last executing test programs:

1m28.466210876s ago: executing program 3 (id=10):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = gettid()
r1 = socket(0x10, 0x803, 0x0)
sendmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="50050be6", 0x4}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="50000000000000008400000002000000"], 0x20}}], 0x1, 0x4000810)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000007000000000000007dedd4153a001c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
close(r3)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100040000000000000007000000080009004200000008000b0000000000"], 0x24}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x61, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0)
ioctl$TIOCGPTPEER(r8, 0x5441, 0x9)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1m28.375551587s ago: executing program 3 (id=11):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)="00fe000000000000002a0000", 0xc, r9)
syz_genetlink_get_family_id$mptcp(0x0, r5)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x8000}}, {@i_version}]}, 0x6, 0x504, &(0x7f0000019940)="$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")
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1000, r9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
close_range(r10, 0xffffffffffffffff, 0x0)

1m27.55638177s ago: executing program 3 (id=23):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$inet6(0xa, 0x80803, 0x87)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87000000000000403b"], 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000240)={0x19, "7bac85fe352c3868a69fd902bc3add371c89dd0e186ae86b351e040d0b04ce793ffb79fed660a2283854a27be009db8106272acec60719ab0972e44b1a9bf3e3acfec42fcf261d1e298ac913a8d68f1c2055c90c82a2752a11f87bbf1a8e87c9ec29aa9b1f200239e2b8433514106baed9e2b424943f12bc06843b3b158778c7"})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r6 = open$dir(&(0x7f0000000300)='./file0\x00', 0x80400, 0x142)
mknodat(r6, &(0x7f00000003c0)='./file0\x00', 0x8000, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x18, 0xcf0, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
sendfile(r8, r7, 0x0, 0x7fffeffd)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1m27.316838944s ago: executing program 3 (id=26):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x14, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x2800418, &(0x7f0000000180), 0xfe, 0x263, &(0x7f0000000700)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10)
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r12=>0x0})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x198)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=f'])

1m27.053963839s ago: executing program 3 (id=29):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f63fc6247b93ea81416b1324d35327f7ace27f9c5a9c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da897405ad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb302ad11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000001580)="$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")

1m26.068982144s ago: executing program 3 (id=55):
r0 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) (async, rerun: 64)
mq_open(&(0x7f00000001c0)='&\x00', 0x40, 0x62, &(0x7f0000000200)={0x7, 0x2000000, 0xa, 0x4}) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32)
r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x3f}, 0x8) (async)
mount$bind(0x0, 0x0, 0x0, 0x2000, 0x0)

1m26.068624594s ago: executing program 32 (id=55):
r0 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0}) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x3}, 0x18) (async, rerun: 64)
mq_open(&(0x7f00000001c0)='&\x00', 0x40, 0x62, &(0x7f0000000200)={0x7, 0x2000000, 0xa, 0x4}) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32)
r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x3f}, 0x8) (async)
mount$bind(0x0, 0x0, 0x0, 0x2000, 0x0)

5.58424726s ago: executing program 4 (id=1348):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
gettid()
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
statx(r0, 0x0, 0x800, 0x80, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x84}, 0x18)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) (fail_nth: 23)

3.181587129s ago: executing program 1 (id=1373):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x10202)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x10)

3.159258819s ago: executing program 1 (id=1374):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

3.09391364s ago: executing program 1 (id=1376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0)

2.873175924s ago: executing program 1 (id=1383):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
close(r4)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0)

2.815843435s ago: executing program 1 (id=1386):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x2)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) (fail_nth: 2)

2.51292063s ago: executing program 1 (id=1388):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000040010000400000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r4}, 0x38)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x6000001f})
read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/194, 0xc2)
epoll_pwait(r5, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)

2.51221873s ago: executing program 2 (id=1390):
r0 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r4}, 0x10)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10)
r9 = epoll_create(0x7)
epoll_pwait2(r9, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xc, 0x30, 0xffffffffffffffff, 0x0)
r10 = io_uring_setup(0x2d4f, &(0x7f0000000380)={0x0, 0x0, 0x40, 0x2, 0x126, 0x0, r5})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x2, r6, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}])
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={<r12=>0x0, 0x38, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x7ffc, @local, 0x8}, @in6={0xa, 0x4e23, 0x5, @private0, 0x7}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000000c0)={r12, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x3, 0x3, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)

1.791902941s ago: executing program 2 (id=1394):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x2)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)

1.758082762s ago: executing program 2 (id=1396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x7f, 0x4d, 0xbf7a, 0x410, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x19)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x7}, {0xe}, {0xb, 0xe}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x8a, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r5 = epoll_create1(0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x80000000})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0xc0000009})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syncfs(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x6, 0xd2, &(0x7f0000000840)=""/210, 0x40f00, 0x41, '\x00', r3, @fallback=0x6861f87afc37b956, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xb, 0x958, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x2, 0x4, 0x4, 0xb}, {0x3, 0x3, 0x10, 0x3}, {0x0, 0x4, 0x4, 0x8}, {0x0, 0x5, 0xe, 0x2}, {0x1, 0x5, 0xc, 0xc}, {0x3, 0x3, 0x8, 0x9}], 0x10, 0x4, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r11=>0x0)
r12 = eventfd2(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r13, 0x0}, 0x20)
io_getevents(r11, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
io_submit(r11, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x3, r12}])

1.309581639s ago: executing program 2 (id=1403):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
mkdir(&(0x7f00000022c0)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x24000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00')
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r3, 0x0)
unshare(0x22000600)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r4, 0x400}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, r4, 0x30, 0x1, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0)

1.26381081s ago: executing program 5 (id=1404):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0x98, 0xe0, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='='], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bind$isdn(r3, &(0x7f0000000300)={0x22, 0x4, 0x6, 0x5, 0x5}, 0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/121, 0x79}, 0x800}], 0x1, 0xb, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e23, 0x4, @mcast1}, 0xfffffffffffffc98)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0xd, 0x7ffc1ffb}]})
io_setup(0x7fff, &(0x7f0000000340)=<r6=>0x0)
io_destroy(r6)
umount2(0x0, 0x0)

1.25141768s ago: executing program 2 (id=1406):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0xffffffffffffffe6, 0x22004811, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0xff00}}, 0x1c)

1.155442351s ago: executing program 4 (id=1407):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000003c0)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x1c07400e, 0x9000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&')

1.068788553s ago: executing program 2 (id=1409):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000003c0)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x1c07400e, 0x9000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&')

1.042147993s ago: executing program 33 (id=1409):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000003c0)=0x2, 0x4)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x1c07400e, 0x9000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&')

1.022414893s ago: executing program 0 (id=1411):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x440000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x835, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)

830.648757ms ago: executing program 4 (id=1412):
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x440000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1100, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x835, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)

592.891881ms ago: executing program 0 (id=1413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30, 0x800}], 0x1, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x8}, 0x18)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
preadv(r9, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x8, 0x0)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000380)=""/33, &(0x7f0000000440)=0x21)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r11, &(0x7f0000000040)=""/148, 0xffffff96)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

535.341722ms ago: executing program 4 (id=1414):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100"/17], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket(0x1e, 0x4, 0x0)
sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4800)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="a90500", 0x3}], 0x1}}], 0x1, 0x840)
socket$igmp6(0xa, 0x3, 0x2)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000400000000300000003000000006000000000000000000000d03000000000000000000000300000000020000000300000000000000040000000000000802000000000000005f00"], 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
acct(&(0x7f00000001c0)='./file0\x00')

425.659214ms ago: executing program 5 (id=1415):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (rerun: 32)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={<r3=>r1, 0x0, 0x5, 0x2}) (async, rerun: 32)
r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000440)={r6, 0x4}, 0x8) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x2}, &(0x7f0000000080)=0x8)

356.984244ms ago: executing program 4 (id=1416):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r1, &(0x7f0000000200)=""/209, 0x128)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
syz_open_dev$evdev(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0xc46, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x800000}, 0x1c)
shutdown(r3, 0x2)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0xe29d, 0x2, 0x1, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000})
tkill(r0, 0x7)

355.667744ms ago: executing program 0 (id=1417):
r0 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r0, 0xffff)
fcntl$addseals(r0, 0x409, 0x7)
ftruncate(r0, 0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x92, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r5], 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="851001010000000000000000ffffffff5d61ff610100000018000000090000000000000008000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, &(0x7f0000000440), 0x41100, 0x70, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x6, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRES16=r6, @ANYRESOCT=r5, @ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYBLOB="89a117255c683a439e7399f4c6bb27e034c3ac47b1817e4e399abeb8545a370a32573c0fe192ed68cc521a17594a532cc662465157ee148f9274b870a2c337bbce3f439ff252ee6e32736f4952b16df97e77221fd66438db58c9d3bc20509c55ef7af90748be204fb21851eccf5a15c3681e8653d06c172a791eb2d410fe2163060909eac97fbe360b3cea9bb609ce2a2a389b1defbf7af80728779ab077939dbe35a5f5b37f98d4248db811aa1427811b5bdd8703117c72a7157c103e86a5c7c541420fe1d063e49a00e0da2065797cebe114484249cf89d4bd7ebc9861564db1f8e31e328e48191c689fcc59d669", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0xffffffffffffffcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xa}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
clock_gettime(0x1, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
unshare(0x28020480)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})

341.762535ms ago: executing program 0 (id=1418):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$eJzs3cFLk38YAPBnOtGf8GMeAkmC3ug+1OiuhII0KJId6pSkUjgTEoQ6qJ06d+pS/0Jdgq5Bh+jaPxBBWNBFO3kIFvqq07nlrLZFfj6XPez7PPt+33cv+26HPe/NM/Nz0wuLsxsba9HTk+nKjsTLgc1M9EVHdEZqNQCAf8lmuRzr5VS71wIAtIb9HwBOnsr+nzm0/2dW974TXG39ygCAZvH7HwBOnsnrNy6PFgpj19aTnoj5R0vFpWL6mI6PzsadKMVMDEYuvkeU96Txk4nC2GCy5XNfFOdXdupXloqdB+uHIhd9h+vHJwpjQ0nqYH1X9O7Uf+iNmRiOXJyqXT9cq74rIs7vmz8fuXh/KxaiFNOxVVupXx5KkktXClXzd2/nAQAAAAAAAAAAAAAAAAAAAABAM+Q7tlvnlLuTpGb/nnw+2VU1ntbv7w/0X43+QON7/YGq+/tkYyDb3mMHAAAAAAAAAAAAAAAAAACAv8Xi/QdzU6XSzL2fBXffPX9zVE6DQWZn3po53RHx+1M0GPx/7tPT+jkPj3N+/mzw+myLJ9067cetert2+/SFxf6L9XIi27Q1d/zKm/I117RL68VuMPLtyOTHk626wjurn+l/NjL1avnjl0Zfp40fSgAAAAAAAAAAAAAAAAAAcEJV/vTb7pUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtU7v9fJ8hE3aEGg9V2HyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwIAAD//8pHpIo=")
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18)
open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)

269.696926ms ago: executing program 5 (id=1419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r4, 0x3f4, 0x0)
getdents(r4, 0x0, 0x58)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

192.932407ms ago: executing program 5 (id=1420):
r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_open_dev$evdev(0x0, 0x2, 0x822b01)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300))

177.143637ms ago: executing program 5 (id=1421):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='br_fdb_update\x00', r0}, 0x18)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x55}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0)
umount2(&(0x7f0000000a40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
getpid()

116.335439ms ago: executing program 0 (id=1422):
r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40006) (async)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}, 0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'})
r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000180), 0x1)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000280), 0x4) (async)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010023010000340200001c000000080001"], 0x2c}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20088000)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r10], 0x40}}, 0x4000) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4001) (async)
sendmsg$nl_route(r1, 0x0, 0x0) (async)
ioctl$VT_DISALLOCATE(r0, 0x5608) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs")

849.861µs ago: executing program 0 (id=1423):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0, 0x8000, 0x8000, 0xb, 0x1ff, {{0x13, 0x4, 0x2, 0x35, 0x4c, 0x68, 0x0, 0x4, 0x0, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x1f, 0xa, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @multicast1]}, @end, @noop, @ssrr={0x89, 0x7, 0xc7, [@local]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x64, 0x0, 0x9, [0x2cb, 0x1]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000080000"], 0x0, 0x2000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, 0x0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10)
setreuid(0xee01, 0xee01)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @random="5f0d001000", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

457.19µs ago: executing program 5 (id=1424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setuid(0xee01)
r2 = syz_io_uring_setup(0x324e, &(0x7f0000000080)={0x0, 0x4, 0x13580, 0x2}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x2007, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x57, 0xc2b1, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cpuinfo\x00', 0x41, 0x0)
write$nbd(r6, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0)
ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000100))
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x1000}}}}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6000000000033afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0)

