last executing test programs:

50.393684764s ago: executing program 4 (id=1078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x6, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

50.362704994s ago: executing program 4 (id=1079):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0)
close(r0)

50.359465054s ago: executing program 4 (id=1081):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0xc, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0})
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
write$sndseq(0xffffffffffffffff, &(0x7f0000005880), 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80047210, 0x0)

50.281669065s ago: executing program 4 (id=1084):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x2251b000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/157, 0x9d, 0x0, &(0x7f00000003c0)=""/203, 0xcb}}, 0x10)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000680)="4ac1dd07d2fd87449de31e047b1a1802a36d42f4e4d1c1bb94a0292693d61d9aee412d9b90723010d4a3f5dea89479f41d2e638ad064c33dfd5088779b6b55a0715a2aba9fd40442572fce9a206996ad37ecb2dd54b1088c02bdc7b15dd66b5da5a5a44764263bd821abf863ce5e84fb0f924fb8208cea916cf0120436ace103e77abe6733f4050ddf57e8832bb4ee2ece41459abd6e92ab0a6f4285930bc02422093c5244c22be75370", &(0x7f0000000740)=""/174}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdb9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)

48.600833577s ago: executing program 4 (id=1096):
r0 = semget$private(0x0, 0x4000000009, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1)
semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xdf, 0x800}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x6)
semctl$IPC_RMID(r0, 0x0, 0x0)

48.118169754s ago: executing program 4 (id=1103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
inotify_init()
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@delqdisc={0x44, 0x25, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x10, 0x5}, {0xa, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xeb2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}, @TCA_RATE={0x6, 0x5, {0x80, 0x35}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x44}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={<r6=>0x0}, &(0x7f0000000280)=0xc)
ioprio_get$pid(0x3, r6)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}]}, 0x38}}, 0x4000)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="091ecf2d61c1d6020a00000000"], 0x10}}, 0x4000004)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r10, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f86dd"}}}}, 0x44)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x484, 0x2c, 0xd2b, 0x40, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x458, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x2660, 0x0, 0x5, {0x5, 0x0, 0x3, 0x7, 0x5, 0x8}, {0x81, 0x2, 0x4, 0x401, 0x7, 0x5}, 0x3, 0xfe2, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x57, 0x2, 0x5, 0x7fff, 0x2, 0x8001, 0x8, 0x3, 0x394, 0x1a6, 0xfffffff9, 0xc, 0x7f, 0xc992, 0x9, 0x7f, 0x80, 0x800, 0x8001, 0x5, 0x80000001, 0x9, 0x400, 0x2, 0x7, 0x4, 0x0, 0x6, 0xfffffff5, 0x7, 0x3, 0x6, 0x2db, 0x8bfd, 0x0, 0xc0e, 0x7, 0xc, 0x9, 0x10, 0xfffffff9, 0x0, 0x401, 0x10000, 0x0, 0xa5, 0xe, 0x4, 0x2, 0x40, 0x71, 0xff, 0x10000, 0xffffffff, 0x6b231bfa, 0x6, 0x3d, 0x4, 0x6, 0x400, 0xc, 0x4, 0x6, 0x45bb4f91, 0x9, 0x9, 0x8, 0x80000000, 0x7f, 0x1ff, 0x7, 0xcf, 0x80000001, 0x8, 0x3ff, 0x5, 0x8, 0x5, 0x7, 0x5, 0x3, 0x673, 0x5, 0x7, 0x9, 0x3, 0x40, 0xaa57, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x6, 0x3, 0x200, 0x6, 0x8, 0x2, 0x7, 0x7, 0xfff, 0x8001, 0x8, 0xfffffffa, 0x36b, 0x7, 0x27d9, 0xb5, 0x81, 0x7fff, 0x2, 0x7, 0x6, 0x5, 0x80000000, 0x401, 0x7, 0x2, 0x9, 0x1, 0x4, 0x9, 0x7, 0x38, 0xfffff98f, 0x4, 0x4, 0x8, 0xffff, 0xffff, 0x4, 0x4, 0x6, 0x2, 0xff, 0xffffffff, 0x9, 0x2, 0x1, 0x3, 0x0, 0x7, 0x80000001, 0x1, 0x1, 0x1, 0x1e00000, 0x5, 0x3, 0x5, 0x3ff, 0xffffffff, 0x1, 0x101, 0x70, 0x3, 0x5, 0x9604, 0xe, 0x2, 0x5b, 0x9, 0xee6, 0x6c, 0x2, 0x5, 0x9, 0x5, 0x9, 0x5, 0x8, 0x80000001, 0x3, 0x5, 0x1, 0x3, 0x8, 0x8, 0x4, 0x6, 0x40, 0x4a22, 0xa6, 0x9, 0x5, 0x7fff, 0xfffffff9, 0x5, 0x2141, 0x81, 0x10, 0x2bc, 0x6, 0x1, 0x0, 0x5, 0x8, 0x8, 0x380, 0x52, 0x5, 0x6, 0xffffff74, 0x8, 0x0, 0x9, 0xa, 0x3a8, 0x180000, 0x9, 0x42416882, 0xc, 0xfffff10d, 0x518a, 0x0, 0xfffffffa, 0x0, 0x3, 0x8, 0x7, 0x9, 0x4, 0x3568, 0x1, 0x9, 0x1, 0x2, 0x4, 0x9, 0x10000, 0x8, 0x3, 0x38, 0x1, 0x3, 0x7fff, 0x63c, 0x0, 0x6, 0x1, 0x0, 0x5, 0x3, 0x2, 0x5, 0x3d88, 0x8, 0x33d, 0x1, 0x32cf, 0x3, 0x0, 0x101, 0x80]}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x484}}, 0x24040884)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r14, 0x4)
sendmsg$unix(r13, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd0)

48.117661103s ago: executing program 32 (id=1103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0)
inotify_init()
socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@delqdisc={0x44, 0x25, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x10, 0x5}, {0xa, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xeb2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}, @TCA_RATE={0x6, 0x5, {0x80, 0x35}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x44}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={<r6=>0x0}, &(0x7f0000000280)=0xc)
ioprio_get$pid(0x3, r6)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xc}]}}]}, 0x38}}, 0x4000)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="091ecf2d61c1d6020a00000000"], 0x10}}, 0x4000004)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r10, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f86dd"}}}}, 0x44)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x484, 0x2c, 0xd2b, 0x40, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x458, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x2660, 0x0, 0x5, {0x5, 0x0, 0x3, 0x7, 0x5, 0x8}, {0x81, 0x2, 0x4, 0x401, 0x7, 0x5}, 0x3, 0xfe2, 0xfff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x57, 0x2, 0x5, 0x7fff, 0x2, 0x8001, 0x8, 0x3, 0x394, 0x1a6, 0xfffffff9, 0xc, 0x7f, 0xc992, 0x9, 0x7f, 0x80, 0x800, 0x8001, 0x5, 0x80000001, 0x9, 0x400, 0x2, 0x7, 0x4, 0x0, 0x6, 0xfffffff5, 0x7, 0x3, 0x6, 0x2db, 0x8bfd, 0x0, 0xc0e, 0x7, 0xc, 0x9, 0x10, 0xfffffff9, 0x0, 0x401, 0x10000, 0x0, 0xa5, 0xe, 0x4, 0x2, 0x40, 0x71, 0xff, 0x10000, 0xffffffff, 0x6b231bfa, 0x6, 0x3d, 0x4, 0x6, 0x400, 0xc, 0x4, 0x6, 0x45bb4f91, 0x9, 0x9, 0x8, 0x80000000, 0x7f, 0x1ff, 0x7, 0xcf, 0x80000001, 0x8, 0x3ff, 0x5, 0x8, 0x5, 0x7, 0x5, 0x3, 0x673, 0x5, 0x7, 0x9, 0x3, 0x40, 0xaa57, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x6, 0x3, 0x200, 0x6, 0x8, 0x2, 0x7, 0x7, 0xfff, 0x8001, 0x8, 0xfffffffa, 0x36b, 0x7, 0x27d9, 0xb5, 0x81, 0x7fff, 0x2, 0x7, 0x6, 0x5, 0x80000000, 0x401, 0x7, 0x2, 0x9, 0x1, 0x4, 0x9, 0x7, 0x38, 0xfffff98f, 0x4, 0x4, 0x8, 0xffff, 0xffff, 0x4, 0x4, 0x6, 0x2, 0xff, 0xffffffff, 0x9, 0x2, 0x1, 0x3, 0x0, 0x7, 0x80000001, 0x1, 0x1, 0x1, 0x1e00000, 0x5, 0x3, 0x5, 0x3ff, 0xffffffff, 0x1, 0x101, 0x70, 0x3, 0x5, 0x9604, 0xe, 0x2, 0x5b, 0x9, 0xee6, 0x6c, 0x2, 0x5, 0x9, 0x5, 0x9, 0x5, 0x8, 0x80000001, 0x3, 0x5, 0x1, 0x3, 0x8, 0x8, 0x4, 0x6, 0x40, 0x4a22, 0xa6, 0x9, 0x5, 0x7fff, 0xfffffff9, 0x5, 0x2141, 0x81, 0x10, 0x2bc, 0x6, 0x1, 0x0, 0x5, 0x8, 0x8, 0x380, 0x52, 0x5, 0x6, 0xffffff74, 0x8, 0x0, 0x9, 0xa, 0x3a8, 0x180000, 0x9, 0x42416882, 0xc, 0xfffff10d, 0x518a, 0x0, 0xfffffffa, 0x0, 0x3, 0x8, 0x7, 0x9, 0x4, 0x3568, 0x1, 0x9, 0x1, 0x2, 0x4, 0x9, 0x10000, 0x8, 0x3, 0x38, 0x1, 0x3, 0x7fff, 0x63c, 0x0, 0x6, 0x1, 0x0, 0x5, 0x3, 0x2, 0x5, 0x3d88, 0x8, 0x33d, 0x1, 0x32cf, 0x3, 0x0, 0x101, 0x80]}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x484}}, 0x24040884)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r14, 0x4)
sendmsg$unix(r13, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd0)

7.510388599s ago: executing program 5 (id=1722):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000140), 0x5, 0x4000)
ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000180))
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

6.987536136s ago: executing program 5 (id=1732):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioprio_set$uid(0x3, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18)
execve(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x68f}, 0x18)
r6 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, r6)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x0, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x0, 0xe, 0x4e21}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000004c0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000380)=r7)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r3)
sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7ff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x41841)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r11=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000250000015c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0)

6.895983767s ago: executing program 5 (id=1736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)

6.865083428s ago: executing program 5 (id=1739):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@sysvgroups}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]})
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0x1f, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x7, 0x0, 0x30}, @ldst={0x0, 0x0, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x45, &(0x7f0000000280)=""/69, 0x41100, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x8, 0xd0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x3, 0x4, 0x4, 0x4}, {0x3, 0x3, 0xe}, {0x2, 0x3, 0x4, 0x2}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x5, 0xa, 0xa}, {0x1, 0x2, 0x7, 0xe86dd3ad776f35e5}, {0x5, 0x2, 0x7, 0x8}, {0x5, 0x3, 0xd}], 0x10, 0x1, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
setregid(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @random="e23dfb9c6ac7", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x5, 0x4, 0x1, 0x2, 0x6, 0x66, 0x9, 0x6, 0x89, 0xfff, @loopback, @multicast2}}}}}}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x6, [@datasec={0xb, 0x6, 0x0, 0xf, 0x1, [{0x1, 0x5}, {0x2, 0xa, 0x81}, {0x4, 0xfffeffff, 0x3}, {0x5, 0xfffffff6, 0x10001}, {0x4, 0x4, 0xba4}, {0x4, 0x1, 0x8}], "cb"}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/183, 0x76, 0xb7, 0x0, 0x3, 0x10000, @value}, 0x28)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0)
r5 = openat(r4, &(0x7f0000000700)='./file0\x00', 0x7c7181, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x3, 0x1, 0x5})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
fgetxattr(r9, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)

6.356274965s ago: executing program 5 (id=1745):
r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021)
close(r2)

5.844052411s ago: executing program 5 (id=1755):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)
syz_emit_ethernet(0x22, &(0x7f0000001b40)={@link_local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x7)
sendto$rxrpc(r3, &(0x7f0000000000)="8d29a623066482e25be2a2dc529d1652418caf30d879b61669a5355ba6579dce5e1ef49660280b2861ba16215fa7a5ef3dbd98ca9df4b5c426f421c449c5a529bd0dbc816b1196449fe2ad305c7e365b65f36678e90ae1184f42a3ab9ca3c4ad5e373d3e34aaf19d9395f315c664b1d8814a52cd233702b9a99a7ccb4732d8cb8a15a6e9971e6addaec4453ed33b0f184d78902f9d3b029f759fe44c1b6c00302b96a13e358f511777c26720", 0xac, 0x4004805, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x600, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9418}}, 0x24)

5.817642282s ago: executing program 33 (id=1755):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)
syz_emit_ethernet(0x22, &(0x7f0000001b40)={@link_local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x7)
sendto$rxrpc(r3, &(0x7f0000000000)="8d29a623066482e25be2a2dc529d1652418caf30d879b61669a5355ba6579dce5e1ef49660280b2861ba16215fa7a5ef3dbd98ca9df4b5c426f421c449c5a529bd0dbc816b1196449fe2ad305c7e365b65f36678e90ae1184f42a3ab9ca3c4ad5e373d3e34aaf19d9395f315c664b1d8814a52cd233702b9a99a7ccb4732d8cb8a15a6e9971e6addaec4453ed33b0f184d78902f9d3b029f759fe44c1b6c00302b96a13e358f511777c26720", 0xac, 0x4004805, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x600, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9418}}, 0x24)

2.603857935s ago: executing program 0 (id=1800):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000004c0)={0x0, 'syzkaller1\x00', {0x1}})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001aaaaaaaaaaabbaaaaaaaaaaaa88a8400081"], 0x42)

2.470104107s ago: executing program 0 (id=1805):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r3, 0x2f, 0x8, 0x4, @void, @value}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (async)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2.469692977s ago: executing program 6 (id=1806):
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001e600)=""/102382, 0x18fee, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000300)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00')
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000001840)=""/186, 0xba}], 0x1, 0xc0000003, 0xfffffffd)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x1c, r4, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000680)={@multicast1, @initdev, <r5=>0x0}, &(0x7f00000006c0)=0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
r7 = socket(0x40000000015, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000400)={<r8=>0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, [0xfffffffffffffff8, 0x5, 0x1af46d38, 0x0, 0x6, 0x4, 0x3c11, 0x6, 0x7a0a, 0xbde, 0x40, 0x5, 0x4, 0x101, 0x10000]}, &(0x7f0000000300)=0x100)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000500)={r8, @in={{0x2, 0x5e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x3, 0x1c, 0x20000004, 0x2eb, 0x40, 0xfffffffe, 0xc}, &(0x7f00000003c0)=0x9c)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close_range(r7, r7, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')

2.398293018s ago: executing program 0 (id=1807):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r2 = open(0x0, 0xca942, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$getownex(r2, 0x10, 0x0)
readahead(r0, 0x4, 0xff)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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")
r6 = inotify_init1(0x80800)
inotify_add_watch(r6, &(0x7f0000000080)='.\x00', 0x2000434)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000400)={[{@nogrpid}, {@noblock_validity}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@orlov}]}, 0x4, 0x4f5, &(0x7f0000000c00)="$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")
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8010)
ftruncate(0xffffffffffffffff, 0xc17a)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)

2.373007658s ago: executing program 6 (id=1808):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) (async)
r2 = getpgrp(0x0)
fcntl$setown(r0, 0x8, r2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.320261359s ago: executing program 6 (id=1809):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]})
tkill(0x0, 0x7)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

1.654588378s ago: executing program 2 (id=1820):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9641, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0xfffd, r3, 0x0, 0x0, 0x400a00, 0x0, 0xb6311947b1eb388c}])
sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x10000007)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000300)=0x8000000000000002)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x840)
r7 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
pipe(&(0x7f0000000140)={<r8=>0xffffffffffffffff})
splice(r8, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r8, 0x29, 0x3e, &(0x7f0000000000), &(0x7f0000000780)=0x4)

