {0x2, 0x9, 0x1}, {0x5, 0x5, 0x6}, {0x7, 0xc73, 0x3}, {0x5, 0x1, 0x9}, {0x400, 0x5, 0x9}, {0x7, 0x7f, 0x239f4aa6}, {0x1, 0x6, 0xffffffff}, {0x1, 0xfffffffc, 0xb4}, {0x1, 0x10, 0x24}, {0x7fffffff, 0x8, 0xffff}, {0x2, 0x2, 0x2}, {0x5, 0x0, 0x3}, {0x7fffffff, 0x9, 0x3}, {0x6, 0x2, 0xffffffff}, {0x52, 0x9, 0x1}, {0x3ff, 0xfffff800, 0x114}, {0x4, 0x80000001, 0x3}, {0x4, 0x83, 0x1}, {0x7, 0x10, 0x2}, {0x0, 0x1, 0x6}, {0xda7d, 0x0, 0x8}, {0x6, 0x2, 0x7}, {0xf7, 0x5, 0x8}, {0x7, 0xff, 0x2}, {0x1, 0xd8, 0x1}, {0xc74, 0x10, 0x6}, {0x1, 0x1, 0xa9f}, {0x7f, 0x22, 0xa}, {0x0, 0x200}, {0x2, 0x3, 0xff}, {0x5, 0x3, 0x5}, {0x2, 0x5, 0x1000}, {0x7d, 0x7fff, 0x1}, {0x8, 0x81, 0x830000}, {0xb, 0xfffffff7, 0x8}, {0x9, 0x3, 0x8}, {0x4}, {0xffffffff, 0x9, 0x5}, {0x1, 0x7f, 0x6}, {0xffffffff, 0x4, 0x1}, {0x6, 0x7, 0x6152}, {0x3, 0x1, 0x4}, {0x3, 0xc1, 0x3}, {0x1000, 0x2, 0xffff}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x3ff}, {0x10000, 0x7, 0x4}, {0x3, 0x0, 0x7}, {0xd, 0xffffffff, 0x8}, {0x4, 0x90000000, 0x8}, {0x0, 0xecc9, 0x7}, {0x8, 0x8000, 0xd}, {0xffff, 0x9, 0x10000}, {0x6, 0x0, 0x7}, {0xd, 0x8, 0x40}, {0x2, 0x6e2, 0x7fffffff}, {0x3, 0x0, 0x7}, {0x6, 0x1, 0x3}, {0xffffe9c1, 0x80, 0x7f}, {0x100, 0x7, 0x5}, {0x45, 0x1, 0x7}, {0x9, 0x200, 0x5}, {0x7ff, 0x40, 0x86e}, {0x9, 0x8, 0x1ff}, {0x5ff, 0x2, 0x94}, {0x80000001, 0xff, 0x401}, {0x6, 0x1, 0x10001}, {0xa, 0x0, 0xd}, {0xfffffffa, 0x1, 0xd0}, {0x283, 0x5, 0x401}, {0x3, 0x9, 0x9}, {0x1, 0x8, 0x7}, {0xaba, 0xff, 0x7}, {0x100, 0x1, 0x400}, {0x2, 0x7fff, 0x3}, {0x5, 0x8, 0xa19a37}, {0x2, 0x0, 0x4}, {0x80, 0x8000}, {0x1, 0xfff, 0x5}, {0x4, 0x6, 0xd}, {0x41, 0x18000000, 0x7fff}, {0xffff, 0x6, 0x4}, {0x4, 0x7, 0x5}, {0x6, 0xc, 0x7}, {0x5, 0x401, 0x2}, {0x5, 0x2, 0xc}, {0xfffffffa, 0x9, 0x5}, {0xcf2f, 0xae3, 0x9}, {0x3, 0x9, 0x10}, {0x3, 0x7, 0x100}, {0x83, 0x4, 0x2}, {0x9, 0x3, 0x2}, {0x6, 0x12}, {0x4, 0x9, 0xc}, {0x9, 0x47c4, 0x2}, {0x1, 0x1, 0x3}, {0x401, 0x80000001, 0xca9b5c9}]})

kernel console output (not intermixed with test programs):

idge0: port 1(bridge_slave_0) entered blocking state
[  459.610549][  T898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.632794][  T873] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.639889][  T873] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.754291][T24963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.796921][T25035] loop4: detected capacity change from 0 to 1024
[  459.820140][T25035] EXT4-fs: Ignoring removed i_version option
[  459.826815][T25035] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  459.862873][T25035] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  459.914265][T24963] veth0_vlan: entered promiscuous mode
[  459.924213][T24963] veth1_vlan: entered promiscuous mode
[  459.944839][T24963] veth0_macvtap: entered promiscuous mode
[  459.952123][T24963] veth1_macvtap: entered promiscuous mode
[  459.964744][T24963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  459.976361][T24963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  459.989676][  T873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.020663][  T873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.035254][  T873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.058909][  T873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.462860][T25069] __nla_validate_parse: 7 callbacks suppressed
[  460.462959][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7825'.
[  461.163180][T25092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.182055][T25092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.355650][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7834'.
[  461.652850][T25117] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  461.652850][T25117]    program syz.2.7839 not setting count and/or reply_len properly
[  461.856321][T25127] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  461.856321][T25127]    program syz.2.7844 not setting count and/or reply_len properly
[  462.214183][T25141] netlink: 'syz.1.7850': attribute type 13 has an invalid length.
[  462.232570][T25141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.330036][T25153] netlink: 'syz.6.7856': attribute type 13 has an invalid length.
[  462.343301][T25153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.398949][T25157] netlink: 'syz.6.7858': attribute type 13 has an invalid length.
[  462.412719][T25157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.778283][T25177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7867'.
[  462.820245][T25181] netlink: 'syz.2.7869': attribute type 13 has an invalid length.
[  462.832744][T25181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.308554][T25199] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  463.369844][T25203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7878'.
[  463.399534][T25207] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  463.714870][   T29] kauditd_printk_skb: 21129 callbacks suppressed
[  463.714890][   T29] audit: type=1326 audit(1766431878.802:73769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.745000][   T29] audit: type=1326 audit(1766431878.802:73770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.768649][   T29] audit: type=1326 audit(1766431878.802:73771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.792339][   T29] audit: type=1326 audit(1766431878.802:73772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.816028][   T29] audit: type=1326 audit(1766431878.802:73773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.839926][   T29] audit: type=1326 audit(1766431878.802:73774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.863557][   T29] audit: type=1326 audit(1766431878.802:73775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.887371][   T29] audit: type=1326 audit(1766431878.802:73776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.910970][   T29] audit: type=1326 audit(1766431878.802:73777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  463.934611][   T29] audit: type=1326 audit(1766431878.802:73778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25214 comm="syz.2.7883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  464.290021][T25238] Cannot find set identified by id 0 to match
[  466.022881][   T44] Bluetooth: hci1: sending frame failed (-49)
[  466.029029][ T3593] Bluetooth: hci1: Opcode 0x1003 failed: -49
[  466.709945][T25284] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  466.761553][T25288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7911'.
[  466.856769][T25305] IPv6: NLM_F_CREATE should be specified when creating new route
[  467.080434][T25318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7924'.
[  467.480829][T25326] netlink: 'syz.6.7927': attribute type 13 has an invalid length.
[  467.498442][T25326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.045472][T25375] blktrace: Concurrent blktraces are not allowed on loop9
[  468.191924][T25380] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[  468.565111][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7954'.
[  468.737562][   T29] kauditd_printk_skb: 1009 callbacks suppressed
[  468.737606][   T29] audit: type=1326 audit(1766431884.822:74788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.767929][   T29] audit: type=1326 audit(1766431884.822:74789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.791694][   T29] audit: type=1326 audit(1766431884.822:74790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.815269][   T29] audit: type=1326 audit(1766431884.832:74791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.838900][   T29] audit: type=1326 audit(1766431884.832:74792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac66fedf90 code=0x7ffc0000
[  468.862532][   T29] audit: type=1326 audit(1766431884.832:74793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.886329][   T29] audit: type=1326 audit(1766431884.832:74794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.907809][T25411] netlink: 'syz.4.7959': attribute type 3 has an invalid length.
[  468.910284][   T29] audit: type=1326 audit(1766431884.832:74795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.941300][   T29] audit: type=1326 audit(1766431884.832:74796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.964911][   T29] audit: type=1326 audit(1766431884.852:74797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25405 comm="syz.4.7958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  468.970217][T25409] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.044837][T25409] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.104297][T25409] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.168417][T25409] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.239945][ T3609] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.251264][ T3609] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.263813][ T3609] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.276456][ T3609] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.288995][T25411] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.344581][T25411] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.414812][T25411] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.439393][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7969'.
[  469.465325][T25411] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.503873][T25441] FAULT_INJECTION: forcing a failure.
[  469.503873][T25441] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.517212][T25441] CPU: 0 UID: 0 PID: 25441 Comm: syz.1.7971 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  469.517293][T25441] Tainted: [W]=WARN
[  469.517300][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  469.517314][T25441] Call Trace:
[  469.517321][T25441]  <TASK>
[  469.517329][T25441]  __dump_stack+0x1d/0x30
[  469.517360][T25441]  dump_stack_lvl+0x95/0xd0
[  469.517420][T25441]  dump_stack+0x15/0x1b
[  469.517447][T25441]  should_fail_ex+0x265/0x280
[  469.517472][T25441]  should_fail+0xb/0x20
[  469.517492][T25441]  should_fail_usercopy+0x1a/0x20
[  469.517571][T25441]  _copy_to_user+0x20/0xa0
[  469.517607][T25441]  simple_read_from_buffer+0xb5/0x130
[  469.517672][T25441]  proc_fail_nth_read+0x10e/0x150
[  469.517709][T25441]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  469.517744][T25441]  vfs_read+0x1a8/0x770
[  469.517767][T25441]  ? __rcu_read_unlock+0x4f/0x70
[  469.517794][T25441]  ? __fget_files+0x184/0x1c0
[  469.517822][T25441]  ? mutex_lock+0x58/0x90
[  469.517850][T25441]  ksys_read+0xda/0x1a0
[  469.517877][T25441]  __x64_sys_read+0x40/0x50
[  469.517903][T25441]  x64_sys_call+0x2889/0x3000
[  469.517987][T25441]  do_syscall_64+0xca/0x2b0
[  469.518035][T25441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.518064][T25441] RIP: 0033:0x7f984c2ee15c
[  469.518083][T25441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  469.518138][T25441] RSP: 002b:00007f984ad4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  469.518163][T25441] RAX: ffffffffffffffda RBX: 00007f984c545fa0 RCX: 00007f984c2ee15c
[  469.518180][T25441] RDX: 000000000000000f RSI: 00007f984ad4f0a0 RDI: 0000000000000005
[  469.518196][T25441] RBP: 00007f984ad4f090 R08: 0000000000000000 R09: 0000000000000000
[  469.518209][T25441] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001
[  469.518226][T25441] R13: 00007f984c546038 R14: 00007f984c545fa0 R15: 00007ffe6d19bff8
[  469.518250][T25441]  </TASK>
[  469.742917][T25445] netlink: 'syz.6.7974': attribute type 13 has an invalid length.