0s ago: executing program 4 (id=1425):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000380)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x0, 0x9, 0x2, 0x9, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000380)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x0, 0x9, 0x2, 0x9, 0x1, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) (async)

kernel console output (not intermixed with test programs):

m1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.363174][ T6226] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.373926][ T6226] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.467278][ T6219] syz.2.864: attempt to access beyond end of device
[   94.467278][ T6219] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   94.481284][ T6236] loop1: detected capacity change from 0 to 512
[   94.488304][ T6236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   94.500804][ T6219] syz.2.864: attempt to access beyond end of device
[   94.500804][ T6219] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   94.514804][ T6219] syz.2.864: attempt to access beyond end of device
[   94.514804][ T6219] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   94.531283][ T6219] syz.2.864: attempt to access beyond end of device
[   94.531283][ T6219] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   94.544950][ T6219] syz.2.864: attempt to access beyond end of device
[   94.544950][ T6219] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   94.546155][ T6236] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.558505][ T6219] syz.2.864: attempt to access beyond end of device
[   94.558505][ T6219] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   94.558595][ T6219] syz.2.864: attempt to access beyond end of device
[   94.558595][ T6219] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   94.558641][ T6219] syz.2.864: attempt to access beyond end of device
[   94.558641][ T6219] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   94.558716][ T6219] syz.2.864: attempt to access beyond end of device
[   94.558716][ T6219] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   94.558792][ T6219] syz.2.864: attempt to access beyond end of device
[   94.558792][ T6219] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[   94.560291][ T6219] buffer_io_error: 310 callbacks suppressed
[   94.560304][ T6219] Buffer I/O error on dev loop2, logical block 353, lost async page write
[   94.560327][ T6219] Buffer I/O error on dev loop2, logical block 354, lost async page write
[   94.560348][ T6219] Buffer I/O error on dev loop2, logical block 355, lost async page write
[   94.560369][ T6219] Buffer I/O error on dev loop2, logical block 356, lost async page write
[   94.560389][ T6219] Buffer I/O error on dev loop2, logical block 357, lost async page write
[   94.560482][ T6219] Buffer I/O error on dev loop2, logical block 358, lost async page write
[   94.560503][ T6219] Buffer I/O error on dev loop2, logical block 359, lost async page write
[   94.768209][ T6246] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   94.784156][   T10] IPVS: starting estimator thread 0...
[   94.785727][ T6246] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28
[   94.802149][ T6246] EXT4-fs (loop1): This should not happen!! Data will be lost
[   94.802149][ T6246] 
[   94.811910][ T6246] EXT4-fs (loop1): Total free blocks count 0
[   94.817913][ T6246] EXT4-fs (loop1): Free/Dirty block details
[   94.825539][ T6246] EXT4-fs (loop1): free_blocks=39626
[   94.831006][ T6246] EXT4-fs (loop1): dirty_blocks=1
[   94.836072][ T6246] EXT4-fs (loop1): Block reservation details
[   94.842090][ T6246] EXT4-fs (loop1): i_reserved_data_blocks=1
[   94.854970][ T6255] loop2: detected capacity change from 0 to 256
[   94.860400][ T6253] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 99 with error 28
[   94.874246][ T6253] EXT4-fs (loop1): This should not happen!! Data will be lost
[   94.874246][ T6253] 
[   94.881019][ T6248] IPVS: using max 2112 ests per chain, 105600 per kthread
[   94.892564][ T6255] FAT-fs (loop2): Directory bread(block 1285) failed
[   94.905591][ T6255] FAT-fs (loop2): FAT read failed (blocknr 1281)
[   94.912247][ T6258] loop5: detected capacity change from 0 to 1024
[   94.913818][ T6258] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   94.933581][ T6255] FAT-fs (loop2): Directory bread(block 1285) failed
[   94.941855][ T6255] FAT-fs (loop2): Directory bread(block 1285) failed
[   94.948681][ T6255] FAT-fs (loop2): Directory bread(block 1285) failed
[   94.957099][ T6258] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #3: block 1: comm syz.5.877: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.978514][ T6258] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.877: Failed to acquire dquot type 0
[   94.995061][ T6262] FAULT_INJECTION: forcing a failure.
[   94.995061][ T6262] name failslab, interval 1, probability 0, space 0, times 0
[   95.009077][ T6262] CPU: 1 UID: 0 PID: 6262 Comm: syz.2.878 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   95.009109][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   95.009121][ T6262] Call Trace:
[   95.009126][ T6262]  <TASK>
[   95.009133][ T6262]  dump_stack_lvl+0xf6/0x150
[   95.009244][ T6262]  dump_stack+0x15/0x1a
[   95.009265][ T6262]  should_fail_ex+0x261/0x270
[   95.009296][ T6262]  should_failslab+0x8f/0xb0
[   95.009396][ T6262]  __kmalloc_cache_noprof+0x55/0x320
[   95.009433][ T6262]  ? u32_init+0x269/0x3e0
[   95.009468][ T6262]  u32_init+0x269/0x3e0
[   95.009500][ T6262]  ? __pfx_u32_reoffload+0x10/0x10
[   95.009543][ T6262]  tcf_proto_create+0x12f/0x1a0
[   95.009572][ T6262]  tc_new_tfilter+0x976/0x1110
[   95.009617][ T6262]  ? __pfx_tc_new_tfilter+0x10/0x10
[   95.009697][ T6262]  rtnetlink_rcv_msg+0x65a/0x740
[   95.009730][ T6262]  ? should_fail_ex+0xd7/0x270
[   95.009817][ T6262]  ? ref_tracker_free+0x3b8/0x420
[   95.009848][ T6262]  netlink_rcv_skb+0x12f/0x230
[   95.009870][ T6262]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   95.009910][ T6262]  rtnetlink_rcv+0x1c/0x30
[   95.009989][ T6262]  netlink_unicast+0x605/0x6c0
[   95.010134][ T6262]  netlink_sendmsg+0x609/0x720
[   95.010169][ T6262]  ? __pfx_netlink_sendmsg+0x10/0x10
[   95.010192][ T6262]  __sock_sendmsg+0x140/0x180
[   95.010227][ T6262]  ____sys_sendmsg+0x350/0x4e0
[   95.010254][ T6262]  __sys_sendmsg+0x1a0/0x240
[   95.010343][ T6262]  __x64_sys_sendmsg+0x46/0x50
[   95.010374][ T6262]  x64_sys_call+0x26f3/0x2e10
[   95.010398][ T6262]  do_syscall_64+0xc9/0x1a0
[   95.010429][ T6262]  ? clear_bhb_loop+0x25/0x80
[   95.010466][ T6262]  ? clear_bhb_loop+0x25/0x80
[   95.010486][ T6262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.010509][ T6262] RIP: 0033:0x7f3d9c30e169
[   95.010528][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.010570][ T6262] RSP: 002b:00007f3d9a977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.010588][ T6262] RAX: ffffffffffffffda RBX: 00007f3d9c535fa0 RCX: 00007f3d9c30e169
[   95.010600][ T6262] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006
[   95.010611][ T6262] RBP: 00007f3d9a977090 R08: 0000000000000000 R09: 0000000000000000
[   95.010624][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.010638][ T6262] R13: 0000000000000000 R14: 00007f3d9c535fa0 R15: 00007ffcaec2f4d8
[   95.010663][ T6262]  </TASK>
[   95.268743][ T6258] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.877: Freeing blocks not in datazone - block = 0, count = 4096
[   95.283932][ T6258] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.877: Invalid inode bitmap blk 0 in block_group 0
[   95.297928][ T6258] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[   95.306965][ T4955] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1)
[   95.307118][ T4955] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:15: Failed to release dquot type 0
[   95.335216][ T6258] EXT4-fs (loop5): 1 orphan inode deleted
[   95.356526][ T6272] loop1: detected capacity change from 0 to 256
[   95.365788][ T6272] FAT-fs (loop1): Directory bread(block 1285) failed
[   95.381092][ T6272] FAT-fs (loop1): FAT read failed (blocknr 1281)
[   95.394303][ T6272] FAT-fs (loop1): Directory bread(block 1285) failed
[   95.402013][ T6272] FAT-fs (loop1): Directory bread(block 1285) failed
[   95.409921][ T6272] FAT-fs (loop1): Directory bread(block 1285) failed
[   95.463546][   T29] kauditd_printk_skb: 386 callbacks suppressed
[   95.463564][   T29] audit: type=1326 audit(1745273607.517:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.502545][   T29] audit: type=1326 audit(1745273607.517:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.527258][   T29] audit: type=1326 audit(1745273607.517:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.552553][   T29] audit: type=1326 audit(1745273607.517:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576037][   T29] audit: type=1326 audit(1745273607.517:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576075][   T29] audit: type=1326 audit(1745273607.517:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576136][   T29] audit: type=1326 audit(1745273607.517:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576170][   T29] audit: type=1326 audit(1745273607.517:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576259][   T29] audit: type=1326 audit(1745273607.517:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.576310][   T29] audit: type=1326 audit(1745273607.517:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.0.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[   95.699453][ T4955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   95.799065][ T6289] loop2: detected capacity change from 0 to 256
[   95.826563][ T6289] FAT-fs (loop2): Directory bread(block 1285) failed
[   95.855391][ T6289] FAT-fs (loop2): FAT read failed (blocknr 1281)
[   95.873368][ T6289] FAT-fs (loop2): Directory bread(block 1285) failed
[   95.892034][ T6289] FAT-fs (loop2): Directory bread(block 1285) failed
[   95.905787][ T6289] FAT-fs (loop2): Directory bread(block 1285) failed
[   95.967524][    C0] IPv4: Oversized IP packet from 127.0.0.1
[   96.068339][ T6301] loop5: detected capacity change from 0 to 4096
[   96.098809][ T6282] loop0: detected capacity change from 0 to 1764
[   96.133918][ T6282] ISOFS: unable to read i-node block
[   96.140737][ T6282] isofs_fill_super: get root inode failed
[   97.072632][ T6344] netlink: 'syz.5.907': attribute type 3 has an invalid length.
[   97.160229][ T6353] loop5: detected capacity change from 0 to 128
[   97.182496][ T6355] vlan2: entered allmulticast mode
[   97.187709][ T6355] veth0: entered allmulticast mode
[   97.225107][ T6353] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.449930][ T6365] loop0: detected capacity change from 0 to 2048
[   97.453823][ T6353] netlink: 'syz.5.911': attribute type 3 has an invalid length.
[   97.508730][ T6369] loop1: detected capacity change from 0 to 128
[   97.522805][ T6369] FAULT_INJECTION: forcing a failure.
[   97.522805][ T6369] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   97.536276][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.1.915 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   97.536306][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   97.536318][ T6369] Call Trace:
[   97.536324][ T6369]  <TASK>
[   97.536332][ T6369]  dump_stack_lvl+0xf6/0x150
[   97.536403][ T6369]  dump_stack+0x15/0x1a
[   97.536425][ T6369]  should_fail_ex+0x261/0x270
[   97.536455][ T6369]  should_fail_alloc_page+0xfd/0x110
[   97.536482][ T6369]  __alloc_frozen_pages_noprof+0x11d/0x360
[   97.536505][ T6369]  __alloc_pages_noprof+0x9/0x20
[   97.536558][ T6369]  ___kmalloc_large_node+0x83/0x130
[   97.536595][ T6369]  __kmalloc_large_node_noprof+0x17/0xa0
[   97.536633][ T6369]  __kmalloc_noprof+0x2bb/0x410
[   97.536667][ T6369]  ? iovec_from_user+0x84/0x210
[   97.536717][ T6369]  iovec_from_user+0x84/0x210
[   97.536752][ T6369]  process_vm_rw+0x16d/0x840
[   97.536778][ T6369]  ? _parse_integer+0x27/0x30
[   97.536937][ T6369]  ? kstrtouint+0x7b/0xc0
[   97.537019][ T6369]  ? kstrtouint_from_user+0xbf/0x100
[   97.537059][ T6369]  ? __fget_files+0x186/0x1c0
[   97.537087][ T6369]  ? fput+0x99/0xd0
[   97.537118][ T6369]  ? ksys_write+0x180/0x1b0
[   97.537158][ T6369]  __x64_sys_process_vm_readv+0x7a/0x90
[   97.537296][ T6369]  x64_sys_call+0x26b7/0x2e10
[   97.537322][ T6369]  do_syscall_64+0xc9/0x1a0
[   97.537380][ T6369]  ? clear_bhb_loop+0x25/0x80
[   97.537401][ T6369]  ? clear_bhb_loop+0x25/0x80
[   97.537460][ T6369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.537486][ T6369] RIP: 0033:0x7fb162dee169
[   97.537505][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.537528][ T6369] RSP: 002b:00007fb161457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   97.537547][ T6369] RAX: ffffffffffffffda RBX: 00007fb163015fa0 RCX: 00007fb162dee169
[   97.537559][ T6369] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000025d
[   97.537575][ T6369] RBP: 00007fb161457090 R08: 0000000000000286 R09: 0000000000000000
[   97.537589][ T6369] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[   97.537604][ T6369] R13: 0000000000000000 R14: 00007fb163015fa0 R15: 00007ffe290e7228
[   97.537627][ T6369]  </TASK>
[   97.541242][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.783288][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.817250][ T6370] delete_channel: no stack
[   98.056397][ T6388] xt_hashlimit: size too large, truncated to 1048576
[   98.063362][ T6388] FAULT_INJECTION: forcing a failure.
[   98.063362][ T6388] name failslab, interval 1, probability 0, space 0, times 0
[   98.076176][ T6388] CPU: 0 UID: 0 PID: 6388 Comm: syz.4.923 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   98.076282][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.076294][ T6388] Call Trace:
[   98.076302][ T6388]  <TASK>
[   98.076312][ T6388]  dump_stack_lvl+0xf6/0x150
[   98.076342][ T6388]  dump_stack+0x15/0x1a
[   98.076363][ T6388]  should_fail_ex+0x261/0x270
[   98.076404][ T6388]  should_failslab+0x8f/0xb0
[   98.076430][ T6388]  __kmalloc_cache_node_noprof+0x58/0x340
[   98.076485][ T6388]  ? __get_vm_area_node+0xfb/0x1c0
[   98.076557][ T6388]  __get_vm_area_node+0xfb/0x1c0
[   98.076599][ T6388]  __vmalloc_node_range_noprof+0x285/0xe80
[   98.076647][ T6388]  ? htable_create+0xfe/0x440
[   98.076731][ T6388]  ? ctx_sched_in+0x389/0x3b0
[   98.076764][ T6388]  ? __rcu_read_unlock+0x4e/0x70
[   98.076794][ T6388]  ? ___kmalloc_large_node+0x83/0x130
[   98.076892][ T6388]  __kvmalloc_node_noprof+0x311/0x520
[   98.076924][ T6388]  ? htable_create+0xfe/0x440
[   98.076953][ T6388]  ? htable_create+0xfe/0x440
[   98.076992][ T6388]  ? __cond_resched+0x53/0x90
[   98.077035][ T6388]  htable_create+0xfe/0x440
[   98.077075][ T6388]  hashlimit_mt_check_common+0x5dc/0x6c0
[   98.077148][ T6388]  ? strcmp+0x21/0x50
[   98.077182][ T6388]  hashlimit_mt_check+0x64/0x80
[   98.077220][ T6388]  xt_check_match+0x265/0x4d0
[   98.077256][ T6388]  ? xt_find_target+0x1ce/0x200
[   98.077330][ T6388]  ? strcmp+0x21/0x50
[   98.077363][ T6388]  ? xt_find_match+0x1d2/0x210
[   98.077420][ T6388]  translate_table+0xb87/0x10b0
[   98.077528][ T6388]  do_ip6t_set_ctl+0x663/0x840
[   98.077560][ T6388]  ? kstrtouint+0x7b/0xc0
[   98.077584][ T6388]  ? __rcu_read_unlock+0x4e/0x70
[   98.077610][ T6388]  nf_setsockopt+0x195/0x1b0
[   98.077640][ T6388]  ipv6_setsockopt+0x10f/0x130
[   98.077707][ T6388]  rawv6_setsockopt+0x23d/0x460
[   98.077737][ T6388]  sock_common_setsockopt+0x64/0x80
[   98.077856][ T6388]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   98.077897][ T6388]  __sys_setsockopt+0x187/0x200
[   98.077986][ T6388]  __x64_sys_setsockopt+0x66/0x80