1.573295669s ago: executing program 0 (id=1821):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
creat(0x0, 0xc9028ba210c11f8b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0xffffffcc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r5, 0x0)
listen(r4, 0x0)

1.462097301s ago: executing program 0 (id=1822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x7da1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x8000, 0xfffffffe, 0x10a}, &(0x7f0000000000), &(0x7f0000000000))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000240)=0x1, 0x4)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000000c0), 0x7f, 0x7a5, &(0x7f0000000f80)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000380)="ff1d61752d53ecdad75c71d52f58a842b0096d1cec2a99b72116238d541b2c7ed0000000000000412eb2c84208bba919bffc71cb47e5c973c9a8ea931367b7e1eb482c77fcedb55032adb91f64aad2c605a3790cd9134137e57c2a9b09ffe6dfce619e1b7f0300000000000000db37d0cfe3ee83c402d1b25444c396be18bab666eb600ba57eda28e7c841b761b76d", 0x8f}], 0x1, 0x5c12, 0x0, 0x0)
sendfile(r5, r5, 0x0, 0x7a680000)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000300)={{r1}, "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"})
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x1, 0x0)

1.424132641s ago: executing program 6 (id=1823):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"], 0x310)
syz_read_part_table(0x60f, &(0x7f0000000740)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @local, 0x4}, 0x1c)
shutdown(r5, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x7)
sendfile(r8, r7, 0x0, 0x17)
r9 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r9, &(0x7f0000000300)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008005b05668400", @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000850000005000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001004c51c9fad98295729f454d9b4059a1fa8a6400a45681233ceb948af37568740bd5d53ac7fe1a111d078c33889afd205078443aae6208a6c73230faf2e4c0962d93a8"], &(0x7f0000001b80)='syzkaller\x00', 0x516b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0)

1.057078126s ago: executing program 6 (id=1826):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)

992.445357ms ago: executing program 6 (id=1828):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000000000c89b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000001540)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
socket(0x11, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x16)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
fcntl$setlease(r1, 0x400, 0x1)
unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='selinuxfs\x00', 0x40000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
r4 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0)
fallocate(r4, 0x10, 0x2, 0x7000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff2, 0x4}, {0x1, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000015c0)=ANY=[@ANYBLOB="18030000000000000000000000000000351100000c83c6e32586c2d8bb3c4f3f0c9c09ec289b064b53d73e8f63ad79c5647338ce535997c9edcc0e9617af08a1cf67e1f1eac9a6476b974e073d4d4c5c3fd154e67700ef48ec7c0d", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

414.308765ms ago: executing program 3 (id=1832):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
creat(0x0, 0xc9028ba210c11f8b)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0xffffffcc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r4, 0x0)
listen(r3, 0x0)

371.958315ms ago: executing program 0 (id=1833):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]})
tkill(0x0, 0x7)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

369.307005ms ago: executing program 3 (id=1834):
r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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")
dup3(r0, r0, 0x80000)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000004140)='.\x00', 0x1a4243c, &(0x7f0000000a00)=ANY=[@ANYRES64=r0, @ANYBLOB="838af82ba0aed93ae1412b5d66c15d5708bf640ad92729f0adf01dc1f5c02e252ccc1a9f08cafb", @ANYRESOCT=r0, @ANYBLOB="f1bcca05ed588d63a576cc3afd51baf29cde0400000092f4e66ff7ef22aa9af727ceae8a8ec95fc1b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2cc7815d2daf8daea25533a558d561654faf5e0924f1376174f374d664fad4a6ab24ec000ccace822e7f9426e8e5de1fe58085a0ae86fd02a118b9365961834d46208b9fb4c91a1fa962a8b00a9717fcbb46c2400dc2e319379ea1e5a07aeb3f9cd4e648df445a1b4213e732300000000000010000758027a472e7d263ef567a84166f26ee56e701c63a8863787889bf1c90fccf31954a940c8b584ca89a512f28edec08eb1c0823c028840eeaf3f5d8769023c01ac63f7f959571e8e899b43c293bc21a2b833e5c9c703c4cfa063dd050045706bde3d7ac373ab04b62b4111b59eabd436dd97e788a36ef25bad99beec474e667589d37100ec36292c15c6", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRES8=r0], 0x5, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

320.060866ms ago: executing program 3 (id=1835):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

319.701826ms ago: executing program 3 (id=1836):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
geteuid()

303.756996ms ago: executing program 3 (id=1837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x4d, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000950000000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xa}, 0x18)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r7 = dup2(r6, r6)
poll(&(0x7f00000002c0)=[{r7, 0x5}], 0x1, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r2], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x10000, &(0x7f0000000200)={[{@mb_optimize_scan}, {@bh}, {@noauto_da_alloc}]}, 0x3, 0x4d1, &(0x7f0000002200)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
r10 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
pwritev2(r10, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0)
r11 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r11, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

247.448887ms ago: executing program 1 (id=1840):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x1100, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

191.101657ms ago: executing program 1 (id=1841):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$netlink(0x10, 0x3, 0xc)
setgid(0xee01)

189.932238ms ago: executing program 1 (id=1842):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14)
unshare(0x24020400)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$kcm(0xa, 0x1, 0x106)
fcntl$lock(r4, 0x7, &(0x7f0000000200)={0x1, 0x2, 0x8003, 0x8, 0xffffffffffffffff})
r5 = fsmount(0xffffffffffffffff, 0x0, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3f, '\x00', r2, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xffffffffffffff58)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r7=>0x0})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000540), 0x84)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1, <r9=>0xffffffffffffffff}, 0x4)
ioperm(0x0, 0x1, 0x1)
r10 = getpid()
sched_setscheduler(r10, 0x3, &(0x7f0000000200)=0x7)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xd, 0x400, 0x5, 0x10206, r5, 0x0, '\x00', r7, r5, 0x1005, 0x4, 0x2, 0xf, @void, @value, @value=r8}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="843a000010000000186900000600090cc170000009000000183b00000100000000000000000000008500000027000000"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x76, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xa, 0x62f, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r11, r1, r9, r1, r1, r1], &(0x7f00000004c0)=[{0x4, 0x3, 0x3, 0xb}, {0x1, 0x1, 0xd, 0x9}, {0x2, 0x2, 0x0, 0x9}, {0x1, 0x4, 0xfffffffd, 0xb}], 0x10, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x22c02)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r13, 0x5452, &(0x7f0000000240)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
listen(r12, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

122.474778ms ago: executing program 1 (id=1843):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000045b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)

111.606109ms ago: executing program 2 (id=1844):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$netlink(0x10, 0x3, 0xc)
setgid(0xee01) (fail_nth: 3)

88.980759ms ago: executing program 2 (id=1845):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000340), 0x80, 0x0)

81.864709ms ago: executing program 1 (id=1846):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_pts(r0, 0x80800)

35.12266ms ago: executing program 2 (id=1847):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
geteuid()

34.61971ms ago: executing program 3 (id=1848):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xd}]}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a2c000000050a01030000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102000000000000000002"], 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x40005}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r9 = dup(r8)
ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0x2000, 0x0, 0x0, 0x0})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c00100001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000026000100280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="a52200002380030078011a80"], 0x1c0}, 0x1, 0x0, 0x0, 0xc154}, 0x0)

34.23565ms ago: executing program 1 (id=1849):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000680)={'syztnl1\x00', <r2=>0x0, 0x8, 0x80, 0x6, 0x10000, {{0x1c, 0x4, 0x1, 0x4, 0x1e, 0x68, 0x0, 0x9, 0xaa15aa4d6bdef925, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1b, 0xa0, [@remote, @broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x3d}]}, @timestamp={0x44, 0x18, 0xf5, 0x0, 0x2, [0x19, 0x5, 0x1, 0xfffffff8, 0x7683]}, @ssrr={0x89, 0x23, 0x81, [@local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000bc0)=ANY=[], 0xff, 0x11dc, &(0x7f0000001280)="$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")
io_setup(0x58, &(0x7f00000001c0)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
write(r5, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffffd, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3dc38396}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3)
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x5)
connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000020000dea52e0000070000007e172c8869d31b2f42cf87ed4b0ed2970d943e71d9c5bbd3a255c6c0049bda02ea095d088ba5bb1f870a13c4551cd1bed0570996114649d343176886981af29427cb73971bd48fccee588bccc96b982b30194691d5fa553307b380047dcca3e8d0deb72887cb4f92966ca53f2d1e876ac447adaab0199f3c51fb08cf191ccf5e8b88ce4258ef1e3df86d3130fdf68e46aea4bd707db22d3dda130bd9dcfe3cbf8e88cc8ae34413c8e1b4430486c5786eda5160eb686a76735b95fd835321a1cb3b28b938886462d961f291492e953b9b"], &(0x7f0000000280), 0x400)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r11=>0x0})
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='net_dev_start_xmit\x00', r12, 0x0, 0x6}, 0x18)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b217d8f4f46bc710bf108252d0f0c260cf8469bec91796dd9cda168e64187b1854617a9a909bff36907825d2cd5ba6b674cfd00d4a9d4378d301"], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)

33.96552ms ago: executing program 2 (id=1850):
r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r0)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, 0x0, 0xa4000021)
close(r3)

0s ago: executing program 2 (id=1851):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49e2, 0x0, 0x0, 0xbfef, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) (async)
socket(0x40000000002, 0x3, 0x2) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0xcd)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)
r5 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44)

kernel console output (not intermixed with test programs):