[  469.756823][T25445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  469.797155][T25449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7976'.
[  470.200243][T25470] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7984'.
[  470.371188][T25474] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7983'.
[  470.396643][T25468] FAULT_INJECTION: forcing a failure.
[  470.396643][T25468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.409868][T25468] CPU: 0 UID: 0 PID: 25468 Comm: syz.2.7984 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  470.409957][T25468] Tainted: [W]=WARN
[  470.409964][T25468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  470.409981][T25468] Call Trace:
[  470.409989][T25468]  <TASK>
[  470.409999][T25468]  __dump_stack+0x1d/0x30
[  470.410031][T25468]  dump_stack_lvl+0x95/0xd0
[  470.410114][T25468]  dump_stack+0x15/0x1b
[  470.410162][T25468]  should_fail_ex+0x265/0x280
[  470.410192][T25468]  should_fail+0xb/0x20
[  470.410243][T25468]  should_fail_usercopy+0x1a/0x20
[  470.410267][T25468]  _copy_to_user+0x20/0xa0
[  470.410303][T25468]  simple_read_from_buffer+0xb5/0x130
[  470.410329][T25468]  proc_fail_nth_read+0x10e/0x150
[  470.410548][T25468]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  470.410603][T25468]  vfs_read+0x1a8/0x770
[  470.410623][T25468]  ? __rcu_read_unlock+0x4f/0x70
[  470.410643][T25468]  ? __fget_files+0x184/0x1c0
[  470.410672][T25468]  ? mutex_lock+0x58/0x90
[  470.410708][T25468]  ksys_read+0xda/0x1a0
[  470.410744][T25468]  __x64_sys_read+0x40/0x50
[  470.410849][T25468]  x64_sys_call+0x2889/0x3000
[  470.410879][T25468]  do_syscall_64+0xca/0x2b0
[  470.410915][T25468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.411022][T25468] RIP: 0033:0x7f5a1635e15c
[  470.411064][T25468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  470.411082][T25468] RSP: 002b:00007f5a14dc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  470.411103][T25468] RAX: ffffffffffffffda RBX: 00007f5a165b5fa0 RCX: 00007f5a1635e15c
[  470.411120][T25468] RDX: 000000000000000f RSI: 00007f5a14dc70a0 RDI: 0000000000000007
[  470.411136][T25468] RBP: 00007f5a14dc7090 R08: 0000000000000000 R09: 0000000000000000
[  470.411152][T25468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.411202][T25468] R13: 00007f5a165b6038 R14: 00007f5a165b5fa0 R15: 00007ffdc4b5a848
[  470.411227][T25468]  </TASK>
[  470.761370][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7990'.
[  470.803293][T25497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7992'.
[  470.954241][T25495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.973031][T25495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.184394][T25499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  471.195026][T25499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  471.221257][T25515] FAULT_INJECTION: forcing a failure.
[  471.221257][T25515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.234527][T25515] CPU: 0 UID: 0 PID: 25515 Comm: syz.5.7997 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  471.234565][T25515] Tainted: [W]=WARN
[  471.234571][T25515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  471.234583][T25515] Call Trace:
[  471.234589][T25515]  <TASK>
[  471.234596][T25515]  __dump_stack+0x1d/0x30
[  471.234618][T25515]  dump_stack_lvl+0x95/0xd0
[  471.234660][T25515]  dump_stack+0x15/0x1b
[  471.234684][T25515]  should_fail_ex+0x265/0x280
[  471.234713][T25515]  should_fail+0xb/0x20
[  471.234810][T25515]  should_fail_usercopy+0x1a/0x20
[  471.234839][T25515]  _copy_from_user+0x1c/0xb0
[  471.234871][T25515]  memdup_user+0x5e/0xd0
[  471.234952][T25515]  sctp_getsockopt_connectx3+0x173/0x300
[  471.235051][T25515]  sctp_getsockopt+0x910/0xaa0
[  471.235082][T25515]  sock_common_getsockopt+0x60/0x70
[  471.235101][T25515]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  471.235121][T25515]  do_sock_getsockopt+0x1c4/0x210
[  471.235176][T25515]  __x64_sys_getsockopt+0x11e/0x1a0
[  471.235212][T25515]  x64_sys_call+0x2dc7/0x3000
[  471.235307][T25515]  do_syscall_64+0xca/0x2b0
[  471.235395][T25515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.235478][T25515] RIP: 0033:0x7f2b3f0bf749
[  471.235504][T25515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.235520][T25515] RSP: 002b:00007f2b3db1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  471.235543][T25515] RAX: ffffffffffffffda RBX: 00007f2b3f315fa0 RCX: 00007f2b3f0bf749
[  471.235557][T25515] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006
[  471.235572][T25515] RBP: 00007f2b3db1f090 R08: 00002000000007c0 R09: 0000000000000000
[  471.235587][T25515] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.235675][T25515] R13: 00007f2b3f316038 R14: 00007f2b3f315fa0 R15: 00007ffd06d3a708
[  471.235702][T25515]  </TASK>
[  471.480718][T25519] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  471.699764][T25530] FAULT_INJECTION: forcing a failure.
[  471.699764][T25530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.712896][T25530] CPU: 0 UID: 0 PID: 25530 Comm: syz.5.8004 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  471.713033][T25530] Tainted: [W]=WARN
[  471.713043][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  471.713059][T25530] Call Trace:
[  471.713065][T25530]  <TASK>
[  471.713072][T25530]  __dump_stack+0x1d/0x30
[  471.713096][T25530]  dump_stack_lvl+0x95/0xd0
[  471.713121][T25530]  dump_stack+0x15/0x1b
[  471.713190][T25530]  should_fail_ex+0x265/0x280
[  471.713213][T25530]  should_fail+0xb/0x20
[  471.713232][T25530]  should_fail_usercopy+0x1a/0x20
[  471.713258][T25530]  _copy_from_iter+0xcf/0xe70
[  471.713348][T25530]  ? __alloc_skb+0x396/0x4b0
[  471.713397][T25530]  ? __alloc_skb+0x228/0x4b0
[  471.713428][T25530]  netlink_sendmsg+0x471/0x6b0
[  471.713479][T25530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.713511][T25530]  __sock_sendmsg+0x145/0x180
[  471.713531][T25530]  ____sys_sendmsg+0x31e/0x4a0
[  471.713563][T25530]  ___sys_sendmsg+0x17b/0x1d0
[  471.713672][T25530]  __x64_sys_sendmsg+0xd4/0x160
[  471.713703][T25530]  x64_sys_call+0x17ba/0x3000
[  471.713732][T25530]  do_syscall_64+0xca/0x2b0
[  471.713771][T25530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.713880][T25530] RIP: 0033:0x7f2b3f0bf749
[  471.713899][T25530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.713919][T25530] RSP: 002b:00007f2b3db1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.713937][T25530] RAX: ffffffffffffffda RBX: 00007f2b3f315fa0 RCX: 00007f2b3f0bf749
[  471.714014][T25530] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  471.714029][T25530] RBP: 00007f2b3db1f090 R08: 0000000000000000 R09: 0000000000000000
[  471.714045][T25530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.714060][T25530] R13: 00007f2b3f316038 R14: 00007f2b3f315fa0 R15: 00007ffd06d3a708
[  471.714107][T25530]  </TASK>
[  471.951031][T25534] loop5: detected capacity change from 0 to 512
[  471.957799][T25534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  471.969365][T25534] EXT4-fs (loop5): 1 truncate cleaned up
[  471.975882][T25534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.006413][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.017563][T25539] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  472.071313][T25545] netlink: 'syz.6.8010': attribute type 13 has an invalid length.
[  472.086641][T25545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.110634][T25541] loop5: detected capacity change from 0 to 512
[  472.125186][T25541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  472.138009][T25541] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.151071][T25541] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  472.157710][T25541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  472.165221][T25541] vhci_hcd vhci_hcd.0: Device attached
[  472.239089][T25554] __nla_validate_parse: 2 callbacks suppressed
[  472.239105][T25554] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8008'.
[  472.342552][   T36] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  472.402615][   T36] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  472.863562][T25550] vhci_hcd: connection reset by peer
[  472.869105][ T3572] vhci_hcd vhci_hcd.5: stop threads
[  472.874452][ T3572] vhci_hcd vhci_hcd.5: release socket
[  472.879945][ T3572] vhci_hcd vhci_hcd.5: disconnect device
[  472.981495][T25557] 8021q: adding VLAN 0 to HW filter on device bond2
[  472.989499][T25557] bond0: (slave bond2): Enslaving as an active interface with an up link
[  472.999631][T25557] netlink: 14 bytes leftover after parsing attributes in process `syz.6.8012'.
[  473.011016][T25557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.020519][T25557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.030039][T25557] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  473.038774][T25557] bridge0: port 3(gretap0) entered disabled state
[  473.048966][T25557] bond0 (unregistering): (slave bond2): Releasing backup interface
[  473.058086][T25557] bond0 (unregistering): Released all slaves
[  473.167967][ T3572] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.179116][ T3572] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.190448][ T3572] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.201391][ T3572] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.376276][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  473.414086][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8014'.
[  473.923491][T25597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8027'.
[  473.953168][T25603] netlink: 'syz.5.8029': attribute type 13 has an invalid length.