[   98.078014][ T6388]  x64_sys_call+0x2a09/0x2e10
[   98.078035][ T6388]  do_syscall_64+0xc9/0x1a0
[   98.078125][ T6388]  ? clear_bhb_loop+0x25/0x80
[   98.078175][ T6388]  ? clear_bhb_loop+0x25/0x80
[   98.078202][ T6388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.078336][ T6388] RIP: 0033:0x7f5bd6abe169
[   98.078355][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.078377][ T6388] RSP: 002b:00007f5bd5127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   98.078400][ T6388] RAX: ffffffffffffffda RBX: 00007f5bd6ce5fa0 RCX: 00007f5bd6abe169
[   98.078415][ T6388] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[   98.078429][ T6388] RBP: 00007f5bd5127090 R08: 0000000000000588 R09: 0000000000000000
[   98.078456][ T6388] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001
[   98.078470][ T6388] R13: 0000000000000000 R14: 00007f5bd6ce5fa0 R15: 00007ffd296efa68
[   98.078564][ T6388]  </TASK>
[   98.472663][ T6398] xt_hashlimit: size too large, truncated to 1048576
[   98.621742][ T6405] loop2: detected capacity change from 0 to 2048
[   98.626842][ T6406] FAULT_INJECTION: forcing a failure.
[   98.626842][ T6406] name failslab, interval 1, probability 0, space 0, times 0
[   98.642073][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.0.927 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[   98.642106][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   98.642201][ T6406] Call Trace:
[   98.642208][ T6406]  <TASK>
[   98.642217][ T6406]  dump_stack_lvl+0xf6/0x150
[   98.642299][ T6405] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities
[   98.642310][ T6406]  dump_stack+0x15/0x1a
[   98.642332][ T6406]  should_fail_ex+0x261/0x270
[   98.642359][ T6406]  should_failslab+0x8f/0xb0
[   98.642389][ T6406]  kmem_cache_alloc_node_noprof+0x5c/0x340
[   98.642429][ T6406]  ? __alloc_skb+0x10d/0x320
[   98.642468][ T6406]  __alloc_skb+0x10d/0x320
[   98.642495][ T6406]  rtmsg_fib+0x9d/0x250
[   98.642535][ T6406]  ? call_fib_notifiers+0x7f/0xa0
[   98.642648][ T6406]  fib_table_delete+0x782/0x850
[   98.642689][ T6406]  fib_magic+0x1c3/0x200
[   98.642736][ T6406]  fib_del_ifaddr+0x1d7/0xa60
[   98.642774][ T6406]  ? queue_work_on+0x10e/0x190
[   98.642897][ T6406]  ? addr_event+0x238/0x270
[   98.642920][ T6406]  fib_inetaddr_event+0x77/0x1f0
[   98.642961][ T6406]  ? __pfx_fib_inetaddr_event+0x10/0x10
[   98.643037][ T6406]  blocking_notifier_call_chain+0x94/0x200
[   98.643102][ T6406]  __inet_del_ifa+0x4cf/0x7e0
[   98.643140][ T6406]  ? strcmp+0x21/0x50
[   98.643175][ T6406]  devinet_ioctl+0xdc9/0xf40
[   98.643245][ T6406]  inet_ioctl+0x2f9/0x3b0
[   98.643291][ T6406]  sock_do_ioctl+0x86/0x220
[   98.643331][ T6406]  sock_ioctl+0x436/0x630
[   98.643485][ T6406]  ? __pfx_sock_ioctl+0x10/0x10
[   98.643520][ T6406]  __se_sys_ioctl+0xc9/0x140
[   98.643559][ T6406]  __x64_sys_ioctl+0x43/0x50
[   98.643602][ T6406]  x64_sys_call+0x168d/0x2e10
[   98.643630][ T6406]  do_syscall_64+0xc9/0x1a0
[   98.643735][ T6406]  ? clear_bhb_loop+0x25/0x80
[   98.643785][ T6406]  ? clear_bhb_loop+0x25/0x80
[   98.643812][ T6406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.643840][ T6406] RIP: 0033:0x7f54ac40e169
[   98.643914][ T6406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.643955][ T6406] RSP: 002b:00007f54aaa56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   98.643979][ T6406] RAX: ffffffffffffffda RBX: 00007f54ac636080 RCX: 00007f54ac40e169
[   98.644075][ T6406] RDX: 0000200000000540 RSI: 000000000000891c RDI: 0000000000000006
[   98.644088][ T6406] RBP: 00007f54aaa56090 R08: 0000000000000000 R09: 0000000000000000
[   98.644103][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.644118][ T6406] R13: 0000000000000000 R14: 00007f54ac636080 R15: 00007fff657ae6c8
[   98.644142][ T6406]  </TASK>
[   98.674512][ T6408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.924200][ T6408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.932927][ T6408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.941697][ T6408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.951980][ T6408] geneve2: entered promiscuous mode
[   98.957205][ T6408] geneve2: entered allmulticast mode
[   98.965838][ T6408] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.974808][ T6408] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.985039][ T6408] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.994000][ T6408] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.017621][ T6417] loop2: detected capacity change from 0 to 1024
[   99.090565][ T6427] loop4: detected capacity change from 0 to 512
[   99.102823][ T6427] EXT4-fs (loop4): orphan cleanup on readonly fs
[   99.116205][ T6427] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   99.136169][ T6431] vlan2: entered allmulticast mode
[   99.141364][ T6431] bridge_slave_0: entered allmulticast mode
[   99.149343][ T6427] EXT4-fs (loop4): Cannot turn on quotas: error -117
[   99.158104][ T6427] EXT4-fs (loop4): 1 truncate cleaned up
[   99.358296][ T6457] loop1: detected capacity change from 0 to 512
[   99.366823][ T6459] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   99.388424][ T6461] loop4: detected capacity change from 0 to 2048
[   99.401841][ T6457] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   99.417513][ T6457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[   99.425947][ T6457] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.946: corrupted in-inode xattr: e_value size too large
[   99.443296][ T6457] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.946: couldn't read orphan inode 15 (err -117)
[   99.461316][ T6461] GPT:first_usable_lbas don't match.
[   99.466725][ T6461] GPT:34 != 290
[   99.472229][ T6461] GPT: Use GNU Parted to correct GPT errors.
[   99.478432][ T6461]  loop4: p1 p2 p3
[   99.510141][ T6472] 9pnet_fd: Insufficient options for proto=fd
[   99.516699][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.532580][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.541665][ T5005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.542818][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.565361][ T6472] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.583400][ T6476] loop5: detected capacity change from 0 to 512
[   99.594604][ T6481] netlink: 'syz.1.955': attribute type 21 has an invalid length.
[   99.603535][ T6481] __nla_validate_parse: 8 callbacks suppressed
[   99.603550][ T6481] netlink: 156 bytes leftover after parsing attributes in process `syz.1.955'.
[   99.618811][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'.
[   99.632879][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.643329][ T6476] EXT4-fs (loop5): 1 truncate cleaned up
[   99.646358][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.665823][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.684442][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.691192][ T6472] dummy0 speed is unknown, defaulting to 1000
[   99.771343][ T6492] delete_channel: no stack
[   99.776136][ T6497] loop1: detected capacity change from 0 to 512
[   99.790204][ T6497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   99.826434][ T6497] EXT4-fs mount: 58 callbacks suppressed
[   99.826544][ T6497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.850785][ T6497] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.886600][ T6478] loop0: detected capacity change from 0 to 128
[   99.900798][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'.
[   99.927170][ T6497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.959: bg 0: block 304: padding at end of block bitmap is not set
[   99.943955][ T6497] EXT4-fs (loop1): Remounting filesystem read-only
[   99.957372][ T6512] loop4: detected capacity change from 0 to 512
[   99.976460][ T6512] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.965: casefold flag without casefold feature
[   99.993072][ T6512] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.965: couldn't read orphan inode 15 (err -117)
[   99.993551][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.008237][ T6512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.025056][ T6515] FAULT_INJECTION: forcing a failure.
[  100.025056][ T6515] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  100.042531][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.5.966 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  100.042563][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  100.042579][ T6515] Call Trace:
[  100.042602][ T6515]  <TASK>
[  100.042615][ T6515]  dump_stack_lvl+0xf6/0x150
[  100.042638][ T6515]  dump_stack+0x15/0x1a
[  100.042654][ T6515]  should_fail_ex+0x261/0x270
[  100.042678][ T6515]  should_fail_alloc_page+0xfd/0x110
[  100.042731][ T6515]  __alloc_frozen_pages_noprof+0x11d/0x360
[  100.042761][ T6515]  alloc_pages_mpol+0xb6/0x260
[  100.042801][ T6515]  vma_alloc_folio_noprof+0x19c/0x300
[  100.042842][ T6515]  do_wp_page+0x64f/0x24e0
[  100.042980][ T6515]  ? __rcu_read_lock+0x36/0x50
[  100.043011][ T6515]  handle_mm_fault+0xc6c/0x2e80
[  100.043040][ T6515]  ? mas_walk+0x204/0x320
[  100.043066][ T6515]  ? __rcu_read_unlock+0x4e/0x70
[  100.043094][ T6515]  exc_page_fault+0x3b9/0x6a0
[  100.043122][ T6515]  asm_exc_page_fault+0x26/0x30
[  100.043192][ T6515] RIP: 0033:0x7f22a9ad0be3
[  100.043210][ T6515] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  100.043232][ T6515] RSP: 002b:00007f22a82763f0 EFLAGS: 00010202
[  100.043249][ T6515] RAX: 00000000000001c0 RBX: 00007f22a8276490 RCX: 00007f229fe57000
[  100.043264][ T6515] RDX: 00007f22a8276630 RSI: 0000000000000071 RDI: 00007f22a8276530
[  100.043278][ T6515] RBP: 00000000000000bd R08: 0000000000000009 R09: 00000000000001a9
[  100.043292][ T6515] R10: 00000000000001d2 R11: 00007f22a8276490 R12: 0000000000000001
[  100.043307][ T6515] R13: 00007f22a9cabf40 R14: 0000000000000002 R15: 00007f22a8276530
[  100.043329][ T6515]  </TASK>
[  100.043408][ T6515] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  100.243850][ T6515] loop5: detected capacity change from 0 to 2048
[  100.263231][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.282720][ T6515] GPT:first_usable_lbas don't match.
[  100.288147][ T6515] GPT:34 != 290
[  100.291812][ T6515] GPT: Use GNU Parted to correct GPT errors.
[  100.298014][ T6515]  loop5: p1 p2 p3
[  100.415725][ T6535] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  100.424203][ T6535] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[  100.497159][   T29] kauditd_printk_skb: 129 callbacks suppressed
[  100.497180][   T29] audit: type=1326 audit(1745273612.537:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.528817][   T29] audit: type=1326 audit(1745273612.537:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.554251][   T29] audit: type=1326 audit(1745273612.537:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.579746][   T29] audit: type=1326 audit(1745273612.537:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.603711][   T29] audit: type=1326 audit(1745273612.537:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.628540][   T29] audit: type=1326 audit(1745273612.537:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.653885][   T29] audit: type=1326 audit(1745273612.537:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.677426][   T29] audit: type=1326 audit(1745273612.537:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.702986][   T29] audit: type=1326 audit(1745273612.537:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.726537][   T29] audit: type=1326 audit(1745273612.537:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb162dee169 code=0x7ffc0000
[  100.752444][ T4961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.893709][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'.
[  100.904364][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'.
[  100.927150][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'.
[  100.938418][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'.
[  100.985347][ T6561] loop0: detected capacity change from 0 to 1764
[  100.992078][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.979'.
[  101.002824][ T6561] iso9660: Invalid uid '0x00000000ffffffff'
[  101.013652][ T6565] loop1: detected capacity change from 0 to 2048
[  101.020548][ T6565] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  101.044383][ T6567] loop0: detected capacity change from 0 to 512
[  101.057542][ T6567] EXT4-fs (loop0): fragment/cluster size (16384) != block size (4096)
[  101.233243][ T6596] loop2: detected capacity change from 0 to 128
[  101.239831][ T6592] loop0: detected capacity change from 0 to 4096
[  101.252796][ T6592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.504827][ T6608] loop5: detected capacity change from 0 to 1024
[  101.511805][ T6608] EXT4-fs: Ignoring removed orlov option
[  101.519161][ T6608] EXT4-fs (loop5): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  101.533700][ T6606] loop2: detected capacity change from 0 to 2048
[  101.562130][ T6608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.572964][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.585849][ T6606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.601961][ T6608] EXT4-fs warning (device loop5): ext4_xattr_inode_get:556: inode #19: comm syz.5.999: EA inode hash validation failed
[  101.671400][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.699456][ T6624] 9pnet_fd: Insufficient options for proto=fd
[  101.958272][ T6632] loop1: detected capacity change from 0 to 128
[  102.101648][ T1051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.125996][ T6643] netlink: 'syz.4.1009': attribute type 63 has an invalid length.
[  102.379788][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.402746][ T6649] cgroup: none used incorrectly
[  102.477137][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.485804][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  103.003864][ T6671] pim6reg: entered allmulticast mode
[  103.334292][ T6682] loop4: detected capacity change from 0 to 1024
[  103.352433][ T6682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.364912][ T6682] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.380346][ T6682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1024: bg 0: block 393: padding at end of block bitmap is not set
[  103.400332][ T6682] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[  103.414506][ T6682] EXT4-fs (loop4): This should not happen!! Data will be lost
[  103.414506][ T6682] 
[  103.437582][ T6682] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  103.483884][ T6695] loop5: detected capacity change from 0 to 512
[  103.491633][ T6695] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.500752][ T6695] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  103.514485][ T6695] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  103.532912][ T6695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  103.543865][ T6695] System zones: 0-2, 18-18, 34-34
[  103.550113][ T6695] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  103.565734][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.577431][ T6695] EXT4-fs (loop5): 1 truncate cleaned up
[  103.584298][ T6695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.605454][ T6700] loop0: detected capacity change from 0 to 4096
[  103.615877][ T6700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.645649][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.778273][ T6713] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  103.800766][ T6715] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  103.868771][ T6722] loop5: detected capacity change from 0 to 256
[  103.887581][ T6722] FAT-fs (loop5): Directory bread(block 1285) failed