0000000000000000
[  116.324367][ T6969] RBP: 00007f658a727090 R08: 0000000000000000 R09: 0000000000000000
[  116.324380][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.324441][ T6969] R13: 0000000000000000 R14: 00007f658c2e5fa0 R15: 00007fff4f5e9e78
[  116.324459][ T6969]  </TASK>
[  116.591320][ T6971] loop2: detected capacity change from 0 to 8192
[  116.640963][ T6975] loop1: detected capacity change from 0 to 8192
[  116.744986][ T6983] loop2: detected capacity change from 0 to 512
[  116.762640][ T6975]  loop1: p2 p3 p4
[  116.767050][ T6983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.785810][ T6988] loop0: detected capacity change from 0 to 1024
[  116.793742][ T6983] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.804295][ T6975] loop1: p3 size 100663552 extends beyond EOD, truncated
[  116.814387][ T6988] EXT4-fs: Ignoring removed orlov option
[  116.820858][ T6988] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  116.840428][ T6975] loop1: p4 size 81920 extends beyond EOD, truncated
[  116.942310][ T6990] loop3: detected capacity change from 0 to 8192
[  117.005152][ T6988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.130169][ T6987] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  117.213976][ T6987] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.1296: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  117.317969][ T6987] EXT4-fs (loop0): Remounting filesystem read-only
[  117.466916][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.763467][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.816366][ T7004] loop2: detected capacity change from 0 to 512
[  117.867050][ T7004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.898354][ T7004] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  117.970819][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.006403][ T7011] loop0: detected capacity change from 0 to 512
[  118.035610][ T7015] loop2: detected capacity change from 0 to 128
[  118.087090][ T7011] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  118.125952][ T7011] System zones: 0-2, 18-18, 34-34
[  118.143405][ T7019] loop1: detected capacity change from 0 to 2048
[  118.151312][ T7011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1304: bg 0: block 248: padding at end of block bitmap is not set
[  118.191388][ T7011] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1304: Failed to acquire dquot type 1
[  118.222932][ T7011] EXT4-fs (loop0): 1 truncate cleaned up
[  118.232373][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.262065][ T7011] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.317326][ T7019]  loop1: unable to read partition table
[  118.328393][ T7019] loop1: partition table beyond EOD, truncated
[  118.334715][ T7019] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  118.372676][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.420650][ T7039] FAULT_INJECTION: forcing a failure.
[  118.420650][ T7039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.433784][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.1.1317 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  118.433822][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  118.433838][ T7039] Call Trace:
[  118.433846][ T7039]  <TASK>
[  118.433853][ T7039]  __dump_stack+0x1d/0x30
[  118.433873][ T7039]  dump_stack_lvl+0xe8/0x140
[  118.433890][ T7039]  dump_stack+0x15/0x1b
[  118.433907][ T7039]  should_fail_ex+0x265/0x280
[  118.433987][ T7039]  should_fail+0xb/0x20
[  118.434021][ T7039]  should_fail_usercopy+0x1a/0x20
[  118.434048][ T7039]  _copy_to_user+0x20/0xa0
[  118.434072][ T7039]  simple_read_from_buffer+0xb5/0x130
[  118.434158][ T7039]  proc_fail_nth_read+0x100/0x140
[  118.434187][ T7039]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.434216][ T7039]  vfs_read+0x19d/0x6f0
[  118.434298][ T7039]  ? do_io_getevents+0x36d/0x400
[  118.434330][ T7039]  ? __rcu_read_unlock+0x4f/0x70
[  118.434349][ T7039]  ? __fget_files+0x184/0x1c0
[  118.434377][ T7039]  ksys_read+0xda/0x1a0
[  118.434401][ T7039]  __x64_sys_read+0x40/0x50
[  118.434490][ T7039]  x64_sys_call+0x2d77/0x2fb0
[  118.434509][ T7039]  do_syscall_64+0xd0/0x1a0
[  118.434531][ T7039]  ? clear_bhb_loop+0x25/0x80
[  118.434553][ T7039]  ? clear_bhb_loop+0x25/0x80
[  118.434760][ T7039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.434787][ T7039] RIP: 0033:0x7fcaf435d37c
[  118.434805][ T7039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  118.434823][ T7039] RSP: 002b:00007fcaf29c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.434846][ T7039] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435d37c
[  118.434861][ T7039] RDX: 000000000000000f RSI: 00007fcaf29c70a0 RDI: 0000000000000003
[  118.434873][ T7039] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  118.434884][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.434920][ T7039] R13: 0000000000000001 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  118.435018][ T7039]  </TASK>
[  118.822054][ T7053] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1
[  118.830458][ T7053] ref_ctr decrement failed for inode: 0x5f8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104ad6300
[  118.842294][ T7053] uprobe: syz.1.1323:7053 failed to unregister, leaking uprobe
[  119.032984][ T7059] loop2: detected capacity change from 0 to 8192
[  119.103192][ T7061] unsupported nla_type 52263
[  119.178960][ T7063] FAULT_INJECTION: forcing a failure.
[  119.178960][ T7063] name failslab, interval 1, probability 0, space 0, times 0
[  119.191725][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.1.1327 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  119.191752][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  119.191827][ T7063] Call Trace:
[  119.191834][ T7063]  <TASK>
[  119.191841][ T7063]  __dump_stack+0x1d/0x30
[  119.191864][ T7063]  dump_stack_lvl+0xe8/0x140
[  119.191932][ T7063]  dump_stack+0x15/0x1b
[  119.191955][ T7063]  should_fail_ex+0x265/0x280
[  119.191993][ T7063]  should_failslab+0x8c/0xb0
[  119.192030][ T7063]  kmem_cache_alloc_noprof+0x50/0x310
[  119.192145][ T7063]  ? getname_flags+0x80/0x3b0
[  119.192175][ T7063]  ? kstrtouint+0x76/0xc0
[  119.192206][ T7063]  getname_flags+0x80/0x3b0
[  119.192243][ T7063]  user_path_at+0x28/0x130
[  119.192320][ T7063]  user_statfs+0x4d/0x110
[  119.192358][ T7063]  __x64_sys_statfs+0x65/0xf0
[  119.192483][ T7063]  ? fput+0x8f/0xc0
[  119.192503][ T7063]  ? ksys_write+0x16e/0x1a0
[  119.192534][ T7063]  ? fpregs_assert_state_consistent+0x84/0xa0
[  119.192569][ T7063]  x64_sys_call+0x1edd/0x2fb0
[  119.192596][ T7063]  do_syscall_64+0xd0/0x1a0
[  119.192623][ T7063]  ? clear_bhb_loop+0x25/0x80
[  119.192692][ T7063]  ? clear_bhb_loop+0x25/0x80
[  119.192823][ T7063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.192871][ T7063] RIP: 0033:0x7fcaf435e969
[  119.192888][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.192909][ T7063] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  119.192933][ T7063] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  119.192949][ T7063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  119.192988][ T7063] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  119.192999][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.193011][ T7063] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  119.193028][ T7063]  </TASK>
[  119.501271][ T7065] loop0: detected capacity change from 0 to 2048
[  119.978408][ T7073] netlink: 'syz.3.1332': attribute type 32 has an invalid length.
[  119.989505][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1331'.
[  119.998533][ T7072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1331'.
[  120.018767][ T7065]  loop0: unable to read partition table
[  120.032128][ T7065] loop0: partition table beyond EOD, truncated
[  120.038409][ T7065] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  120.181471][ T7077] bond0: entered promiscuous mode
[  120.188052][ T7077] bond_slave_0: entered promiscuous mode
[  120.195533][ T7077] bond_slave_1: entered promiscuous mode
[  120.341612][ T7077] batadv0: entered promiscuous mode
[  120.391572][ T7077] 8021q: adding VLAN 0 to HW filter on device hsr1
[  120.428474][   T29] kauditd_printk_skb: 66 callbacks suppressed
[  120.428538][   T29] audit: type=1326 audit(1746085646.747:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.463232][   T29] audit: type=1326 audit(1746085646.787:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.486850][   T29] audit: type=1326 audit(1746085646.787:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.511509][   T29] audit: type=1326 audit(1746085646.787:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.534945][   T29] audit: type=1326 audit(1746085646.787:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.558541][   T29] audit: type=1326 audit(1746085646.787:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.582459][   T29] audit: type=1326 audit(1746085646.787:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7098 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  120.606244][   T29] audit: type=1326 audit(1746085646.867:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  120.606262][ T7077] bond0: left promiscuous mode
[  120.629977][   T29] audit: type=1326 audit(1746085646.867:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  120.630043][   T29] audit: type=1326 audit(1746085646.867:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7105 comm="syz.1.1345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  120.698960][ T7077] bond_slave_0: left promiscuous mode
[  120.706926][ T7077] bond_slave_1: left promiscuous mode
[  120.718406][ T7104] FAULT_INJECTION: forcing a failure.
[  120.718406][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.731556][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.2.1344 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  120.731635][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  120.731651][ T7104] Call Trace:
[  120.731658][ T7104]  <TASK>
[  120.731664][ T7104]  __dump_stack+0x1d/0x30
[  120.731698][ T7104]  dump_stack_lvl+0xe8/0x140
[  120.731741][ T7104]  dump_stack+0x15/0x1b
[  120.731761][ T7104]  should_fail_ex+0x265/0x280
[  120.731809][ T7104]  should_fail+0xb/0x20
[  120.731837][ T7104]  should_fail_usercopy+0x1a/0x20
[  120.731908][ T7104]  strncpy_from_user+0x25/0x230
[  120.731942][ T7104]  ? kmem_cache_alloc_noprof+0x186/0x310
[  120.731987][ T7104]  ? getname_flags+0x80/0x3b0
[  120.732026][ T7104]  getname_flags+0xae/0x3b0
[  120.732137][ T7104]  __x64_sys_mknod+0x40/0x60
[  120.732165][ T7104]  x64_sys_call+0x181c/0x2fb0
[  120.732192][ T7104]  do_syscall_64+0xd0/0x1a0
[  120.732298][ T7104]  ? clear_bhb_loop+0x25/0x80
[  120.732326][ T7104]  ? clear_bhb_loop+0x25/0x80
[  120.732354][ T7104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.732434][ T7104] RIP: 0033:0x7faeae50e969
[  120.732457][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.732537][ T7104] RSP: 002b:00007faeacb77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  120.732564][ T7104] RAX: ffffffffffffffda RBX: 00007faeae735fa0 RCX: 00007faeae50e969
[  120.732581][ T7104] RDX: 0000000000000705 RSI: 0000000000000400 RDI: 0000200000003040
[  120.732596][ T7104] RBP: 00007faeacb77090 R08: 0000000000000000 R09: 0000000000000000
[  120.732611][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.732625][ T7104] R13: 0000000000000000 R14: 00007faeae735fa0 R15: 00007ffe88e7d148
[  120.732646][ T7104]  </TASK>
[  120.915084][ T7077] batadv0: left promiscuous mode
[  120.961162][ T7111] loop0: detected capacity change from 0 to 128
[  120.994230][ T7111] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.018724][ T7088] bond0: entered promiscuous mode
[  121.037838][ T7111] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.118730][ T7088] batadv0: entered promiscuous mode
[  121.154467][ T7088] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  121.177407][ T7088] 8021q: adding VLAN 0 to HW filter on device hsr1
[  121.205691][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.217187][ T7088] bond0: left promiscuous mode
[  121.223022][ T7088] batadv0: left promiscuous mode
[  121.263304][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.272251][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.286862][ T7125] netlink: '+}[@': attribute type 2 has an invalid length.
[  121.288652][ T7119] bond0: entered promiscuous mode
[  121.294157][ T7125] netlink: '+}[@': attribute type 1 has an invalid length.
[  121.294174][ T7125] netlink: 179948 bytes leftover after parsing attributes in process `+}[@'.
[  121.318738][ T7119] bond_slave_0: entered promiscuous mode
[  121.327312][ T7119] bond_slave_1: entered promiscuous mode
[  121.348901][ T7119] batadv0: entered promiscuous mode
[  121.386605][ T7119] 8021q: adding VLAN 0 to HW filter on device hsr1
[  121.447513][ T7119] bond0: left promiscuous mode
[  121.453839][ T7119] bond_slave_0: left promiscuous mode
[  121.460995][ T7119] bond_slave_1: left promiscuous mode
[  121.480324][ T7119] batadv0: left promiscuous mode
[  121.642623][ T7152] loop2: detected capacity change from 0 to 512
[  121.649191][ T7151] FAULT_INJECTION: forcing a failure.
[  121.649191][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.662349][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.5.1360 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  121.662377][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  121.662389][ T7151] Call Trace:
[  121.662395][ T7151]  <TASK>
[  121.662402][ T7151]  __dump_stack+0x1d/0x30
[  121.662465][ T7151]  dump_stack_lvl+0xe8/0x140
[  121.662541][ T7151]  dump_stack+0x15/0x1b
[  121.662562][ T7151]  should_fail_ex+0x265/0x280
[  121.662674][ T7151]  should_fail+0xb/0x20
[  121.662757][ T7151]  should_fail_usercopy+0x1a/0x20
[  121.662774][ T7151]  strncpy_from_user+0x25/0x230
[  121.662839][ T7151]  ? __fget_files+0x184/0x1c0
[  121.662883][ T7151]  __se_sys_add_key+0x86/0x350
[  121.662925][ T7151]  __x64_sys_add_key+0x67/0x80
[  121.662962][ T7151]  x64_sys_call+0x1d0d/0x2fb0
[  121.662987][ T7151]  do_syscall_64+0xd0/0x1a0
[  121.663028][ T7151]  ? clear_bhb_loop+0x25/0x80
[  121.663055][ T7151]  ? clear_bhb_loop+0x25/0x80
[  121.663081][ T7151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.663107][ T7151] RIP: 0033:0x7f63692ae969
[  121.663124][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.663183][ T7151] RSP: 002b:00007f6367917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  121.663205][ T7151] RAX: ffffffffffffffda RBX: 00007f63694d5fa0 RCX: 00007f63692ae969
[  121.663221][ T7151] RDX: 00002000000002c0 RSI: 0000200000000040 RDI: 0000200000000000
[  121.663236][ T7151] RBP: 00007f6367917090 R08: ffffffffffffffff R09: 0000000000000000
[  121.663252][ T7151] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001
[  121.663268][ T7151] R13: 0000000000000001 R14: 00007f63694d5fa0 R15: 00007ffd9cccd468
[  121.663292][ T7151]  </TASK>
[  121.849941][ T7152] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  121.859099][ T7152] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  121.892844][ T7152] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  121.901442][ T7159] FAULT_INJECTION: forcing a failure.
[  121.901442][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.914825][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.3.1364 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  121.914854][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  121.914866][ T7159] Call Trace:
[  121.914872][ T7159]  <TASK>
[  121.914880][ T7159]  __dump_stack+0x1d/0x30
[  121.914906][ T7159]  dump_stack_lvl+0xe8/0x140
[  121.914946][ T7159]  dump_stack+0x15/0x1b
[  121.914962][ T7159]  should_fail_ex+0x265/0x280
[  121.915004][ T7159]  should_fail+0xb/0x20
[  121.915038][ T7159]  should_fail_usercopy+0x1a/0x20
[  121.915060][ T7159]  _copy_from_user+0x1c/0xb0
[  121.915085][ T7159]  copy_clone_args_from_user+0x14f/0x490
[  121.915231][ T7159]  ? kstrtouint+0x76/0xc0
[  121.915264][ T7159]  __se_sys_clone3+0x6f/0x200
[  121.915306][ T7159]  ? fpregs_assert_state_consistent+0x84/0xa0
[  121.915338][ T7159]  __x64_sys_clone3+0x31/0x40
[  121.915436][ T7159]  x64_sys_call+0x10c9/0x2fb0
[  121.915541][ T7159]  do_syscall_64+0xd0/0x1a0
[  121.915570][ T7159]  ? clear_bhb_loop+0x25/0x80
[  121.915596][ T7159]  ? clear_bhb_loop+0x25/0x80
[  121.915622][ T7159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.915648][ T7159] RIP: 0033:0x7f956f21e969
[  121.915665][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.915743][ T7159] RSP: 002b:00007f956d886f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  121.915766][ T7159] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f956f21e969
[  121.915782][ T7159] RDX: 00007f956d886f20 RSI: 0000000000000058 RDI: 00007f956d886f20
[  121.915830][ T7159] RBP: 00007f956d887090 R08: 0000000000000000 R09: 0000000000000058
[  121.915845][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.915867][ T7159] R13: 0000000000000001 R14: 00007f956f445fa0 R15: 00007ffd5cef6bd8
[  121.915892][ T7159]  </TASK>
[  121.916938][ T7152] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  121.975149][ T7162] Cannot find map_set index 0 as target
[  121.980547][ T7152] System zones: 
[  122.011079][ T7166] FAULT_INJECTION: forcing a failure.
[  122.011079][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.013997][ T7152] 0-2
[  122.018525][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.3.1367 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  122.018597][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  122.018614][ T7166] Call Trace:
[  122.018623][ T7166]  <TASK>
[  122.018632][ T7166]  __dump_stack+0x1d/0x30
[  122.018734][ T7166]  dump_stack_lvl+0xe8/0x140
[  122.018760][ T7166]  dump_stack+0x15/0x1b
[  122.018782][ T7166]  should_fail_ex+0x265/0x280
[  122.018824][ T7166]  should_fail+0xb/0x20