[  474.009096][T25603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  474.069390][T25611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8032'.
[  474.101297][T25614] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  474.164494][T25622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8037'.
[  474.180409][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8038'.
[  474.323497][T25635] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  474.497632][   T29] kauditd_printk_skb: 75 callbacks suppressed
[  474.497653][   T29] audit: type=1326 audit(1766431890.532:74873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.527529][   T29] audit: type=1326 audit(1766431890.532:74874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.551209][   T29] audit: type=1326 audit(1766431890.532:74875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.574866][   T29] audit: type=1326 audit(1766431890.532:74876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.598848][   T29] audit: type=1326 audit(1766431890.532:74877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.622503][   T29] audit: type=1326 audit(1766431890.532:74878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.646080][   T29] audit: type=1326 audit(1766431890.532:74879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.669902][   T29] audit: type=1326 audit(1766431890.532:74880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.693580][   T29] audit: type=1326 audit(1766431890.532:74881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.717337][   T29] audit: type=1326 audit(1766431890.532:74882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25640 comm="syz.2.8046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  474.776969][T25646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8048'.
[  475.733002][T25656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8050'.
[  475.940922][T25673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8051'.
[  477.330319][T25728] __nla_validate_parse: 2 callbacks suppressed
[  477.330334][T25728] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8077'.
[  477.358404][T25728] 9pnet_fd: Insufficient options for proto=fd
[  477.780743][   T36] usb 11-1: enqueue for inactive port 0
[  477.786487][   T36] usb 11-1: enqueue for inactive port 0
[  477.853487][   T36] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  477.927600][T25747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8083'.
[  478.178037][T25761] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  478.224181][T25771] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8095'.
[  478.329463][T25786] netlink: 'syz.6.8102': attribute type 13 has an invalid length.
[  478.358394][T25786] bridge0: port 3(gretap0) entered blocking state
[  478.364910][T25786] bridge0: port 3(gretap0) entered forwarding state
[  478.380462][T25786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  478.428431][T25794] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  478.524820][T25801] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8108'.
[  478.576442][T25795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8104'.
[  478.648300][T25812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8113'.
[  478.726521][T25826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8120'.
[  478.775199][T25833] FAULT_INJECTION: forcing a failure.
[  478.775199][T25833] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.788495][T25833] CPU: 0 UID: 0 PID: 25833 Comm: syz.1.8123 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  478.788535][T25833] Tainted: [W]=WARN
[  478.788541][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  478.788552][T25833] Call Trace:
[  478.788557][T25833]  <TASK>
[  478.788563][T25833]  __dump_stack+0x1d/0x30
[  478.788618][T25833]  dump_stack_lvl+0x95/0xd0
[  478.788648][T25833]  dump_stack+0x15/0x1b
[  478.788774][T25833]  should_fail_ex+0x265/0x280
[  478.788793][T25833]  should_fail+0xb/0x20
[  478.788832][T25833]  should_fail_usercopy+0x1a/0x20
[  478.788881][T25833]  _copy_to_user+0x20/0xa0
[  478.788903][T25833]  simple_read_from_buffer+0xb5/0x130
[  478.788920][T25833]  proc_fail_nth_read+0x10e/0x150
[  478.788979][T25833]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  478.789001][T25833]  vfs_read+0x1a8/0x770
[  478.789015][T25833]  ? __rcu_read_unlock+0x4f/0x70
[  478.789031][T25833]  ? __fget_files+0x184/0x1c0
[  478.789049][T25833]  ? mutex_lock+0x58/0x90
[  478.789112][T25833]  ksys_read+0xda/0x1a0
[  478.789128][T25833]  __x64_sys_read+0x40/0x50
[  478.789180][T25833]  x64_sys_call+0x2889/0x3000
[  478.789200][T25833]  do_syscall_64+0xca/0x2b0
[  478.789245][T25833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.789332][T25833] RIP: 0033:0x7f984c2ee15c
[  478.789362][T25833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  478.789383][T25833] RSP: 002b:00007f984ad4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  478.789408][T25833] RAX: ffffffffffffffda RBX: 00007f984c545fa0 RCX: 00007f984c2ee15c
[  478.789420][T25833] RDX: 000000000000000f RSI: 00007f984ad4f0a0 RDI: 0000000000000007
[  478.789475][T25833] RBP: 00007f984ad4f090 R08: 0000000000000000 R09: 0000000000000000
[  478.789490][T25833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.789517][T25833] R13: 00007f984c546038 R14: 00007f984c545fa0 R15: 00007ffe6d19bff8
[  478.789533][T25833]  </TASK>
[  479.185258][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8131'.
[  479.476810][T25879] IPv6: NLM_F_CREATE should be specified when creating new route
[  479.520354][T25884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8142'.
[  479.600822][T25892] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8146'.
[  479.601813][T25882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.618448][T25882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.649106][   T29] kauditd_printk_skb: 226 callbacks suppressed
[  479.649122][   T29] audit: type=1326 audit(1766431895.732:75109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.653704][T25897] netlink: 'syz.1.8148': attribute type 13 has an invalid length.
[  479.655491][   T29] audit: type=1326 audit(1766431895.732:75110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.710539][   T29] audit: type=1326 audit(1766431895.732:75111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.734209][   T29] audit: type=1326 audit(1766431895.732:75112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.758070][   T29] audit: type=1326 audit(1766431895.732:75113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.781635][   T29] audit: type=1326 audit(1766431895.732:75114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.805340][   T29] audit: type=1326 audit(1766431895.732:75115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.828915][   T29] audit: type=1326 audit(1766431895.732:75116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.852587][   T29] audit: type=1326 audit(1766431895.732:75117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.876299][   T29] audit: type=1326 audit(1766431895.732:75118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25896 comm="syz.1.8148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  479.899997][T25897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  479.979813][T25904] veth0: entered promiscuous mode
[  480.906301][T25930] netlink: 'syz.5.8160': attribute type 13 has an invalid length.
[  480.940959][T25930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  481.845550][T25964] IPv6: NLM_F_CREATE should be specified when creating new route
[  483.138538][T26014] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  483.761333][T26026] __nla_validate_parse: 5 callbacks suppressed
[  483.761350][T26026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8198'.
[  483.822462][T26036] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  483.868016][T26039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8203'.
[  484.154579][T26058] FAULT_INJECTION: forcing a failure.
[  484.154579][T26058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.167754][T26058] CPU: 1 UID: 0 PID: 26058 Comm: syz.4.8210 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  484.167856][T26058] Tainted: [W]=WARN
[  484.167863][T26058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  484.167876][T26058] Call Trace:
[  484.167882][T26058]  <TASK>
[  484.167888][T26058]  __dump_stack+0x1d/0x30
[  484.167934][T26058]  dump_stack_lvl+0x95/0xd0
[  484.167958][T26058]  dump_stack+0x15/0x1b
[  484.167981][T26058]  should_fail_ex+0x265/0x280
[  484.168067][T26058]  should_fail+0xb/0x20
[  484.168089][T26058]  should_fail_usercopy+0x1a/0x20
[  484.168111][T26058]  _copy_from_iter+0xcf/0xe70
[  484.168187][T26058]  ? alloc_pages_mpol+0x217/0x260
[  484.168248][T26058]  ip_generic_getfrag+0x90/0x1b0
[  484.168411][T26058]  __ip6_append_data+0x1355/0x2390
[  484.168443][T26058]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  484.168467][T26058]  ? __rcu_read_unlock+0x4f/0x70
[  484.168494][T26058]  ip6_make_skb+0x1da/0x4a0
[  484.168512][T26058]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  484.168601][T26058]  udpv6_sendmsg+0x14d6/0x15b0
[  484.168687][T26058]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  484.168717][T26058]  ? __rcu_read_unlock+0x4f/0x70
[  484.168784][T26058]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  484.168822][T26058]  inet6_sendmsg+0xac/0xd0
[  484.168854][T26058]  __sock_sendmsg+0x8b/0x180
[  484.168945][T26058]  __sys_sendto+0x268/0x330
[  484.168979][T26058]  __x64_sys_sendto+0x76/0x90
[  484.169072][T26058]  x64_sys_call+0x29a7/0x3000
[  484.169097][T26058]  do_syscall_64+0xca/0x2b0
[  484.169175][T26058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.169193][T26058] RIP: 0033:0x7fac66fef749
[  484.169208][T26058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.169241][T26058] RSP: 002b:00007fac65a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  484.169335][T26058] RAX: ffffffffffffffda RBX: 00007fac67245fa0 RCX: 00007fac66fef749
[  484.169346][T26058] RDX: 000000000000fc00 RSI: 0000000000000000 RDI: 0000000000000003
[  484.169356][T26058] RBP: 00007fac65a4f090 R08: 0000000000000000 R09: 0000000000000000
[  484.169367][T26058] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001
[  484.169379][T26058] R13: 00007fac67246038 R14: 00007fac67245fa0 R15: 00007ffc3e5278d8
[  484.169401][T26058]  </TASK>
[  484.639725][T26066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8212'.
[  484.653141][T26066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8212'.
[  484.723185][   T29] kauditd_printk_skb: 270 callbacks suppressed
[  484.723203][   T29] audit: type=1326 audit(1766431900.812:75389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.2.8216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  484.759264][   T29] audit: type=1326 audit(1766431900.842:75390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.782941][   T29] audit: type=1326 audit(1766431900.842:75391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.806548][   T29] audit: type=1326 audit(1766431900.842:75392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.830135][   T29] audit: type=1326 audit(1766431900.842:75393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.854088][   T29] audit: type=1326 audit(1766431900.842:75394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.877755][   T29] audit: type=1326 audit(1766431900.842:75395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.901423][   T29] audit: type=1326 audit(1766431900.842:75396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  484.902879][T26074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8216'.
[  484.925018][   T29] audit: type=1326 audit(1766431900.842:75397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26071 comm="syz.2.8216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  484.957566][   T29] audit: type=1326 audit(1766431900.842:75398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26069 comm="syz.4.8215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  485.108959][T26080] netlink: 'syz.2.8219': attribute type 29 has an invalid length.
[  485.149171][T26082] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  485.218946][T26090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  485.225597][T26090] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  485.233056][T26090] vhci_hcd vhci_hcd.0: Device attached
[  485.241100][T26090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8224'.