[  103.896419][ T6722] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  103.920954][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.942865][ T6722] FAT-fs (loop5): Directory bread(block 1285) failed
[  103.959807][ T6722] FAT-fs (loop5): Directory bread(block 1285) failed
[  103.973254][ T6722] FAT-fs (loop5): Directory bread(block 1285) failed
[  104.104911][ T6734] dummy0 speed is unknown, defaulting to 1000
[  104.191698][ T6742] loop5: detected capacity change from 0 to 512
[  104.219606][ T6742] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[  104.231703][ T6742] System zones: 0-2, 18-18, 34-35
[  104.240810][ T6742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.270099][ T6742] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.315786][ T6743] dccp_close: ABORT with 32 bytes unread
[  104.355434][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.377114][ T6759] loop1: detected capacity change from 0 to 512
[  104.385951][ T6759] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.395384][ T6759] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  104.395503][ T6761] loop5: detected capacity change from 0 to 512
[  104.411938][ T6759] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  104.412087][ T6761] EXT4-fs: Ignoring removed orlov option
[  104.427416][ T6759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  104.433855][ T6764] FAULT_INJECTION: forcing a failure.
[  104.433855][ T6764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  104.437333][ T6759] System zones: 0-2, 18-18, 34-34
[  104.450705][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.2.1052 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  104.450779][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  104.450795][ T6764] Call Trace:
[  104.450803][ T6764]  <TASK>
[  104.450813][ T6764]  dump_stack_lvl+0xf6/0x150
[  104.450845][ T6764]  dump_stack+0x15/0x1a
[  104.450867][ T6764]  should_fail_ex+0x261/0x270
[  104.450898][ T6764]  should_fail+0xb/0x10
[  104.450923][ T6764]  should_fail_usercopy+0x1a/0x20
[  104.450991][ T6764]  _copy_from_iter+0xd8/0xd10
[  104.451092][ T6764]  ? mntput+0x49/0x70
[  104.451128][ T6764]  tun_get_user+0x15b/0x2640
[  104.451152][ T6764]  ? path_openat+0x1ab2/0x2000
[  104.451253][ T6764]  ? _parse_integer+0x27/0x30
[  104.451278][ T6764]  ? string_unescape+0x160/0x530
[  104.451330][ T6764]  ? ref_tracker_alloc+0x1ff/0x310
[  104.451367][ T6764]  tun_chr_write_iter+0x188/0x240
[  104.451394][ T6764]  vfs_write+0x79b/0x950
[  104.451418][ T6764]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  104.451451][ T6764]  ksys_write+0xeb/0x1b0
[  104.451487][ T6764]  __x64_sys_write+0x42/0x50
[  104.451510][ T6764]  x64_sys_call+0x2a45/0x2e10
[  104.451544][ T6764]  do_syscall_64+0xc9/0x1a0
[  104.451576][ T6764]  ? clear_bhb_loop+0x25/0x80
[  104.451603][ T6764]  ? clear_bhb_loop+0x25/0x80
[  104.451630][ T6764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.451662][ T6764] RIP: 0033:0x7f3d9c30e169
[  104.451682][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.451705][ T6764] RSP: 002b:00007f3d9a977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  104.451727][ T6764] RAX: ffffffffffffffda RBX: 00007f3d9c535fa0 RCX: 00007f3d9c30e169
[  104.451743][ T6764] RDX: 0000000000000fce RSI: 00002000000004c0 RDI: 0000000000000003
[  104.451825][ T6764] RBP: 00007f3d9a977090 R08: 0000000000000000 R09: 0000000000000000
[  104.451912][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  104.451928][ T6764] R13: 0000000000000000 R14: 00007f3d9c535fa0 R15: 00007ffcaec2f4d8
[  104.451952][ T6764]  </TASK>
[  104.455842][ T6761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.477665][ T6761] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.661607][ T4996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.672045][ T6759] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  104.721549][ T6759] EXT4-fs (loop1): 1 truncate cleaned up
[  104.723317][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.727684][ T6759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.803174][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.829722][ T6772] loop2: detected capacity change from 0 to 764
[  104.846365][ T6772] Symlink component flag not implemented
[  104.865718][ T6772] Symlink component flag not implemented (116)
[  104.893468][ T6783] __nla_validate_parse: 11 callbacks suppressed
[  104.893519][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  104.908763][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'.
[  104.971070][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'.
[  104.981140][ T6792] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  105.013393][ T6792] @: renamed from vlan0 (while UP)
[  105.037640][ T6801] FAULT_INJECTION: forcing a failure.
[  105.037640][ T6801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.052979][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.5.1063 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  105.053013][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  105.053036][ T6801] Call Trace:
[  105.053043][ T6801]  <TASK>
[  105.053052][ T6801]  dump_stack_lvl+0xf6/0x150
[  105.053081][ T6801]  dump_stack+0x15/0x1a
[  105.053101][ T6801]  should_fail_ex+0x261/0x270
[  105.053133][ T6801]  should_fail+0xb/0x10
[  105.053180][ T6801]  should_fail_usercopy+0x1a/0x20
[  105.053207][ T6801]  _copy_to_user+0x20/0xa0
[  105.053244][ T6801]  simple_read_from_buffer+0xb2/0x130
[  105.053288][ T6801]  proc_fail_nth_read+0x103/0x140
[  105.053401][ T6801]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  105.053435][ T6801]  vfs_read+0x1b2/0x710
[  105.053450][ T6801]  ? ip_setsockopt+0xea/0x100
[  105.053478][ T6801]  ? __rcu_read_unlock+0x4e/0x70
[  105.053557][ T6801]  ? __fget_files+0x186/0x1c0
[  105.053587][ T6801]  ksys_read+0xeb/0x1b0
[  105.053605][ T6801]  __x64_sys_read+0x42/0x50
[  105.053694][ T6801]  x64_sys_call+0x2a3b/0x2e10
[  105.053718][ T6801]  do_syscall_64+0xc9/0x1a0
[  105.053787][ T6801]  ? clear_bhb_loop+0x25/0x80
[  105.053807][ T6801]  ? clear_bhb_loop+0x25/0x80
[  105.053827][ T6801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.053848][ T6801] RIP: 0033:0x7f22a9c0cb7c
[  105.053862][ T6801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  105.053881][ T6801] RSP: 002b:00007f22a8277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  105.053932][ T6801] RAX: ffffffffffffffda RBX: 00007f22a9e35fa0 RCX: 00007f22a9c0cb7c
[  105.053948][ T6801] RDX: 000000000000000f RSI: 00007f22a82770a0 RDI: 0000000000000004
[  105.053962][ T6801] RBP: 00007f22a8277090 R08: 0000000000000000 R09: 0000000000000000
[  105.053976][ T6801] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.053991][ T6801] R13: 0000000000000000 R14: 00007f22a9e35fa0 R15: 00007ffc19d5baa8
[  105.054016][ T6801]  </TASK>
[  105.292267][ T6805] loop2: detected capacity change from 0 to 4096
[  105.300520][ T6641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.317456][ T6811] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1066'.
[  105.343940][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.361886][ T6823] netlink: 'syz.0.1069': attribute type 13 has an invalid length.
[  105.371904][ T6810] FAULT_INJECTION: forcing a failure.
[  105.371904][ T6810] name failslab, interval 1, probability 0, space 0, times 0
[  105.385995][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.4.1068 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  105.386085][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  105.386099][ T6810] Call Trace:
[  105.386106][ T6810]  <TASK>
[  105.386114][ T6810]  dump_stack_lvl+0xf6/0x150
[  105.386194][ T6810]  dump_stack+0x15/0x1a
[  105.386270][ T6810]  should_fail_ex+0x261/0x270
[  105.386353][ T6810]  should_failslab+0x8f/0xb0
[  105.386412][ T6810]  __kmalloc_noprof+0xad/0x410
[  105.386439][ T6810]  ? kobject_get_path+0x91/0x1c0
[  105.386475][ T6810]  kobject_get_path+0x91/0x1c0
[  105.386510][ T6810]  ? __kmalloc_cache_noprof+0x18d/0x320
[  105.386583][ T6810]  kobject_uevent_env+0x1b9/0x550
[  105.386606][ T6810]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[  105.386647][ T6810]  ? device_pm_check_callbacks+0x632/0x650
[  105.386677][ T6810]  kobject_uevent+0x1c/0x30
[  105.386761][ T6810]  device_del+0x6fc/0x780
[  105.386801][ T6810]  nfc_unregister_device+0x114/0x130
[  105.386824][ T6810]  nci_unregister_device+0x14c/0x160
[  105.386855][ T6810]  virtual_ncidev_close+0x2a/0x50
[  105.386906][ T6810]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  105.386930][ T6810]  __fput+0x2ac/0x640
[  105.386959][ T6810]  ____fput+0x1c/0x30
[  105.386985][ T6810]  task_work_run+0x13c/0x1b0
[  105.387037][ T6810]  syscall_exit_to_user_mode+0xa8/0x120
[  105.387064][ T6810]  do_syscall_64+0xd6/0x1a0
[  105.387093][ T6810]  ? clear_bhb_loop+0x25/0x80
[  105.387120][ T6810]  ? clear_bhb_loop+0x25/0x80
[  105.387147][ T6810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.387227][ T6810] RIP: 0033:0x7f5bd6abe169
[  105.387252][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.387272][ T6810] RSP: 002b:00007f5bd5127038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  105.387294][ T6810] RAX: 0000000000000000 RBX: 00007f5bd6ce5fa0 RCX: 00007f5bd6abe169
[  105.387307][ T6810] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  105.387342][ T6810] RBP: 00007f5bd5127090 R08: 0000000000000000 R09: 0000000000000000
[  105.387355][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.387369][ T6810] R13: 0000000000000000 R14: 00007f5bd6ce5fa0 R15: 00007ffd296efa68
[  105.387389][ T6810]  </TASK>
[  105.631099][   T29] kauditd_printk_skb: 392 callbacks suppressed
[  105.631132][   T29] audit: type=1400 audit(1745273617.687:3697): avc:  denied  { read write } for  pid=6826 comm="syz.4.1070" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  105.667763][   T29] audit: type=1400 audit(1745273617.717:3698): avc:  denied  { open } for  pid=6826 comm="syz.4.1070" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  105.694473][   T29] audit: type=1400 audit(1745273617.717:3699): avc:  denied  { ioctl } for  pid=6826 comm="syz.4.1070" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  105.722587][   T29] audit: type=1400 audit(1745273617.717:3700): avc:  denied  { create } for  pid=6826 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  105.732350][ T6830] loop5: detected capacity change from 0 to 1764
[  105.742246][   T29] audit: type=1400 audit(1745273617.717:3701): avc:  denied  { connect } for  pid=6826 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  105.770358][   T29] audit: type=1400 audit(1745273617.717:3702): avc:  denied  { write } for  pid=6826 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  105.808812][ T6832] dccp_xmit_packet: Payload too large (65475) for featneg.
[  105.874029][ T6823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.891524][ T3384] dummy0 speed is unknown, defaulting to 1000
[  105.905736][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.926079][   T29] audit: type=1400 audit(1745273617.947:3703): avc:  denied  { map } for  pid=6837 comm="syz.5.1075" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1
[  105.951992][   T29] audit: type=1400 audit(1745273617.957:3704): avc:  denied  { setopt } for  pid=6837 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  105.977970][ T6851] rdma_rxe: rxe_newlink: failed to add veth0_to_bond
[  105.988661][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1080'.
[  105.992717][ T6851] loop1: detected capacity change from 0 to 512
[  105.999316][ T6850] tipc: Started in network mode
[  106.005304][ T6851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.008916][ T6850] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  106.008951][ T6850] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  106.024391][ T6853] loop4: detected capacity change from 0 to 1024
[  106.042496][   T29] audit: type=1400 audit(1745273618.097:3705): avc:  denied  { create } for  pid=6849 comm="syz.5.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.046673][ T6853] EXT4-fs: Ignoring removed oldalloc option
[  106.078365][   T29] audit: type=1400 audit(1745273618.127:3706): avc:  denied  { setopt } for  pid=6849 comm="syz.5.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.098839][ T6853] EXT4-fs: Ignoring removed orlov option
[  106.104253][ T6851] EXT4-fs (loop1): 1 truncate cleaned up
[  106.112718][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.126945][ T6853] ext4: Unknown parameter 'euid'
[  106.146061][ T6850] loop5: detected capacity change from 0 to 2048
[  106.147232][ T6853] netlink: 'syz.4.1081': attribute type 13 has an invalid length.
[  106.154310][ T6851] netlink: 'syz.1.1078': attribute type 6 has an invalid length.
[  106.160278][ T6853] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1081'.
[  106.161898][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option
[  106.172115][ T6858] 9pnet_fd: Insufficient options for proto=fd
[  106.183024][ T6850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.218422][ T6853] erspan0: refused to change device tx_queue_len
[  106.228061][ T6853] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  106.256819][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.321874][ T6866] loop5: detected capacity change from 0 to 8192
[  106.332840][ T6864] loop4: detected capacity change from 0 to 512
[  106.350609][ T6866] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  106.371478][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.382236][ T6864] EXT4-fs (loop4): orphan cleanup on readonly fs
[  106.389207][ T6864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1081: bg 0: block 248: padding at end of block bitmap is not set
[  106.411213][ T6864] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1081: Failed to acquire dquot type 1
[  106.424854][ T6864] EXT4-fs (loop4): 1 truncate cleaned up
[  106.433752][ T6864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.475294][ T6872] loop1: detected capacity change from 0 to 256
[  106.483498][ T6872] FAT-fs (loop1): Directory bread(block 1285) failed
[  106.492962][ T6872] FAT-fs (loop1): FAT read failed (blocknr 1281)
[  106.503520][ T6872] FAT-fs (loop1): Directory bread(block 1285) failed
[  106.511010][ T6872] FAT-fs (loop1): Directory bread(block 1285) failed
[  106.518221][ T6872] FAT-fs (loop1): Directory bread(block 1285) failed
[  106.591946][ T4996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.622720][ T6876] loop1: detected capacity change from 0 to 4096
[  106.641068][ T6876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.736477][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.751896][ T6881] loop5: detected capacity change from 0 to 256
[  106.888171][ T6881] FAT-fs (loop5): Directory bread(block 1285) failed
[  106.897484][ T6881] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  106.911390][ T6881] FAT-fs (loop5): Directory bread(block 1285) failed
[  106.918372][ T6881] FAT-fs (loop5): Directory bread(block 1285) failed
[  106.925466][ T6881] FAT-fs (loop5): Directory bread(block 1285) failed
[  106.967007][ T6883] loop2: detected capacity change from 0 to 512
[  106.982011][ T6883] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  106.992650][ T6883] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  107.035321][ T6883] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  107.046077][ T6883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  107.055488][ T6888] loop5: detected capacity change from 0 to 512
[  107.063279][ T6888] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  107.063316][ T6888] EXT4-fs: failed to create workqueue
[  107.065602][ T6883] System zones: 