[  122.018876][ T7166]  should_fail_usercopy+0x1a/0x20
[  122.018900][ T7166]  _copy_from_user+0x1c/0xb0
[  122.018949][ T7166]  do_ip_getsockopt+0x12a/0xfe0
[  122.018985][ T7166]  ? avc_has_perm_noaudit+0x1b1/0x200
[  122.019030][ T7166]  ? avc_has_perm+0xd3/0x150
[  122.019100][ T7166]  ip_getsockopt+0x5c/0x180
[  122.019137][ T7166]  raw_getsockopt+0xb0/0x190
[  122.019176][ T7166]  sock_common_getsockopt+0x5d/0x70
[  122.019211][ T7166]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  122.019285][ T7166]  do_sock_getsockopt+0x1fd/0x240
[  122.019330][ T7166]  __x64_sys_getsockopt+0x11e/0x1a0
[  122.019377][ T7166]  x64_sys_call+0x12aa/0x2fb0
[  122.019419][ T7166]  do_syscall_64+0xd0/0x1a0
[  122.019447][ T7166]  ? clear_bhb_loop+0x25/0x80
[  122.019497][ T7166]  ? clear_bhb_loop+0x25/0x80
[  122.019525][ T7166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.019552][ T7166] RIP: 0033:0x7f956f21e969
[  122.019598][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.019621][ T7166] RSP: 002b:00007f956d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  122.019645][ T7166] RAX: ffffffffffffffda RBX: 00007f956f445fa0 RCX: 00007f956f21e969
[  122.019661][ T7166] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  122.019709][ T7166] RBP: 00007f956d887090 R08: 0000200000000040 R09: 0000000000000000
[  122.019724][ T7166] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.019740][ T7166] R13: 0000000000000000 R14: 00007f956f445fa0 R15: 00007ffd5cef6bd8
[  122.019763][ T7166]  </TASK>
[  122.192904][ T7170] IPv4: Oversized IP packet from 127.202.26.0
[  122.193097][ T7152] , 18-18, 34-34
[  122.361178][ T7152] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  122.401709][ T7152] EXT4-fs (loop2): 1 truncate cleaned up
[  122.425527][ T7152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.469733][ T7182] netlink: 192668 bytes leftover after parsing attributes in process `syz.0.1371'.
[  122.526100][ T7188] loop3: detected capacity change from 0 to 512
[  122.562922][ T7188] EXT4-fs (loop3): orphan cleanup on readonly fs
[  122.575942][ T7188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1375: bg 0: block 248: padding at end of block bitmap is not set
[  122.649769][ T7188] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1375: Failed to acquire dquot type 1
[  122.666144][ T7192] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  122.673938][ T7192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1376'.
[  122.703958][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.717051][ T7188] EXT4-fs (loop3): 1 truncate cleaned up
[  122.745268][ T7188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.759083][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1377'.
[  122.786169][ T7188] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  122.798344][ T7197] FAULT_INJECTION: forcing a failure.
[  122.798344][ T7197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.811514][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.0.1378 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  122.811544][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  122.811628][ T7197] Call Trace:
[  122.811644][ T7197]  <TASK>
[  122.811653][ T7197]  __dump_stack+0x1d/0x30
[  122.811679][ T7197]  dump_stack_lvl+0xe8/0x140
[  122.811702][ T7197]  dump_stack+0x15/0x1b
[  122.811753][ T7197]  should_fail_ex+0x265/0x280
[  122.811832][ T7197]  should_fail+0xb/0x20
[  122.811859][ T7197]  should_fail_usercopy+0x1a/0x20
[  122.811985][ T7197]  _copy_from_user+0x1c/0xb0
[  122.812011][ T7197]  ___sys_sendmsg+0xc1/0x1d0
[  122.812126][ T7197]  __x64_sys_sendmsg+0xd4/0x160
[  122.812149][ T7197]  x64_sys_call+0x2999/0x2fb0
[  122.812169][ T7197]  do_syscall_64+0xd0/0x1a0
[  122.812266][ T7197]  ? clear_bhb_loop+0x25/0x80
[  122.812289][ T7197]  ? clear_bhb_loop+0x25/0x80
[  122.812315][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.812391][ T7197] RIP: 0033:0x7f658c0be969
[  122.812409][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.812428][ T7197] RSP: 002b:00007f658a727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.812500][ T7197] RAX: ffffffffffffffda RBX: 00007f658c2e5fa0 RCX: 00007f658c0be969
[  122.812515][ T7197] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007
[  122.812531][ T7197] RBP: 00007f658a727090 R08: 0000000000000000 R09: 0000000000000000
[  122.812562][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.812577][ T7197] R13: 0000000000000000 R14: 00007f658c2e5fa0 R15: 00007fff4f5e9e78
[  122.812600][ T7197]  </TASK>
[  123.043999][ T7188] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  123.076795][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.193278][ T7207] bond0: entered promiscuous mode
[  123.419647][ T7207] batadv0: entered promiscuous mode
[  123.487812][ T7207] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  123.560691][ T7222] loop0: detected capacity change from 0 to 512
[  123.584838][ T7207] 8021q: adding VLAN 0 to HW filter on device hsr1
[  123.618253][ T7222] EXT4-fs (loop0): orphan cleanup on readonly fs
[  123.641986][ T7222] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1385: bad orphan inode 13
[  123.820204][ T7222] ext4_test_bit(bit=12, block=18) = 1
[  123.825708][ T7222] is_bad_inode(inode)=0
[  123.829897][ T7222] NEXT_ORPHAN(inode)=2130706432
[  123.834777][ T7222] max_ino=32
[  123.838044][ T7222] i_nlink=1
[  123.873015][ T7222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  123.887692][ T7207] bond0: left promiscuous mode
[  123.903007][ T7227] xt_hashlimit: max too large, truncated to 1048576
[  123.946752][ T7207] batadv0: left promiscuous mode
[  124.026828][ T7222] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.1385: deleted inode referenced: 12
[  124.647338][ T7218] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.1385: deleted inode referenced: 12
[  124.708349][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'.
[  124.773683][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.818845][ T7231] loop3: detected capacity change from 0 to 8192
[  124.843380][ T7231] block device autoloading is deprecated and will be removed.
[  124.875018][ T7231] syz.3.1389: attempt to access beyond end of device
[  124.875018][ T7231] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  124.903936][ T7233] FAULT_INJECTION: forcing a failure.
[  124.903936][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.917099][ T7233] CPU: 1 UID: 0 PID: 7233 Comm: syz.1.1391 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  124.917147][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  124.917235][ T7233] Call Trace:
[  124.917243][ T7233]  <TASK>
[  124.917251][ T7233]  __dump_stack+0x1d/0x30
[  124.917276][ T7233]  dump_stack_lvl+0xe8/0x140
[  124.917301][ T7233]  dump_stack+0x15/0x1b
[  124.917317][ T7233]  should_fail_ex+0x265/0x280
[  124.917415][ T7233]  should_fail+0xb/0x20
[  124.917475][ T7233]  should_fail_usercopy+0x1a/0x20
[  124.917498][ T7233]  _copy_from_iter+0xcf/0xdd0
[  124.917520][ T7233]  ? __build_skb_around+0x1a0/0x200
[  124.917559][ T7233]  ? __alloc_skb+0x223/0x320
[  124.917609][ T7233]  netlink_sendmsg+0x471/0x6b0
[  124.917650][ T7233]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.917751][ T7233]  __sock_sendmsg+0x142/0x180
[  124.917778][ T7233]  ____sys_sendmsg+0x31e/0x4e0
[  124.917806][ T7233]  ___sys_sendmsg+0x17b/0x1d0
[  124.917837][ T7233]  __x64_sys_sendmsg+0xd4/0x160
[  124.917902][ T7233]  x64_sys_call+0x2999/0x2fb0
[  124.917945][ T7233]  do_syscall_64+0xd0/0x1a0
[  124.917967][ T7233]  ? clear_bhb_loop+0x25/0x80
[  124.917987][ T7233]  ? clear_bhb_loop+0x25/0x80
[  124.918007][ T7233]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.918032][ T7233] RIP: 0033:0x7fcaf435e969
[  124.918056][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.918078][ T7233] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.918097][ T7233] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  124.918108][ T7233] RDX: 0000000004008800 RSI: 0000200000000840 RDI: 0000000000000003
[  124.918119][ T7233] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  124.918130][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.918154][ T7233] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  124.918173][ T7233]  </TASK>
[  125.145278][ T7186] loop5: detected capacity change from 0 to 8192
[  125.222167][ T3312] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  125.230179][ T3312] FAT-fs (loop3): Filesystem has been set read-only
[  125.268646][ T7186] bond0: entered promiscuous mode
[  125.274767][ T7186] bond_slave_0: entered promiscuous mode
[  125.282508][ T7186] bond_slave_1: entered promiscuous mode
[  125.294925][ T7241] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  125.302992][ T7241] vhci_hcd: default hub control req: 2314 v0008 i0002 l0
[  125.391380][ T7186] batadv0: entered promiscuous mode
[  125.418285][ T7186] 8021q: adding VLAN 0 to HW filter on device hsr1
[  125.461524][ T7186] bond0: left promiscuous mode
[  125.467534][ T7186] bond_slave_0: left promiscuous mode
[  125.479053][   T29] kauditd_printk_skb: 272 callbacks suppressed
[  125.479097][   T29] audit: type=1400 audit(1746085651.797:3623): avc:  denied  { write } for  pid=7256 comm="syz.2.1399" path="socket:[16613]" dev="sockfs" ino=16613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  125.480021][   T29] audit: type=1400 audit(1746085651.797:3624): avc:  denied  { create } for  pid=7256 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  125.490224][ T7186] bond_slave_1: left promiscuous mode
[  125.514384][   T29] audit: type=1400 audit(1746085651.837:3625): avc:  denied  { write } for  pid=7256 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  125.555082][   T29] audit: type=1400 audit(1746085651.837:3626): avc:  denied  { write } for  pid=7256 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.616901][ T7186] batadv0: left promiscuous mode
[  125.623838][   T29] audit: type=1400 audit(1746085651.947:3627): avc:  denied  { watch watch_reads } for  pid=7249 comm="syz.1.1396" path="/307" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  125.648088][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'.
[  125.677165][ T7244] bond0: entered promiscuous mode
[  125.687535][ T7244] batadv0: entered promiscuous mode
[  125.706871][ T7244] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  125.719756][ T7244] 8021q: adding VLAN 0 to HW filter on device hsr1
[  125.740180][ T7244] bond0: left promiscuous mode
[  125.747682][ T7244] batadv0: left promiscuous mode
[  125.768944][ T7253] hsr0: entered promiscuous mode
[  125.831219][ T7260] bond0: entered promiscuous mode
[  125.839307][ T7260] bond_slave_0: entered promiscuous mode
[  125.846236][ T7260] bond_slave_1: entered promiscuous mode
[  125.899455][ T7260] batadv0: entered promiscuous mode
[  125.915167][ T7260] 8021q: adding VLAN 0 to HW filter on device hsr1
[  125.940462][   T29] audit: type=1400 audit(1746085652.247:3628): avc:  denied  { create } for  pid=7272 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  125.960043][   T29] audit: type=1400 audit(1746085652.257:3629): avc:  denied  { setopt } for  pid=7272 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  125.987992][ T7273] loop3: detected capacity change from 0 to 164
[  125.995652][ T7273] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  126.004156][ T7260] bond0: left promiscuous mode
[  126.010696][ T7260] bond_slave_0: left promiscuous mode
[  126.020136][ T7260] bond_slave_1: left promiscuous mode
[  126.033643][   T29] audit: type=1400 audit(1746085652.347:3630): avc:  denied  { mount } for  pid=7272 comm="syz.3.1404" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[  126.058630][ T7260] batadv0: left promiscuous mode
[  126.081065][   T29] audit: type=1400 audit(1746085652.397:3631): avc:  denied  { bind } for  pid=7272 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  126.115953][   T29] audit: type=1400 audit(1746085652.437:3632): avc:  denied  { map } for  pid=7272 comm="syz.3.1404" path="socket:[16647]" dev="sockfs" ino=16647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  126.242989][ T7287] loop0: detected capacity change from 0 to 256
[  126.250805][ T7287] msdos: Bad value for 'time_offset'
[  126.291556][ T7290] loop2: detected capacity change from 0 to 2048
[  126.304107][ T7301] FAULT_INJECTION: forcing a failure.
[  126.304107][ T7301] name failslab, interval 1, probability 0, space 0, times 0
[  126.316972][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.3.1415 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  126.317000][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  126.317012][ T7301] Call Trace:
[  126.317017][ T7301]  <TASK>
[  126.317050][ T7301]  __dump_stack+0x1d/0x30
[  126.317077][ T7301]  dump_stack_lvl+0xe8/0x140
[  126.317101][ T7301]  dump_stack+0x15/0x1b
[  126.317116][ T7301]  should_fail_ex+0x265/0x280
[  126.317204][ T7301]  should_failslab+0x8c/0xb0
[  126.317286][ T7301]  kmem_cache_alloc_noprof+0x50/0x310
[  126.317330][ T7301]  ? audit_log_start+0x365/0x6c0
[  126.317355][ T7301]  ? security_context_to_sid_core+0xda/0x3b0
[  126.317439][ T7301]  audit_log_start+0x365/0x6c0
[  126.317465][ T7301]  ? has_cap_mac_admin+0x71/0x220
[  126.317495][ T7301]  ? avc_has_perm+0xd3/0x150
[  126.317596][ T7301]  selinux_inode_setxattr+0x638/0x710
[  126.317635][ T7301]  security_inode_setxattr+0x13a/0x1b0
[  126.317694][ T7301]  __vfs_setxattr_locked+0x83/0x1d0
[  126.317728][ T7301]  vfs_setxattr+0x132/0x270
[  126.317752][ T7301]  filename_setxattr+0x1ad/0x400
[  126.317788][ T7301]  path_setxattrat+0x2c9/0x310
[  126.317923][ T7301]  __x64_sys_lsetxattr+0x71/0x90
[  126.317954][ T7301]  x64_sys_call+0x1e36/0x2fb0
[  126.317979][ T7301]  do_syscall_64+0xd0/0x1a0
[  126.318076][ T7301]  ? clear_bhb_loop+0x25/0x80
[  126.318099][ T7301]  ? clear_bhb_loop+0x25/0x80
[  126.318203][ T7301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.318292][ T7301] RIP: 0033:0x7f956f21e969
[  126.318317][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.318342][ T7301] RSP: 002b:00007f956d887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  126.318364][ T7301] RAX: ffffffffffffffda RBX: 00007f956f445fa0 RCX: 00007f956f21e969
[  126.318378][ T7301] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 00002000000001c0
[  126.318393][ T7301] RBP: 00007f956d887090 R08: 0000000000000000 R09: 0000000000000000
[  126.318418][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.318429][ T7301] R13: 0000000000000000 R14: 00007f956f445fa0 R15: 00007ffd5cef6bd8
[  126.318492][ T7301]  </TASK>
[  126.556827][ T7303] FAULT_INJECTION: forcing a failure.
[  126.556827][ T7303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.570006][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.0.1417 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  126.570035][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  126.570122][ T7303] Call Trace:
[  126.570129][ T7303]  <TASK>
[  126.570139][ T7303]  __dump_stack+0x1d/0x30
[  126.570165][ T7303]  dump_stack_lvl+0xe8/0x140
[  126.570251][ T7303]  dump_stack+0x15/0x1b
[  126.570290][ T7303]  should_fail_ex+0x265/0x280
[  126.570385][ T7303]  should_fail+0xb/0x20
[  126.570418][ T7303]  should_fail_usercopy+0x1a/0x20
[  126.570441][ T7303]  _copy_to_user+0x20/0xa0
[  126.570467][ T7303]  simple_read_from_buffer+0xb5/0x130
[  126.570505][ T7303]  proc_fail_nth_read+0x100/0x140
[  126.570530][ T7303]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  126.570555][ T7303]  vfs_read+0x19d/0x6f0
[  126.570581][ T7303]  ? __rcu_read_unlock+0x4f/0x70
[  126.570605][ T7303]  ? __fget_files+0x184/0x1c0
[  126.570728][ T7303]  ksys_read+0xda/0x1a0
[  126.570821][ T7303]  __x64_sys_read+0x40/0x50
[  126.570851][ T7303]  x64_sys_call+0x2d77/0x2fb0
[  126.570955][ T7303]  do_syscall_64+0xd0/0x1a0
[  126.571024][ T7303]  ? clear_bhb_loop+0x25/0x80
[  126.571044][ T7303]  ? clear_bhb_loop+0x25/0x80
[  126.571119][ T7303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.571150][ T7303] RIP: 0033:0x7f658c0bd37c
[  126.571170][ T7303] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  126.571188][ T7303] RSP: 002b:00007f658a727030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  126.571206][ T7303] RAX: ffffffffffffffda RBX: 00007f658c2e5fa0 RCX: 00007f658c0bd37c
[  126.571220][ T7303] RDX: 000000000000000f RSI: 00007f658a7270a0 RDI: 0000000000000006
[  126.571287][ T7303] RBP: 00007f658a727090 R08: 0000000000000000 R09: 0000000000000000
[  126.571328][ T7303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.571343][ T7303] R13: 0000000000000000 R14: 00007f658c2e5fa0 R15: 00007fff4f5e9e78
[  126.571362][ T7303]  </TASK>
[  126.795096][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1419'.
[  126.804222][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'.
[  126.808905][ T7290]  loop2: unable to read partition table
[  126.824848][ T7290] loop2: partition table beyond EOD, truncated
[  126.831146][ T7290] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  126.960881][ T7318] bond0: entered promiscuous mode
[  126.982482][ T7318] bond_slave_0: entered promiscuous mode
[  126.990350][ T7318] bond_slave_1: entered promiscuous mode
[  127.017451][ T7322] FAULT_INJECTION: forcing a failure.
[  127.017451][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.030629][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.1.1424 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  127.030718][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  127.030801][ T7322] Call Trace:
[  127.030809][ T7322]  <TASK>
[  127.030817][ T7322]  __dump_stack+0x1d/0x30
[  127.030843][ T7322]  dump_stack_lvl+0xe8/0x140
[  127.030862][ T7322]  dump_stack+0x15/0x1b
[  127.030878][ T7322]  should_fail_ex+0x265/0x280
[  127.030930][ T7322]  should_fail+0xb/0x20
[  127.031044][ T7322]  should_fail_usercopy+0x1a/0x20
[  127.031067][ T7322]  _copy_from_user+0x1c/0xb0