[  485.253678][T26092] vhci_hcd: connection closed
[  485.254432][ T3613] vhci_hcd vhci_hcd.2: stop threads
[  485.264434][ T3613] vhci_hcd vhci_hcd.2: release socket
[  485.269847][ T3613] vhci_hcd vhci_hcd.2: disconnect device
[  485.319817][T26099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8225'.
[  485.329190][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8225'.
[  485.887337][T26119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8231'.
[  486.163513][T26131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'.
[  486.360094][T26140] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  487.178718][T26172] netlink: 'syz.2.8253': attribute type 13 has an invalid length.
[  487.275356][T26187] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  487.922459][T26210] netlink: 'syz.5.8267': attribute type 13 has an invalid length.
[  487.959281][T26213] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  487.965909][T26213] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  487.973394][T26213] vhci_hcd vhci_hcd.0: Device attached
[  487.982297][T26218] vhci_hcd: connection closed
[  487.982652][ T3575] vhci_hcd vhci_hcd.2: stop threads
[  487.992680][ T3575] vhci_hcd vhci_hcd.2: release socket
[  487.998168][ T3575] vhci_hcd vhci_hcd.2: disconnect device
[  488.249964][T26248] netlink: 'syz.6.8282': attribute type 13 has an invalid length.
[  488.371012][T26265] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  488.960445][T26298] __nla_validate_parse: 4 callbacks suppressed
[  488.960460][T26298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8300'.
[  489.228571][T26307] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  489.457873][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8305'.
[  489.559381][T26322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8310'.
[  489.613522][T26324] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  489.823873][T26339] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  489.956743][T26351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8322'.
[  490.316051][   T29] kauditd_printk_skb: 486 callbacks suppressed
[  490.316078][   T29] audit: type=1326 audit(1766431906.402:75885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.450516][   T29] audit: type=1326 audit(1766431906.432:75886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.474200][   T29] audit: type=1326 audit(1766431906.432:75887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.497992][   T29] audit: type=1326 audit(1766431906.432:75888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.521684][   T29] audit: type=1326 audit(1766431906.432:75889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.545393][   T29] audit: type=1326 audit(1766431906.432:75890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.568981][   T29] audit: type=1326 audit(1766431906.432:75891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.592704][   T29] audit: type=1326 audit(1766431906.432:75892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.596780][T26380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.616695][   T29] audit: type=1326 audit(1766431906.432:75893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  490.631773][T26380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.648383][   T29] audit: type=1326 audit(1766431906.432:75894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26368 comm="syz.1.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  491.569951][T26411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8347'.
[  492.001866][T26428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8353'.
[  492.480296][T26437] loop5: detected capacity change from 0 to 512
[  492.494341][T26437] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  492.504622][T26437] EXT4-fs (loop5): group descriptors corrupted!
[  492.542625][T26437] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  492.549255][T26437] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  492.556728][T26437] vhci_hcd vhci_hcd.0: Device attached
[  492.565211][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8356'.
[  492.577117][T26440] vhci_hcd: connection closed
[  492.577249][ T3613] vhci_hcd vhci_hcd.5: stop threads
[  492.587281][ T3613] vhci_hcd vhci_hcd.5: release socket
[  492.592740][ T3613] vhci_hcd vhci_hcd.5: disconnect device
[  492.891118][T26451] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  492.899292][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8359'.
[  493.011977][T26461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8364'.
[  493.292252][T26490] netlink: 'syz.4.8374': attribute type 13 has an invalid length.
[  493.310449][T26490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  493.340122][T26488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.348847][T26488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.524232][T26516] bridge0: port 3(gretap0) entered blocking state
[  493.530842][T26516] bridge0: port 3(gretap0) entered disabled state
[  493.548989][T26516] gretap0: entered allmulticast mode
[  493.560663][T26516] gretap0: entered promiscuous mode
[  493.566261][T26516] bridge0: port 3(gretap0) entered blocking state
[  493.572853][T26516] bridge0: port 3(gretap0) entered forwarding state
[  493.686502][T26521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.696559][T26521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.357391][T26544] FAULT_INJECTION: forcing a failure.
[  494.357391][T26544] name failslab, interval 1, probability 0, space 0, times 0
[  494.370366][T26544] CPU: 1 UID: 0 PID: 26544 Comm: syz.5.8396 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  494.370398][T26544] Tainted: [W]=WARN
[  494.370405][T26544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  494.370418][T26544] Call Trace:
[  494.370475][T26544]  <TASK>
[  494.370482][T26544]  __dump_stack+0x1d/0x30
[  494.370512][T26544]  dump_stack_lvl+0x95/0xd0
[  494.370541][T26544]  dump_stack+0x15/0x1b
[  494.370611][T26544]  should_fail_ex+0x265/0x280
[  494.370632][T26544]  should_failslab+0x8c/0xb0
[  494.370651][T26544]  __kmalloc_cache_noprof+0x65/0x4c0
[  494.370671][T26544]  ? do_signalfd4+0xe5/0x320
[  494.370734][T26544]  do_signalfd4+0xe5/0x320
[  494.370751][T26544]  __x64_sys_signalfd+0xbe/0xf0
[  494.370792][T26544]  x64_sys_call+0x2a0a/0x3000
[  494.370812][T26544]  do_syscall_64+0xca/0x2b0
[  494.370841][T26544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.370890][T26544] RIP: 0033:0x7f2b3f0bf749
[  494.370986][T26544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.371001][T26544] RSP: 002b:00007f2b3db1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a
[  494.371017][T26544] RAX: ffffffffffffffda RBX: 00007f2b3f315fa0 RCX: 00007f2b3f0bf749
[  494.371028][T26544] RDX: 0000000000000008 RSI: 0000200000000040 RDI: ffffffffffffffff
[  494.371038][T26544] RBP: 00007f2b3db1f090 R08: 0000000000000000 R09: 0000000000000000
[  494.371049][T26544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.371138][T26544] R13: 00007f2b3f316038 R14: 00007f2b3f315fa0 R15: 00007ffd06d3a708
[  494.371167][T26544]  </TASK>
[  495.170719][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8403'.
[  495.201158][T26563] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.8404'.
[  495.215757][T26563] netlink: zone id is out of range
[  495.221588][T26563] netlink: zone id is out of range
[  495.228263][T26563] netlink: zone id is out of range
[  495.233841][T26563] netlink: zone id is out of range
[  495.239717][T26563] netlink: zone id is out of range
[  495.245981][T26563] netlink: zone id is out of range
[  495.251292][T26563] netlink: zone id is out of range
[  495.258542][T26563] netlink: zone id is out of range
[  495.263966][T26563] netlink: zone id is out of range
[  495.403197][   T29] kauditd_printk_skb: 301 callbacks suppressed
[  495.403214][   T29] audit: type=1326 audit(1766431911.492:76196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26547 comm="syz.5.8398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  495.469220][T26571] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8407'.
[  495.495331][   T29] audit: type=1326 audit(1766431911.582:76197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.542096][   T29] audit: type=1326 audit(1766431911.602:76198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.565784][   T29] audit: type=1326 audit(1766431911.602:76199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.589524][   T29] audit: type=1326 audit(1766431911.602:76200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.613325][   T29] audit: type=1326 audit(1766431911.602:76201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.637034][   T29] audit: type=1326 audit(1766431911.602:76202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.661053][   T29] audit: type=1326 audit(1766431911.602:76203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.684721][   T29] audit: type=1326 audit(1766431911.602:76204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  495.708364][   T29] audit: type=1326 audit(1766431911.602:76205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.6.8410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69bb1f749 code=0x7ffc0000
[  496.657909][T26608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8421'.
[  496.814892][T26616] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  497.026001][T26636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8433'.
[  497.035020][T26636] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8433'.
[  497.044508][T26636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8433'.
[  497.053617][T26636] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8433'.
[  497.062753][T26636] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8433'.
[  497.133448][T26648] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  497.145883][T26649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8439'.
[  497.206120][T26634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.218011][T26656] veth0: entered promiscuous mode
[  497.223190][T26656] veth0: entered allmulticast mode
[  497.240294][T26634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.256035][T26656] loop5: detected capacity change from 0 to 164
[  497.459808][T26656] iso9660: Corrupted directory entry in block 4 of inode 1792
[  497.484845][T26676] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  497.648107][T26687] netlink: 'syz.6.8455': attribute type 13 has an invalid length.
[  498.461403][T26742] loop5: detected capacity change from 0 to 512
[  498.470717][T26742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  498.483467][T26742] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.521513][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.568188][T26778] FAULT_INJECTION: forcing a failure.
[  499.568188][T26778] name failslab, interval 1, probability 0, space 0, times 0
[  499.581101][T26778] CPU: 1 UID: 0 PID: 26778 Comm: syz.1.8489 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  499.581143][T26778] Tainted: [W]=WARN
[  499.581152][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.581176][T26778] Call Trace:
[  499.581184][T26778]  <TASK>
[  499.581194][T26778]  __dump_stack+0x1d/0x30
[  499.581353][T26778]  dump_stack_lvl+0x95/0xd0
[  499.581441][T26778]  dump_stack+0x15/0x1b
[  499.581467][T26778]  should_fail_ex+0x265/0x280
[  499.581496][T26778]  should_failslab+0x8c/0xb0
[  499.581523][T26778]  __kmalloc_noprof+0xb9/0x5a0
[  499.581631][T26778]  ? unix_bind+0x1c4/0x940
[  499.581750][T26778]  unix_bind+0x1c4/0x940
[  499.581789][T26778]  __sys_bind+0x1d1/0x2a0
[  499.581821][T26778]  __x64_sys_bind+0x3f/0x50
[  499.581847][T26778]  x64_sys_call+0x2ceb/0x3000
[  499.581926][T26778]  do_syscall_64+0xca/0x2b0
[  499.581980][T26778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.582006][T26778] RIP: 0033:0x7f984c2ef749
[  499.582020][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.582037][T26778] RSP: 002b:00007f984ad4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  499.582084][T26778] RAX: ffffffffffffffda RBX: 00007f984c545fa0 RCX: 00007f984c2ef749
[  499.582099][T26778] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000003
[  499.582113][T26778] RBP: 00007f984ad4f090 R08: 0000000000000000 R09: 0000000000000000
[  499.582127][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.582202][T26778] R13: 00007f984c546038 R14: 00007f984c545fa0 R15: 00007ffe6d19bff8
[  499.582227][T26778]  </TASK>
[  500.075834][T26810] netlink: 'syz.2.8505': attribute type 13 has an invalid length.