[  107.073607][ T6888] EXT4-fs (loop5): mount failed
[  107.078372][ T6883] 0-2, 18-18, 34-34
[  107.090205][ T6894] FAULT_INJECTION: forcing a failure.
[  107.090205][ T6894] name failslab, interval 1, probability 0, space 0, times 0
[  107.105288][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.4.1092 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  107.105322][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  107.105335][ T6894] Call Trace:
[  107.105345][ T6894]  <TASK>
[  107.105355][ T6894]  dump_stack_lvl+0xf6/0x150
[  107.105385][ T6894]  dump_stack+0x15/0x1a
[  107.105405][ T6894]  should_fail_ex+0x261/0x270
[  107.105435][ T6894]  should_failslab+0x8f/0xb0
[  107.105462][ T6894]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  107.105572][ T6894]  ? __alloc_skb+0x10d/0x320
[  107.105595][ T6894]  __alloc_skb+0x10d/0x320
[  107.105699][ T6894]  netlink_alloc_large_skb+0xad/0xe0
[  107.105740][ T6894]  netlink_sendmsg+0x3da/0x720
[  107.105767][ T6894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.105808][ T6894]  __sock_sendmsg+0x140/0x180
[  107.105915][ T6894]  ____sys_sendmsg+0x350/0x4e0
[  107.105950][ T6894]  __sys_sendmsg+0x1a0/0x240
[  107.106075][ T6894]  __x64_sys_sendmsg+0x46/0x50
[  107.106103][ T6894]  x64_sys_call+0x26f3/0x2e10
[  107.106131][ T6894]  do_syscall_64+0xc9/0x1a0
[  107.106159][ T6894]  ? clear_bhb_loop+0x25/0x80
[  107.106217][ T6894]  ? clear_bhb_loop+0x25/0x80
[  107.106244][ T6894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.106278][ T6894] RIP: 0033:0x7f5bd6abe169
[  107.106297][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.106324][ T6894] RSP: 002b:00007f5bd5127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.106347][ T6894] RAX: ffffffffffffffda RBX: 00007f5bd6ce5fa0 RCX: 00007f5bd6abe169
[  107.106374][ T6894] RDX: 0000000000008000 RSI: 0000200000000380 RDI: 0000000000000003
[  107.106386][ T6894] RBP: 00007f5bd5127090 R08: 0000000000000000 R09: 0000000000000000
[  107.106397][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  107.106411][ T6894] R13: 0000000000000000 R14: 00007f5bd6ce5fa0 R15: 00007ffd296efa68
[  107.106435][ T6894]  </TASK>
[  107.325539][ T6883] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  107.342616][ T6883] EXT4-fs (loop2): 1 truncate cleaned up
[  107.368647][ T6883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.397262][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.423934][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.495728][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  107.513897][ T6906] loop1: detected capacity change from 0 to 2048
[  107.520380][ T6907] IPVS: stopping backup sync thread 3580 ...
[  107.617680][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.727665][ T6921] loop5: detected capacity change from 0 to 4096
[  107.854789][ T6921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.907220][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'.
[  108.050215][ T6928] netlink: 'syz.2.1103': attribute type 10 has an invalid length.
[  108.171813][ T6928] team0: Device hsr_slave_0 failed to register rx_handler
[  108.212144][ T6928] loop2: detected capacity change from 0 to 2048
[  108.244172][ T6928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.287753][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1109'.
[  108.313899][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.342469][ T6928] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1103: bg 0: block 234: padding at end of block bitmap is not set
[  108.364298][ T6936] loop4: detected capacity change from 0 to 512
[  108.372478][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.386137][ T6946] loop0: detected capacity change from 0 to 256
[  108.395258][ T6936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.407991][ T6928] EXT4-fs (loop2): Remounting filesystem read-only
[  108.410610][ T6946] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.431867][ T6946] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  108.432383][ T6936] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.453164][ T6946] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.460790][ T6946] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.467646][ T6946] FAT-fs (loop0): Directory bread(block 1285) failed
[  108.552507][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.612865][ T6972] loop0: detected capacity change from 0 to 512
[  108.626203][ T6974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1118'.
[  108.637156][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.652352][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.667191][ T6972] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.726545][ T6988] netlink: 'syz.4.1122': attribute type 4 has an invalid length.
[  108.735375][ T6988] netlink: 'syz.4.1122': attribute type 4 has an invalid length.
[  108.746813][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.782577][ T6990] loop0: detected capacity change from 0 to 164
[  108.790983][ T6990] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  108.801368][ T6990] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  108.811993][ T6994] loop2: detected capacity change from 0 to 2048
[  108.821111][ T6990] Symlink component flag not implemented
[  108.826848][ T6990] Symlink component flag not implemented
[  108.832791][ T6990] Symlink component flag not implemented (7)
[  108.840359][ T6990] Symlink component flag not implemented (116)
[  108.843326][ T6994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.974997][ T7008] loop4: detected capacity change from 0 to 256
[  108.992762][ T7008] netlink: 'syz.4.1129': attribute type 13 has an invalid length.
[  109.033398][ T7009] loop0: detected capacity change from 0 to 2048
[  109.300456][ T7008] bridge0: port 3(batadv0) entered disabled state
[  109.307105][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.314361][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.368396][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.385466][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.422935][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.438717][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.656214][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.880666][ T7036] loop0: detected capacity change from 0 to 128
[  109.972929][ T7038] program syz.0.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.023662][ T7008] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.033379][ T7008] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.041938][ T7008] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.050328][ T7008] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.175608][ T7044] loop4: detected capacity change from 0 to 164
[  110.293782][ T7052] __nla_validate_parse: 3 callbacks suppressed
[  110.293801][ T7052] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1141'.
[  110.319736][ T7053] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  110.357817][ T7057] loop0: detected capacity change from 0 to 512
[  110.364769][ T7055] loop2: detected capacity change from 0 to 1024
[  110.383724][ T7055] EXT4-fs: dax option not supported
[  110.395496][ T7057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  110.401201][ T7055] netlink: 'syz.2.1143': attribute type 10 has an invalid length.
[  110.413370][ T7055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1143'.
[  110.419419][ T4961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.451329][ T7055] team0: Port device geneve1 added
[  110.471315][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.489097][ T7057] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.507059][ T7057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1142: bg 0: block 304: padding at end of block bitmap is not set
[  110.524107][ T7066] loop2: detected capacity change from 0 to 256
[  110.534809][ T7057] EXT4-fs (loop0): Remounting filesystem read-only
[  110.574452][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.648521][ T7042] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  110.649422][   T29] kauditd_printk_skb: 181 callbacks suppressed
[  110.649438][   T29] audit: type=1400 audit(1745273622.697:3884): avc:  denied  { bind } for  pid=7041 comm="syz.5.1136" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.683344][   T29] audit: type=1400 audit(1745273622.697:3885): avc:  denied  { node_bind } for  pid=7041 comm="syz.5.1136" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  110.706375][   T29] audit: type=1400 audit(1745273622.697:3886): avc:  denied  { connect } for  pid=7041 comm="syz.5.1136" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  110.799886][   T29] audit: type=1400 audit(1745273622.847:3887): avc:  denied  { mount } for  pid=7079 comm="syz.2.1149" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[  110.851459][   T29] audit: type=1400 audit(1745273622.877:3888): avc:  denied  { ioctl } for  pid=7079 comm="syz.2.1149" path="socket:[15987]" dev="sockfs" ino=15987 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  110.912665][ T7090] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1152'.
[  110.950083][ T7097] loop2: detected capacity change from 0 to 256
[  110.960798][ T7097] FAT-fs (loop2): Directory bread(block 1285) failed
[  110.972021][ T7097] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  110.980533][ T7097] FAT-fs (loop2): Directory bread(block 1285) failed
[  110.987462][ T7097] FAT-fs (loop2): Directory bread(block 1285) failed
[  110.995873][ T7097] FAT-fs (loop2): Directory bread(block 1285) failed
[  111.010807][ T7099] loop0: detected capacity change from 0 to 4096
[  111.037384][ T7099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.104099][   T29] audit: type=1400 audit(1745273623.157:3889): avc:  denied  { kexec_image_load } for  pid=7109 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  111.147015][   T29] audit: type=1400 audit(1745273623.157:3890): avc:  denied  { write } for  pid=7109 comm="syz.4.1161" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  111.196509][ T7115] --map-set only usable from mangle table
[  111.365305][ T7117] loop5: detected capacity change from 0 to 1024
[  111.382790][ T7117] journal_path: Non-blockdev passed as './file1'
[  111.389282][ T7117] EXT4-fs: error: could not find journal device path
[  111.422700][   T29] audit: type=1400 audit(1745273623.477:3891): avc:  denied  { mounton } for  pid=7116 comm="syz.5.1162" path="/186/bus" dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  111.488033][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.723125][ T7138] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1166'.
[  111.769400][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'.
[  111.782436][ T7140] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1167'.
[  111.791557][ T7140] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1167'.
[  111.885176][   T29] audit: type=1400 audit(1745273623.937:3892): avc:  denied  { unmount } for  pid=3699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  111.919991][ T7150] loop0: detected capacity change from 0 to 256
[  111.927317][ T7150] FAT-fs (loop0): Directory bread(block 1285) failed
[  111.937471][ T7150] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  111.947301][ T7150] FAT-fs (loop0): Directory bread(block 1285) failed
[  111.952919][   T29] audit: type=1400 audit(1745273623.997:3893): avc:  denied  { getopt } for  pid=7152 comm="syz.2.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  111.954455][ T7150] FAT-fs (loop0): Directory bread(block 1285) failed
[  111.983158][ T7150] FAT-fs (loop0): Directory bread(block 1285) failed
[  111.990303][ T7156] FAULT_INJECTION: forcing a failure.
[  111.990303][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.005882][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.5.1169 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  112.005913][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  112.005927][ T7156] Call Trace:
[  112.005934][ T7156]  <TASK>
[  112.005942][ T7156]  dump_stack_lvl+0xf6/0x150
[  112.005970][ T7156]  dump_stack+0x15/0x1a
[  112.005988][ T7156]  should_fail_ex+0x261/0x270
[  112.006038][ T7156]  should_fail+0xb/0x10
[  112.006076][ T7156]  should_fail_usercopy+0x1a/0x20
[  112.006158][ T7156]  _copy_from_user+0x1c/0xa0
[  112.006215][ T7156]  user_termios_to_kernel_termios_1+0x22/0x30
[  112.006253][ T7156]  set_termios+0x125/0x4f0
[  112.006291][ T7156]  tty_mode_ioctl+0x394/0x5d0
[  112.006348][ T7156]  n_tty_ioctl_helper+0x8d/0x240
[  112.006393][ T7156]  n_tty_ioctl+0xfd/0x210
[  112.006473][ T7156]  ? __pfx_n_tty_ioctl+0x10/0x10
[  112.006503][ T7156]  tty_ioctl+0x878/0xbd0
[  112.006523][ T7156]  ? __pfx_tty_ioctl+0x10/0x10
[  112.006544][ T7156]  __se_sys_ioctl+0xc9/0x140
[  112.006637][ T7156]  __x64_sys_ioctl+0x43/0x50
[  112.006667][ T7156]  x64_sys_call+0x168d/0x2e10
[  112.006690][ T7156]  do_syscall_64+0xc9/0x1a0
[  112.006765][ T7156]  ? clear_bhb_loop+0x25/0x80
[  112.006788][ T7156]  ? clear_bhb_loop+0x25/0x80
[  112.006849][ T7156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.006874][ T7156] RIP: 0033:0x7f22a9c0e169
[  112.006892][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.006912][ T7156] RSP: 002b:00007f22a8256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  112.006933][ T7156] RAX: ffffffffffffffda RBX: 00007f22a9e36080 RCX: 00007f22a9c0e169
[  112.006946][ T7156] RDX: 0000200000000000 RSI: 0000000000005404 RDI: 0000000000000005
[  112.006959][ T7156] RBP: 00007f22a8256090 R08: 0000000000000000 R09: 0000000000000000
[  112.006972][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.007047][ T7156] R13: 0000000000000000 R14: 00007f22a9e36080 R15: 00007ffc19d5baa8
[  112.007120][ T7156]  </TASK>
[  112.275631][ T7165] tipc: Started in network mode
[  112.280816][ T7163] loop2: detected capacity change from 0 to 2048
[  112.280895][ T7165] tipc: Node identity 4, cluster identity 4711
[  112.293761][ T7165] tipc: Node number set to 4
[  112.320534][ T7167] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1177'.
[  112.331125][ T7163] Alternate GPT is invalid, using primary GPT.
[  112.331418][ T7163]  loop2: p2 p3 p7
[  112.349488][ T4961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.372005][ T7170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.442141][ T7181] pim6reg1: entered promiscuous mode
[  112.447495][ T7181] pim6reg1: entered allmulticast mode
[  112.534834][ T7187] loop2: detected capacity change from 0 to 512
[  112.543794][ T7187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.561159][ T7187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.575993][ T7187] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.592536][ T7187] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1184: bg 0: block 304: padding at end of block bitmap is not set
[  112.609126][ T7187] EXT4-fs (loop2): Remounting filesystem read-only
[  112.620884][ T7192] loop0: detected capacity change from 0 to 256
[  112.628275][ T7192] FAT-fs (loop0): Directory bread(block 1285) failed
[  112.638507][ T7192] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  112.645590][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.647513][ T7192] FAT-fs (loop0): Directory bread(block 1285) failed
[  112.663916][ T7192] FAT-fs (loop0): Directory bread(block 1285) failed
[  112.671112][ T7192] FAT-fs (loop0): Directory bread(block 1285) failed
[  112.706062][ T7194] tipc: Cannot configure node identity twice
[  112.865271][ T7208] loop5: detected capacity change from 0 to 2048
[  112.914979][ T7213] loop2: detected capacity change from 0 to 4096