[  127.031094][ T7322]  sg_io+0x1e8/0x460
[  127.031117][ T7322]  scsi_ioctl+0xe77/0x1500
[  127.031142][ T7322]  ? do_vfs_ioctl+0x993/0x15b0
[  127.031196][ T7322]  sg_ioctl+0x12fb/0x1360
[  127.031232][ T7322]  ? __pfx_sg_ioctl+0x10/0x10
[  127.031263][ T7322]  __se_sys_ioctl+0xcb/0x140
[  127.031297][ T7322]  __x64_sys_ioctl+0x43/0x50
[  127.031316][ T7322]  x64_sys_call+0x19a8/0x2fb0
[  127.031380][ T7322]  do_syscall_64+0xd0/0x1a0
[  127.031441][ T7322]  ? clear_bhb_loop+0x25/0x80
[  127.031465][ T7322]  ? clear_bhb_loop+0x25/0x80
[  127.031486][ T7322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.031512][ T7322] RIP: 0033:0x7fcaf435e969
[  127.031552][ T7322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.031574][ T7322] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  127.031596][ T7322] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  127.031612][ T7322] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000005
[  127.031677][ T7322] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  127.031692][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.031707][ T7322] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  127.031731][ T7322]  </TASK>
[  127.242244][ T7318] batadv0: entered promiscuous mode
[  127.318529][ T7318] 8021q: adding VLAN 0 to HW filter on device hsr1
[  127.357777][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'.
[  127.375994][ T7318] bond0: left promiscuous mode
[  127.381925][ T7318] bond_slave_0: left promiscuous mode
[  127.391522][ T7318] bond_slave_1: left promiscuous mode
[  127.411500][ T7318] batadv0: left promiscuous mode
[  127.421085][ T7336] loop3: detected capacity change from 0 to 512
[  127.435721][ T7336] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.444877][ T7336] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  127.480247][ T7336] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  127.545102][ T7347] FAULT_INJECTION: forcing a failure.
[  127.545102][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.558309][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.5.1434 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  127.558344][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  127.558360][ T7347] Call Trace:
[  127.558368][ T7347]  <TASK>
[  127.558377][ T7347]  __dump_stack+0x1d/0x30
[  127.558396][ T7347]  dump_stack_lvl+0xe8/0x140
[  127.558468][ T7347]  dump_stack+0x15/0x1b
[  127.558487][ T7347]  should_fail_ex+0x265/0x280
[  127.558527][ T7347]  should_fail+0xb/0x20
[  127.558563][ T7347]  should_fail_usercopy+0x1a/0x20
[  127.558586][ T7347]  _copy_from_user+0x1c/0xb0
[  127.558628][ T7347]  ___bpf_copy_key+0xa5/0x110
[  127.558651][ T7347]  map_update_elem+0x165/0x520
[  127.558757][ T7347]  __sys_bpf+0x5d7/0x790
[  127.558797][ T7347]  __x64_sys_bpf+0x41/0x50
[  127.558872][ T7347]  x64_sys_call+0x2478/0x2fb0
[  127.558901][ T7347]  do_syscall_64+0xd0/0x1a0
[  127.558927][ T7347]  ? clear_bhb_loop+0x25/0x80
[  127.558953][ T7347]  ? clear_bhb_loop+0x25/0x80
[  127.558979][ T7347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.559012][ T7347] RIP: 0033:0x7f63692ae969
[  127.559037][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.559053][ T7347] RSP: 002b:00007f6367917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  127.559137][ T7347] RAX: ffffffffffffffda RBX: 00007f63694d5fa0 RCX: 00007f63692ae969
[  127.559153][ T7347] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002
[  127.559168][ T7347] RBP: 00007f6367917090 R08: 0000000000000000 R09: 0000000000000000
[  127.559182][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.559266][ T7347] R13: 0000000000000000 R14: 00007f63694d5fa0 R15: 00007ffd9cccd468
[  127.559287][ T7347]  </TASK>
[  127.746427][ T7336] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  127.754696][ T7336] System zones: 0-2, 18-18, 34-35
[  127.766300][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.817865][ T7332] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  127.828812][ T7332] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  127.838474][ T7332] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  127.852937][ T7332] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  127.883726][ T7332] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 353: padding at end of block bitmap is not set
[  127.886177][ T7361] FAULT_INJECTION: forcing a failure.
[  127.886177][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.910831][ T7361] CPU: 1 UID: 0 PID: 7361 Comm: syz.0.1439 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  127.910948][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  127.910963][ T7361] Call Trace:
[  127.910972][ T7361]  <TASK>
[  127.910981][ T7361]  __dump_stack+0x1d/0x30
[  127.911007][ T7361]  dump_stack_lvl+0xe8/0x140
[  127.911031][ T7361]  dump_stack+0x15/0x1b
[  127.911105][ T7361]  should_fail_ex+0x265/0x280
[  127.911204][ T7361]  should_fail+0xb/0x20
[  127.911239][ T7361]  should_fail_usercopy+0x1a/0x20
[  127.911294][ T7361]  _copy_from_user+0x1c/0xb0
[  127.911319][ T7361]  __copy_msghdr+0x244/0x300
[  127.911507][ T7361]  ___sys_sendmsg+0x109/0x1d0
[  127.911548][ T7361]  __x64_sys_sendmsg+0xd4/0x160
[  127.911577][ T7361]  x64_sys_call+0x2999/0x2fb0
[  127.911604][ T7361]  do_syscall_64+0xd0/0x1a0
[  127.911734][ T7361]  ? clear_bhb_loop+0x25/0x80
[  127.911762][ T7361]  ? clear_bhb_loop+0x25/0x80
[  127.911789][ T7361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.911869][ T7361] RIP: 0033:0x7f658c0be969
[  127.911889][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.911922][ T7361] RSP: 002b:00007f658a727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.911949][ T7361] RAX: ffffffffffffffda RBX: 00007f658c2e5fa0 RCX: 00007f658c0be969
[  127.911993][ T7361] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  127.912005][ T7361] RBP: 00007f658a727090 R08: 0000000000000000 R09: 0000000000000000
[  127.912016][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.912028][ T7361] R13: 0000000000000000 R14: 00007f658c2e5fa0 R15: 00007fff4f5e9e78
[  127.912052][ T7361]  </TASK>
[  128.120794][ T7367] 9pnet_fd: Insufficient options for proto=fd
[  128.174266][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.214111][ T7378] loop5: detected capacity change from 0 to 164
[  128.226054][ T7380] bond1: entered promiscuous mode
[  128.231141][ T7380] bond1: entered allmulticast mode
[  128.237505][ T7380] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.245048][ T7378] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  128.256312][ T7378] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  128.271005][ T7378] Symlink component flag not implemented
[  128.273782][ T7380] bond1 (unregistering): Released all slaves
[  128.276737][ T7378] Symlink component flag not implemented
[  128.290431][ T7378] Symlink component flag not implemented (7)
[  128.296568][ T7378] Symlink component flag not implemented (116)
[  128.316511][ T7390] loop3: detected capacity change from 0 to 512
[  128.324242][ T7390] EXT4-fs: dax option not supported
[  128.397841][ T7395] loop5: detected capacity change from 0 to 512
[  128.434358][ T7395] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  128.442844][ T7395] EXT4-fs (loop5): orphan cleanup on readonly fs
[  128.449434][ T7395] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  128.482742][ T7402] FAULT_INJECTION: forcing a failure.
[  128.482742][ T7402] name failslab, interval 1, probability 0, space 0, times 0
[  128.495477][ T7402] CPU: 0 UID: 0 PID: 7402 Comm: syz.0.1454 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  128.495577][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  128.495591][ T7402] Call Trace:
[  128.495598][ T7402]  <TASK>
[  128.495606][ T7402]  __dump_stack+0x1d/0x30
[  128.495662][ T7402]  dump_stack_lvl+0xe8/0x140
[  128.495687][ T7402]  dump_stack+0x15/0x1b
[  128.495707][ T7402]  should_fail_ex+0x265/0x280
[  128.495758][ T7402]  ? percpu_ref_init+0x9c/0x250
[  128.495804][ T7402]  should_failslab+0x8c/0xb0
[  128.495840][ T7402]  ? __pfx_io_ring_ctx_ref_free+0x10/0x10
[  128.495952][ T7402]  __kmalloc_cache_noprof+0x4c/0x320
[  128.496031][ T7402]  ? __pfx_io_ring_ctx_ref_free+0x10/0x10
[  128.496075][ T7402]  percpu_ref_init+0x9c/0x250
[  128.496187][ T7402]  io_ring_ctx_alloc+0x1aa/0x650
[  128.496278][ T7402]  io_uring_create+0x10f/0x610
[  128.496303][ T7402]  __se_sys_io_uring_setup+0x1f7/0x210
[  128.496346][ T7402]  __x64_sys_io_uring_setup+0x31/0x40
[  128.496404][ T7402]  x64_sys_call+0x184b/0x2fb0
[  128.496429][ T7402]  do_syscall_64+0xd0/0x1a0
[  128.496449][ T7402]  ? clear_bhb_loop+0x25/0x80
[  128.496513][ T7402]  ? clear_bhb_loop+0x25/0x80
[  128.496533][ T7402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.496553][ T7402] RIP: 0033:0x7f658c0be969
[  128.496571][ T7402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.496609][ T7402] RSP: 002b:00007f658a726fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[  128.496627][ T7402] RAX: ffffffffffffffda RBX: 00007f658c2e5fa0 RCX: 00007f658c0be969
[  128.496639][ T7402] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111
[  128.496650][ T7402] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000
[  128.496661][ T7402] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  128.496697][ T7402] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000
[  128.496742][ T7402]  </TASK>
[  128.708003][ T7395] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  128.715208][ T7395] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1452: bg 0: block 40: padding at end of block bitmap is not set
[  128.731481][ T7395] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  128.745618][ T7412] 8021q: VLANs not supported on gre0
[  128.769443][ T7415] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  128.790098][ T7395] EXT4-fs (loop5): 1 truncate cleaned up
[  128.811646][ T7395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  128.912535][ T6454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.992599][ T7419] loop5: detected capacity change from 0 to 65599
[  129.032330][ T7421] program syz.5.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.065744][ T7423] loop2: detected capacity change from 0 to 512
[  129.152371][ T7423] EXT4-fs: Ignoring removed oldalloc option
[  129.236454][ T7423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  129.246525][ T7423] System zones: 1-12
[  129.251008][ T7423] EXT4-fs (loop2): 1 truncate cleaned up
[  129.276696][ T7423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.456865][ T7449] FAULT_INJECTION: forcing a failure.
[  129.456865][ T7449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.470025][ T7449] CPU: 1 UID: 0 PID: 7449 Comm: syz.1.1469 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  129.470088][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  129.470104][ T7449] Call Trace:
[  129.470111][ T7449]  <TASK>
[  129.470119][ T7449]  __dump_stack+0x1d/0x30
[  129.470143][ T7449]  dump_stack_lvl+0xe8/0x140
[  129.470167][ T7449]  dump_stack+0x15/0x1b
[  129.470205][ T7449]  should_fail_ex+0x265/0x280
[  129.470242][ T7449]  should_fail+0xb/0x20
[  129.470278][ T7449]  should_fail_usercopy+0x1a/0x20
[  129.470309][ T7449]  _copy_from_user+0x1c/0xb0
[  129.470336][ T7449]  __copy_msghdr+0x244/0x300
[  129.470373][ T7449]  ___sys_sendmsg+0x109/0x1d0
[  129.470410][ T7449]  __x64_sys_sendmsg+0xd4/0x160
[  129.470482][ T7449]  x64_sys_call+0x2999/0x2fb0
[  129.470523][ T7449]  do_syscall_64+0xd0/0x1a0
[  129.470550][ T7449]  ? clear_bhb_loop+0x25/0x80
[  129.470577][ T7449]  ? clear_bhb_loop+0x25/0x80
[  129.470662][ T7449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.470687][ T7449] RIP: 0033:0x7fcaf435e969
[  129.470706][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.470729][ T7449] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.470829][ T7449] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  129.470883][ T7449] RDX: 0000000024044010 RSI: 0000200000000240 RDI: 0000000000000003
[  129.470925][ T7449] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  129.470941][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.470954][ T7449] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  129.470976][ T7449]  </TASK>
[  129.722801][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.769667][ T7457] loop5: detected capacity change from 0 to 512
[  129.786661][ T7459] loop2: detected capacity change from 0 to 1024
[  129.822930][ T7457] loop5: detected capacity change from 0 to 2048
[  129.832322][ T7457] EXT4-fs: Ignoring removed bh option
[  129.864031][ T7459] EXT4-fs: Ignoring removed orlov option
[  129.870251][ T7459] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.901154][ T7457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.944739][ T7469] loop3: detected capacity change from 0 to 128
[  129.986083][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.021864][ T7469] sit0: entered promiscuous mode
[  130.031085][ T7469] sit0: entered allmulticast mode
[  130.223832][ T7469] syz.3.1476: attempt to access beyond end of device
[  130.223832][ T7469] loop3: rw=1, sector=145, nr_sectors = 77 limit=128
[  130.259600][ T7479] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.293640][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.320670][ T7479] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.364853][ T7488] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.433841][ T7479] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.493901][ T7488] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.511830][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  130.511849][   T29] audit: type=1400 audit(1746085656.837:3758): avc:  denied  { bind } for  pid=7501 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  130.522452][ T7479] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #12: comm syz.5.1470: corrupted in-inode xattr: e_name out of bounds
[  130.559441][ T7514] netlink: 192668 bytes leftover after parsing attributes in process `syz.3.1490'.
[  130.579011][ T7514] loop3: detected capacity change from 0 to 512
[  130.613642][ T7514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  130.637943][ T7514] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.674508][ T7514] EXT4-fs: Ignoring removed orlov option
[  130.680244][ T7514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  130.754848][   T29] audit: type=1400 audit(2000000000.220:3759): avc:  denied  { mac_admin } for  pid=7521 comm="syz.2.1493" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  130.776190][   T29] audit: type=1400 audit(2000000000.220:3760): avc:  denied  { relabelto } for  pid=7521 comm="syz.2.1493" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0"
[  130.803349][   T29] audit: type=1400 audit(2000000000.220:3761): avc:  denied  { associate } for  pid=7521 comm="syz.2.1493" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0"
[  130.831336][   T29] audit: type=1400 audit(2000000000.220:3762): avc:  denied  { mount } for  pid=7521 comm="syz.2.1493" name="/" dev="configfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  130.854035][   T29] audit: type=1400 audit(2000000000.220:3763): avc:  denied  { search } for  pid=7521 comm="syz.2.1493" name="/" dev="configfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.876220][   T29] audit: type=1400 audit(2000000000.220:3764): avc:  denied  { read } for  pid=7521 comm="syz.2.1493" name="/" dev="configfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.898312][   T29] audit: type=1400 audit(2000000000.220:3765): avc:  denied  { open } for  pid=7521 comm="syz.2.1493" path="/" dev="configfs" ino=909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.920615][ T7514] EXT4-fs (loop3): can't enable nombcache during remount
[  130.940195][ T7533] vlan2: entered allmulticast mode
[  130.947567][   T29] audit: type=1326 audit(2000000000.430:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  130.971177][   T29] audit: type=1326 audit(2000000000.430:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.0.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658c0be969 code=0x7ffc0000
[  131.004115][  T410] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  131.019826][  T410] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  131.032248][  T410] EXT4-fs (loop5): This should not happen!! Data will be lost
[  131.032248][  T410] 
[  131.042298][  T410] EXT4-fs (loop5): Total free blocks count 0
[  131.048451][  T410] EXT4-fs (loop5): Free/Dirty block details
[  131.054806][  T410] EXT4-fs (loop5): free_blocks=2415919104
[  131.060650][  T410] EXT4-fs (loop5): dirty_blocks=8224
[  131.066043][  T410] EXT4-fs (loop5): Block reservation details
[  131.072078][  T410] EXT4-fs (loop5): i_reserved_data_blocks=514
[  131.078854][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  131.083988][  T410] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  131.132227][ T7544] loop0: detected capacity change from 0 to 512
[  131.167418][ T7544] EXT4-fs (loop0): 1 orphan inode deleted
[  131.200785][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[  131.244799][ T7544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.302645][ T7544] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.373674][ T7561] loop2: detected capacity change from 0 to 128
[  131.435949][ T7561] syz.2.1508: attempt to access beyond end of device
[  131.435949][ T7561] loop2: rw=1, sector=145, nr_sectors = 77 limit=128
[  131.484759][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.547271][ T7572] bond0: entered promiscuous mode
[  131.566130][ T7572] batadv0: entered promiscuous mode
[  131.571854][ T7572] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  131.619367][ T7572] 8021q: adding VLAN 0 to HW filter on device hsr1
[  131.640781][ T7572] bond0: left promiscuous mode
[  131.649947][ T7572] batadv0: left promiscuous mode
[  131.762240][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1516'.