[  500.104498][T26810] net_ratelimit: 7 callbacks suppressed
[  500.104508][T26810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  500.188274][T26824] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  500.231254][T26828] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[  500.287258][T26835] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  500.334843][T26842] FAULT_INJECTION: forcing a failure.
[  500.334843][T26842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  500.348123][T26842] CPU: 1 UID: 0 PID: 26842 Comm: syz.2.8516 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  500.348160][T26842] Tainted: [W]=WARN
[  500.348168][T26842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  500.348184][T26842] Call Trace:
[  500.348202][T26842]  <TASK>
[  500.348209][T26842]  __dump_stack+0x1d/0x30
[  500.348240][T26842]  dump_stack_lvl+0x95/0xd0
[  500.348307][T26842]  dump_stack+0x15/0x1b
[  500.348332][T26842]  should_fail_ex+0x265/0x280
[  500.348356][T26842]  should_fail+0xb/0x20
[  500.348374][T26842]  should_fail_usercopy+0x1a/0x20
[  500.348469][T26842]  _copy_from_iter+0xcf/0xe70
[  500.348502][T26842]  ? __alloc_skb+0x396/0x4b0
[  500.348530][T26842]  ? __alloc_skb+0x228/0x4b0
[  500.348581][T26842]  netlink_sendmsg+0x471/0x6b0
[  500.348615][T26842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.348646][T26842]  __sock_sendmsg+0x145/0x180
[  500.348671][T26842]  ____sys_sendmsg+0x31e/0x4a0
[  500.348838][T26842]  ___sys_sendmsg+0x17b/0x1d0
[  500.348889][T26842]  __x64_sys_sendmsg+0xd4/0x160
[  500.348933][T26842]  x64_sys_call+0x17ba/0x3000
[  500.349023][T26842]  do_syscall_64+0xca/0x2b0
[  500.349059][T26842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.349086][T26842] RIP: 0033:0x7f5a1635f749
[  500.349105][T26842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.349125][T26842] RSP: 002b:00007f5a14dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  500.349186][T26842] RAX: ffffffffffffffda RBX: 00007f5a165b5fa0 RCX: 00007f5a1635f749
[  500.349208][T26842] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  500.349224][T26842] RBP: 00007f5a14dc7090 R08: 0000000000000000 R09: 0000000000000000
[  500.349239][T26842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.349324][T26842] R13: 00007f5a165b6038 R14: 00007f5a165b5fa0 R15: 00007ffdc4b5a848
[  500.349349][T26842]  </TASK>
[  500.492136][   T29] kauditd_printk_skb: 317 callbacks suppressed
[  500.492178][   T29] audit: type=1400 audit(1766431916.576:76523): avc:  denied  { remount } for  pid=26843 comm="syz.6.8517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  500.666943][T26848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  500.673547][T26848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  500.681286][T26848] vhci_hcd vhci_hcd.0: Device attached
[  500.698391][T26850] vhci_hcd: connection closed
[  500.698852][ T3575] vhci_hcd vhci_hcd.2: stop threads
[  500.708983][ T3575] vhci_hcd vhci_hcd.2: release socket
[  500.714425][ T3575] vhci_hcd vhci_hcd.2: disconnect device
[  501.054104][T26870] loop5: detected capacity change from 0 to 2048
[  501.056668][T26859] chnl_net:caif_netlink_parms(): no params data found
[  501.084688][T26870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.129163][T26859] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.136333][T26859] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.143699][T26859] bridge_slave_0: entered allmulticast mode
[  501.150371][T26859] bridge_slave_0: entered promiscuous mode
[  501.168136][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.169746][T26859] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.184307][T26859] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.191623][T26859] bridge_slave_1: entered allmulticast mode
[  501.199116][T26859] bridge_slave_1: entered promiscuous mode
[  501.236190][   T29] audit: type=1400 audit(1766431917.326:76524): avc:  denied  { write } for  pid=26877 comm="syz.5.8523" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  501.244142][T26859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.259525][   T29] audit: type=1400 audit(1766431917.326:76525): avc:  denied  { open } for  pid=26877 comm="syz.5.8523" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  501.291623][   T29] audit: type=1400 audit(1766431917.326:76526): avc:  denied  { ioctl } for  pid=26877 comm="syz.5.8523" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  501.301043][T26859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  501.340876][ T3575] gretap0: left allmulticast mode
[  501.345974][ T3575] gretap0: left promiscuous mode
[  501.351104][ T3575] bridge0: port 3(gretap0) entered disabled state
[  501.363618][ T3575] bridge_slave_1: left allmulticast mode
[  501.369314][ T3575] bridge_slave_1: left promiscuous mode
[  501.375068][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.384494][   T29] audit: type=1326 audit(1766431917.476:76527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  501.408104][   T29] audit: type=1326 audit(1766431917.476:76528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  501.431754][   T29] audit: type=1326 audit(1766431917.476:76529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  501.456206][ T3575] bridge_slave_0: left allmulticast mode
[  501.461899][ T3575] bridge_slave_0: left promiscuous mode
[  501.467662][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.475197][   T29] audit: type=1326 audit(1766431917.506:76530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  501.498903][   T29] audit: type=1326 audit(1766431917.506:76531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a1635f783 code=0x7ffc0000
[  501.522406][   T29] audit: type=1326 audit(1766431917.536:76532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.2.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5a1635e1ff code=0x7ffc0000
[  501.560497][T26884] SELinux:  Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped).
[  501.667948][ T3575] bond1 (unregistering): Released all slaves
[  501.683871][ T3575] bond2 (unregistering): Released all slaves
[  501.728733][T26859] team0: Port device team_slave_0 added
[  501.752747][T26859] team0: Port device team_slave_1 added
[  501.786938][T26859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  501.794068][T26859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.820206][T26859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  501.852731][T26859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  501.859815][T26859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.886063][T26859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.922495][T26905] __nla_validate_parse: 2 callbacks suppressed
[  501.922509][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8531'.
[  501.958934][ T3575] team0 (unregistering): Port device team_slave_1 removed
[  501.969956][ T3575] team0 (unregistering): Port device team_slave_0 removed
[  502.052343][T26859] hsr_slave_0: entered promiscuous mode
[  502.060230][T26859] hsr_slave_1: entered promiscuous mode
[  502.066328][T26859] debugfs: 'hsr0' already exists in 'hsr'
[  502.072077][T26859] Cannot create hsr debugfs directory
[  502.305952][T26924] loop4: detected capacity change from 0 to 2048
[  502.324142][T26924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.371671][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.400386][T26859] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  502.409806][T26859] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  502.418896][T26859] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  502.428530][T26859] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  502.468092][T26859] 8021q: adding VLAN 0 to HW filter on device bond0
[  502.481492][T26859] 8021q: adding VLAN 0 to HW filter on device team0
[  502.490882][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.498074][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  502.509208][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.516372][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state
[  502.550575][T26941] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.592183][T26859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  502.605386][T26941] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.664132][T26941] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.714402][T26941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.735797][T26859] veth0_vlan: entered promiscuous mode
[  502.743507][T26859] veth1_vlan: entered promiscuous mode
[  502.759815][T26859] veth0_macvtap: entered promiscuous mode
[  502.767715][T26859] veth1_macvtap: entered promiscuous mode
[  502.779466][T26859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  502.793470][T26859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  502.807533][ T3597] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.826591][ T3597] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.857109][T26965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8545'.
[  502.857420][ T3597] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.876345][ T3597] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.885369][ T3597] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.897611][ T3597] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.911609][ T3597] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.928818][ T3597] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.959076][T26972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8547'.
[  503.159046][T26983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.167825][T26983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.253562][T26985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.262072][T26985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.621682][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8555'.
[  503.763325][T27007] FAULT_INJECTION: forcing a failure.
[  503.763325][T27007] name failslab, interval 1, probability 0, space 0, times 0
[  503.776138][T27007] CPU: 0 UID: 0 PID: 27007 Comm: syz.2.8559 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  503.776213][T27007] Tainted: [W]=WARN
[  503.776287][T27007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  503.776299][T27007] Call Trace:
[  503.776304][T27007]  <TASK>
[  503.776311][T27007]  __dump_stack+0x1d/0x30
[  503.776334][T27007]  dump_stack_lvl+0x95/0xd0
[  503.776378][T27007]  dump_stack+0x15/0x1b
[  503.776401][T27007]  should_fail_ex+0x265/0x280
[  503.776423][T27007]  should_failslab+0x8c/0xb0
[  503.776443][T27007]  __kmalloc_cache_noprof+0x65/0x4c0
[  503.776528][T27007]  ? serport_ldisc_read+0x8c/0x300
[  503.776552][T27007]  serport_ldisc_read+0x8c/0x300
[  503.776584][T27007]  ? terminate_walk+0x1e6/0x210
[  503.776688][T27007]  ? path_openat+0x1d88/0x23b0
[  503.776736][T27007]  tty_read+0x154/0x4a0
[  503.776762][T27007]  ? __import_iovec+0x428/0x540
[  503.776834][T27007]  do_iter_readv_writev+0x4a1/0x540
[  503.776945][T27007]  vfs_readv+0x1ea/0x690
[  503.777000][T27007]  do_readv+0xe7/0x210
[  503.777027][T27007]  __x64_sys_readv+0x45/0x50
[  503.777046][T27007]  x64_sys_call+0x2831/0x3000
[  503.777108][T27007]  do_syscall_64+0xca/0x2b0
[  503.777138][T27007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.777156][T27007] RIP: 0033:0x7f5a1635f749
[  503.777232][T27007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.777248][T27007] RSP: 002b:00007f5a14dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  503.777301][T27007] RAX: ffffffffffffffda RBX: 00007f5a165b5fa0 RCX: 00007f5a1635f749
[  503.777312][T27007] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003
[  503.777323][T27007] RBP: 00007f5a14dc7090 R08: 0000000000000000 R09: 0000000000000000
[  503.777333][T27007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.777344][T27007] R13: 00007f5a165b6038 R14: 00007f5a165b5fa0 R15: 00007ffdc4b5a848
[  503.777361][T27007]  </TASK>
[  504.260208][T27019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8564'.