[  112.944360][ T7208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.966317][ T7213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.000228][ T7209] dummy0 speed is unknown, defaulting to 1000
[  113.609819][ T7224] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32)
[  113.641836][ T7226] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.651565][ T7226] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.660026][ T7226] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.668284][ T7226] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.689386][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.700450][ T3699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.745341][ T7231] loop5: detected capacity change from 0 to 256
[  113.764661][ T7228] loop0: detected capacity change from 0 to 512
[  113.778990][ T7231] FAT-fs (loop5): Directory bread(block 1285) failed
[  113.787510][ T7228] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.791133][ T7231] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  113.796590][ T7228] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  113.820956][ T7231] FAT-fs (loop5): Directory bread(block 1285) failed
[  113.831997][ T7228] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  113.841378][ T7231] FAT-fs (loop5): Directory bread(block 1285) failed
[  113.841431][ T7231] FAT-fs (loop5): Directory bread(block 1285) failed
[  113.871158][ T7240] loop2: detected capacity change from 0 to 512
[  113.877642][ T7228] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  113.886059][ T7228] System zones: 0-2, 18-18, 34-35
[  113.891848][ T7228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.901793][ T7239] lo: entered promiscuous mode
[  113.908737][ T7239] lo: entered allmulticast mode
[  113.916710][ T7243] FAULT_INJECTION: forcing a failure.
[  113.916710][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.931865][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.5.1203 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  113.931891][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.931903][ T7243] Call Trace:
[  113.931909][ T7243]  <TASK>
[  113.931918][ T7243]  dump_stack_lvl+0xf6/0x150
[  113.931944][ T7243]  dump_stack+0x15/0x1a
[  113.931960][ T7243]  should_fail_ex+0x261/0x270
[  113.932054][ T7243]  should_fail+0xb/0x10
[  113.932141][ T7243]  should_fail_usercopy+0x1a/0x20
[  113.932233][ T7243]  _copy_to_user+0x20/0xa0
[  113.932268][ T7243]  simple_read_from_buffer+0xb2/0x130
[  113.932363][ T7243]  proc_fail_nth_read+0x103/0x140
[  113.932396][ T7243]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.932531][ T7243]  vfs_read+0x1b2/0x710
[  113.932546][ T7243]  ? __rcu_read_unlock+0x4e/0x70
[  113.932571][ T7243]  ? __fget_files+0x186/0x1c0
[  113.932600][ T7243]  ksys_read+0xeb/0x1b0
[  113.932623][ T7243]  __x64_sys_read+0x42/0x50
[  113.932644][ T7243]  x64_sys_call+0x2a3b/0x2e10
[  113.932674][ T7243]  do_syscall_64+0xc9/0x1a0
[  113.932705][ T7243]  ? clear_bhb_loop+0x25/0x80
[  113.932725][ T7243]  ? clear_bhb_loop+0x25/0x80
[  113.932767][ T7243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.932791][ T7243] RIP: 0033:0x7f22a9c0cb7c
[  113.932807][ T7243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  113.932824][ T7243] RSP: 002b:00007f22a8277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  113.932844][ T7243] RAX: ffffffffffffffda RBX: 00007f22a9e35fa0 RCX: 00007f22a9c0cb7c
[  113.932859][ T7243] RDX: 000000000000000f RSI: 00007f22a82770a0 RDI: 0000000000000009
[  113.932935][ T7243] RBP: 00007f22a8277090 R08: 0000000000000000 R09: 0000000000000000
[  113.932982][ T7243] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002
[  113.932995][ T7243] R13: 0000000000000000 R14: 00007f22a9e35fa0 R15: 00007ffc19d5baa8
[  113.933014][ T7243]  </TASK>
[  113.934483][ T7228] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  113.945615][ T7240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.961877][ T7228] netlink: 132 bytes leftover after parsing attributes in process `wg1'.
[  114.173661][ T7240] EXT4-fs (loop2): 1 truncate cleaned up
[  114.198344][ T7248] loop1: detected capacity change from 0 to 4096
[  114.203234][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.235962][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.246741][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.277266][ T7254] loop4: detected capacity change from 0 to 2048
[  114.287990][ T7240] sd 0:0:1:0: device reset
[  114.308434][ T7254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.374954][ T7259] xt_hashlimit: overflow, rate too high: 1125899906842624
[  114.402294][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.578658][ T7270] loop0: detected capacity change from 0 to 512
[  114.602609][ T7270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.615208][ T7270] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.761302][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.866307][ T7274] loop1: detected capacity change from 0 to 2048
[  114.876820][ T7277] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1213'.
[  114.891024][ T7277] netlink: zone id is out of range
[  114.896441][ T7277] netlink: zone id is out of range
[  114.902172][ T7274]  loop1: p1 < > p4
[  114.906537][ T7277] netlink: zone id is out of range
[  114.911856][ T7274] loop1: p4 size 8388608 extends beyond EOD, truncated
[  114.931438][ T7277] netlink: zone id is out of range
[  114.945236][ T7280] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  114.955647][ T7277] netlink: zone id is out of range
[  114.960858][ T7277] netlink: zone id is out of range
[  114.973486][ T7277] netlink: zone id is out of range
[  115.027820][ T7277] netlink: zone id is out of range
[  115.044388][ T7277] netlink: zone id is out of range
[  115.101734][ T7277] netlink: zone id is out of range
[  115.139008][ T7289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.421545][ T7304] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1219'.
[  115.471112][ T7307] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  115.541038][ T7314] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  115.567034][ T7314] SELinux: failed to load policy
[  116.179225][ T4986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  116.361715][   T29] kauditd_printk_skb: 151 callbacks suppressed
[  116.361732][   T29] audit: type=1400 audit(1745273628.417:4043): avc:  denied  { unmount } for  pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  116.550605][   T29] audit: type=1400 audit(1745273628.517:4044): avc:  denied  { ioctl } for  pid=7330 comm="syz.2.1229" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  116.576764][   T29] audit: type=1400 audit(1745273628.577:4045): avc:  denied  { ioctl } for  pid=7330 comm="syz.2.1229" path="socket:[17448]" dev="sockfs" ino=17448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.648251][ T7338] FAULT_INJECTION: forcing a failure.
[  116.648251][ T7338] name failslab, interval 1, probability 0, space 0, times 0
[  116.662874][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.0.1231 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  116.662949][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  116.662962][ T7338] Call Trace:
[  116.662969][ T7338]  <TASK>
[  116.662978][ T7338]  dump_stack_lvl+0xf6/0x150
[  116.663006][ T7338]  dump_stack+0x15/0x1a
[  116.663024][ T7338]  should_fail_ex+0x261/0x270
[  116.663050][ T7338]  should_failslab+0x8f/0xb0
[  116.663082][ T7338]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  116.663113][ T7338]  ? __alloc_skb+0x10d/0x320
[  116.663135][ T7338]  __alloc_skb+0x10d/0x320
[  116.663157][ T7338]  netlink_alloc_large_skb+0xad/0xe0
[  116.663214][ T7338]  netlink_sendmsg+0x3da/0x720
[  116.663241][ T7338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.663282][ T7338]  __sock_sendmsg+0x140/0x180
[  116.663314][ T7338]  ____sys_sendmsg+0x350/0x4e0
[  116.663359][ T7338]  __sys_sendmsg+0x1a0/0x240
[  116.663402][ T7338]  __x64_sys_sendmsg+0x46/0x50
[  116.663493][ T7338]  x64_sys_call+0x26f3/0x2e10
[  116.663515][ T7338]  do_syscall_64+0xc9/0x1a0
[  116.663609][ T7338]  ? clear_bhb_loop+0x25/0x80
[  116.663659][ T7338]  ? clear_bhb_loop+0x25/0x80
[  116.663682][ T7338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.663731][ T7338] RIP: 0033:0x7f54ac40e169
[  116.663747][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.663768][ T7338] RSP: 002b:00007f54aaa77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.663789][ T7338] RAX: ffffffffffffffda RBX: 00007f54ac635fa0 RCX: 00007f54ac40e169
[  116.663860][ T7338] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  116.663874][ T7338] RBP: 00007f54aaa77090 R08: 0000000000000000 R09: 0000000000000000
[  116.663888][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.663898][ T7338] R13: 0000000000000000 R14: 00007f54ac635fa0 R15: 00007fff657ae6c8
[  116.663917][ T7338]  </TASK>
[  116.952633][ T7347] loop4: detected capacity change from 0 to 128
[  116.961612][ T7347] vfat: Unknown parameter '18446744073709551615'
[  116.998458][ T7352] loop4: detected capacity change from 0 to 128
[  117.017958][   T29] audit: type=1326 audit(1745273629.067:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd6abe169 code=0x7ffc0000
[  117.045764][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'.
[  117.050313][   T29] audit: type=1326 audit(1745273629.097:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5bd6abe169 code=0x7ffc0000
[  117.080330][   T29] audit: type=1400 audit(1745273629.097:4048): avc:  denied  { read } for  pid=7348 comm="syz.1.1236" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.103071][   T29] audit: type=1326 audit(1745273629.097:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd6abe169 code=0x7ffc0000
[  117.128376][   T29] audit: type=1400 audit(1745273629.097:4050): avc:  denied  { open } for  pid=7348 comm="syz.1.1236" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  117.133873][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1
[  117.154156][   T29] audit: type=1326 audit(1745273629.097:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5bd6abe169 code=0x7ffc0000
[  117.160962][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.186643][   T29] audit: type=1326 audit(1745273629.097:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7351 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bd6abe169 code=0x7ffc0000
[  117.193211][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.225454][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.232933][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.241799][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.249330][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[  117.256738][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.264238][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.272975][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.280428][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2
[  117.287840][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.295321][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.304249][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4
[  117.311680][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.319107][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.326532][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2
[  117.335269][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.342697][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.350149][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.357659][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.366494][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.373922][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.381458][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.390299][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.397783][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.405314][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.412802][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.421562][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.429001][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.436506][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.444009][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.452812][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.460360][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.467766][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.475214][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.483945][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.491445][ T7025] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  117.499852][ T7025] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  117.804546][ T7388] loop0: detected capacity change from 0 to 2048
[  117.828103][ T7388] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  117.893097][ T7392] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  117.893097][ T7392]    program syz.2.1249 not setting count and/or reply_len properly
[  117.949611][ T7393] loop0: detected capacity change from 0 to 1024
[  118.005225][ T7396] netlink: 'syz.2.1250': attribute type 13 has an invalid length.
[  118.014535][ T7396] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1250'.
[  118.051015][ T7396] erspan0: refused to change device tx_queue_len
[  118.101616][ T5001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  118.285816][ T7410] FAULT_INJECTION: forcing a failure.
[  118.285816][ T7410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.300296][ T7410] CPU: 1 UID: 0 PID: 7410 Comm: syz.2.1256 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  118.300365][ T7410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.300376][ T7410] Call Trace:
[  118.300382][ T7410]  <TASK>
[  118.300390][ T7410]  dump_stack_lvl+0xf6/0x150
[  118.300416][ T7410]  dump_stack+0x15/0x1a
[  118.300435][ T7410]  should_fail_ex+0x261/0x270
[  118.300461][ T7410]  should_fail+0xb/0x10
[  118.300479][ T7410]  should_fail_usercopy+0x1a/0x20
[  118.300502][ T7410]  _copy_to_user+0x20/0xa0
[  118.300531][ T7410]  simple_read_from_buffer+0xb2/0x130
[  118.300592][ T7410]  proc_fail_nth_read+0x103/0x140
[  118.300675][ T7410]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.300787][ T7410]  vfs_read+0x1b2/0x710
[  118.300801][ T7410]  ? __rcu_read_unlock+0x4e/0x70
[  118.300822][ T7410]  ? __fget_files+0x186/0x1c0
[  118.300843][ T7410]  ksys_read+0xeb/0x1b0
[  118.300944][ T7410]  __x64_sys_read+0x42/0x50
[  118.300964][ T7410]  x64_sys_call+0x2a3b/0x2e10
[  118.300984][ T7410]  do_syscall_64+0xc9/0x1a0
[  118.301068][ T7410]  ? clear_bhb_loop+0x25/0x80
[  118.301092][ T7410]  ? clear_bhb_loop+0x25/0x80
[  118.301113][ T7410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.301131][ T7410] RIP: 0033:0x7f3d9c30cb7c
[  118.301147][ T7410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  118.301194][ T7410] RSP: 002b:00007f3d9a977030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.301210][ T7410] RAX: ffffffffffffffda RBX: 00007f3d9c535fa0 RCX: 00007f3d9c30cb7c
[  118.301224][ T7410] RDX: 000000000000000f RSI: 00007f3d9a9770a0 RDI: 0000000000000005
[  118.301237][ T7410] RBP: 00007f3d9a977090 R08: 0000000000000000 R09: 0000000000000000
[  118.301249][ T7410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.301259][ T7410] R13: 0000000000000000 R14: 00007f3d9c535fa0 R15: 00007ffcaec2f4d8
[  118.301310][ T7410]  </TASK>
[  118.527902][ T7416] FAULT_INJECTION: forcing a failure.
[  118.527902][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  118.542385][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz.5.1259 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  118.542416][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.542431][ T7416] Call Trace:
[  118.542438][ T7416]  <TASK>
[  118.542448][ T7416]  dump_stack_lvl+0xf6/0x150
[  118.542475][ T7416]  dump_stack+0x15/0x1a
[  118.542494][ T7416]  should_fail_ex+0x261/0x270
[  118.542578][ T7416]  should_fail+0xb/0x10
[  118.542602][ T7416]  should_fail_usercopy+0x1a/0x20
[  118.542645][ T7416]  _copy_to_user+0x20/0xa0
[  118.542678][ T7416]  simple_read_from_buffer+0xb2/0x130
[  118.542738][ T7416]  proc_fail_nth_read+0x103/0x140
[  118.542789][ T7416]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  118.542824][ T7416]  vfs_read+0x1b2/0x710
[  118.542839][ T7416]  ? __rcu_read_unlock+0x4e/0x70
[  118.542887][ T7416]  ? __fget_files+0x186/0x1c0
[  118.542925][ T7416]  ksys_read+0xeb/0x1b0
[  118.542952][ T7416]  __x64_sys_read+0x42/0x50
[  118.542979][ T7416]  x64_sys_call+0x2a3b/0x2e10
[  118.543002][ T7416]  do_syscall_64+0xc9/0x1a0
[  118.543026][ T7416]  ? clear_bhb_loop+0x25/0x80
[  118.543054][ T7416]  ? clear_bhb_loop+0x25/0x80
[  118.543077][ T7416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.543129][ T7416] RIP: 0033:0x7f22a9c0cb7c
[  118.543146][ T7416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  118.543166][ T7416] RSP: 002b:00007f22a8277030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  118.543189][ T7416] RAX: ffffffffffffffda RBX: 00007f22a9e35fa0 RCX: 00007f22a9c0cb7c
[  118.543204][ T7416] RDX: 000000000000000f RSI: 00007f22a82770a0 RDI: 0000000000000006
[  118.543284][ T7416] RBP: 00007f22a8277090 R08: 0000000000000000 R09: 0000000000000000
[  118.543295][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.543306][ T7416] R13: 0000000000000000 R14: 00007f22a9e35fa0 R15: 00007ffc19d5baa8
[  118.543323][ T7416]  </TASK>
[  118.761957][ T7421] loop1: detected capacity change from 0 to 128
[  118.947423][ T7435] loop4: detected capacity change from 0 to 4096
[  118.969850][ T7435] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  119.274756][ T7468] FAULT_INJECTION: forcing a failure.
[  119.274756][ T7468] name failslab, interval 1, probability 0, space 0, times 0
[  119.287545][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.1279 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  119.287616][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  119.287631][ T7468] Call Trace:
[  119.287638][ T7468]  <TASK>
[  119.287646][ T7468]  dump_stack_lvl+0xf6/0x150
[  119.287670][ T7468]  dump_stack+0x15/0x1a
[  119.287735][ T7468]  should_fail_ex+0x261/0x270
[  119.287764][ T7468]  should_failslab+0x8f/0xb0
[  119.287788][ T7468]  __kmalloc_cache_noprof+0x55/0x320
[  119.287955][ T7468]  ? sctp_add_bind_addr+0x6f/0x1f0
[  119.287994][ T7468]  sctp_add_bind_addr+0x6f/0x1f0
[  119.288018][ T7468]  sctp_copy_local_addr_list+0x19d/0x220
[  119.288121][ T7468]  sctp_copy_one_addr+0x82/0x270
[  119.288151][ T7468]  sctp_bind_addr_copy+0x81/0x2b0
[  119.288175][ T7468]  sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0
[  119.288196][ T7468]  sctp_connect_new_asoc+0x1df/0x3c0
[  119.288271][ T7468]  sctp_sendmsg+0xe96/0x1870
[  119.288367][ T7468]  ? __pfx_sctp_sendmsg+0x10/0x10
[  119.288399][ T7468]  inet_sendmsg+0xc5/0xd0
[  119.288437][ T7468]  __sock_sendmsg+0x102/0x180
[  119.288472][ T7468]  __sys_sendto+0x1aa/0x230
[  119.288508][ T7468]  __x64_sys_sendto+0x78/0x90
[  119.288577][ T7468]  x64_sys_call+0x2bcb/0x2e10
[  119.288603][ T7468]  do_syscall_64+0xc9/0x1a0
[  119.288693][ T7468]  ? clear_bhb_loop+0x25/0x80
[  119.288737][ T7468]  ? clear_bhb_loop+0x25/0x80
[  119.288763][ T7468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.288808][ T7468] RIP: 0033:0x7f54ac40e169
[  119.288822][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.288897][ T7468] RSP: 002b:00007f54aaa77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  119.288918][ T7468] RAX: ffffffffffffffda RBX: 00007f54ac635fa0 RCX: 00007f54ac40e169
[  119.288930][ T7468] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000004
[  119.288942][ T7468] RBP: 00007f54aaa77090 R08: 0000200000000480 R09: 000000000000001c
[  119.288953][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  119.288969][ T7468] R13: 0000000000000000 R14: 00007f54ac635fa0 R15: 00007fff657ae6c8
[  119.288989][ T7468]  </TASK>
[  119.541808][ T7480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7480 comm=syz.4.1283
[  119.561741][ T7480] loop4: detected capacity change from 0 to 164
[  119.562381][ T7484] sit0: entered promiscuous mode
[  119.592974][ T7484] netlink: 'syz.0.1282': attribute type 1 has an invalid length.
[  119.600876][ T7484] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1282'.
[  119.724144][ T7489] loop4: detected capacity change from 0 to 512
[  119.888086][ T7507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=7507 comm=syz.0.1293
[  119.936318][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1293'.
[  119.949346][ T7507] loop0: detected capacity change from 0 to 164
[  119.983001][ T7513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=7513 comm=syz.2.1296
[  120.016583][ T7515] pimreg: entered allmulticast mode
[  120.049427][ T7515] pimreg: left allmulticast mode
[  120.109084][ T7522] loop0: detected capacity change from 0 to 4096
[  120.268623][ T7539] loop2: detected capacity change from 0 to 128
[  120.417330][ T7543] loop2: detected capacity change from 0 to 2048
[  120.436035][ T7547] ipvlan2: entered promiscuous mode
[  120.441864][ T7547] bridge0: port 1(ipvlan2) entered blocking state
[  120.448405][ T7547] bridge0: port 1(ipvlan2) entered disabled state
[  120.456393][ T7547] ipvlan2: entered allmulticast mode
[  120.463090][ T7547] bridge0: entered allmulticast mode
[  120.470946][ T7547] ipvlan2: left allmulticast mode
[  120.476022][ T7547] bridge0: left allmulticast mode
[  120.483145][ T7552] loop0: detected capacity change from 0 to 128
[  120.615578][ T7555] loop1: detected capacity change from 0 to 512
[  120.654374][ T7552] dummy0 speed is unknown, defaulting to 1000
[  120.693018][ T7555] EXT4-fs (loop1): 1 orphan inode deleted
[  120.701373][ T7555] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.712155][ T5010] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 1
[  120.864227][ T7564] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1310'.
[  120.875188][ T7564] netlink: 'syz.1.1310': attribute type 5 has an invalid length.
[  120.884351][ T7564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1310'.
[  120.931412][ T7566] loop1: detected capacity change from 0 to 512
[  120.943259][ T7566] EXT4-fs: Ignoring removed nobh option
[  120.950508][ T7568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  120.957050][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  120.965299][ T7568] vhci_hcd vhci_hcd.0: Device attached
[  120.975079][ T7566] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1311: invalid indirect mapped block 256 (level 2)
[  120.995062][ T7568] loop4: detected capacity change from 0 to 128
[  121.003415][ T7568] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  121.017136][ T7568] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.031673][ T7566] EXT4-fs (loop1): 2 truncates cleaned up
[  121.039984][ T7566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1311: bg 0: block 5: invalid block bitmap
[  121.150278][    T9] vhci_hcd: vhci_device speed not set
[  121.210329][    T9] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  121.246593][ T7575] loop1: detected capacity change from 0 to 4096
[  121.297739][ T7578] unsupported nla_type 52263
[  121.472847][   T29] kauditd_printk_skb: 305 callbacks suppressed
[  121.472875][   T29] audit: type=1326 audit(1745273633.527:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517217][   T29] audit: type=1326 audit(1745273633.557:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517317][   T29] audit: type=1326 audit(1745273633.557:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517372][   T29] audit: type=1326 audit(1745273633.557:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517411][   T29] audit: type=1326 audit(1745273633.557:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517545][   T29] audit: type=1326 audit(1745273633.557:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517586][   T29] audit: type=1326 audit(1745273633.557:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54ac40cad0 code=0x7ffc0000
[  121.517625][   T29] audit: type=1326 audit(1745273633.567:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517742][   T29] audit: type=1326 audit(1745273633.567:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.517789][   T29] audit: type=1326 audit(1745273633.567:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7583 comm="syz.0.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f54ac40e169 code=0x7ffc0000
[  121.705485][ T7569] vhci_hcd: connection reset by peer
[  121.706058][ T5010] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  121.706163][ T5005] vhci_hcd: stop threads
[  121.706185][ T5005] vhci_hcd: release socket
[  121.706225][ T5005] vhci_hcd: disconnect device
[  121.809874][ T7588] bond1: entered promiscuous mode
[  121.809906][ T7588] bond1: entered allmulticast mode
[  121.810188][ T7588] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.814686][ T7588] bond1 (unregistering): Released all slaves
[  121.897061][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'.
[  121.939655][ T4961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.042252][ T7597] loop1: detected capacity change from 0 to 256
[  122.046831][ T7597] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.051538][ T7597] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.215519][ T7597] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.222422][ T7597] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.288112][ T7607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1324'.
[  122.298019][ T7607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1324'.
[  122.319426][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'.
[  122.328454][ T7609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1325'.
[  122.337988][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'.
[  122.359796][ T7609] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1325'.
[  122.370530][ T7609] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1325'.
[  122.514603][ T7632] loop1: detected capacity change from 0 to 256
[  122.524641][ T7634] 9pnet_fd: Insufficient options for proto=fd
[  122.533092][ T7632] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.544257][ T7632] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.552340][ T7632] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.559237][ T7623] loop5: detected capacity change from 0 to 8192
[  122.566162][ T7632] FAT-fs (loop1): Directory bread(block 1285) failed
[  122.600723][ T7623]  loop5: p1 p2 p3 p4
[  122.604558][ T7636] tipc: Started in network mode
[  122.605079][ T7623] loop5: p1 size 108922248 extends beyond EOD, 
[  122.609711][ T7636] tipc: Node identity ac14140f, cluster identity 4711
[  122.609935][ T7636] tipc: New replicast peer: 10.1.1.2
[  122.610066][ T7636] tipc: Enabled bearer <udp:syz0>, priority 10
[  122.636568][ T7623] truncated
[  122.653616][ T7623] loop5: p2 start 861536256 is beyond EOD, truncated
[  122.660500][ T7623] loop5: p3 start 851968 is beyond EOD, truncated
[  122.666955][ T7623] loop5: p4 size 65536 extends beyond EOD, truncated
[  122.944486][ T7666] loop4: detected capacity change from 0 to 256
[  122.976402][ T7666] FAT-fs (loop4): Directory bread(block 1285) failed
[  122.999743][ T7666] FAT-fs (loop4): Directory bread(block 1285) failed
[  123.026858][ T7666] FAT-fs (loop4): Directory bread(block 1285) failed
[  123.033810][ T7666] FAT-fs (loop4): Directory bread(block 1285) failed
[  123.150663][ T7678] loop4: detected capacity change from 0 to 512
[  123.173348][ T7678] EXT4-fs (loop4): 1 orphan inode deleted
[  123.223410][ T4961] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1
[  123.236769][ T5010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  123.249529][ T7678] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.376928][ T7692] loop2: detected capacity change from 0 to 128
[  123.406999][ T7687] loop0: detected capacity change from 0 to 512
[  123.416959][ T7692] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  123.437492][ T7692] ext2 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.473551][ T7687] EXT4-fs: Ignoring removed nobh option
[  123.536208][ T7687] EXT4-fs: journaled quota format not specified
[  123.609229][ T7025] tipc: Node number set to 2886997007
[  124.006087][ T7708] loop0: detected capacity change from 0 to 1024
[  124.023439][ T7708] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.036040][ T7708] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  124.514169][ T7717] loop0: detected capacity change from 0 to 1764
[  124.557148][ T7721] loop2: detected capacity change from 0 to 2048
[  124.897520][ T7744] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  124.897520][ T7744]    program syz.1.1368 not setting count and/or reply_len properly
[  124.926386][ T7742] loop2: detected capacity change from 0 to 2048
[  124.948362][ T7746] loop1: detected capacity change from 0 to 512
[  124.955678][ T7746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  124.981322][ T7746] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  124.990651][ T7746] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002]
[  124.998687][ T7746] System zones: 0-1, 15-15, 18-18, 34-34
[  125.006227][ T7746] EXT4-fs (loop1): orphan cleanup on readonly fs
[  125.012689][ T7746] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  125.028586][ T7746] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  125.036669][ T7746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1369: bg 0: block 40: padding at end of block bitmap is not set
[  125.053328][ T7746] EXT4-fs (loop1): Remounting filesystem read-only
[  125.060004][ T7746] EXT4-fs (loop1): 1 truncate cleaned up
[  125.144220][ T7752] loop1: detected capacity change from 0 to 4096
[  125.421351][ T7756] loop1: detected capacity change from 0 to 256
[  125.428475][ T7756] FAT-fs (loop1): Directory bread(block 1285) failed
[  125.440578][ T7756] FAT-fs (loop1): Directory bread(block 1285) failed
[  125.447361][ T7756] FAT-fs (loop1): Directory bread(block 1285) failed
[  125.454102][ T7756] FAT-fs (loop1): Directory bread(block 1285) failed
[  125.526213][ T7762] loop0: detected capacity change from 0 to 256
[  125.554070][ T7762] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.568904][ T7762] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.575736][ T7762] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.583829][ T7762] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.646654][ T7768] loop5: detected capacity change from 0 to 1024
[  125.655092][ T7768] EXT4-fs: Ignoring removed orlov option
[  125.660916][ T7768] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.668780][ T7771] netlink: 'syz.1.1376': attribute type 11 has an invalid length.
[  125.686113][ T7770] loop0: detected capacity change from 0 to 512
[  125.702154][ T7770] EXT4-fs: Ignoring removed orlov option
[  125.711872][ T7770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  125.754239][ T7770] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.817656][ T7790] loop0: detected capacity change from 0 to 256
[  125.826248][ T7790] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.846132][ T7790] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.848092][ T7795] FAULT_INJECTION: forcing a failure.
[  125.848092][ T7795] name failslab, interval 1, probability 0, space 0, times 0
[  125.853208][ T7790] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.853242][ T7790] FAT-fs (loop0): Directory bread(block 1285) failed