[  131.804786][ T7582] team0 (unregistering): Port device team_slave_0 removed
[  131.829180][ T7590] loop2: detected capacity change from 0 to 512
[  131.830072][ T7582] team0 (unregistering): Port device team_slave_1 removed
[  131.852105][ T7590] EXT4-fs: Ignoring removed orlov option
[  131.871866][ T7590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  131.907963][ T7590] EXT4-fs (loop2): orphan cleanup on readonly fs
[  131.932956][ T7590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1520: bg 0: block 248: padding at end of block bitmap is not set
[  131.974117][ T7595] FAULT_INJECTION: forcing a failure.
[  131.974117][ T7595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.987389][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.5.1521 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  131.987423][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  131.987436][ T7595] Call Trace:
[  131.987441][ T7595]  <TASK>
[  131.987450][ T7595]  __dump_stack+0x1d/0x30
[  131.987477][ T7595]  dump_stack_lvl+0xe8/0x140
[  131.987531][ T7595]  dump_stack+0x15/0x1b
[  131.987552][ T7595]  should_fail_ex+0x265/0x280
[  131.987667][ T7595]  should_fail+0xb/0x20
[  131.987742][ T7595]  should_fail_usercopy+0x1a/0x20
[  131.987760][ T7595]  _copy_to_user+0x20/0xa0
[  131.987780][ T7595]  __x64_sys_rt_sigpending+0x114/0x180
[  131.987808][ T7595]  x64_sys_call+0x2705/0x2fb0
[  131.987849][ T7595]  do_syscall_64+0xd0/0x1a0
[  131.987875][ T7595]  ? clear_bhb_loop+0x25/0x80
[  131.987904][ T7595]  ? clear_bhb_loop+0x25/0x80
[  131.987931][ T7595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.988032][ T7595] RIP: 0033:0x7f63692ae969
[  131.988050][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.988076][ T7595] RSP: 002b:00007f6367917038 EFLAGS: 00000246 ORIG_RAX: 000000000000007f
[  131.988102][ T7595] RAX: ffffffffffffffda RBX: 00007f63694d5fa0 RCX: 00007f63692ae969
[  131.988118][ T7595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  131.988138][ T7595] RBP: 00007f6367917090 R08: 0000000000000000 R09: 0000000000000000
[  131.988188][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.988224][ T7595] R13: 0000000000000001 R14: 00007f63694d5fa0 R15: 00007ffd9cccd468
[  131.988249][ T7595]  </TASK>
[  132.177919][ T7590] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1520: Failed to acquire dquot type 1
[  132.220628][ T7548] loop3: detected capacity change from 0 to 8192
[  132.238286][ T7590] EXT4-fs (loop2): 1 truncate cleaned up
[  132.251769][ T7590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.303269][ T7541] bond0: entered promiscuous mode
[  132.334880][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.339582][ T7541] batadv0: entered promiscuous mode
[  132.354175][ T7541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.364539][ T7541] Cannot create hsr debugfs directory
[  132.371863][ T7541] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  132.386363][ T7541] 8021q: adding VLAN 0 to HW filter on device hsr0
[  132.410259][ T7541] bond0: left promiscuous mode
[  132.424689][ T7541] batadv0: left promiscuous mode
[  132.458578][ T7602] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1524'.
[  132.520518][ T7548] bond0: entered promiscuous mode
[  132.531847][ T7548] batadv0: entered promiscuous mode
[  132.538061][ T7548] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  132.549220][ T7548] 8021q: adding VLAN 0 to HW filter on device hsr1
[  132.558604][ T7548] bond0: left promiscuous mode
[  132.570420][ T7548] batadv0: left promiscuous mode
[  132.591492][ T7614] bond0: entered promiscuous mode
[  132.596640][ T7614] bond_slave_0: entered promiscuous mode
[  132.603014][ T7614] bond_slave_1: entered promiscuous mode
[  132.610339][ T7614] batadv0: entered promiscuous mode
[  132.617127][ T7614] 8021q: adding VLAN 0 to HW filter on device hsr1
[  132.642038][ T7614] bond0: left promiscuous mode
[  132.646898][ T7614] bond_slave_0: left promiscuous mode
[  132.652488][ T7614] bond_slave_1: left promiscuous mode
[  132.684911][ T7614] batadv0: left promiscuous mode
[  132.710249][ T7630] netlink: 'syz.0.1536': attribute type 6 has an invalid length.
[  132.788894][ T7641] loop3: detected capacity change from 0 to 164
[  132.795690][ T7641] iso9660: Unknown parameter ''
[  132.812912][ T7647] loop5: detected capacity change from 0 to 512
[  132.844494][ T7647] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  132.851032][ T7651] vlan2: entered allmulticast mode
[  132.853626][ T7647] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  132.866159][ T7647] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  132.867667][ T7651] bridge_slave_0: entered allmulticast mode
[  132.877313][ T7647] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  132.890841][ T7647] System zones: 0-2, 18-18, 34-34
[  132.911236][ T7647] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  132.927276][ T7647] EXT4-fs (loop5): 1 truncate cleaned up
[  132.933461][ T7647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.966371][ T7661] SELinux:  policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c
[  132.976747][ T7661] SELinux: failed to load policy
[  132.977622][ T6454] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.077002][ T7677] FAULT_INJECTION: forcing a failure.
[  133.077002][ T7677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.090165][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.1.1555 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  133.090223][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  133.090244][ T7677] Call Trace:
[  133.090252][ T7677]  <TASK>
[  133.090261][ T7677]  __dump_stack+0x1d/0x30
[  133.090370][ T7677]  dump_stack_lvl+0xe8/0x140
[  133.090393][ T7677]  dump_stack+0x15/0x1b
[  133.090412][ T7677]  should_fail_ex+0x265/0x280
[  133.090450][ T7677]  should_fail+0xb/0x20
[  133.090529][ T7677]  should_fail_usercopy+0x1a/0x20
[  133.090550][ T7677]  _copy_to_user+0x20/0xa0
[  133.090574][ T7677]  simple_read_from_buffer+0xb5/0x130
[  133.090598][ T7677]  proc_fail_nth_read+0x100/0x140
[  133.090625][ T7677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  133.090695][ T7677]  vfs_read+0x19d/0x6f0
[  133.090718][ T7677]  ? __rcu_read_unlock+0x4f/0x70
[  133.090740][ T7677]  ? __fget_files+0x184/0x1c0
[  133.090798][ T7677]  ksys_read+0xda/0x1a0
[  133.090823][ T7677]  __x64_sys_read+0x40/0x50
[  133.090847][ T7677]  x64_sys_call+0x2d77/0x2fb0
[  133.090880][ T7677]  do_syscall_64+0xd0/0x1a0
[  133.090902][ T7677]  ? clear_bhb_loop+0x25/0x80
[  133.090947][ T7677]  ? clear_bhb_loop+0x25/0x80
[  133.090969][ T7677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.090990][ T7677] RIP: 0033:0x7fcaf435d37c
[  133.091005][ T7677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  133.091022][ T7677] RSP: 002b:00007fcaf29c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  133.091079][ T7677] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435d37c
[  133.091091][ T7677] RDX: 000000000000000f RSI: 00007fcaf29c70a0 RDI: 0000000000000003
[  133.091103][ T7677] RBP: 00007fcaf29c7090 R08: 0000000000000000 R09: 0000000000000000
[  133.091114][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.091126][ T7677] R13: 0000000000000001 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  133.091145][ T7677]  </TASK>
[  133.319477][ T7684] loop3: detected capacity change from 0 to 512
[  133.327519][ T7684] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  133.336486][ T7684] EXT4-fs (loop3): invalid journal inode
[  133.342376][ T7684] EXT4-fs (loop3): can't get journal size
[  133.351327][ T7684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  133.359684][ T7684] System zones: 1-12, 13-13
[  133.364793][ T7684] EXT4-fs (loop3): 1 truncate cleaned up
[  133.373599][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.407409][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.423802][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.431331][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.438923][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.446362][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.453955][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.461443][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.469130][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.476662][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.484178][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.491648][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[  133.499123][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.506583][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.514035][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.521976][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.529886][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.537437][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.545512][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.553174][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.560880][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.568459][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.576108][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.583710][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.591324][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.598922][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.606376][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.613860][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.621348][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.628809][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.636488][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  133.641453][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'.
[  133.652457][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  133.704223][ T7712] FAULT_INJECTION: forcing a failure.
[  133.704223][ T7712] name failslab, interval 1, probability 0, space 0, times 0
[  133.717054][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.1.1570 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  133.717084][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  133.717152][ T7712] Call Trace:
[  133.717160][ T7712]  <TASK>
[  133.717170][ T7712]  __dump_stack+0x1d/0x30
[  133.717194][ T7712]  dump_stack_lvl+0xe8/0x140
[  133.717266][ T7712]  dump_stack+0x15/0x1b
[  133.717333][ T7712]  should_fail_ex+0x265/0x280
[  133.717521][ T7712]  should_failslab+0x8c/0xb0
[  133.717578][ T7712]  __kmalloc_noprof+0xa5/0x3e0
[  133.717596][ T7712]  ? iter_file_splice_write+0xfe/0x970
[  133.717617][ T7712]  ? terminate_walk+0x27f/0x2a0
[  133.717748][ T7712]  iter_file_splice_write+0xfe/0x970
[  133.717823][ T7712]  ? _parse_integer_limit+0x170/0x190
[  133.717854][ T7712]  ? _parse_integer+0x27/0x40
[  133.717930][ T7712]  ? avc_policy_seqno+0x15/0x30
[  133.717962][ T7712]  ? selinux_file_permission+0x213/0x360
[  133.718028][ T7712]  ? __pfx_iter_file_splice_write+0x10/0x10
[  133.718050][ T7712]  do_splice+0x974/0x10b0
[  133.718151][ T7712]  ? __rcu_read_unlock+0x4f/0x70
[  133.718171][ T7712]  ? __fget_files+0x184/0x1c0
[  133.718212][ T7712]  __se_sys_splice+0x26c/0x3a0
[  133.718237][ T7712]  __x64_sys_splice+0x78/0x90
[  133.718270][ T7712]  x64_sys_call+0xb0a/0x2fb0
[  133.718291][ T7712]  do_syscall_64+0xd0/0x1a0
[  133.718385][ T7712]  ? clear_bhb_loop+0x25/0x80
[  133.718406][ T7712]  ? clear_bhb_loop+0x25/0x80
[  133.718427][ T7712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.718448][ T7712] RIP: 0033:0x7fcaf435e969
[  133.718464][ T7712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.718589][ T7712] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  133.718607][ T7712] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  133.718685][ T7712] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[  133.718729][ T7712] RBP: 00007fcaf29c7090 R08: 00000000088000cc R09: 0000000000000000
[  133.718746][ T7712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  133.718772][ T7712] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  133.718790][ T7712]  </TASK>
[  134.097406][ T7721] FAULT_INJECTION: forcing a failure.
[  134.097406][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.110635][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.2.1573 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  134.110669][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  134.110684][ T7721] Call Trace:
[  134.110692][ T7721]  <TASK>
[  134.110700][ T7721]  __dump_stack+0x1d/0x30
[  134.110726][ T7721]  dump_stack_lvl+0xe8/0x140
[  134.110827][ T7721]  dump_stack+0x15/0x1b
[  134.110841][ T7721]  should_fail_ex+0x265/0x280
[  134.110871][ T7721]  should_fail+0xb/0x20
[  134.110917][ T7721]  should_fail_usercopy+0x1a/0x20
[  134.111025][ T7721]  _copy_from_user+0x1c/0xb0
[  134.111044][ T7721]  ucma_destroy_id+0x80/0x1d0
[  134.111121][ T7721]  ucma_write+0x1b0/0x250
[  134.111140][ T7721]  ? __pfx_ucma_write+0x10/0x10
[  134.111236][ T7721]  vfs_write+0x266/0x8d0
[  134.111257][ T7721]  ? __rcu_read_unlock+0x4f/0x70
[  134.111384][ T7721]  ? __fget_files+0x184/0x1c0
[  134.111441][ T7721]  ksys_write+0xda/0x1a0
[  134.111475][ T7721]  __x64_sys_write+0x40/0x50
[  134.111497][ T7721]  x64_sys_call+0x2cdd/0x2fb0
[  134.111521][ T7721]  do_syscall_64+0xd0/0x1a0
[  134.111539][ T7721]  ? clear_bhb_loop+0x25/0x80
[  134.111558][ T7721]  ? clear_bhb_loop+0x25/0x80
[  134.111576][ T7721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.111605][ T7721] RIP: 0033:0x7faeae50e969
[  134.111619][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.111641][ T7721] RSP: 002b:00007faeacb77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  134.111680][ T7721] RAX: ffffffffffffffda RBX: 00007faeae735fa0 RCX: 00007faeae50e969
[  134.111696][ T7721] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000005
[  134.111712][ T7721] RBP: 00007faeacb77090 R08: 0000000000000000 R09: 0000000000000000
[  134.111727][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.111739][ T7721] R13: 0000000000000000 R14: 00007faeae735fa0 R15: 00007ffe88e7d148
[  134.111755][ T7721]  </TASK>
[  134.458860][ T7722] loop3: detected capacity change from 0 to 8192
[  134.760480][ T7734] netlink: 'syz.5.1578': attribute type 3 has an invalid length.
[  134.771207][ T7734] loop5: detected capacity change from 0 to 128
[  135.385871][ T7740] FAULT_INJECTION: forcing a failure.
[  135.385871][ T7740] name failslab, interval 1, probability 0, space 0, times 0
[  135.398687][ T7740] CPU: 1 UID: 0 PID: 7740 Comm: syz.5.1582 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  135.398714][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  135.398728][ T7740] Call Trace:
[  135.398737][ T7740]  <TASK>
[  135.398747][ T7740]  __dump_stack+0x1d/0x30
[  135.398821][ T7740]  dump_stack_lvl+0xe8/0x140
[  135.398840][ T7740]  dump_stack+0x15/0x1b
[  135.398855][ T7740]  should_fail_ex+0x265/0x280
[  135.399026][ T7740]  should_failslab+0x8c/0xb0
[  135.399064][ T7740]  kmem_cache_alloc_noprof+0x50/0x310
[  135.399100][ T7740]  ? getname_flags+0x80/0x3b0
[  135.399139][ T7740]  getname_flags+0x80/0x3b0
[  135.399173][ T7740]  do_sys_openat2+0x60/0x110
[  135.399192][ T7740]  __x64_sys_openat+0xf2/0x120
[  135.399211][ T7740]  x64_sys_call+0x1af/0x2fb0
[  135.399295][ T7740]  do_syscall_64+0xd0/0x1a0
[  135.399318][ T7740]  ? clear_bhb_loop+0x25/0x80
[  135.399342][ T7740]  ? clear_bhb_loop+0x25/0x80
[  135.399368][ T7740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.399426][ T7740] RIP: 0033:0x7f63692ae969
[  135.399478][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.399495][ T7740] RSP: 002b:00007f6367917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  135.399543][ T7740] RAX: ffffffffffffffda RBX: 00007f63694d5fa0 RCX: 00007f63692ae969
[  135.399559][ T7740] RDX: 0000000000842602 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  135.399581][ T7740] RBP: 00007f6367917090 R08: 0000000000000000 R09: 0000000000000000
[  135.399661][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.399676][ T7740] R13: 0000000000000001 R14: 00007f63694d5fa0 R15: 00007ffd9cccd468
[  135.399698][ T7740]  </TASK>
[  135.636076][ T7751] loop0: detected capacity change from 0 to 512
[  135.657493][ T7751] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  135.739308][ T7757] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1583'.
[  135.756108][ T7757] openvswitch: netlink: Message has 6 unknown bytes.
[  135.796297][ T7759] loop2: detected capacity change from 0 to 2048
[  135.803188][ T7762] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1590'.
[  135.866265][ T7759]  loop2: unable to read partition table
[  135.886479][ T7759] loop2: partition table beyond EOD, truncated
[  135.892733][ T7759] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  135.921510][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'.
[  136.039161][ T7770] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  136.100183][ T7770] loop2: detected capacity change from 0 to 2048
[  136.206218][ T7770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.315627][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  136.315644][   T29] audit: type=1400 audit(2000000005.800:3960): avc:  denied  { create } for  pid=7767 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  136.394882][   T29] audit: type=1400 audit(2000000005.860:3961): avc:  denied  { mounton } for  pid=7767 comm="syz.2.1593" path="/306/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  136.432354][ T7792] FAULT_INJECTION: forcing a failure.
[  136.432354][ T7792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  136.432388][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.1.1602 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  136.432413][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  136.432426][ T7792] Call Trace:
[  136.432431][ T7792]  <TASK>
[  136.432439][ T7792]  __dump_stack+0x1d/0x30
[  136.432525][ T7792]  dump_stack_lvl+0xe8/0x140
[  136.432549][ T7792]  dump_stack+0x15/0x1b
[  136.432566][ T7792]  should_fail_ex+0x265/0x280
[  136.432601][ T7792]  should_fail+0xb/0x20
[  136.432636][ T7792]  should_fail_usercopy+0x1a/0x20
[  136.432728][ T7792]  _copy_from_user+0x1c/0xb0
[  136.432749][ T7792]  __se_sys_mount+0x10d/0x2e0
[  136.432820][ T7792]  ? fput+0x8f/0xc0
[  136.432840][ T7792]  ? ksys_write+0x16e/0x1a0
[  136.432870][ T7792]  __x64_sys_mount+0x67/0x80
[  136.432896][ T7792]  x64_sys_call+0xd36/0x2fb0
[  136.433013][ T7792]  do_syscall_64+0xd0/0x1a0
[  136.433034][ T7792]  ? clear_bhb_loop+0x25/0x80
[  136.433106][ T7792]  ? clear_bhb_loop+0x25/0x80
[  136.433134][ T7792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.433188][ T7792] RIP: 0033:0x7fcaf435e969
[  136.433226][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.433244][ T7792] RSP: 002b:00007fcaf29c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  136.433267][ T7792] RAX: ffffffffffffffda RBX: 00007fcaf4585fa0 RCX: 00007fcaf435e969
[  136.433282][ T7792] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000
[  136.433297][ T7792] RBP: 00007fcaf29c7090 R08: 0000200000000b00 R09: 0000000000000000
[  136.433344][ T7792] R10: 000000000021004a R11: 0000000000000246 R12: 0000000000000001
[  136.433359][ T7792] R13: 0000000000000000 R14: 00007fcaf4585fa0 R15: 00007ffcd8ac4cc8
[  136.433381][ T7792]  </TASK>
[  136.433685][   T29] audit: type=1400 audit(2000000005.920:3962): avc:  denied  { mounton } for  pid=7791 comm="syz.1.1602" path="/353/file0" dev="tmpfs" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  136.447013][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'.
[  136.459393][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.542555][   T29] audit: type=1326 audit(2000000006.030:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.542752][   T29] audit: type=1326 audit(2000000006.030:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.544916][   T29] audit: type=1326 audit(2000000006.030:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.545166][   T29] audit: type=1326 audit(2000000006.030:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.545256][   T29] audit: type=1326 audit(2000000006.030:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.552243][   T29] audit: type=1326 audit(2000000006.040:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.552395][   T29] audit: type=1326 audit(2000000006.040:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7796 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf435e969 code=0x7ffc0000
[  136.686680][ T7764] loop5: detected capacity change from 0 to 8192
[  136.743676][ T7764] bond0: entered promiscuous mode
[  136.743726][ T7764] bond_slave_0: entered promiscuous mode
[  136.744632][ T7764] bond_slave_1: entered promiscuous mode
[  136.758454][ T7803] loop3: detected capacity change from 0 to 2048
[  136.758818][ T7803] EXT4-fs: dax option not supported
[  136.821354][ T7764] batadv0: entered promiscuous mode
[  137.133749][ T7809] loop3: detected capacity change from 0 to 2048
[  137.301046][ T7764] 8021q: adding VLAN 0 to HW filter on device hsr1
[  137.327387][ T7809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.366553][ T7764] bond0: left promiscuous mode
[  137.371423][ T7764] bond_slave_0: left promiscuous mode
[  137.377024][ T7764] bond_slave_1: left promiscuous mode
[  137.513240][ T7764] batadv0: left promiscuous mode
[  137.746042][ T7818] sd 0:0:1:0: device reset
[  137.803763][ T7825] loop0: detected capacity change from 0 to 2048
[  137.827464][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.908001][ T7832] loop3: detected capacity change from 0 to 128
[  137.947272][ T7825]  loop0: unable to read partition table
[  137.967950][ T7832] syz.3.1615: attempt to access beyond end of device
[  137.967950][ T7832] loop3: rw=1, sector=145, nr_sectors = 77 limit=128
[  137.987674][ T7825] loop0: partition table beyond EOD, truncated
[  137.994033][ T7825] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  138.054134][ T7838] loop2: detected capacity change from 0 to 512
[  138.640470][ T7864] infiniband syz2: set active
[  138.645313][ T7864] infiniband syz2: added veth0_to_bond
[  138.665822][ T7864] RDS/IB: syz2: added
[  138.666336][ T7867] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  138.669940][ T7864] smc: adding ib device syz2 with port count 1
[  138.683671][ T7864] smc:    ib device syz2 port 1 has pnetid 
[  138.868508][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'.
[  138.877699][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'.
[  138.911012][ T7877] SET target dimension over the limit!
[  139.569319][ T7901] loop2: detected capacity change from 0 to 2048
[  139.737458][ T7901]  loop2: unable to read partition table
[  139.769960][ T7901] loop2: partition table beyond EOD, truncated
[  139.776318][ T7901] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  139.973389][ T7909] loop0: detected capacity change from 0 to 1024
[  139.991992][ T7909] EXT4-fs: Ignoring removed orlov option
[  140.003766][ T7909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.021577][ T7915] FAULT_INJECTION: forcing a failure.
[  140.021577][ T7915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.034812][ T7915] CPU: 1 UID: 0 PID: 7915 Comm: syz.2.1646 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  140.034847][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  140.034868][ T7915] Call Trace:
[  140.034876][ T7915]  <TASK>
[  140.034885][ T7915]  __dump_stack+0x1d/0x30
[  140.034914][ T7915]  dump_stack_lvl+0xe8/0x140
[  140.034933][ T7915]  dump_stack+0x15/0x1b
[  140.034962][ T7915]  should_fail_ex+0x265/0x280
[  140.035000][ T7915]  should_fail+0xb/0x20
[  140.035031][ T7915]  should_fail_usercopy+0x1a/0x20
[  140.035068][ T7915]  _copy_to_user+0x20/0xa0
[  140.035147][ T7915]  simple_read_from_buffer+0xb5/0x130
[  140.035172][ T7915]  proc_fail_nth_read+0x100/0x140
[  140.035197][ T7915]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  140.035254][ T7915]  vfs_read+0x19d/0x6f0
[  140.035286][ T7915]  ? __rcu_read_unlock+0x4f/0x70
[  140.035306][ T7915]  ? __fget_files+0x184/0x1c0
[  140.035333][ T7915]  ksys_read+0xda/0x1a0
[  140.035356][ T7915]  __x64_sys_read+0x40/0x50
[  140.035453][ T7915]  x64_sys_call+0x2d77/0x2fb0
[  140.035477][ T7915]  do_syscall_64+0xd0/0x1a0
[  140.035550][ T7915]  ? clear_bhb_loop+0x25/0x80
[  140.035570][ T7915]  ? clear_bhb_loop+0x25/0x80
[  140.035593][ T7915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.035619][ T7915] RIP: 0033:0x7faeae50d37c
[  140.035637][ T7915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  140.035659][ T7915] RSP: 002b:00007faeacb77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  140.035747][ T7915] RAX: ffffffffffffffda RBX: 00007faeae735fa0 RCX: 00007faeae50d37c
[  140.035758][ T7915] RDX: 000000000000000f RSI: 00007faeacb770a0 RDI: 0000000000000003
[  140.035769][ T7915] RBP: 00007faeacb77090 R08: 0000000000000000 R09: 0000000000000000
[  140.035784][ T7915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.035798][ T7915] R13: 0000000000000001 R14: 00007faeae735fa0 R15: 00007ffe88e7d148
[  140.035818][ T7915]  </TASK>
[  140.339648][ T7920] FAULT_INJECTION: forcing a failure.
[  140.339648][ T7920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.352821][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.2.1649 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  140.352872][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  140.352939][ T7920] Call Trace:
[  140.352946][ T7920]  <TASK>
[  140.352955][ T7920]  __dump_stack+0x1d/0x30
[  140.352981][ T7920]  dump_stack_lvl+0xe8/0x140
[  140.353001][ T7920]  dump_stack+0x15/0x1b
[  140.353022][ T7920]  should_fail_ex+0x265/0x280
[  140.353101][ T7920]  should_fail+0xb/0x20
[  140.353154][ T7920]  should_fail_usercopy+0x1a/0x20
[  140.353180][ T7920]  _copy_from_iter+0xcf/0xdd0
[  140.353197][ T7920]  ? __build_skb_around+0x1a0/0x200
[  140.353283][ T7920]  ? __alloc_skb+0x223/0x320
[  140.353322][ T7920]  netlink_sendmsg+0x471/0x6b0
[  140.353372][ T7920]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.353437][ T7920]  __sock_sendmsg+0x142/0x180
[  140.353545][ T7920]  ____sys_sendmsg+0x31e/0x4e0
[  140.353571][ T7920]  ___sys_sendmsg+0x17b/0x1d0
[  140.353660][ T7920]  __x64_sys_sendmsg+0xd4/0x160
[  140.353689][ T7920]  x64_sys_call+0x2999/0x2fb0
[  140.353715][ T7920]  do_syscall_64+0xd0/0x1a0
[  140.353750][ T7920]  ? clear_bhb_loop+0x25/0x80
[  140.353777][ T7920]  ? clear_bhb_loop+0x25/0x80
[  140.353804][ T7920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.353830][ T7920] RIP: 0033:0x7faeae50e969
[  140.353846][ T7920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.353935][ T7920] RSP: 002b:00007faeacb56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.353956][ T7920] RAX: ffffffffffffffda RBX: 00007faeae736080 RCX: 00007faeae50e969
[  140.353968][ T7920] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007
[  140.353979][ T7920] RBP: 00007faeacb56090 R08: 0000000000000000 R09: 0000000000000000
[  140.353992][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.354003][ T7920] R13: 0000000000000000 R14: 00007faeae736080 R15: 00007ffe88e7d148
[  140.354020][ T7920]  </TASK>
[  140.573287][ T7914] loop5: detected capacity change from 0 to 2048
[  140.612434][ T7914]  loop5: p1 < > p4
[  140.616869][ T7914] loop5: p4 size 8388608 extends beyond EOD, truncated
[  140.831168][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.083234][ T7940] loop5: detected capacity change from 0 to 8192
[  141.338487][ T7946] pim6reg1: entered promiscuous mode
[  141.344108][ T7946] pim6reg1: entered allmulticast mode
[  141.552209][   T29] kauditd_printk_skb: 357 callbacks suppressed
[  141.552234][   T29] audit: type=1326 audit(2000000011.010:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.582027][   T29] audit: type=1326 audit(2000000011.010:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.605568][   T29] audit: type=1326 audit(2000000011.010:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.629031][   T29] audit: type=1326 audit(2000000011.020:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.652507][   T29] audit: type=1326 audit(2000000011.020:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.675934][   T29] audit: type=1326 audit(2000000011.030:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.699382][   T29] audit: type=1326 audit(2000000011.030:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.722910][   T29] audit: type=1326 audit(2000000011.030:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.746360][   T29] audit: type=1326 audit(2000000011.030:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.769799][   T29] audit: type=1326 audit(2000000011.030:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  141.960239][ T7959] loop0: detected capacity change from 0 to 2048
[  142.025867][ T7959]  loop0: unable to read partition table
[  142.031759][ T7959] loop0: partition table beyond EOD, truncated
[  142.038093][ T7959] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  142.078057][ T7967] loop2: detected capacity change from 0 to 2048
[  142.196558][ T7967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.401556][ T7982] loop3: detected capacity change from 0 to 2048
[  142.472620][ T7982]  loop3: p1 < > p4
[  142.477038][ T7982] loop3: p4 size 8388608 extends beyond EOD, truncated
[  142.552264][ T7982] SELinux:  Context system_u:object_r:lirc_device_t:s0 is not valid (left unmapped).
[  142.565135][ T7994] netlink: '+}[@': attribute type 2 has an invalid length.
[  142.572492][ T7994] netlink: '+}[@': attribute type 1 has an invalid length.
[  142.579809][ T7994] netlink: 179948 bytes leftover after parsing attributes in process `+}[@'.
[  143.237432][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.738272][ T8030] loop2: detected capacity change from 0 to 2048
[  143.865606][ T8030]  loop2: unable to read partition table
[  143.880017][ T8047] loop3: detected capacity change from 0 to 2048
[  143.888309][ T8030] loop2: partition table beyond EOD, truncated
[  143.894600][ T8030] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  143.913382][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.981391][ T8047] sit0: left promiscuous mode
[  143.986184][ T8047] sit0: left allmulticast mode
[  143.997287][ T8047] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1695'.
[  144.006636][ T8047] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  144.063940][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.247562][ T8075] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.267816][ T8077] loop3: detected capacity change from 0 to 2048
[  144.295804][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.337003][ T8077] EXT4-fs (loop3): shut down requested (2)
[  144.415791][ T8089] netlink: 'syz.1.1711': attribute type 10 has an invalid length.
[  144.440974][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.846995][ T8109] loop3: detected capacity change from 0 to 8192
[  144.995919][ T8081] loop0: detected capacity change from 0 to 8192
[  145.476596][ T8119] siw: device registration error -23
[  145.491751][ T8081] bond0: entered promiscuous mode
[  145.534317][ T8081] batadv0: entered promiscuous mode
[  145.551575][ T8081] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  145.597063][ T8081] 8021q: adding VLAN 0 to HW filter on device hsr1
[  145.628464][ T8081] bond0: left promiscuous mode
[  145.640899][ T8081] batadv0: left promiscuous mode
[  145.960389][ T8156] loop5: detected capacity change from 0 to 1024
[  146.011056][ T8156] EXT4-fs: Ignoring removed bh option
[  146.048989][ T8156] EXT4-fs: Ignoring removed orlov option
[  146.054880][ T8156] EXT4-fs: Ignoring removed nomblk_io_submit option
[  146.181153][ T8156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.333461][ T8156] loop5: detected capacity change from 1024 to 64
[  146.408891][ T6454] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /115/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0
[  146.503020][ T7573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.535289][ T8158] kmmpd-loop5: attempt to access beyond end of device
[  146.535289][ T8158] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64
[  146.548886][ T8158] Buffer I/O error on dev loop5, logical block 64, lost sync page write
[  146.570043][   T29] kauditd_printk_skb: 322 callbacks suppressed
[  146.570055][   T29] audit: type=1400 audit(2000000016.050:4659): avc:  denied  { create } for  pid=8183 comm="syz.2.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  146.612061][   T29] audit: type=1326 audit(2000000016.080:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.635559][   T29] audit: type=1326 audit(2000000016.080:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.659036][   T29] audit: type=1326 audit(2000000016.080:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.682434][   T29] audit: type=1326 audit(2000000016.080:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.705868][   T29] audit: type=1326 audit(2000000016.080:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.729381][   T29] audit: type=1326 audit(2000000016.090:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.752869][   T29] audit: type=1326 audit(2000000016.090:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.776314][   T29] audit: type=1326 audit(2000000016.090:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.799776][   T29] audit: type=1326 audit(2000000016.090:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.2.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeae50e969 code=0x7ffc0000
[  146.799819][ T8190] siw: device registration error -23
[  146.887474][   T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.001025][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.042087][ T8197] loop0: detected capacity change from 0 to 8192
[  147.050090][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.075762][   T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.131531][ T8167] loop3: detected capacity change from 0 to 8192
[  147.145639][   T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.183048][ T8167] bond0: entered promiscuous mode
[  147.192447][ T8167] batadv0: entered promiscuous mode
[  147.200265][ T8167] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  147.211439][ T8167] 8021q: adding VLAN 0 to HW filter on device hsr1
[  147.232430][ T8167] bond0: left promiscuous mode
[  147.239047][ T8167] batadv0: left promiscuous mode
[  147.263720][   T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.313534][ T8202] chnl_net:caif_netlink_parms(): no params data found
[  147.360893][   T57] bridge_slave_1: left allmulticast mode
[  147.366744][   T57] bridge_slave_1: left promiscuous mode
[  147.372617][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.380666][   T57] bridge_slave_0: left allmulticast mode
[  147.386406][   T57] bridge_slave_0: left promiscuous mode
[  147.392163][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.495453][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.506354][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.517586][   T57] bond0 (unregistering): Released all slaves
[  147.552796][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.559902][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.567519][ T8202] bridge_slave_0: entered allmulticast mode
[  147.574286][ T8202] bridge_slave_0: entered promiscuous mode
[  147.581217][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.588425][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.597024][ T8202] bridge_slave_1: entered allmulticast mode
[  147.605261][ T8202] bridge_slave_1: entered promiscuous mode
[  147.636884][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.678254][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.700806][   T57] hsr_slave_0: left promiscuous mode
[  147.708799][   T57] hsr_slave_1: left promiscuous mode
[  147.716109][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.723637][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.738396][ T8266] FAULT_INJECTION: forcing a failure.
[  147.738396][ T8266] name failslab, interval 1, probability 0, space 0, times 0
[  147.751116][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.2.1759 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  147.751211][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  147.751224][ T8266] Call Trace:
[  147.751231][ T8266]  <TASK>
[  147.751241][ T8266]  __dump_stack+0x1d/0x30
[  147.751262][ T8266]  dump_stack_lvl+0xe8/0x140
[  147.751281][ T8266]  dump_stack+0x15/0x1b
[  147.751296][ T8266]  should_fail_ex+0x265/0x280
[  147.751361][ T8266]  should_failslab+0x8c/0xb0
[  147.751437][ T8266]  kmem_cache_alloc_noprof+0x50/0x310
[  147.751503][ T8266]  ? __send_signal_locked+0x154/0x760
[  147.751533][ T8266]  __send_signal_locked+0x154/0x760
[  147.751562][ T8266]  send_signal_locked+0x34e/0x3c0
[  147.751616][ T8266]  do_send_sig_info+0x9f/0xf0
[  147.751643][ T8266]  do_send_specific+0xca/0x110
[  147.751673][ T8266]  __x64_sys_tgkill+0x127/0x160
[  147.751699][ T8266]  x64_sys_call+0x13da/0x2fb0
[  147.751728][ T8266]  do_syscall_64+0xd0/0x1a0
[  147.751749][ T8266]  ? clear_bhb_loop+0x25/0x80
[  147.751808][ T8266]  ? clear_bhb_loop+0x25/0x80
[  147.751829][ T8266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.751886][ T8266] RIP: 0033:0x7faeae50e969
[  147.751903][ T8266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.751921][ T8266] RSP: 002b:00007faeacb77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea
[  147.751942][ T8266] RAX: ffffffffffffffda RBX: 00007faeae735fa0 RCX: 00007faeae50e969
[  147.751957][ T8266] RDX: 0000000000000021 RSI: 0000000000000356 RDI: 0000000000000356
[  147.751968][ T8266] RBP: 00007faeacb77090 R08: 0000000000000000 R09: 0000000000000000
[  147.751980][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.751991][ T8266] R13: 0000000000000000 R14: 00007faeae735fa0 R15: 00007ffe88e7d148
[  147.752058][ T8266]  </TASK>
[  147.954904][   T57] veth1_macvtap: left promiscuous mode
[  147.960456][   T57] veth0_macvtap: left promiscuous mode
[  147.976164][   T57] veth1_vlan: left promiscuous mode
[  147.981518][   T57] veth0_vlan: left promiscuous mode
[  148.020195][ T8289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1765'.
[  148.032924][ T8290] netlink: 'syz.1.1763': attribute type 1 has an invalid length.
[  148.040921][ T8290] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1763'.
[  148.131199][ T8296] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  148.139081][ T8296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'.
[  148.324391][ T8202] team0: Port device team_slave_0 added
[  148.334903][ T8202] team0: Port device team_slave_1 added
[  148.361554][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.368660][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.394849][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.419922][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.426942][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.452915][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.475288][ T8345] dccp_invalid_packet: P.Data Offset(10) too large
[  148.491644][ T8347] pimreg: entered allmulticast mode
[  148.515225][ T8202] hsr_slave_0: entered promiscuous mode
[  148.521519][ T8202] hsr_slave_1: entered promiscuous mode
[  148.527614][ T8202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.536568][ T8202] Cannot create hsr debugfs directory
[  148.561028][ T8344] loop3: detected capacity change from 0 to 8192
[  148.572134][ T8349] pim6reg9: entered allmulticast mode
[  148.619808][ T8202] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  148.628617][ T8202] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  148.637425][ T8202] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  148.647350][ T8202] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  148.685113][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.698005][ T8202] 8021q: adding VLAN 0 to HW filter on device team0
[  148.707694][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.714841][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.725924][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.733137][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.793859][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.896986][ T8202] veth0_vlan: entered promiscuous mode
[  148.905484][ T8202] veth1_vlan: entered promiscuous mode
[  148.924230][ T8202] veth0_macvtap: entered promiscuous mode
[  148.932245][ T8202] veth1_macvtap: entered promiscuous mode
[  148.945616][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.956260][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.968819][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.980846][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.981636][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1773'.
[  148.991434][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.011724][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.028354][ T8202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.037141][ T8202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.045959][ T8202] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.054855][ T8202] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.105426][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'.
[  149.150402][ T8382] FAULT_INJECTION: forcing a failure.
[  149.150402][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.163822][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.0.1776 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  149.163862][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  149.163874][ T8382] Call Trace:
[  149.163881][ T8382]  <TASK>
[  149.163889][ T8382]  __dump_stack+0x1d/0x30
[  149.163916][ T8382]  dump_stack_lvl+0xe8/0x140
[  149.163939][ T8382]  dump_stack+0x15/0x1b
[  149.163960][ T8382]  should_fail_ex+0x265/0x280
[  149.164003][ T8382]  should_fail+0xb/0x20
[  149.164038][ T8382]  should_fail_usercopy+0x1a/0x20
[  149.164068][ T8382]  _copy_from_user+0x1c/0xb0
[  149.164095][ T8382]  ___sys_sendmsg+0xc1/0x1d0
[  149.164140][ T8382]  __x64_sys_sendmsg+0xd4/0x160
[  149.164175][ T8382]  x64_sys_call+0x2999/0x2fb0
[  149.164203][ T8382]  do_syscall_64+0xd0/0x1a0
[  149.164226][ T8382]  ? clear_bhb_loop+0x25/0x80
[  149.164246][ T8382]  ? clear_bhb_loop+0x25/0x80
[  149.164292][ T8382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.164319][ T8382] RIP: 0033:0x7f658c0be969
[  149.164337][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.164358][ T8382] RSP: 002b:00007f658a727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.164461][ T8382] RAX: ffffffffffffffda RBX: 00007f658c2e5fa0 RCX: 00007f658c0be969
[  149.164535][ T8382] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  149.164547][ T8382] RBP: 00007f658a727090 R08: 0000000000000000 R09: 0000000000000000
[  149.164558][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.164571][ T8382] R13: 0000000000000000 R14: 00007f658c2e5fa0 R15: 00007fff4f5e9e78
[  149.164767][ T8382]  </TASK>
[  149.478512][ T8406] loop3: detected capacity change from 0 to 2048
[  149.636007][ T8406] Alternate GPT is invalid, using primary GPT.
[  149.642428][ T8406]  loop3: p2 p3 p7
[  149.887885][ T8423] ieee802154 phy0 wpan0: encryption failed: -22
[  149.950819][ T8426] batadv1: entered promiscuous mode
[  150.012092][   T36] page_pool_release_retry() stalled pool shutdown: id 156, 1 inflight 60 sec
[  150.030508][ T8433] loop3: detected capacity change from 0 to 512
[  150.038701][ T8433] EXT4-fs (loop3): orphan cleanup on readonly fs
[  150.045627][ T8433] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1796: bad orphan inode 13
[  150.056077][ T8433] ext4_test_bit(bit=12, block=18) = 1
[  150.061487][ T8433] is_bad_inode(inode)=0
[  150.065706][ T8433] NEXT_ORPHAN(inode)=2130706432
[  150.070652][ T8433] max_ino=32
[  150.073970][ T8433] i_nlink=1
[  150.077612][ T8433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.331226][ T8460] loop6: detected capacity change from 0 to 512
[  150.346269][ T8460] EXT4-fs (loop6): unsupported inode size: 8192
[  150.352761][ T8460] EXT4-fs (loop6): blocksize: 1024
[  150.416009][ T8465] loop6: detected capacity change from 0 to 128
[  150.520398][ T8478] loop0: detected capacity change from 0 to 512
[  150.528019][ T8478] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  150.537656][ T8478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  150.548547][ T8478] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.1807: corrupted in-inode xattr: e_value size too large
[  150.566271][ T8478] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1807: couldn't read orphan inode 15 (err -117)
[  150.606087][ T8478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.998287][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.198947][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.319524][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'.
[  151.348843][ T8507] bridge1: entered promiscuous mode
[  151.409589][ T8509] loop6: detected capacity change from 0 to 2048
[  151.460571][ T8509]  loop6: p1 < > p4
[  151.492978][ T8509] loop6: p4 size 8388608 extends beyond EOD, truncated
[  151.541052][ T8511] loop0: detected capacity change from 0 to 2048
[  151.630127][   T29] kauditd_printk_skb: 687 callbacks suppressed
[  151.630143][   T29] audit: type=1400 audit(2000000021.110:5356): avc:  denied  { mounton } for  pid=8508 comm="syz.6.1823" path="/13/bus" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  151.694812][ T8511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.738528][ T8511] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  151.756148][ T8511] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28
[  151.768554][ T8511] EXT4-fs (loop0): This should not happen!! Data will be lost
[  151.768554][ T8511] 
[  151.778563][ T8511] EXT4-fs (loop0): Total free blocks count 0
[  151.784856][ T8511] EXT4-fs (loop0): Free/Dirty block details
[  151.790925][ T8511] EXT4-fs (loop0): free_blocks=2415919104
[  151.796766][ T8511] EXT4-fs (loop0): dirty_blocks=16
[  151.801989][ T8511] EXT4-fs (loop0): Block reservation details
[  151.808129][ T8511] EXT4-fs (loop0): i_reserved_data_blocks=1
[  151.821437][ T8528] loop6: detected capacity change from 0 to 512
[  151.830421][ T8529] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28
[  151.850159][ T8528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.857096][ T8532] FAULT_INJECTION: forcing a failure.
[  151.857096][ T8532] name failslab, interval 1, probability 0, space 0, times 0
[  151.862705][   T29] audit: type=1326 audit(2000000021.340:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  151.875406][ T8532] CPU: 1 UID: 0 PID: 8532 Comm: syz.3.1829 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  151.875434][ T8532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  151.875448][ T8532] Call Trace:
[  151.875455][ T8532]  <TASK>
[  151.875466][ T8532]  __dump_stack+0x1d/0x30
[  151.875494][ T8532]  dump_stack_lvl+0xe8/0x140
[  151.875521][ T8532]  dump_stack+0x15/0x1b
[  151.875542][ T8532]  should_fail_ex+0x265/0x280
[  151.875585][ T8532]  should_failslab+0x8c/0xb0
[  151.875623][ T8532]  kmem_cache_alloc_noprof+0x50/0x310
[  151.875666][ T8532]  ? mas_alloc_nodes+0x265/0x520
[  151.875698][ T8532]  mas_alloc_nodes+0x265/0x520
[  151.875730][ T8532]  mas_preallocate+0x456/0x680
[  151.875763][ T8532]  __split_vma+0x239/0x610
[  151.875806][ T8532]  ? mas_find+0x4ea/0x610
[  151.875833][ T8532]  vms_gather_munmap_vmas+0x2a5/0x7a0
[  151.875890][ T8532]  mmap_region+0x44f/0x1470
[  151.875937][ T8532]  ? bpf_bprintf_cleanup+0x75/0xb0
[  151.875968][ T8532]  ? bpf_trace_printk+0xcf/0x1c0
[  151.876006][ T8532]  ? bpf_trace_run3+0xfd/0x1d0
[  151.876056][ T8532]  do_mmap+0x9de/0xc20
[  151.876092][ T8532]  vm_mmap_pgoff+0x17a/0x2e0
[  151.876124][ T8532]  ksys_mmap_pgoff+0x268/0x310
[  151.876157][ T8532]  x64_sys_call+0x1602/0x2fb0
[  151.876184][ T8532]  do_syscall_64+0xd0/0x1a0
[  151.876210][ T8532]  ? clear_bhb_loop+0x25/0x80
[  151.876238][ T8532]  ? clear_bhb_loop+0x25/0x80
[  151.876265][ T8532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.876291][ T8532] RIP: 0033:0x7f956f21e969
[  151.876312][ T8532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.876335][ T8532] RSP: 002b:00007f956d887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  151.876358][ T8532] RAX: ffffffffffffffda RBX: 00007f956f445fa0 RCX: 00007f956f21e969
[  151.876375][ T8532] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[  151.876390][ T8532] RBP: 00007f956d887090 R08: 0000000000000004 R09: 0000000000000000
[  151.876406][ T8532] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001
[  151.876421][ T8532] R13: 0000000000000000 R14: 00007f956f445fa0 R15: 00007ffd5cef6bd8
[  151.876445][ T8532]  </TASK>
[  151.892094][ T8528] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.898996][   T29] audit: type=1326 audit(2000000021.340:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  151.982536][ T8528] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[  151.985002][   T29] audit: type=1326 audit(2000000021.340:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.129207][ T8480] bond0: entered promiscuous mode
[  152.130517][   T29] audit: type=1326 audit(2000000021.340:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.130624][   T29] audit: type=1326 audit(2000000021.340:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.130664][   T29] audit: type=1326 audit(2000000021.340:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.198654][ T8480] batadv0: entered promiscuous mode
[  152.214463][   T29] audit: type=1326 audit(2000000021.340:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.214512][   T29] audit: type=1326 audit(2000000021.340:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.214545][   T29] audit: type=1326 audit(2000000021.340:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8531 comm="syz.3.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956f21e969 code=0x7ffc0000
[  152.347498][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.361026][ T8480] Cannot create hsr debugfs directory
[  152.373499][ T8480] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  152.394877][ T8480] 8021q: adding VLAN 0 to HW filter on device hsr0
[  152.406592][ T8480] bond0: left promiscuous mode
[  152.408458][ T8545] loop3: detected capacity change from 0 to 128
[  152.418373][ T8480] batadv0: left promiscuous mode
[  152.478091][ T8552] loop3: detected capacity change from 0 to 512
[  152.485270][ T8552] EXT4-fs: Ignoring removed bh option
[  152.491109][ T8552] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  152.530249][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1840'.
[  152.601337][ T8563] loop3: detected capacity change from 0 to 128
[  152.700631][   T31] kworker/u8:1: attempt to access beyond end of device
[  152.700631][   T31] loop3: rw=1, sector=145, nr_sectors = 896 limit=128
[  152.738420][ T8577] netlink: 'syz.3.1848': attribute type 1 has an invalid length.
[  152.746325][ T8577] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1848'.
[  152.777416][ T8583] ==================================================================
[  152.785647][ T8583] BUG: KCSAN: data-race in call_rcu / mas_state_walk
[  152.792386][ T8583] 
[  152.794739][ T8583] write to 0xffff888119834a08 of 8 bytes by task 8581 on cpu 0:
[  152.802391][ T8583]  call_rcu+0x48/0x3e0
[  152.806487][ T8583]  mas_wmb_replace+0xc6b/0x14a0
[  152.811373][ T8583]  mas_wr_store_entry+0x17ae/0x2b60
[  152.816599][ T8583]  mas_store_prealloc+0x74d/0x9e0
[  152.821645][ T8583]  vma_iter_store_new+0x1c5/0x200
[  152.826702][ T8583]  vma_complete+0x125/0x570
[  152.831277][ T8583]  __split_vma+0x594/0x610
[  152.835732][ T8583]  vma_modify+0x1a4/0x210
[  152.840104][ T8583]  vma_modify_flags+0x101/0x130
[  152.844991][ T8583]  mprotect_fixup+0x2cc/0x570
[  152.849713][ T8583]  do_mprotect_pkey+0x6d6/0x980
[  152.854586][ T8583]  __x64_sys_mprotect+0x48/0x60
[  152.859517][ T8583]  x64_sys_call+0x2794/0x2fb0
[  152.864230][ T8583]  do_syscall_64+0xd0/0x1a0
[  152.868764][ T8583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.874692][ T8583] 
[  152.877068][ T8583] read to 0xffff888119834a08 of 8 bytes by task 8583 on cpu 1:
[  152.884643][ T8583]  mas_state_walk+0x3e9/0x650
[  152.889344][ T8583]  mas_walk+0x30/0x120
[  152.893440][ T8583]  lock_vma_under_rcu+0xa2/0x2f0
[  152.898419][ T8583]  do_user_addr_fault+0x233/0x1090
[  152.903570][ T8583]  exc_page_fault+0x54/0xc0
[  152.908111][ T8583]  asm_exc_page_fault+0x26/0x30
[  152.913044][ T8583] 
[  152.915379][ T8583] value changed: 0x0000555558525fff -> 0xffff888119834208
[  152.922504][ T8583] 
[  152.924845][ T8583] Reported by Kernel Concurrency Sanitizer on:
[  152.931049][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.2.1851 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) 
[  152.943578][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  152.953665][ T8583] ==================================================================
[  153.254589][ T8578] bond0: entered promiscuous mode
[  153.263658][ T8578] batadv0: entered promiscuous mode
[  153.270170][ T8578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.278159][ T8578] Cannot create hsr debugfs directory
[  153.284293][ T8578] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  153.296348][ T8578] 8021q: adding VLAN 0 to HW filter on device hsr0
[  153.316987][ T8578] bond0: left promiscuous mode
[  153.324526][ T8578] batadv0: left promiscuous mode
[  154.023264][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.