[  504.675719][T27040] loop4: detected capacity change from 0 to 2048
[  504.694523][T27040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.923573][T27047] lo speed is unknown, defaulting to 1000
[  504.929625][T27047] lo speed is unknown, defaulting to 1000
[  504.935837][T27047] lo speed is unknown, defaulting to 1000
[  504.944568][T27047] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  504.961864][T27047] lo speed is unknown, defaulting to 1000
[  504.968274][T27047] lo speed is unknown, defaulting to 1000
[  504.974580][T27047] lo speed is unknown, defaulting to 1000
[  504.980821][T27047] lo speed is unknown, defaulting to 1000
[  504.987052][T27047] lo speed is unknown, defaulting to 1000
[  505.079804][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8579'.
[  505.178174][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8585'.
[  505.188531][T27070] team0: Port device team_slave_1 removed
[  505.441512][T27081] !yz!: rxe_newlink: already configured on team_slave_0
[  505.550614][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.600203][T27089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8591'.
[  505.609846][T27089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8591'.
[  505.619424][T27089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8591'.
[  505.657067][T27090] 9p: Bad value for 'wfdno'
[  505.670000][   T29] kauditd_printk_skb: 201 callbacks suppressed
[  505.670016][   T29] audit: type=1326 audit(1766431921.756:76734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.704473][   T29] audit: type=1326 audit(1766431921.786:76735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.728220][   T29] audit: type=1326 audit(1766431921.796:76736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.751851][   T29] audit: type=1326 audit(1766431921.796:76737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.775466][   T29] audit: type=1326 audit(1766431921.796:76738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.799146][   T29] audit: type=1326 audit(1766431921.796:76739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.822784][   T29] audit: type=1326 audit(1766431921.796:76740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.846764][   T29] audit: type=1326 audit(1766431921.796:76741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.871221][   T29] audit: type=1326 audit(1766431921.886:76742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  505.894865][   T29] audit: type=1326 audit(1766431921.886:76743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27088 comm="syz.4.8591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66fef749 code=0x7ffc0000
[  506.090927][T27109] loop6: detected capacity change from 0 to 2048
[  506.104381][T27109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  506.169738][T26859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  506.182919][T27118] FAULT_INJECTION: forcing a failure.
[  506.182919][T27118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  506.196191][T27118] CPU: 0 UID: 0 PID: 27118 Comm: syz.5.8602 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  506.196220][T27118] Tainted: [W]=WARN
[  506.196227][T27118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  506.196263][T27118] Call Trace:
[  506.196269][T27118]  <TASK>
[  506.196276][T27118]  __dump_stack+0x1d/0x30
[  506.196299][T27118]  dump_stack_lvl+0x95/0xd0
[  506.196318][T27118]  dump_stack+0x15/0x1b
[  506.196414][T27118]  should_fail_ex+0x265/0x280
[  506.196435][T27118]  should_fail+0xb/0x20
[  506.196452][T27118]  should_fail_usercopy+0x1a/0x20
[  506.196474][T27118]  _copy_from_user+0x1c/0xb0
[  506.196506][T27118]  ip6gre_tunnel_siocdevprivate+0x13d/0x6f0
[  506.196590][T27118]  dev_ifsioc+0x8f8/0xaa0
[  506.196623][T27118]  dev_ioctl+0x78d/0x960
[  506.196652][T27118]  sock_ioctl+0x593/0x610
[  506.196708][T27118]  ? __pfx_sock_ioctl+0x10/0x10
[  506.196799][T27118]  __se_sys_ioctl+0xce/0x140
[  506.196830][T27118]  __x64_sys_ioctl+0x43/0x50
[  506.196859][T27118]  x64_sys_call+0x14b0/0x3000
[  506.196978][T27118]  do_syscall_64+0xca/0x2b0
[  506.197132][T27118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.197181][T27118] RIP: 0033:0x7f2b3f0bf749
[  506.197195][T27118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  506.197271][T27118] RSP: 002b:00007f2b3db1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  506.197319][T27118] RAX: ffffffffffffffda RBX: 00007f2b3f315fa0 RCX: 00007f2b3f0bf749
[  506.197369][T27118] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006
[  506.197381][T27118] RBP: 00007f2b3db1f090 R08: 0000000000000000 R09: 0000000000000000
[  506.197392][T27118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  506.197403][T27118] R13: 00007f2b3f316038 R14: 00007f2b3f315fa0 R15: 00007ffd06d3a708
[  506.197422][T27118]  </TASK>
[  506.510023][T27136] loop6: detected capacity change from 0 to 2048
[  506.525189][T27136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  506.543567][T27136] netlink: 'syz.6.8610': attribute type 3 has an invalid length.
[  506.666275][T27151] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  506.681545][T27151] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1568 with error 28
[  506.683296][T27147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.694109][T27151] EXT4-fs (loop6): This should not happen!! Data will be lost
[  506.694109][T27151] 
[  506.703074][T27147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.712103][T27151] EXT4-fs (loop6): Total free blocks count 0
[  506.725884][T27151] EXT4-fs (loop6): Free/Dirty block details
[  506.731880][T27151] EXT4-fs (loop6): free_blocks=2415919104
[  506.737667][T27151] EXT4-fs (loop6): dirty_blocks=1584
[  506.743000][T27151] EXT4-fs (loop6): Block reservation details
[  506.749019][T27151] EXT4-fs (loop6): i_reserved_data_blocks=99
[  506.803534][ T3597] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2 with error 28
[  507.454527][T27174] tipc: Started in network mode
[  507.459479][T27174] tipc: Node identity 4, cluster identity 4711
[  507.465740][T27174] tipc: Node number set to 4
[  508.205519][T27193] __nla_validate_parse: 66 callbacks suppressed
[  508.205538][T27193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8626'.
[  508.221562][T27193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8626'.
[  508.246347][T27195] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8627'.
[  508.322557][T27198] bridge0: port 3(gretap0) entered blocking state
[  508.329044][T27198] bridge0: port 3(gretap0) entered disabled state
[  508.335729][T27198] gretap0: entered allmulticast mode
[  508.341570][T27198] gretap0: entered promiscuous mode
[  508.347126][T27198] bridge0: port 3(gretap0) entered blocking state
[  508.353650][T27198] bridge0: port 3(gretap0) entered forwarding state
[  508.709298][T27212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8634'.
[  509.301285][T27244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8647'.
[  509.823764][T27277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8659'.
[  509.982019][T27290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8664'.
[  510.300314][T27307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8671'.
[  510.628135][T27333] loop6: detected capacity change from 0 to 2048
[  510.655224][T27330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.664047][T27333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  510.676404][T27330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.743121][T26859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.800525][   T29] kauditd_printk_skb: 296 callbacks suppressed
[  510.800540][   T29] audit: type=1326 audit(1766431926.886:77040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.830740][   T29] audit: type=1326 audit(1766431926.886:77041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.854369][   T29] audit: type=1326 audit(1766431926.886:77042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.879829][   T29] audit: type=1326 audit(1766431926.966:77043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.903635][   T29] audit: type=1326 audit(1766431926.966:77044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.927361][   T29] audit: type=1326 audit(1766431926.966:77045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.951048][   T29] audit: type=1326 audit(1766431926.966:77046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.974895][   T29] audit: type=1326 audit(1766431926.966:77047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  510.999003][   T29] audit: type=1326 audit(1766431926.966:77048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  511.022701][   T29] audit: type=1326 audit(1766431926.966:77049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27342 comm="syz.6.8682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  511.362557][T27351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8686'.
[  511.564828][T27361] lo speed is unknown, defaulting to 1000
[  511.690384][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8691'.
[  511.965671][T27384] loop6: detected capacity change from 0 to 1024
[  511.972955][T27384] EXT4-fs: Ignoring removed orlov option
[  511.978790][T27384] ext4: Unknown parameter 'uid>00000000000000000000'
[  512.268619][T27411] loop4: detected capacity change from 0 to 2048
[  512.284430][T27411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.122502][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.146566][T27472] loop4: detected capacity change from 0 to 1024
[  513.164392][T27472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.181983][T27473] sd 0:0:1:0: device reset
[  513.198404][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.286833][T27481] netlink: 'syz.4.8734': attribute type 1 has an invalid length.
[  513.294711][T27481] __nla_validate_parse: 3 callbacks suppressed
[  513.294723][T27481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8734'.
[  513.395528][T27481] loop4: detected capacity change from 0 to 764
[  513.746121][T27495] tipc: Can't bind to reserved service type 2
[  513.779306][   T23] hid-generic 0000:0100:0001.0010: unknown main item tag 0x0
[  513.798020][   T23] hid-generic 0000:0100:0001.0010: hidraw0: <UNKNOWN> HID v0.28 Device [syz1] on syz0
[  513.914078][T27503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=27503 comm=syz.6.8740
[  513.980516][T27502] lo speed is unknown, defaulting to 1000
[  514.330851][T27518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  514.339778][T27518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  514.604711][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8753'.
[  514.631339][T27539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8754'.
[  514.701470][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8758'.
[  515.316406][T27572] lo speed is unknown, defaulting to 1000
[  515.418508][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8770'.
[  515.898482][T27624] lo speed is unknown, defaulting to 1000
[  516.576276][T27641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8794'.
[  516.624874][T27649] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  517.043971][   T29] kauditd_printk_skb: 1102 callbacks suppressed
[  517.043986][   T29] audit: type=1326 audit(1766431933.136:78152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27676 comm="syz.5.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.152542][   T29] audit: type=1326 audit(1766431933.166:78153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27676 comm="syz.5.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.176087][   T29] audit: type=1326 audit(1766431933.166:78154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27676 comm="syz.5.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.199726][   T29] audit: type=1326 audit(1766431933.166:78155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27676 comm="syz.5.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.223386][   T29] audit: type=1326 audit(1766431933.166:78156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27676 comm="syz.5.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.276811][T27682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8808'.
[  517.377476][   T29] audit: type=1326 audit(1766431933.466:78157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27688 comm="syz.4.8811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac66fef749 code=0x0
[  517.451387][T27691] loop5: detected capacity change from 0 to 2048
[  517.484280][T27691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.518623][T27678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.537745][T27678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.571773][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.784469][   T29] audit: type=1326 audit(1766431933.876:78158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27705 comm="syz.5.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.843970][   T29] audit: type=1326 audit(1766431933.876:78159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27705 comm="syz.5.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.867628][   T29] audit: type=1326 audit(1766431933.876:78160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27705 comm="syz.5.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  517.914656][   T29] audit: type=1326 audit(1766431933.956:78161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27705 comm="syz.5.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  518.183728][T27715] lo speed is unknown, defaulting to 1000
[  518.499580][T27714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8819'.
[  518.546681][T27725] xt_hashlimit: size too large, truncated to 1048576
[  519.620513][T27806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.629230][T27806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.660769][T27813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8853'.
[  519.674050][T27811] loop4: detected capacity change from 0 to 2048
[  519.686663][T27811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.733390][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.748203][T27820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8856'.
[  519.799289][T27830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8860'.
[  519.840218][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8861'.
[  519.869350][T27839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8863'.
[  519.956600][T27842] loop4: detected capacity change from 0 to 512
[  519.963712][T27842] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  519.974038][T27842] EXT4-fs (loop4): group descriptors corrupted!
[  520.098228][T27854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8869'.
[  520.167714][T27863] loop4: detected capacity change from 0 to 2048
[  520.184586][T27863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.414130][T27879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.422856][T27879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.762216][T27885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8879'.
[  520.810388][T27887] loop5: detected capacity change from 0 to 512
[  520.817863][T27887] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  520.828088][T27887] EXT4-fs (loop5): group descriptors corrupted!
[  520.953638][T27895] loop5: detected capacity change from 0 to 2048
[  520.964423][T27895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  520.993073][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.048207][T19934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.720958][T27923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8893'.
[  521.746066][T27925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8894'.
[  521.955676][T27938] loop5: detected capacity change from 0 to 512
[  521.962730][T27938] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  521.974420][T27938] EXT4-fs (loop5): 1 truncate cleaned up
[  521.980951][T27938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.164052][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  522.164071][   T29] audit: type=1326 audit(1766431938.256:78283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27942 comm="syz.5.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  522.193855][   T29] audit: type=1326 audit(1766431938.286:78284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b3f05b829 code=0x7ffc0000
[  522.217937][   T29] audit: type=1326 audit(1766431938.286:78285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  522.241642][   T29] audit: type=1326 audit(1766431938.286:78286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  522.457145][   T29] audit: type=1326 audit(1766431938.546:78287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27964 comm="syz.6.8910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73df64f749 code=0x0
[  522.795256][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.151280][T27980] lo speed is unknown, defaulting to 1000
[  523.398675][T27986] loop6: detected capacity change from 0 to 2048
[  523.456647][T27986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.618939][T28012] __nla_validate_parse: 6 callbacks suppressed
[  523.618953][T28012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8928'.
[  523.643221][   T29] audit: type=1326 audit(1766431939.736:78288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28013 comm="syz.2.8929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  523.668247][   T29] audit: type=1326 audit(1766431939.736:78289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28013 comm="syz.2.8929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  523.692093][   T29] audit: type=1326 audit(1766431939.736:78290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28013 comm="syz.2.8929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  523.715959][   T29] audit: type=1326 audit(1766431939.736:78291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28013 comm="syz.2.8929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  523.790638][T28017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8930'.
[  524.154567][T28032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.163331][T28032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.221162][T26859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.276893][   T29] audit: type=1326 audit(1766431940.366:78292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28041 comm="syz.4.8938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac66fef749 code=0x0
[  524.678980][T28061] lo speed is unknown, defaulting to 1000
[  525.503632][T28098] lo speed is unknown, defaulting to 1000
[  526.582453][T28127] lo speed is unknown, defaulting to 1000
[  527.176615][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  527.176632][   T29] audit: type=1326 audit(1766431943.266:78351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28142 comm="syz.5.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  527.315570][   T29] audit: type=1326 audit(1766431943.296:78352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28142 comm="syz.5.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  527.339300][   T29] audit: type=1326 audit(1766431943.306:78353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28142 comm="syz.5.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  527.362899][   T29] audit: type=1326 audit(1766431943.306:78354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28142 comm="syz.5.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3f0bf749 code=0x7ffc0000
[  527.387169][   T29] audit: type=1326 audit(1766431943.326:78355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.410848][   T29] audit: type=1326 audit(1766431943.326:78356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.434450][   T29] audit: type=1326 audit(1766431943.326:78357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.458051][   T29] audit: type=1326 audit(1766431943.336:78358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.481685][   T29] audit: type=1326 audit(1766431943.346:78359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.505320][   T29] audit: type=1326 audit(1766431943.346:78360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28144 comm="syz.1.8977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  527.605952][T28149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8979'.
[  527.997867][T28181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8990'.
[  528.205988][T28191] loop5: detected capacity change from 0 to 2048
[  528.247719][T28191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  528.373709][T28192] lo speed is unknown, defaulting to 1000
[  529.034974][T28220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9004'.
[  529.238988][T24963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.666744][T28239] lo speed is unknown, defaulting to 1000
[  530.897923][T28273] lo speed is unknown, defaulting to 1000
[  531.567689][T28298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9033'.
[  531.647326][T28302] loop6: detected capacity change from 0 to 512
[  531.661520][T28302] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  531.671845][T28302] EXT4-fs (loop6): group descriptors corrupted!
[  531.752297][T28306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9036'.
[  532.153312][T28312] loop6: detected capacity change from 0 to 2048
[  532.184636][T28312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.271995][T28327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9045'.
[  532.349311][T28332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9047'.
[  532.414405][T28337] !yz!: rxe_newlink: already configured on team_slave_0
[  532.627238][   T29] kauditd_printk_skb: 197 callbacks suppressed
[  532.627253][   T29] audit: type=1326 audit(1766431948.716:78558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.657358][   T29] audit: type=1326 audit(1766431948.716:78559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.681004][   T29] audit: type=1326 audit(1766431948.716:78560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.804906][   T29] audit: type=1326 audit(1766431948.806:78561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.828725][   T29] audit: type=1326 audit(1766431948.806:78562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.852698][   T29] audit: type=1326 audit(1766431948.806:78563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.876556][   T29] audit: type=1326 audit(1766431948.826:78564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  532.900204][   T29] audit: type=1326 audit(1766431948.826:78565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  533.003324][T26859] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.807213][T28385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9067'.
[  533.852028][T28387] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  533.902771][   T29] audit: type=1326 audit(1766431949.976:78566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28389 comm="syz.1.9069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f984c2ef749 code=0x0
[  533.987748][   T29] audit: type=1326 audit(1766431950.076:78567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28393 comm="syz.2.9070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  534.320513][T28401] lo speed is unknown, defaulting to 1000
[  534.709203][T28405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9073'.
[  534.801159][T28406] lo speed is unknown, defaulting to 1000
[  535.021970][T28422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9078'.
[  535.081099][T28427] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  535.422165][T28425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.440211][T28425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.687258][T28463] lo speed is unknown, defaulting to 1000
[  536.764219][T28476] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9095'.
[  536.776273][T28478] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  536.964900][T28483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.973770][T28483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.132386][T28500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.140979][T28500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.066207][T28514] lo speed is unknown, defaulting to 1000
[  538.259590][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  538.259608][   T29] audit: type=1326 audit(1766431954.346:78677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.369156][   T29] audit: type=1326 audit(1766431954.396:78678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.392991][   T29] audit: type=1326 audit(1766431954.396:78679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.416632][   T29] audit: type=1326 audit(1766431954.396:78680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.440275][   T29] audit: type=1326 audit(1766431954.396:78681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.463996][   T29] audit: type=1326 audit(1766431954.396:78683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.487608][   T29] audit: type=1326 audit(1766431954.396:78682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.511258][   T29] audit: type=1326 audit(1766431954.396:78684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28519 comm="syz.2.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.702512][   T29] audit: type=1326 audit(1766431954.676:78685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28523 comm="syz.2.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.726156][   T29] audit: type=1326 audit(1766431954.676:78686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28523 comm="syz.2.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  538.766926][T28528] !yz!: rxe_newlink: already configured on team_slave_0
[  538.948802][T28542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9120'.
[  539.078242][T28554] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  539.590658][T28583] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  539.894896][T28601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9145'.
[  539.924065][T28597] lo speed is unknown, defaulting to 1000
[  540.220013][T28607] lo speed is unknown, defaulting to 1000
[  541.066791][ T3587] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.214485][ T3587] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.318920][ T3587] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.424885][ T3587] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.612696][ T3587] gretap0: left allmulticast mode
[  541.617851][ T3587] gretap0: left promiscuous mode
[  541.623007][ T3587] bridge0: port 3(gretap0) entered disabled state
[  541.678660][ T3587] bridge_slave_1: left allmulticast mode
[  541.684505][ T3587] bridge_slave_1: left promiscuous mode
[  541.690235][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.765036][ T3587] bridge_slave_0: left allmulticast mode
[  541.770853][ T3587] bridge_slave_0: left promiscuous mode
[  541.776670][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.784490][T28644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.806372][T28644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.899065][ T3587] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  541.955596][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.970232][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.986879][ T3587] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  541.997750][ T3587] bond0 (unregistering): Released all slaves
[  542.016856][ T3587] bond1 (unregistering): Released all slaves
[  542.036529][ T3587] bond2 (unregistering): Released all slaves
[  542.055199][ T3587] bond3 (unregistering): Released all slaves
[  542.074428][ T3587] bond4 (unregistering): Released all slaves
[  542.085968][ T3587] bond5 (unregistering): Released all slaves
[  542.094692][ T3587] bond6 (unregistering): Released all slaves
[  542.103692][ T3587] bond7 (unregistering): Released all slaves
[  542.166046][T28620] lo speed is unknown, defaulting to 1000
[  542.202615][ T3587] hsr_slave_0: left promiscuous mode
[  542.208352][ T3587] hsr_slave_1: left promiscuous mode
[  542.214078][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.221726][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.229145][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.285368][ T3587] team0 (unregistering): Port device team_slave_1 removed
[  542.295661][ T3587] team0 (unregistering): Port device team_slave_0 removed
[  542.386896][T28620] chnl_net:caif_netlink_parms(): no params data found
[  542.428993][T28620] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.436203][T28620] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.443463][T28620] bridge_slave_0: entered allmulticast mode
[  542.449873][T28620] bridge_slave_0: entered promiscuous mode
[  542.457304][T28620] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.464457][T28620] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.471734][T28620] bridge_slave_1: entered allmulticast mode
[  542.478344][T28620] bridge_slave_1: entered promiscuous mode
[  542.497847][T28620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.508510][T28620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.531252][T28620] team0: Port device team_slave_0 added
[  542.538230][T28620] team0: Port device team_slave_1 added
[  542.649752][T28620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.656801][T28620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.682800][T28620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.695312][T28620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.702298][T28620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.728279][T28620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.763973][T28620] hsr_slave_0: entered promiscuous mode
[  542.770365][T28620] hsr_slave_1: entered promiscuous mode
[  542.776350][T28620] debugfs: 'hsr0' already exists in 'hsr'
[  542.782117][T28620] Cannot create hsr debugfs directory
[  542.789883][ T3587] IPVS: stop unused estimator thread 0...
[  542.933823][T28672] lo speed is unknown, defaulting to 1000
[  543.288066][T28677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9164'.
[  543.760836][T28620] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  543.780879][T28620] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  543.801358][T28620] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  543.819145][T28620] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  543.908077][T28620] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.964352][T28620] 8021q: adding VLAN 0 to HW filter on device team0
[  543.993731][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.000878][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.149130][T28620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  544.159590][T28620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  544.173032][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.180145][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.591374][T28705] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  544.651299][T28703] lo speed is unknown, defaulting to 1000
[  545.088327][T28620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.186655][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  545.186673][   T29] audit: type=1326 audit(1766431961.276:78867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.216901][   T29] audit: type=1326 audit(1766431961.276:78868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.240707][   T29] audit: type=1326 audit(1766431961.276:78869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.264329][   T29] audit: type=1326 audit(1766431961.276:78870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.287977][   T29] audit: type=1326 audit(1766431961.276:78871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.311745][   T29] audit: type=1326 audit(1766431961.276:78872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.335351][   T29] audit: type=1326 audit(1766431961.276:78873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.358939][   T29] audit: type=1326 audit(1766431961.276:78874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.382608][   T29] audit: type=1326 audit(1766431961.276:78875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28726 comm="syz.2.9178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a1635f749 code=0x7ffc0000
[  545.648859][T28620] veth0_vlan: entered promiscuous mode
[  545.677210][T28620] veth1_vlan: entered promiscuous mode
[  545.714970][   T29] audit: type=1326 audit(1766431961.596:78876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28733 comm="syz.1.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  545.804977][T28756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9187'.
[  545.901243][T28620] veth0_macvtap: entered promiscuous mode
[  545.925950][T28620] veth1_macvtap: entered promiscuous mode
[  545.953915][T28769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9193'.
[  545.977540][T28620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.000480][T28620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.039667][ T3613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.076490][ T3613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.108253][ T3613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.148065][ T3613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.250610][T28781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9196'.
[  546.400444][T28792] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9200'.
[  546.570659][T28811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9209'.
[  547.129520][T28846] lo speed is unknown, defaulting to 1000
[  547.804371][T28866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9231'.
[  547.870071][T28872] loop4: detected capacity change from 0 to 512
[  547.878841][T28872] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  547.889058][T28872] EXT4-fs (loop4): group descriptors corrupted!
[  548.447919][T28893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.465978][T28893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.920706][T28909] loop4: detected capacity change from 0 to 2048
[  548.934175][T28909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.972894][T28620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.427421][T28932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.436049][T28932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.735026][   T29] kauditd_printk_skb: 63 callbacks suppressed
[  550.735045][   T29] audit: type=1326 audit(1766431966.826:78940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.766173][   T29] audit: type=1326 audit(1766431966.826:78941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.789921][   T29] audit: type=1326 audit(1766431966.826:78942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.813540][   T29] audit: type=1326 audit(1766431966.826:78943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.837440][   T29] audit: type=1326 audit(1766431966.826:78944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.861248][   T29] audit: type=1326 audit(1766431966.836:78946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.884925][   T29] audit: type=1326 audit(1766431966.836:78945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.908593][   T29] audit: type=1326 audit(1766431966.836:78947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  550.932504][   T29] audit: type=1326 audit(1766431966.836:78948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28968 comm="syz.6.9265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f73df64f749 code=0x7ffc0000
[  551.151666][   T29] audit: type=1326 audit(1766431967.236:78949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28981 comm="syz.1.9271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c2ef749 code=0x7ffc0000
[  551.181303][T28984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9272'.
[  551.569800][T29010] lo speed is unknown, defaulting to 1000
[  552.172911][T29019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9284'.
[  552.197846][T29012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.218964][T29012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.691112][T29051] FAULT_INJECTION: forcing a failure.
[  552.691112][T29051] name failslab, interval 1, probability 0, space 0, times 0
[  552.703906][T29051] CPU: 1 UID: 0 PID: 29051 Comm: syz.4.9295 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  552.704005][T29051] Tainted: [W]=WARN
[  552.704013][T29051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  552.704029][T29051] Call Trace:
[  552.704039][T29051]  <TASK>
[  552.704050][T29051]  __dump_stack+0x1d/0x30
[  552.704082][T29051]  dump_stack_lvl+0x95/0xd0
[  552.704156][T29051]  dump_stack+0x15/0x1b
[  552.704176][T29051]  should_fail_ex+0x265/0x280
[  552.704200][T29051]  should_failslab+0x8c/0xb0
[  552.704230][T29051]  __kmalloc_noprof+0xb9/0x5a0
[  552.704305][T29051]  ? security_prepare_creds+0x52/0x120
[  552.704346][T29051]  security_prepare_creds+0x52/0x120
[  552.704508][T29051]  prepare_creds+0x37f/0x550
[  552.704531][T29051]  copy_creds+0x8f/0x340
[  552.704548][T29051]  ? dup_task_struct+0x60b/0x950
[  552.704570][T29051]  copy_process+0x638/0x1ef0
[  552.704610][T29051]  ? 0xffffffff81000000
[  552.704633][T29051]  kernel_clone+0x16c/0x5c0
[  552.704660][T29051]  ? vfs_write+0x7e8/0x960
[  552.704718][T29051]  __x64_sys_clone+0xe6/0x120
[  552.704752][T29051]  x64_sys_call+0x12d0/0x3000
[  552.704784][T29051]  do_syscall_64+0xca/0x2b0
[  552.704852][T29051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.704882][T29051] RIP: 0033:0x7f84e19df749
[  552.704898][T29051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.704916][T29051] RSP: 002b:00007f84e0404fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  552.704935][T29051] RAX: ffffffffffffffda RBX: 00007f84e1c36180 RCX: 00007f84e19df749
[  552.704967][T29051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000
[  552.704991][T29051] RBP: 00007f84e0405090 R08: 0000000000000000 R09: 0000000000000000
[  552.705007][T29051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  552.705077][T29051] R13: 00007f84e1c36218 R14: 00007f84e1c36180 R15: 00007fffd5fde098
[  552.705096][T29051]  </TASK>
[  553.246646][T29068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9305'.
[  553.312569][T29079] ==================================================================
[  553.320697][T29079] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache
[  553.330358][T29079] 
[  553.332685][T29079] write to 0xffff888164d03200 of 8 bytes by task 29066 on cpu 0:
[  553.340406][T29079]  page_pool_refill_alloc_cache+0x2a5/0x3c0
[  553.346311][T29079]  page_pool_alloc_pages+0xd0/0x130
[  553.351530][T29079]  bpf_test_run_xdp_live+0x54d/0x11d0
[  553.356919][T29079]  bpf_prog_test_run_xdp+0x525/0x970
[  553.362246][T29079]  bpf_prog_test_run+0x204/0x340
[  553.367194][T29079]  __sys_bpf+0x4c0/0x7c0
[  553.371454][T29079]  __x64_sys_bpf+0x41/0x50
[  553.375887][T29079]  x64_sys_call+0x28e1/0x3000
[  553.380590][T29079]  do_syscall_64+0xca/0x2b0
[  553.385110][T29079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.391020][T29079] 
[  553.393346][T29079] read to 0xffff888164d03200 of 8 bytes by task 29079 on cpu 1:
[  553.400984][T29079]  page_pool_put_unrefed_netmem+0x38b/0x4b0
[  553.406893][T29079]  napi_pp_put_page+0xe9/0x200
[  553.411682][T29079]  skb_free_head+0x12c/0x150
[  553.416287][T29079]  skb_release_data+0x33b/0x370
[  553.421165][T29079]  __kfree_skb+0x44/0x150
[  553.425520][T29079]  sk_skb_reason_drop+0xbd/0x270
[  553.430478][T29079]  __first_packet_length+0x352/0x3f0
[  553.435797][T29079]  first_packet_length+0x217/0x240
[  553.440934][T29079]  udp_poll+0xc8/0x150
[  553.445012][T29079]  sock_poll+0x20d/0x230
[  553.449283][T29079]  do_select+0x8f1/0xf40
[  553.453544][T29079]  core_sys_select+0x3dc/0x6e0
[  553.458327][T29079]  __se_sys_pselect6+0x213/0x280
[  553.463283][T29079]  __x64_sys_pselect6+0x78/0x90
[  553.468152][T29079]  x64_sys_call+0x2e98/0x3000
[  553.472858][T29079]  do_syscall_64+0xca/0x2b0
[  553.477392][T29079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.483314][T29079] 
[  553.485652][T29079] value changed: 0xffffea0005a2d4c0 -> 0x0000000000000000
[  553.492775][T29079] 
[  553.495109][T29079] Reported by Kernel Concurrency Sanitizer on:
[  553.501301][T29079] CPU: 1 UID: 0 PID: 29079 Comm: syz.1.9304 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  553.512679][T29079] Tainted: [W]=WARN
[  553.516487][T29079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  553.526562][T29079] ==================================================================
[  553.540789][T29078] rdma_rxe: rxe_newlink: failed to add team_slave_0