[  125.881730][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.1.1386 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  125.881832][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  125.881844][ T7795] Call Trace:
[  125.881851][ T7795]  <TASK>
[  125.881858][ T7795]  dump_stack_lvl+0xf6/0x150
[  125.881967][ T7795]  dump_stack+0x15/0x1a
[  125.881987][ T7795]  should_fail_ex+0x261/0x270
[  125.882016][ T7795]  should_failslab+0x8f/0xb0
[  125.882042][ T7795]  kmem_cache_alloc_node_noprof+0x5c/0x340
[  125.882070][ T7795]  ? __alloc_skb+0x10d/0x320
[  125.882089][ T7795]  __alloc_skb+0x10d/0x320
[  125.882113][ T7795]  netlink_alloc_large_skb+0xad/0xe0
[  125.882149][ T7795]  netlink_sendmsg+0x3da/0x720
[  125.882172][ T7795]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.882191][ T7795]  __sock_sendmsg+0x140/0x180
[  125.882247][ T7795]  ____sys_sendmsg+0x350/0x4e0
[  125.882280][ T7795]  __sys_sendmsg+0x1a0/0x240
[  125.882327][ T7795]  __x64_sys_sendmsg+0x46/0x50
[  125.882415][ T7795]  x64_sys_call+0x26f3/0x2e10
[  125.882435][ T7795]  do_syscall_64+0xc9/0x1a0
[  125.882460][ T7795]  ? clear_bhb_loop+0x25/0x80
[  125.882595][ T7795]  ? clear_bhb_loop+0x25/0x80
[  125.882621][ T7795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.882647][ T7795] RIP: 0033:0x7fb162dee169
[  125.882669][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.882817][ T7795] RSP: 002b:00007fb161457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.882840][ T7795] RAX: ffffffffffffffda RBX: 00007fb163015fa0 RCX: 00007fb162dee169
[  125.882855][ T7795] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 000000000000000b
[  125.882870][ T7795] RBP: 00007fb161457090 R08: 0000000000000000 R09: 0000000000000000
[  125.882884][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.882897][ T7795] R13: 0000000000000000 R14: 00007fb163015fa0 R15: 00007ffe290e7228
[  125.882945][ T7795]  </TASK>
[  126.136327][ T7805] FAULT_INJECTION: forcing a failure.
[  126.136327][ T7805] name failslab, interval 1, probability 0, space 0, times 0
[  126.145102][ T7804] loop2: detected capacity change from 0 to 2048
[  126.151456][ T7805] CPU: 0 UID: 0 PID: 7805 Comm: syz.0.1391 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  126.151494][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  126.151510][ T7805] Call Trace:
[  126.151517][ T7805]  <TASK>
[  126.151528][ T7805]  dump_stack_lvl+0xf6/0x150
[  126.151598][ T7805]  dump_stack+0x15/0x1a
[  126.151620][ T7805]  should_fail_ex+0x261/0x270
[  126.151651][ T7805]  should_failslab+0x8f/0xb0
[  126.151679][ T7805]  __kmalloc_cache_noprof+0x55/0x320
[  126.151730][ T7805]  ? genl_start+0x11e/0x3a0
[  126.151766][ T7805]  genl_start+0x11e/0x3a0
[  126.151805][ T7805]  __netlink_dump_start+0x32a/0x520
[  126.151843][ T7805]  genl_rcv_msg+0x55e/0x6f0
[  126.151877][ T7805]  ? __pfx_ethnl_phy_start+0x10/0x10
[  126.151916][ T7805]  ? __pfx_ethnl_phy_dumpit+0x10/0x10
[  126.151955][ T7805]  ? __pfx_ethnl_phy_done+0x10/0x10
[  126.152060][ T7805]  ? __pfx_genl_start+0x10/0x10
[  126.152091][ T7805]  ? __pfx_genl_dumpit+0x10/0x10
[  126.152177][ T7805]  ? __pfx_genl_done+0x10/0x10
[  126.152218][ T7805]  netlink_rcv_skb+0x12f/0x230
[  126.152269][ T7805]  ? __pfx_genl_rcv_msg+0x10/0x10
[  126.152313][ T7805]  genl_rcv+0x28/0x40
[  126.152360][ T7805]  netlink_unicast+0x605/0x6c0
[  126.152404][ T7805]  netlink_sendmsg+0x609/0x720
[  126.152436][ T7805]  ? __pfx_netlink_sendmsg+0x10/0x10
[  126.152486][ T7805]  __sock_sendmsg+0x140/0x180
[  126.152526][ T7805]  ____sys_sendmsg+0x350/0x4e0
[  126.152562][ T7805]  __sys_sendmsg+0x1a0/0x240
[  126.152693][ T7805]  __x64_sys_sendmsg+0x46/0x50
[  126.152722][ T7805]  x64_sys_call+0x26f3/0x2e10
[  126.152750][ T7805]  do_syscall_64+0xc9/0x1a0
[  126.152782][ T7805]  ? clear_bhb_loop+0x25/0x80
[  126.152810][ T7805]  ? clear_bhb_loop+0x25/0x80
[  126.152840][ T7805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.152941][ T7805] RIP: 0033:0x7f54ac40e169
[  126.152960][ T7805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.152983][ T7805] RSP: 002b:00007f54aaa77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  126.153007][ T7805] RAX: ffffffffffffffda RBX: 00007f54ac635fa0 RCX: 00007f54ac40e169
[  126.153022][ T7805] RDX: 0000000020040814 RSI: 0000200000000840 RDI: 0000000000000003
[  126.153037][ T7805] RBP: 00007f54aaa77090 R08: 0000000000000000 R09: 0000000000000000
[  126.153052][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.153098][ T7805] R13: 0000000000000000 R14: 00007f54ac635fa0 R15: 00007fff657ae6c8
[  126.153123][ T7805]  </TASK>
[  126.258996][    T9] usb 9-1: enqueue for inactive port 0
[  126.425611][ T7808] loop5: detected capacity change from 0 to 512
[  126.436211][ T7808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.447728][    T9] usb 9-1: enqueue for inactive port 0
[  126.513654][ T7808] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.524814][   T29] kauditd_printk_skb: 166 callbacks suppressed
[  126.524828][   T29] audit: type=1326 audit(1745273638.577:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a9c0cad0 code=0x7ffc0000
[  126.556716][    T9] vhci_hcd: vhci_device speed not set
[  126.565105][   T29] audit: type=1326 audit(1745273638.617:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f22a9c0ceb7 code=0x7ffc0000
[  126.588591][   T29] audit: type=1326 audit(1745273638.617:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a9c0cad0 code=0x7ffc0000
[  126.592674][ T7811] loop0: detected capacity change from 0 to 1024
[  126.614269][   T29] audit: type=1326 audit(1745273638.617:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.622117][ T7808] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1392: bg 0: block 304: padding at end of block bitmap is not set
[  126.645673][   T29] audit: type=1326 audit(1745273638.617:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.686925][   T29] audit: type=1326 audit(1745273638.617:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.706433][ T7808] EXT4-fs (loop5): Remounting filesystem read-only
[  126.712559][   T29] audit: type=1326 audit(1745273638.617:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.743792][   T29] audit: type=1326 audit(1745273638.617:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.743832][   T29] audit: type=1326 audit(1745273638.647:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.747185][   T29] audit: type=1326 audit(1745273638.767:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7807 comm="syz.5.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22a9c0e169 code=0x7ffc0000
[  126.919939][ T7825] netlink: 'syz.5.1395': attribute type 1 has an invalid length.
[  126.950473][ T7831] loop5: detected capacity change from 0 to 256
[  126.958186][ T7831] FAT-fs (loop5): Directory bread(block 1285) failed
[  126.969762][ T7829] loop0: detected capacity change from 0 to 512
[  126.978230][ T7831] FAT-fs (loop5): Directory bread(block 1285) failed
[  126.997170][ T7829] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.006351][ T7829] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  127.017905][ T7831] FAT-fs (loop5): Directory bread(block 1285) failed
[  127.024896][ T7831] FAT-fs (loop5): Directory bread(block 1285) failed
[  127.050217][ T7829] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  127.061719][ T7829] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  127.072420][ T7834] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub
[  127.092016][ T7829] System zones: 0-2, 18-18, 34-34
[  127.098017][ T7829] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  127.143670][ T7829] EXT4-fs (loop0): 1 truncate cleaned up
[  127.154664][ T7837] loop5: detected capacity change from 0 to 512
[  127.169840][ T7837] EXT4-fs: Ignoring removed orlov option
[  127.203308][ T7837] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1400: corrupted in-inode xattr: invalid ea_ino
[  127.226867][ T7837] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1400: couldn't read orphan inode 15 (err -117)
[  127.266184][ T7842] __nla_validate_parse: 7 callbacks suppressed
[  127.266239][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'.
[  127.320096][ T7842] hsr_slave_1 (unregistering): left promiscuous mode
[  127.450910][ T7851] loop0: detected capacity change from 0 to 512
[  127.472895][ T7851] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.531383][ T7856] loop4: detected capacity change from 0 to 4096
[  127.656079][ T7863] loop0: detected capacity change from 0 to 512
[  127.747229][ T4996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.763393][ T7863] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.772596][ T7863] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  127.797759][ T7863] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  127.855160][ T7863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  127.872518][ T7864] dummy0 speed is unknown, defaulting to 1000
[  127.886127][ T7863] System zones: 0-2, 18-18, 34-34
[  127.905548][ T7863] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  127.920509][ T7875] loop4: detected capacity change from 0 to 512
[  127.927542][ T7875] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.938583][ T7875] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  127.949143][ T7875] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  127.958142][ T7863] EXT4-fs (loop0): 1 truncate cleaned up
[  127.958238][ T7875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  127.972867][ T7864] chnl_net:caif_netlink_parms(): no params data found
[  127.974013][ T7875] System zones: 0-2, 18-18, 34-34
[  127.987000][ T7875] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  128.019388][ T7875] EXT4-fs (loop4): 1 truncate cleaned up
[  128.048628][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.055836][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.069269][ T7864] bridge_slave_0: entered allmulticast mode
[  128.077231][ T7883] rdma_rxe: rxe_newlink: failed to add vxcan1
[  128.136406][ T7864] bridge_slave_0: entered promiscuous mode
[  128.145105][ T7887] ieee802154 phy0 wpan0: encryption failed: -22
[  128.176017][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.185060][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.259551][ T5001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.273376][ T7864] bridge_slave_1: entered allmulticast mode
[  128.282322][ T7864] bridge_slave_1: entered promiscuous mode
[  128.324250][ T7897] loop0: detected capacity change from 0 to 256
[  128.336912][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.366571][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.413093][ T7864] team0: Port device team_slave_0 added
[  128.421383][ T7897] FAT-fs (loop0): Directory bread(block 1285) failed
[  128.429797][ T7864] team0: Port device team_slave_1 added
[  128.441538][ T7897] FAT-fs (loop0): Directory bread(block 1285) failed
[  128.468918][ T7897] FAT-fs (loop0): Directory bread(block 1285) failed
[  128.481728][ T7897] FAT-fs (loop0): Directory bread(block 1285) failed
[  128.500265][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.507367][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.535358][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.563550][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.570597][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.598454][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.654968][ T7929] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  128.662907][ T7929] SELinux: failed to load policy
[  128.670018][ T7933] ==================================================================
[  128.671760][ T7864] hsr_slave_0: entered promiscuous mode
[  128.678131][ T7933] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[  128.687610][ T7864] hsr_slave_1: entered promiscuous mode
[  128.691357][ T7933] 
[  128.691366][ T7933] write to 0xffff8881035d9660 of 8 bytes by task 7928 on cpu 0:
[  128.691384][ T7933]  mas_wr_store_entry+0x1266/0x2460
[  128.691413][ T7933]  mas_store_prealloc+0x6d5/0x960
[  128.700649][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.706906][ T7933]  commit_merge+0x685/0x710
[  128.717703][ T7864] Cannot create hsr debugfs directory
[  128.724646][ T7933]  vma_expand+0x1d9/0x380
[  128.724675][ T7933]  vma_merge_new_range+0x2c2/0x340
[  128.724700][ T7933]  mmap_region+0x805/0x1490
[  128.724727][ T7933]  do_mmap+0x9ef/0xc80
[  128.752650][ T7933]  vm_mmap_pgoff+0x16d/0x2d0
[  128.757269][ T7933]  ksys_mmap_pgoff+0xd0/0x340
[  128.761959][ T7933]  x64_sys_call+0x1945/0x2e10
[  128.766654][ T7933]  do_syscall_64+0xc9/0x1a0
[  128.771176][ T7933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.777084][ T7933] 
[  128.779413][ T7933] read to 0xffff8881035d9660 of 8 bytes by task 7933 on cpu 1:
[  128.786967][ T7933]  mtree_range_walk+0x1b3/0x460
[  128.791836][ T7933]  mas_walk+0x16e/0x320
[  128.796017][ T7933]  lock_vma_under_rcu+0xa7/0x340
[  128.801059][ T7933]  exc_page_fault+0x150/0x6a0
[  128.805751][ T7933]  asm_exc_page_fault+0x26/0x30
[  128.810611][ T7933] 
[  128.812934][ T7933] value changed: 0x00007f5bd50c4fff -> 0x00007f5bd50a3fff
[  128.820079][ T7933] 
[  128.822411][ T7933] Reported by Kernel Concurrency Sanitizer on:
[  128.828569][ T7933] CPU: 1 UID: 0 PID: 7933 Comm: syz.4.1425 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) 
[  128.840993][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.851060][ T7933] ==================================================================
[  128.940868][ T7864] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  128.952114][ T7864] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  128.961400][ T7864] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  128.970673][ T7864] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  129.018238][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.034088][ T7864] 8021q: adding VLAN 0 to HW filter on device team0
[  129.046577][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.053692][ T5001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.078722][ T7864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.089176][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  129.105575][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.112688][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.173421][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.295927][ T7864] veth0_vlan: entered promiscuous mode
[  129.305858][ T7864] veth1_vlan: entered promiscuous mode
[  129.327836][ T7864] veth0_macvtap: entered promiscuous mode
[  129.336117][ T7864] veth1_macvtap: entered promiscuous mode
[  129.351911][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.362638][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.374398][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.384908][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.397646][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.411982][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.422589][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.434479][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.444939][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.457100][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.469499][ T7864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.478315][ T7864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.487211][ T7864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.497928][ T7864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.459271][ T4996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.459317][ T4986] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration