last executing test programs:

36.568222206s ago: executing program 3 (id=127):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0xb, 0x0, 0x1, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0)

36.567280926s ago: executing program 3 (id=128):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0xbcfc, 0x6219, 0x0, 0x2, 0x21d7, 0x9b3, 0x8001, 0x800}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x62040280)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r6 = socket$inet6(0xa, 0x3, 0x88)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x2}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x4, 0x0, 0x0, 0x40000000, 0x3, 0x575}}, 0xe8)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

35.671280198s ago: executing program 3 (id=142):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

35.647275779s ago: executing program 3 (id=143):
mount$9p_fd(0x0, 0x0, 0x0, 0x8080, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@inlinecrypt}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = epoll_create(0x3ff)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000900c00000000000000f400000095000000000000daa7e87ac349f488320bdc5eaa303361f9becb967cfd797a4373bd3a9c3fd2f62f7c6fe08eb11d4faaac77e41e4d6878d8c99474946315843d215368fe5ecb78ef7362cab251ecc2a9ba88d2e28a6f60a0117a5f39bc7e7d4b9c564817f5ef37ab1ca553bfb8a58ed7ae35d2fac8e0421c9ee2beedf3d41571f02ff1c74fe36c"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000})
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffec9, &(0x7f00000044c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c0007618980050015002c000000050001af09e8b707e11f3af62e0006000000050005000a00000005020400000000000900020073797a300000000012000300686173683a6e6f13231a161582dc84d1e09f630835e79c395209ca2c8a609ca0cb97196f03ad1e0990ad5a17e1ddd26bf7a408a1b2329d1f2aea7a5d63ccfb2acebcab3fe4d2fef8ac7183d91c8355fc162aa6b30f7c122f8b9ae425ce61ebbf1e35380dd85724f36a1ce9a5a38a1e"], 0x58}}, 0x800)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000014c0)=""/4093, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7")
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x2, 0x2, 0xffff1dbf, 0x8, @dev={0xfe, 0x80, '\x00', 0x21}, @empty, 0x7, 0x8000, 0xc61d, 0xb8b9}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = dup(r8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x25, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff0001}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @map_fd={0x18, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @alu={0x4, 0x1, 0x7, 0x5, 0x6, 0xffffffffffffffff, 0xd62b64e352a059f1}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x0, 0x847, 0x23b}, 0x10, 0x1560, r4, 0xa, 0x0, &(0x7f0000000c00)=[{0x4, 0x5, 0xa, 0x3}, {0x2, 0x1, 0x4, 0x4}, {0x1, 0x3, 0xf, 0x6}, {0x5, 0x5, 0x9, 0x1}, {0x5, 0x3, 0xd, 0xc}, {0x1, 0x5, 0x7}, {0x20000002, 0x4, 0xb, 0x8}, {0x3, 0x1, 0x10, 0x8}, {0x2, 0x1, 0x10, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x6, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x101081f, &(0x7f00000012c0)={[{@nombcache}, {@debug}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r11, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
socket$inet(0x2, 0x2, 0x1)

35.383934012s ago: executing program 3 (id=150):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

35.120341825s ago: executing program 3 (id=156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x7200)

34.882853349s ago: executing program 32 (id=156):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x7200)

5.795689712s ago: executing program 0 (id=651):
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="889eefb3a2e6c79bf7fe01", 0xfd3a)
syz_read_part_table(0x62d, &(0x7f0000000000)="$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") (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) (async)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) (async)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800)
ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xc96bd) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@delqdisc={0x9c, 0x25, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {0xd, 0x6}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd7, 0x5, 0xff, 0x0, 0x7, 0x1, 0x6}}, {0x10, 0x2, [0x2, 0x0, 0x24, 0x8, 0x3, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfa, 0x3, 0x2, 0x0, 0x80, 0x4, 0x1}}, {0x6, 0x2, [0x7f]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000001}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
recvfrom(r5, &(0x7f0000000740)=""/67, 0x43, 0x40012101, &(0x7f00000006c0)=@rc={0x1f, @none, 0xe}, 0x80)

5.721682653s ago: executing program 0 (id=653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000017c0)='./file0\x00')
ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000040)={0x4, 0x5, 0x3})
memfd_create(0x0, 0x0)
setregid(0x0, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x40000006)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003781249580b09a705e34a945942890ab6e670c5553b8b0294320552eaaddd2eb322958c6527a694249372f0957d6832bd269f825e4485e8c4debdea69ec6c20bd5062639d13683c42056b55a7383abb90567c9ba2509baac66c78e1874483ced992ac79c4816b47a20b76a7593f7fd3eb230e89db0d2c2cc90940213a8a4e368f69a2e249c1a89e66990b49c5971835e1f9dc9899098af11ad6fd2764f5173c358c151e51bd4da2c799093ce53afe2c9e02071d445c8c4d1af8da835f6fa46638a8088289b54d82ee63dccd58b219668981b83ec12"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0xb)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x0, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x1100046, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'system_u'}}]}, 0x3, 0x448, &(0x7f0000001400)="$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")
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)

5.271412999s ago: executing program 0 (id=662):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020003000b"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
syncfs(r5)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(r4, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.711409916s ago: executing program 0 (id=671):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
iopl(0x3)
msgget$private(0x0, 0x240)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0x19, 0x0)
clock_adjtime(0x0, &(0x7f00000002c0)={0x0, 0x5, 0x8000000000000000, 0x7f, 0x4, 0xd53, 0x9, 0x5, 0x7, 0xf0f, 0x8000000000000000, 0xb, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0x4, 0x5, 0xe22, 0xfd, 0x9, 0x1, 0x9, 0x8000000000000000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$selinux_load(r5, &(0x7f00000003c0)={0xf97cff8c, 0x8, 'SE Linux', "7c356c7e7ee769c86e290e85c9207b165d693a"}, 0x23)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x4004662b, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x1, @desc3})

4.528756689s ago: executing program 0 (id=674):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

4.171201813s ago: executing program 0 (id=684):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x280008a, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
r3 = signalfd4(r1, &(0x7f0000000040)={[0x7]}, 0x8, 0x100800) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', r4, 0x8000, 0x7800, 0x0, 0x7, {{0x1e, 0x4, 0x2, 0x27, 0x78, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @multicast1, {[@end, @noop, @lsrr={0x83, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x11}, @remote]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0xf, [0x9, 0x8, 0x6]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xed, 0x3, 0x2, [{@empty, 0xfffffffc}, {@multicast1, 0x401}, {@loopback, 0x3}, {@empty, 0x5}, {@remote, 0x7}, {@multicast1, 0xe}]}, @noop, @generic={0x89, 0x7, "a8f2724dd3"}]}}}}}) (async)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, r5, &(0x7f0000000440)='./bus\x00')
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000006c0)="ccaf0663330c7ab16a91d7580dd3903f52f7d183a5ab0300f8295d76f1bdba6468aea613bc91e83df62fd4a52d51226ca5947859881d4c4630d553d0e57b7a91e7a336c8f360cfe902cc93fefccf3c046eaffb0059414f1c8e121c4cefe69faf71cf0cf1166395a214b0795414231e85a40e6235da044becffb02e881b2a502207e717bdff7ec785bfb854390aa3484f8c0db88ed3579f555754e59fcb6f875507ff1a888080621ffcd1d33693ae889c9a8e24529c1b08264b9c30c4251ee71693cf94adb471d3b72a5b8bea4a57a50129197f75eddee7d4f42e4e48336f45fc4429114c2ddd8b5df2048b0d83d730", 0xef}], 0x2}, 0x24008011) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close(0x4) (async, rerun: 64)
epoll_create1(0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @remote, 0x4}, r7}}, 0x30)

4.170835573s ago: executing program 33 (id=684):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x280008a, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64)
r3 = signalfd4(r1, &(0x7f0000000040)={[0x7]}, 0x8, 0x100800) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', r4, 0x8000, 0x7800, 0x0, 0x7, {{0x1e, 0x4, 0x2, 0x27, 0x78, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @multicast1, {[@end, @noop, @lsrr={0x83, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x11}, @remote]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0xf, [0x9, 0x8, 0x6]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xed, 0x3, 0x2, [{@empty, 0xfffffffc}, {@multicast1, 0x401}, {@loopback, 0x3}, {@empty, 0x5}, {@remote, 0x7}, {@multicast1, 0xe}]}, @noop, @generic={0x89, 0x7, "a8f2724dd3"}]}}}}}) (async)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, r5, &(0x7f0000000440)='./bus\x00')
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20) (async)
sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000006c0)="ccaf0663330c7ab16a91d7580dd3903f52f7d183a5ab0300f8295d76f1bdba6468aea613bc91e83df62fd4a52d51226ca5947859881d4c4630d553d0e57b7a91e7a336c8f360cfe902cc93fefccf3c046eaffb0059414f1c8e121c4cefe69faf71cf0cf1166395a214b0795414231e85a40e6235da044becffb02e881b2a502207e717bdff7ec785bfb854390aa3484f8c0db88ed3579f555754e59fcb6f875507ff1a888080621ffcd1d33693ae889c9a8e24529c1b08264b9c30c4251ee71693cf94adb471d3b72a5b8bea4a57a50129197f75eddee7d4f42e4e48336f45fc4429114c2ddd8b5df2048b0d83d730", 0xef}], 0x2}, 0x24008011) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close(0x4) (async, rerun: 64)
epoll_create1(0x0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x4, @remote, 0x4}, r7}}, 0x30)

4.170632423s ago: executing program 5 (id=686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x101d0)

4.131645954s ago: executing program 5 (id=687):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x400000000, 0x822b01)
r1 = epoll_create(0x2)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0)
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000040)="89", 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
unshare(0x64000600)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x2000200b})
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}])
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)

3.663936981s ago: executing program 5 (id=694):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

3.243020366s ago: executing program 5 (id=701):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="c4010000100033060000000000000000ac141425000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000cd2d00000000000000000000000000000000000000000000000000000000040000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000b56f531518da01e9000000000000000000890001006d6435000000000000fffffffe00000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000008020000fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542000000"], 0x1c4}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f00000001c0)={[{@minixdf}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@jqfmt_vfsold}, {@usrjquota}]}, 0x1, 0x454, &(0x7f0000000400)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x117)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$sysfs(0xffffffffffffff9c, 0x0, 0x448481, 0x20)
r6 = creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000280), &(0x7f00000006c0)='%pI4   \x00'}, 0x20)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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")
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300020e000000000700000000000002000900280000001dc414485000000003000600b80000000200000300"/54], 0x70}, 0x1, 0x7}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r10, 0x400454ce, 0xa)

2.714347813s ago: executing program 5 (id=710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

2.19157949s ago: executing program 5 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

2.149344331s ago: executing program 34 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
setitimer(0x0, 0x0, 0x0)

2.107101541s ago: executing program 2 (id=715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000001f)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x8000003d)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
fcntl$notify(r3, 0x402, 0x36)
close_range(r1, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {0x0}], 0x2}, 0x24000008)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18)
syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000149865a3bf4349b5"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
fcntl$notify(r1, 0x402, 0x8000001f) (async)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
fcntl$notify(r2, 0x402, 0x8000003d) (async)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async)
fcntl$notify(r3, 0x402, 0x36) (async)
close_range(r1, r2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {0x0}], 0x2}, 0x24000008) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) (async)
syz_emit_ethernet(0x26, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000149865a3bf4349b5"], 0x0) (async)

2.039379302s ago: executing program 2 (id=717):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000840)='f2fs_truncate_data_blocks_range\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1280021, &(0x7f0000000540)={[{@test_dummy_encryption}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2f}}, {@i_version}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000006180), 0x1, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000040c85ea163ac12ad00507da1b8ed40a45d1124a028a6b7718ae34807ea3ad51f51835d44c85051c7cd359d2eeb3b0f993f3db12087e1bf5ee91b59d6a9cd8aca0027b75b8cc5711e4179e129475527b486d9added343d079f47da5092e123bebfccec093d71c57503bc7f4c97a56f29a8246071c40587f4a650b3f10ef8540207c235b89d4e716f11e8d50ea48f7c09dbb45672a5b7dce9d286ad68ba91c2aae1bf53cb2783c46a709d87cb89b8261dbf0b2a51012f4c5229893345a7d83c366d2588e3a9fa9179494adce5c055346fc3c7602059857a32715203e43514e5fc7b3c6571b19d829e0e5432a3d73f2c9c4f29eadcbd919a13f654b17053e49f505ffd5bcc953a27963b1333958cdec999dd95b8cafea291c0dd7e6e8c4400f2427479ba91102a2fc261bc1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1)
chmod(&(0x7f0000000180)='./file1\x00', 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1, &(0x7f0000000080))
r10 = epoll_create1(0x0)
epoll_wait(r10, &(0x7f00000001c0)=[{}], 0x1, 0x9)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
r12 = openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48)
sendmsg$GTP_CMD_ECHOREQ(r11, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20040814)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x7, 0x1, 0x8, 0x4, 0x1, 0x4, '\x00', 0x0, r12, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

1.854787344s ago: executing program 2 (id=720):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000240)='smaps_rollup\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x200000000000000)

1.752016646s ago: executing program 2 (id=721):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) (async)
getcwd(&(0x7f0000000280)=""/185, 0xb9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00')
read$char_usb(r3, &(0x7f0000000040)=""/4109, 0x100d) (async)
preadv(r3, &(0x7f0000002240)=[{&(0x7f00000032c0)=""/4116, 0x1014}], 0x1, 0x29cf, 0x6) (async)
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
socket$packet(0x11, 0x3, 0x300) (async)
futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64)
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async, rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
pselect6(0x40, &(0x7f0000000180)={0xd, 0xffffffffffffff7a, 0xfffffffffffffffd, 0x81, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x24b}, 0x0, 0x0, 0x0, 0x0) (async)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) (rerun: 32)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140))

1.749168926s ago: executing program 1 (id=722):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x80000000000000}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[])
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400002, 0x158)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20)
sendfile(r0, r4, 0x0, 0x104)

1.705949937s ago: executing program 1 (id=723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

1.475571s ago: executing program 1 (id=726):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b0000000800000000800000ffff00ff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500f3006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f00000003c0)="82190704c8ea32a1424ff44ec3cefda84070bd4416307fbb5850778fc554e6361a543bc811e3149746699edb3d5beb0f68edf96e4b867c1bcd9e88c4a0bf2cefb9b8389b4b959939b3caefcf0dad3209fe936388f2b168289cd6ff86e4d3e06d078f222027a52ecde03f77ee75c72061ac679681df2a6ae437d30f421b8214f4a6241fc578a806aaa6204f775ad86775f13f0fc4e1d0aed9010064e191eabb745b886cfc2e36176a4d", 0xa9, 0x40c40c4, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

1.244114283s ago: executing program 1 (id=727):
open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x20000000000003ae, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

1.132717864s ago: executing program 1 (id=729):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3012054, &(0x7f0000000200)={[{@oldalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @mcast2}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x7, 0x4, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486"], 0xfdef)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x1, 0x4}, {0x6}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c5f)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8400, &(0x7f0000001640)={[{@discard}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x7b9, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1)

789.735919ms ago: executing program 1 (id=730):
unshare(0x26000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffc0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
r2 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
unshare(0x68040200)
ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r3, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8)
dup2(r3, r4)
fcntl$setown(r3, 0x8, r2)
tkill(r2, 0x13)
io_setup(0xffffff00, &(0x7f0000000240)=<r5=>0x0)
clock_gettime(0x0, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x9}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
io_pgetevents(r5, 0xdf, 0x3, &(0x7f0000000400)=[{}, {}, {}], &(0x7f00000002c0)={r6, r7+10000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0xd49]}, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000600)='rxrpc_receive\x00', r8, 0x0, 0x7}, 0x18)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)

640.103501ms ago: executing program 4 (id=731):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
setpriority(0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x1, 0x2, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=f'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
setxattr$incfs_metadata(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'macsec0\x00'})
setsockopt$inet6_mreq(r6, 0x29, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f00000002c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)

630.242521ms ago: executing program 2 (id=732):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1800, 0x36, 0x7ff, 0xf94, 0x3}, 0x1c)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f52f0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x10, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x24000880)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000700000004000000050000930100000001000036db0901e5d50f3f0007000000d2000000030000000e00000001000000e700000002000000ff7f0000363cffff05000000070000000900000000612e5f612e"], &(0x7f0000000c40)=""/3, 0x67, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = memfd_secret(0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005)
recvmsg$unix(r13, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r12, r11, 0x2e, 0x4608, @void}, 0x10)
close_range(r10, 0xffffffffffffffff, 0x10000000000000)

496.659373ms ago: executing program 4 (id=733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x2900, 0x4, 0x0, 0x0)

463.628194ms ago: executing program 4 (id=734):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000380), 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x48)
statx(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x2000, 0x20, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$nfs4(&(0x7f00000001c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000200)='./file1\x00', &(0x7f0000000840), 0xc2008, &(0x7f0000000a40)={[{'\'\''}, {'ext4\x00'}, {':\xe9}[}\x8e'}, {',@^$/\\'}, {}, {'syzkaller\x00'}], [{@obj_role={'obj_role', 0x3d, '-+'}}, {@euid_lt={'euid<', r1}}]})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x180009a, &(0x7f0000000780)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nodiscard}, {@noquota}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x79}}, {@dioread_lock}, {@sysvgroups}, {@noacl}, {@errors_continue}]}, 0x4, 0x4e5, &(0x7f0000000280)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x1b}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000014c0)='kmem_cache_free\x00', r5}, 0x18)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000006487a2bed3d608004504000000000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655807000000"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000c00)={0x19aa, 0x18, '\x00', 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0]})
close_range(r11, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

326.668545ms ago: executing program 4 (id=735):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0)
close(r4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

278.283496ms ago: executing program 6 (id=685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX], 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='svcrdma_post_recv\x00', r3, 0x0, 0x8}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000340)='./file0\x00', r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000001900c0000000000020000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
ppoll(&(0x7f0000000180)=[{r5, 0x3}], 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x541c, &(0x7f0000000300))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r9, r10, 0x0, 0xc19)
ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, 0x0)
pipe2$watch_queue(&(0x7f0000000380), 0x80)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0)

228.775117ms ago: executing program 2 (id=736):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x10, 0x4, 0x0, 0x0, 0x3, 0x174c54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xc}, 0x4001, 0xc8, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105ffa60000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e0ec00004fcff", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)

202.055237ms ago: executing program 4 (id=737):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000300)) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000001800048014"], 0x78}}, 0x0)
socket$inet6(0xa, 0x1, 0x0) (async)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='percpu_create_chunk\x00', r6, 0x0, 0x2}, 0x18) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r8, 0xfffffffffffffe51, &(0x7f00000006c0)}, 0x10) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") (async, rerun: 32)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d3836312c757466383d302c756e695f786c6174653d302c726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c726f6469722c757466383d302c00531b17042f7ca50e22895c2b5d4e569f5eaf155190d8f66862a6e25caf6e3347919a6ebd4864113ab7083ee0c1019f"], 0x81, 0x2ab, &(0x7f0000000840)="$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") (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) (async, rerun: 32)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a000000ff0100000000000000000000000000010000000000020000000000000000000000000000ac1414aa000000000000000000000000000000003200000000000000ac1414bb0000000000000000000000000000000004"], 0x1fc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1}}}}}}, 0x0)

159.656478ms ago: executing program 4 (id=738):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000)
read(r0, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x182, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="2000ffa1", @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0)

0s ago: executing program 6 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000020000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000011000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff0300100d690b98caa58cd290", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'vlan0\x00', 0xa00})
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a00010071756575650000001400028008000440000000f6ec000340000100000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x9684513e1a10ce6a, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r8, 0x400, 0x1)
name_to_handle_at(r8, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="20000000620000000200000000000000080000000000000007000000563f00000300000000000000ca07c36f4032274aa4d709f0bb5b3272d65865a4216bb1f04964211c8fab43dee5bc6b91f5e3151eae1ed472a631e26fab3091fd2c9200"/105], &(0x7f00000004c0), 0xc00)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ip=0x7fc54e3de969 code=0x7ffc0000
[   42.479489][ T3997] loop4: detected capacity change from 0 to 512
[   42.536030][ T3997] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   42.548843][ T3997] EXT4-fs (loop4): 1 truncate cleaned up
[   42.555036][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.569119][ T3997] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.572821][ T3877] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   42.596441][ T3877] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   42.606044][ T3877] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   42.649822][ T3877] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   42.700884][ T3877] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.713925][ T3877] 8021q: adding VLAN 0 to HW filter on device team0
[   42.728995][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.736115][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.757726][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.764912][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.890119][ T4019] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[   42.910971][ T3877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   42.995049][ T4042] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.077101][ T4053] process 'syz.0.211' launched '/dev/fd/4' with NULL argv: empty string added
[   43.091690][ T4042] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.111349][ T3877] veth0_vlan: entered promiscuous mode
[   43.125095][ T3877] veth1_vlan: entered promiscuous mode
[   43.133904][ T4042] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.158499][ T3877] veth0_macvtap: entered promiscuous mode
[   43.166421][ T3877] veth1_macvtap: entered promiscuous mode
[   43.178296][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   43.189146][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.200056][ T3877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   43.212080][ T4042] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.230748][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   43.241422][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   43.254730][ T3877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   43.266136][ T3877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.275078][ T3877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.284015][ T3877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.292856][ T3877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.292972][ T4063] loop2: detected capacity change from 0 to 512
[   43.312104][ T4063] EXT4-fs: Ignoring removed nomblk_io_submit option
[   43.322662][ T4063] EXT4-fs: Ignoring removed mblk_io_submit option
[   43.330939][ T4063] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   43.340204][ T4063] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   43.356778][ T4063] EXT4-fs (loop2): 1 truncate cleaned up
[   43.363139][ T4063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.386277][ T4063] __nla_validate_parse: 7 callbacks suppressed
[   43.386294][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   43.389870][ T4067] syzkaller0: entered promiscuous mode
[   43.393045][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   43.401589][ T4067] syzkaller0: entered allmulticast mode
[   43.423297][ T4063] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   43.445077][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.468967][ T4070] xt_hashlimit: max too large, truncated to 1048576
[   43.583717][ T4074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.643240][ T4074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.650724][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'.
[   43.695831][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'.
[   43.721947][ T4074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.782124][ T4074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.808102][ T4087] program syz.4.226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.817668][ T4087] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   43.842521][ T4091] loop0: detected capacity change from 0 to 512
[   43.849485][ T4091] EXT4-fs: Ignoring removed nobh option
[   43.867381][ T4074] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   43.883022][ T4091] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.228: corrupted inode contents
[   43.898579][ T4074] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.907431][ T4091] EXT4-fs (loop0): Remounting filesystem read-only
[   43.918908][ T4091] EXT4-fs (loop0): 1 truncate cleaned up
[   43.919868][ T4074] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.925308][ T4091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.936579][ T4074] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.954074][ T4091] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.954431][  T174] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.975290][  T174] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   43.990850][  T174] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   44.000022][ T4091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   44.011990][ T4091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   44.021316][ T4091] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   44.044404][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.088516][ T4098] bridge0: entered promiscuous mode
[   44.113180][ T4098] bridge0: port 3(macvlan2) entered blocking state
[   44.122451][ T4098] bridge0: port 3(macvlan2) entered disabled state
[   44.142565][ T4098] macvlan2: entered allmulticast mode
[   44.158046][ T4098] bridge0: entered allmulticast mode
[   44.169560][ T4098] macvlan2: left allmulticast mode
[   44.175160][ T4098] bridge0: left allmulticast mode
[   44.183552][ T4098] bridge0: left promiscuous mode
[   44.232821][ T4110] loop4: detected capacity change from 0 to 256
[   44.244006][ T4110] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   44.299964][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'.
[   44.382741][ T4108] loop0: detected capacity change from 0 to 128
[   44.396470][ T4042] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.398003][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'.
[   44.408641][ T4042] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.413755][ T4124] netlink: 200 bytes leftover after parsing attributes in process `syz.4.239'.
[   44.426492][ T4042] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.442828][ T4042] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.475838][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.483683][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.491187][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.498752][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.506169][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.514702][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.523045][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.530675][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.538173][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.545721][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.553194][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.561162][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.569023][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.576493][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.584118][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.591707][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.599164][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.606654][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.614051][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.621583][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.628991][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.636724][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.644216][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.651693][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.659186][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.666696][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.674230][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.681724][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.689257][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.696653][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.704087][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.711653][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.719217][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.726810][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.734403][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.741813][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.749324][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.756790][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.764249][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.771690][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.779180][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.786657][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.794089][ T3390] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   44.802468][ T3390] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   44.819684][ T4136] netlink: 1 bytes leftover after parsing attributes in process `syz.1.241'.
[   45.131878][ T4171] capability: warning: `syz.4.253' uses deprecated v2 capabilities in a way that may be insecure
[   45.216715][ T4176] SELinux:  policydb magic number 0x18 does not match expected magic number 0xf97cff8c
[   45.227106][ T4176] SELinux: failed to load policy
[   45.270675][ T4178] loop4: detected capacity change from 0 to 256
[   45.406658][ T4184] SELinux: syz.4.259 (4184) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   45.406722][ T4186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.260'.
[   45.454215][ T4186] loop2: detected capacity change from 0 to 512
[   45.491792][ T4186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   45.506497][ T4186] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.578602][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'.
[   45.618052][ T4193] loop5: detected capacity change from 0 to 512
[   45.627317][ T4193] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   45.643661][ T4195] team0: Port device team_slave_0 removed
[   45.653781][ T4193] EXT4-fs (loop5): 1 truncate cleaned up
[   45.660478][ T4193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.674755][ T4193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.731947][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   45.924712][ T4215] loop1: detected capacity change from 0 to 128
[   46.275063][ T4240] loop0: detected capacity change from 0 to 512
[   46.294405][ T4240] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   46.303478][ T4240] EXT4-fs (loop0): 1 truncate cleaned up
[   46.310303][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.337598][ T4240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.294108][ T4298] sctp: [Deprecated]: syz.2.298 (pid 4298) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.294108][ T4298] Use struct sctp_sack_info instead
[   47.340576][ T4302] loop4: detected capacity change from 0 to 164
[   47.348574][ T4300] loop1: detected capacity change from 0 to 512
[   47.363146][   T29] kauditd_printk_skb: 324 callbacks suppressed
[   47.363162][   T29] audit: type=1400 audit(1747054011.369:884): avc:  denied  { mount } for  pid=4301 comm="syz.4.300" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   47.399729][ T4300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.415401][ T4302] Cannot find add_set index 0 as target
[   47.422126][ T4302] syz.4.300: attempt to access beyond end of device
[   47.422126][ T4302] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   47.436047][ T4302] syz.4.300: attempt to access beyond end of device
[   47.436047][ T4302] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   47.449742][ T4300] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.584837][   T29] audit: type=1400 audit(1747054011.429:885): avc:  denied  { execute } for  pid=4301 comm="syz.4.300" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   47.606552][   T29] audit: type=1400 audit(1747054011.429:886): avc:  denied  { execute_no_trans } for  pid=4301 comm="syz.4.300" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   47.635975][   T29] audit: type=1400 audit(1747054011.479:887): avc:  denied  { unmount } for  pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   47.805900][   T29] audit: type=1400 audit(1747054011.809:888): avc:  denied  { create } for  pid=4299 comm="syz.1.299" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[   48.025013][ T4327] loop2: detected capacity change from 0 to 512
[   48.048716][ T4327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   48.080578][ T4327] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   48.113985][   T29] audit: type=1400 audit(1747054012.119:889): avc:  denied  { read } for  pid=4332 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.145769][ T4333] netlink: 'syz.5.311': attribute type 27 has an invalid length.
[   48.156190][ T4327] EXT4-fs (loop2): 1 truncate cleaned up
[   48.162744][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.175244][   T29] audit: type=1400 audit(1747054012.119:890): avc:  denied  { name_bind } for  pid=4328 comm="syz.5.311" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   48.197040][   T29] audit: type=1400 audit(1747054012.149:891): avc:  denied  { create } for  pid=4335 comm="syz.0.313" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   48.217994][   T29] audit: type=1400 audit(1747054012.149:892): avc:  denied  { mounton } for  pid=4335 comm="syz.0.313" path="/69/file0" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   48.242870][   T29] audit: type=1400 audit(1747054012.249:893): avc:  denied  { setattr } for  pid=4326 comm="syz.2.310" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   48.271066][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.278338][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.324834][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.377672][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.387841][ T4333] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.415416][ T4333] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.424634][ T4333] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.433710][ T4333] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.442857][ T4333] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.624838][ T4350] syzkaller0: entered promiscuous mode
[   48.630500][ T4350] syzkaller0: entered allmulticast mode
[   48.798566][ T4356] tipc: Started in network mode
[   48.803527][ T4356] tipc: Node identity ac14140f, cluster identity 4711
[   48.811275][ T4356] tipc: New replicast peer: 10.1.1.2
[   48.816665][ T4356] tipc: Enabled bearer <udp:syz0>, priority 10
[   48.848920][ T4358] __nla_validate_parse: 7 callbacks suppressed
[   48.848938][ T4358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.321'.
[   48.866421][ T4358] 0�X���: renamed from caif0
[   48.874997][ T4358] 0�X���: entered allmulticast mode
[   48.880409][ T4358] net_ratelimit: 12 callbacks suppressed
[   48.880424][ T4358] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[   49.088287][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.466353][ T4393] loop2: detected capacity change from 0 to 1024
[   49.514822][ T4393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.530321][ T4399] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   49.673628][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.705400][ T4399] 8021q: adding VLAN 0 to HW filter on device bond2
[   49.924236][ T4406] loop1: detected capacity change from 0 to 512
[   49.929164][ T3390] tipc: Node number set to 2886997007
[   49.933020][ T4406] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   49.954328][ T4406] EXT4-fs (loop1): 1 truncate cleaned up
[   50.115473][ T4371] kexec: Could not allocate control_code_buffer
[   50.130631][ T4406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.157129][ T4406] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.191118][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[   50.255161][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.343'.
[   50.277620][ T4425] loop0: detected capacity change from 0 to 1024
[   50.294869][ T4425] EXT4-fs: Ignoring removed nobh option
[   50.300532][ T4425] EXT4-fs: Ignoring removed bh option
[   50.326917][ T4427] loop1: detected capacity change from 0 to 764
[   50.350305][ T4425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.366678][ T4427] rock: directory entry would overflow storage
[   50.373081][ T4427] rock: sig=0x4f50, size=4, remaining=3
[   50.378694][ T4427] iso9660: Corrupted directory entry in block 4 of inode 1792
[   50.433230][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'.
[   50.454576][ T4440] loop1: detected capacity change from 0 to 764
[   50.470671][ T4440] FAULT_INJECTION: forcing a failure.
[   50.470671][ T4440] name failslab, interval 1, probability 0, space 0, times 0
[   50.483413][ T4440] CPU: 0 UID: 0 PID: 4440 Comm: syz.1.350 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   50.483441][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   50.483453][ T4440] Call Trace:
[   50.483460][ T4440]  <TASK>
[   50.483468][ T4440]  __dump_stack+0x1d/0x30
[   50.483491][ T4440]  dump_stack_lvl+0xe8/0x140
[   50.483513][ T4440]  dump_stack+0x15/0x1b
[   50.483532][ T4440]  should_fail_ex+0x265/0x280
[   50.483570][ T4440]  should_failslab+0x8c/0xb0
[   50.483602][ T4440]  kmem_cache_alloc_noprof+0x50/0x310
[   50.483639][ T4440]  ? mas_alloc_nodes+0x265/0x520
[   50.483669][ T4440]  mas_alloc_nodes+0x265/0x520
[   50.483698][ T4440]  mas_preallocate+0x456/0x680
[   50.483731][ T4440]  vma_link+0x8b/0x220
[   50.483771][ T4440]  insert_vm_struct+0x177/0x210
[   50.483802][ T4440]  alloc_bprm+0x42c/0x660
[   50.483824][ T4440]  do_execveat_common+0x12e/0x750
[   50.483854][ T4440]  ? getname_flags+0x154/0x3b0
[   50.483892][ T4440]  __x64_sys_execveat+0x73/0x90
[   50.483923][ T4440]  x64_sys_call+0x2dae/0x2fb0
[   50.483949][ T4440]  do_syscall_64+0xd0/0x1a0
[   50.483975][ T4440]  ? clear_bhb_loop+0x25/0x80
[   50.483998][ T4440]  ? clear_bhb_loop+0x25/0x80
[   50.484017][ T4440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.484040][ T4440] RIP: 0033:0x7f67555ce969
[   50.484058][ T4440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.484079][ T4440] RSP: 002b:00007f6753c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   50.484097][ T4440] RAX: ffffffffffffffda RBX: 00007f67557f5fa0 RCX: 00007f67555ce969
[   50.484111][ T4440] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[   50.484135][ T4440] RBP: 00007f6753c37090 R08: 0000000000001000 R09: 0000000000000000
[   50.484150][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   50.484165][ T4440] R13: 0000000000000000 R14: 00007f67557f5fa0 R15: 00007fff14467608
[   50.484188][ T4440]  </TASK>
[   50.844281][ T4451] loop1: detected capacity change from 0 to 512
[   50.860734][ T4451] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   50.871203][ T4451] EXT4-fs (loop1): 1 truncate cleaned up
[   50.877422][ T4451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.896342][ T4449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4449 comm=syz.5.354
[   50.898550][ T4451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.002470][ T4476] C: renamed from team_slave_0
[   51.011025][ T4478] FAULT_INJECTION: forcing a failure.
[   51.011025][ T4478] name failslab, interval 1, probability 0, space 0, times 0
[   51.024153][ T4478] CPU: 0 UID: 0 PID: 4478 Comm: syz.5.363 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   51.024199][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   51.024218][ T4478] Call Trace:
[   51.024226][ T4478]  <TASK>
[   51.024286][ T4478]  __dump_stack+0x1d/0x30
[   51.024307][ T4478]  dump_stack_lvl+0xe8/0x140
[   51.024326][ T4478]  dump_stack+0x15/0x1b
[   51.024348][ T4478]  should_fail_ex+0x265/0x280
[   51.024380][ T4478]  should_failslab+0x8c/0xb0
[   51.024435][ T4478]  kmem_cache_alloc_node_noprof+0x57/0x320
[   51.024474][ T4478]  ? __alloc_skb+0x101/0x320
[   51.024506][ T4478]  __alloc_skb+0x101/0x320
[   51.024614][ T4478]  netlink_alloc_large_skb+0xba/0xf0
[   51.024712][ T4478]  netlink_sendmsg+0x3cf/0x6b0
[   51.024747][ T4478]  ? __pfx_netlink_sendmsg+0x10/0x10
[   51.024781][ T4478]  __sock_sendmsg+0x142/0x180
[   51.024848][ T4478]  ____sys_sendmsg+0x31e/0x4e0
[   51.024871][ T4478]  ___sys_sendmsg+0x17b/0x1d0
[   51.024905][ T4478]  __x64_sys_sendmsg+0xd4/0x160
[   51.024967][ T4478]  x64_sys_call+0x2999/0x2fb0
[   51.024988][ T4478]  do_syscall_64+0xd0/0x1a0
[   51.025010][ T4478]  ? clear_bhb_loop+0x25/0x80
[   51.025031][ T4478]  ? clear_bhb_loop+0x25/0x80
[   51.025107][ T4478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.025128][ T4478] RIP: 0033:0x7f6bbb66e969
[   51.025144][ T4478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.025161][ T4478] RSP: 002b:00007f6bb9cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   51.025179][ T4478] RAX: ffffffffffffffda RBX: 00007f6bbb895fa0 RCX: 00007f6bbb66e969
[   51.025195][ T4478] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003
[   51.025267][ T4478] RBP: 00007f6bb9cd7090 R08: 0000000000000000 R09: 0000000000000000
[   51.025278][ T4478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   51.025290][ T4478] R13: 0000000000000000 R14: 00007f6bbb895fa0 R15: 00007ffecd143058
[   51.025309][ T4478]  </TASK>
[   51.029688][ T4476] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   51.060704][ T4480] loop5: detected capacity change from 0 to 128
[   51.062294][ T4476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.362'.
[   51.090681][ T4482] loop2: detected capacity change from 0 to 256
[   51.091067][ T4476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   51.292586][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.375252][ T4485] SELinux: failed to load policy
[   51.399916][ T4489] loop0: detected capacity change from 0 to 512
[   51.412231][ T4489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   51.437567][ T4489] EXT4-fs (loop0): 1 truncate cleaned up
[   51.451262][ T4489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.669568][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.836275][ T4506] loop0: detected capacity change from 0 to 512
[   51.845868][ T4506] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   51.855023][ T4506] EXT4-fs (loop0): 1 truncate cleaned up
[   51.861676][ T4506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.875291][ T4506] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.937581][ T4512] loop5: detected capacity change from 0 to 256
[   52.092161][ T4521] FAULT_INJECTION: forcing a failure.
[   52.092161][ T4521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.105360][ T4521] CPU: 0 UID: 0 PID: 4521 Comm: syz.5.379 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   52.105389][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   52.105403][ T4521] Call Trace:
[   52.105410][ T4521]  <TASK>
[   52.105418][ T4521]  __dump_stack+0x1d/0x30
[   52.105487][ T4521]  dump_stack_lvl+0xe8/0x140
[   52.105506][ T4521]  dump_stack+0x15/0x1b
[   52.105526][ T4521]  should_fail_ex+0x265/0x280
[   52.105561][ T4521]  should_fail+0xb/0x20
[   52.105616][ T4521]  should_fail_usercopy+0x1a/0x20
[   52.105636][ T4521]  copy_page_from_iter_atomic+0x21b/0xff0
[   52.105661][ T4521]  ? shmem_write_begin+0xa8/0x190
[   52.105690][ T4521]  ? shmem_write_begin+0xe1/0x190
[   52.105781][ T4521]  generic_perform_write+0x2c2/0x490
[   52.105819][ T4521]  shmem_file_write_iter+0xc5/0xf0
[   52.105857][ T4521]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   52.105918][ T4521]  vfs_write+0x49d/0x8d0
[   52.105951][ T4521]  ksys_write+0xda/0x1a0
[   52.105981][ T4521]  __x64_sys_write+0x40/0x50
[   52.106059][ T4521]  x64_sys_call+0x2cdd/0x2fb0
[   52.106110][ T4521]  do_syscall_64+0xd0/0x1a0
[   52.106138][ T4521]  ? clear_bhb_loop+0x25/0x80
[   52.106193][ T4521]  ? clear_bhb_loop+0x25/0x80
[   52.106220][ T4521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.106246][ T4521] RIP: 0033:0x7f6bbb66d41f
[   52.106264][ T4521] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   52.106335][ T4521] RSP: 002b:00007f6bb9cd6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   52.106359][ T4521] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f6bbb66d41f
[   52.106374][ T4521] RDX: 0000000000040000 RSI: 00007f6bb18b7000 RDI: 0000000000000006
[   52.106430][ T4521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000514
[   52.106458][ T4521] R10: 00000000000003cc R11: 0000000000000293 R12: 0000000000000006
[   52.106469][ T4521] R13: 00007f6bb9cd6ef0 R14: 00007f6bb9cd6eb0 R15: 00007f6bb18b7000
[   52.106489][ T4521]  </TASK>
[   52.314085][ T4521] loop5: detected capacity change from 0 to 512
[   52.380609][ T4521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   52.417071][ T4521] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.438506][ T4521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   52.495239][ T4533] netlink: 256 bytes leftover after parsing attributes in process `syz.2.383'.
[   52.507026][ T4535] loop5: detected capacity change from 0 to 512
[   52.508567][ T4533] tmpfs: Bad value for 'mpol'
[   52.522087][   T29] kauditd_printk_skb: 154 callbacks suppressed
[   52.522105][   T29] audit: type=1400 audit(1747054016.529:1046): avc:  denied  { tracepoint } for  pid=4532 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   52.557552][ T4539] loop1: detected capacity change from 0 to 512
[   52.564403][ T4535] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent
[   52.574958][ T4539] EXT4-fs: test_dummy_encryption option not supported
[   52.673682][ T4535] Cannot find set identified by id 0 to match
[   52.688706][   T29] audit: type=1400 audit(1747054016.689:1047): avc:  denied  { append } for  pid=4534 comm="syz.5.384" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   52.752471][ T4543] loop2: detected capacity change from 0 to 512
[   52.761346][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'.
[   52.768711][   T29] audit: type=1400 audit(1747054016.749:1048): avc:  denied  { ioctl } for  pid=4538 comm="syz.1.385" path="socket:[9446]" dev="sockfs" ino=9446 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   52.795860][   T29] audit: type=1400 audit(1747054016.749:1049): avc:  denied  { sys_module } for  pid=4538 comm="syz.1.385" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   52.846165][   T29] audit: type=1400 audit(1747054016.839:1050): avc:  denied  { write } for  pid=4547 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.865833][   T29] audit: type=1400 audit(1747054016.839:1051): avc:  denied  { setopt } for  pid=4547 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.876673][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.387'.
[   52.885447][   T29] audit: type=1400 audit(1747054016.839:1052): avc:  denied  { create } for  pid=4549 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   52.915624][ T4543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.954729][ T4561] loop0: detected capacity change from 0 to 512
[   52.984841][ T4561] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   52.996581][ T4561] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it
[   53.007075][ T4561] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.392: Corrupt directory, running e2fsck is recommended
[   53.028586][   T29] audit: type=1326 audit(1747054016.959:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85e3e969 code=0x7ffc0000
[   53.038984][ T4543] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.052126][   T29] audit: type=1326 audit(1747054016.959:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85e3e969 code=0x7ffc0000
[   53.086273][   T29] audit: type=1326 audit(1747054016.959:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4560 comm="syz.0.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c85e3e969 code=0x7ffc0000
[   53.104038][ T4570] FAULT_INJECTION: forcing a failure.
[   53.104038][ T4570] name failslab, interval 1, probability 0, space 0, times 0
[   53.111795][ T4561] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   53.122527][ T4570] CPU: 1 UID: 0 PID: 4570 Comm: syz.4.395 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   53.122561][ T4570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   53.122576][ T4570] Call Trace:
[   53.122585][ T4570]  <TASK>
[   53.122595][ T4570]  __dump_stack+0x1d/0x30
[   53.122623][ T4570]  dump_stack_lvl+0xe8/0x140
[   53.122649][ T4570]  dump_stack+0x15/0x1b
[   53.122672][ T4570]  should_fail_ex+0x265/0x280
[   53.122714][ T4570]  should_failslab+0x8c/0xb0
[   53.122752][ T4570]  kmem_cache_alloc_noprof+0x50/0x310
[   53.122795][ T4570]  ? vm_area_alloc+0x2c/0xb0
[   53.122824][ T4570]  vm_area_alloc+0x2c/0xb0
[   53.122849][ T4570]  mmap_region+0x81f/0x1470
[   53.122919][ T4570]  do_mmap+0x9de/0xc20
[   53.122955][ T4570]  vm_mmap_pgoff+0x17a/0x2e0
[   53.122987][ T4570]  ksys_mmap_pgoff+0xc2/0x310
[   53.123017][ T4570]  ? __x64_sys_mmap+0x49/0x70
[   53.123043][ T4570]  x64_sys_call+0x1602/0x2fb0
[   53.123071][ T4570]  do_syscall_64+0xd0/0x1a0
[   53.123098][ T4570]  ? clear_bhb_loop+0x25/0x80
[   53.123126][ T4570]  ? clear_bhb_loop+0x25/0x80
[   53.123153][ T4570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.123180][ T4570] RIP: 0033:0x7f05c945e9a3
[   53.123201][ T4570] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[   53.123229][ T4570] RSP: 002b:00007f05c7ac6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   53.123253][ T4570] RAX: ffffffffffffffda RBX: 00000000000004d6 RCX: 00007f05c945e9a3
[   53.123269][ T4570] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[   53.123284][ T4570] RBP: 0000200000000902 R08: 00000000ffffffff R09: 0000000000000000
[   53.123300][ T4570] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005
[   53.123315][ T4570] R13: 00007f05c7ac6ef0 R14: 00007f05c7ac6eb0 R15: 0000200000000840
[   53.123340][ T4570]  </TASK>
[   53.280283][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'.
[   53.287095][ T4561] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.392: corrupted in-inode xattr: invalid ea_ino
[   53.344687][ T4561] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.392: couldn't read orphan inode 15 (err -117)
[   53.344728][ T4543] bridge: RTM_NEWNEIGH with invalid ether address
[   53.368710][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.391121][ T4561] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   53.402951][ T4561] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it
[   53.413276][ T4561] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.392: Corrupt directory, running e2fsck is recommended
[   53.426780][ T4561] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   53.439102][ T4561] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it
[   53.449441][ T4561] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.392: Corrupt directory, running e2fsck is recommended
[   53.463241][ T4561] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   53.474810][ T4561] EXT4-fs warning (device loop0): dx_probe:851: Enable large directory feature to access it
[   53.485111][ T4561] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.392: Corrupt directory, running e2fsck is recommended
[   53.495024][ T4582] loop1: detected capacity change from 0 to 512
[   53.499144][ T4561] EXT4-fs warning (device loop0): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   53.519566][ T4582] EXT4-fs: Ignoring removed nobh option
[   53.527118][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.539854][ T4582] EXT4-fs warning (device loop1): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   53.551464][ T4582] EXT4-fs warning (device loop1): dx_probe:851: Enable large directory feature to access it
[   53.561768][ T4582] EXT4-fs warning (device loop1): dx_probe:936: inode #2: comm syz.1.398: Corrupt directory, running e2fsck is recommended
[   53.697895][ T4593] random: crng reseeded on system resumption
[   53.783063][ T4582] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   53.792411][ T4582] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.398: corrupted in-inode xattr: invalid ea_ino
[   53.807976][ T4582] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.398: couldn't read orphan inode 15 (err -117)
[   53.821509][ T4582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.873643][ T4601] FAULT_INJECTION: forcing a failure.
[   53.873643][ T4601] name failslab, interval 1, probability 0, space 0, times 0
[   53.886755][ T4601] CPU: 1 UID: 0 PID: 4601 Comm: syz.2.405 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   53.886909][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   53.886924][ T4601] Call Trace:
[   53.886931][ T4601]  <TASK>
[   53.886938][ T4601]  __dump_stack+0x1d/0x30
[   53.886973][ T4601]  dump_stack_lvl+0xe8/0x140
[   53.886990][ T4601]  dump_stack+0x15/0x1b
[   53.887061][ T4601]  should_fail_ex+0x265/0x280
[   53.887098][ T4601]  should_failslab+0x8c/0xb0
[   53.887197][ T4601]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   53.887218][ T4601]  ? sidtab_sid2str_get+0xa0/0x130
[   53.887246][ T4601]  kmemdup_noprof+0x2b/0x70
[   53.887341][ T4601]  sidtab_sid2str_get+0xa0/0x130
[   53.887447][ T4601]  security_sid_to_context_core+0x1eb/0x2e0
[   53.887594][ T4601]  security_sid_to_context+0x27/0x40
[   53.887624][ T4601]  selinux_lsmprop_to_secctx+0x67/0xf0
[   53.887659][ T4601]  security_lsmprop_to_secctx+0x43/0x80
[   53.887686][ T4601]  audit_log_task_context+0x77/0x190
[   53.887732][ T4601]  audit_log_task+0xf4/0x250
[   53.887784][ T4601]  audit_seccomp+0x61/0x100
[   53.887884][ T4601]  ? __seccomp_filter+0x68c/0x10d0
[   53.887910][ T4601]  __seccomp_filter+0x69d/0x10d0
[   53.887936][ T4601]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   53.887968][ T4601]  ? vfs_write+0x75e/0x8d0
[   53.887997][ T4601]  ? __rcu_read_unlock+0x4f/0x70
[   53.888083][ T4601]  ? __fget_files+0x184/0x1c0
[   53.888165][ T4601]  __secure_computing+0x82/0x150
[   53.888184][ T4601]  syscall_trace_enter+0xcf/0x1e0
[   53.888211][ T4601]  do_syscall_64+0xaa/0x1a0
[   53.888238][ T4601]  ? clear_bhb_loop+0x25/0x80
[   53.888272][ T4601]  ? clear_bhb_loop+0x25/0x80
[   53.888292][ T4601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.888312][ T4601] RIP: 0033:0x7fc54e3de969
[   53.888329][ T4601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   53.888429][ T4601] RSP: 002b:00007fc54ca47038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b
[   53.888452][ T4601] RAX: ffffffffffffffda RBX: 00007fc54e605fa0 RCX: 00007fc54e3de969
[   53.888467][ T4601] RDX: 0000000000000000 RSI: 0000000000000043 RDI: 0000000000000006
[   53.888482][ T4601] RBP: 00007fc54ca47090 R08: 0000000000000000 R09: 0000000000000000
[   53.888496][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.888511][ T4601] R13: 0000000000000000 R14: 00007fc54e605fa0 R15: 00007ffda37b6368
[   53.888534][ T4601]  </TASK>
[   54.180302][ T4605] loop4: detected capacity change from 0 to 2048
[   54.224446][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.234797][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.279829][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.329696][ T4605] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.357131][ T4619] FAULT_INJECTION: forcing a failure.
[   54.357131][ T4619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.370884][ T4619] CPU: 1 UID: 0 PID: 4619 Comm: syz.5.413 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   54.370918][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   54.370947][ T4619] Call Trace:
[   54.370955][ T4619]  <TASK>
[   54.370965][ T4619]  __dump_stack+0x1d/0x30
[   54.370990][ T4619]  dump_stack_lvl+0xe8/0x140
[   54.371013][ T4619]  dump_stack+0x15/0x1b
[   54.371047][ T4619]  should_fail_ex+0x265/0x280
[   54.371112][ T4619]  should_fail+0xb/0x20
[   54.371147][ T4619]  should_fail_usercopy+0x1a/0x20
[   54.371178][ T4619]  _copy_from_iter+0xcf/0xdd0
[   54.371195][ T4619]  ? __build_skb_around+0x1a0/0x200
[   54.371224][ T4619]  ? __alloc_skb+0x223/0x320
[   54.371315][ T4619]  netlink_sendmsg+0x471/0x6b0
[   54.371358][ T4619]  ? __pfx_netlink_sendmsg+0x10/0x10
[   54.371399][ T4619]  __sock_sendmsg+0x142/0x180
[   54.371443][ T4619]  ____sys_sendmsg+0x31e/0x4e0
[   54.371465][ T4619]  ___sys_sendmsg+0x17b/0x1d0
[   54.371555][ T4619]  __x64_sys_sendmsg+0xd4/0x160
[   54.371587][ T4619]  x64_sys_call+0x2999/0x2fb0
[   54.371614][ T4619]  do_syscall_64+0xd0/0x1a0
[   54.371763][ T4619]  ? clear_bhb_loop+0x25/0x80
[   54.371786][ T4619]  ? clear_bhb_loop+0x25/0x80
[   54.371813][ T4619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.371839][ T4619] RIP: 0033:0x7f6bbb66e969
[   54.371916][ T4619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.371932][ T4619] RSP: 002b:00007f6bb9cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.372007][ T4619] RAX: ffffffffffffffda RBX: 00007f6bbb895fa0 RCX: 00007f6bbb66e969
[   54.372022][ T4619] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[   54.372108][ T4619] RBP: 00007f6bb9cd7090 R08: 0000000000000000 R09: 0000000000000000
[   54.372123][ T4619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.372137][ T4619] R13: 0000000000000000 R14: 00007f6bbb895fa0 R15: 00007ffecd143058
[   54.372155][ T4619]  </TASK>
[   54.641976][ T4621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'.
[   54.671341][ T4620] SELinux: failed to load policy
[   54.697242][ T4624] syzkaller0: entered promiscuous mode
[   54.697265][ T4624] syzkaller0: entered allmulticast mode
[   54.709903][  T174] syzkaller0: tun_net_xmit 48
[   54.719823][ T4621] syz.0.407 (4621) used greatest stack depth: 9200 bytes left
[   54.783407][ T4624] syzkaller0: tun_chr_ioctl cmd 2147767520
[   54.838118][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[   54.865799][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'.
[   54.950864][ T4645] loop5: detected capacity change from 0 to 512
[   54.962649][ T4644] syzkaller0: entered promiscuous mode
[   54.968592][ T4644] syzkaller0: entered allmulticast mode
[   55.030575][ T4645] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   55.045448][  T196] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set
[   55.052086][ T4645] EXT4-fs (loop5): mount failed
[   55.093582][  T196] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1686 with error 117
[   55.107276][  T196] EXT4-fs (loop4): This should not happen!! Data will be lost
[   55.107276][  T196] 
[   55.178195][ T4655] FAULT_INJECTION: forcing a failure.
[   55.178195][ T4655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.191898][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: syz.1.425 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   55.191934][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   55.191949][ T4655] Call Trace:
[   55.191957][ T4655]  <TASK>
[   55.191966][ T4655]  __dump_stack+0x1d/0x30
[   55.191996][ T4655]  dump_stack_lvl+0xe8/0x140
[   55.192022][ T4655]  dump_stack+0x15/0x1b
[   55.192038][ T4655]  should_fail_ex+0x265/0x280
[   55.192072][ T4655]  should_fail+0xb/0x20
[   55.192100][ T4655]  should_fail_usercopy+0x1a/0x20
[   55.192140][ T4655]  _copy_from_user+0x1c/0xb0
[   55.192161][ T4655]  do_sock_getsockopt+0xf1/0x240
[   55.192200][ T4655]  __x64_sys_getsockopt+0x11e/0x1a0
[   55.192253][ T4655]  x64_sys_call+0x12aa/0x2fb0
[   55.192275][ T4655]  do_syscall_64+0xd0/0x1a0
[   55.192344][ T4655]  ? clear_bhb_loop+0x25/0x80
[   55.192365][ T4655]  ? clear_bhb_loop+0x25/0x80
[   55.192387][ T4655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.192409][ T4655] RIP: 0033:0x7f67555ce969
[   55.192485][ T4655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.192509][ T4655] RSP: 002b:00007f6753c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   55.192534][ T4655] RAX: ffffffffffffffda RBX: 00007f67557f5fa0 RCX: 00007f67555ce969
[   55.192546][ T4655] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003
[   55.192558][ T4655] RBP: 00007f6753c37090 R08: 0000200000000040 R09: 0000000000000000
[   55.192570][ T4655] R10: 0000200000001700 R11: 0000000000000246 R12: 0000000000000001
[   55.192609][ T4655] R13: 0000000000000000 R14: 00007f67557f5fa0 R15: 00007fff14467608
[   55.192628][ T4655]  </TASK>
[   55.382479][ T4645] loop5: detected capacity change from 0 to 1024
[   55.389817][ T4645] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.416959][ T4658] loop2: detected capacity change from 0 to 512
[   55.427076][ T4658] /dev/loop2: Can't open blockdev
[   55.434135][ T4645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.482100][ T4645] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.530500][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.539459][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.549821][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.559105][ T4666] nftables ruleset with unbound set
[   55.569397][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.606056][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.622954][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.632208][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.676669][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[   55.709236][ T4682] ALSA: seq fatal error: cannot create timer (-22)
[   55.770178][ T4686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.805691][ T4686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.826999][ T4686] bond0 (unregistering): Released all slaves
[   55.889451][ T4688] syzkaller0: entered promiscuous mode
[   55.894973][ T4688] syzkaller0: entered allmulticast mode
[   55.943140][ T4605] syz.4.408 (4605) used greatest stack depth: 6032 bytes left
[   55.967739][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.002174][ T4701] sch_tbf: burst 3092 is lower than device lo mtu (65550) !
[   56.015637][ T4696] loop1: detected capacity change from 0 to 512
[   56.030093][ T4696] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   56.041234][ T4696] EXT4-fs (loop1): 1 truncate cleaned up
[   56.047332][ T4696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.069455][ T4696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.187278][ T4717] loop5: detected capacity change from 0 to 1024
[   56.219337][ T4717] EXT4-fs: Ignoring removed oldalloc option
[   56.225494][ T4717] EXT4-fs: Ignoring removed bh option
[   56.236370][ T4717] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   56.247517][ T4717] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   56.320054][ T4721] loop0: detected capacity change from 0 to 512
[   56.399752][ T4717] JBD2: no valid journal superblock found
[   56.405542][ T4717] EXT4-fs (loop5): Could not load journal inode
[   56.431182][ T4721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.444018][ T4721] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.457596][ T4721] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.443: corrupted xattr block 33: invalid ea_ino
[   56.471294][ T4721] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   56.480448][ T4721] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.443: corrupted xattr block 33: invalid ea_ino
[   56.493905][ T4721] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   56.503347][ T4721] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.443: corrupted xattr block 33: invalid ea_ino
[   56.525866][ T4721] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   56.536001][ T4721] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.443: corrupted xattr block 33: invalid ea_ino
[   56.549999][ T4721] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.443: corrupted xattr block 33: invalid ea_ino
[   56.563903][ T4721] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=15
[   56.620850][ T4727] loop1: detected capacity change from 0 to 512
[   56.654882][ T4727] ext4: Bad value for 'debug_want_extra_isize'
[   56.834204][ T4731] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[   56.834204][ T4731]    program syz.1.448 not setting count and/or reply_len properly
[   57.131749][ T4739] syzkaller0: entered promiscuous mode
[   57.137606][ T4739] syzkaller0: entered allmulticast mode
[   57.212042][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.237875][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.359073][ T4756] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   57.399308][ T4758] bond3: entered promiscuous mode
[   57.404512][ T4758] bond3: entered allmulticast mode
[   57.428053][ T4758] 8021q: adding VLAN 0 to HW filter on device bond3
[   57.445214][ T4761] netlink: 'syz.5.458': attribute type 4 has an invalid length.
[   57.529620][   T29] kauditd_printk_skb: 281 callbacks suppressed
[   57.529638][   T29] audit: type=1400 audit(1747054021.529:1335): avc:  denied  { map_create } for  pid=4766 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.555531][   T29] audit: type=1400 audit(1747054021.539:1336): avc:  denied  { perfmon } for  pid=4766 comm="syz.1.461" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.795077][   T29] audit: type=1400 audit(1747054021.599:1337): avc:  denied  { prog_load } for  pid=4766 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.814510][   T29] audit: type=1400 audit(1747054021.599:1338): avc:  denied  { bpf } for  pid=4766 comm="syz.1.461" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.835578][   T29] audit: type=1400 audit(1747054021.599:1339): avc:  denied  { map_read map_write } for  pid=4766 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.855616][   T29] audit: type=1400 audit(1747054021.639:1340): avc:  denied  { prog_run } for  pid=4769 comm="syz.5.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   57.875074][   T29] audit: type=1400 audit(1747054021.659:1341): avc:  denied  { allowed } for  pid=4771 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   57.894568][   T29] audit: type=1400 audit(1747054021.669:1342): avc:  denied  { create } for  pid=4771 comm="syz.2.462" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   57.916128][   T29] audit: type=1400 audit(1747054021.669:1343): avc:  denied  { map } for  pid=4771 comm="syz.2.462" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   57.941226][   T29] audit: type=1400 audit(1747054021.669:1344): avc:  denied  { read write } for  pid=4771 comm="syz.2.462" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   58.048601][ T4785] loop5: detected capacity change from 0 to 512
[   58.093412][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.104246][ T4785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.124494][ T4785] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.213002][ T4794] loop2: detected capacity change from 0 to 512
[   58.227029][ T4798] netlink: 'syz.4.470': attribute type 27 has an invalid length.
[   58.288191][ T4799] loop4: detected capacity change from 0 to 128
[   58.307937][ T4794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.374051][ T4798] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.381428][ T4798] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.441917][ T4794] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.469: invalid block
[   58.602109][ T4794] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.469: invalid indirect mapped block 4294967295 (level 1)
[   58.633298][ T4794] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.469: invalid indirect mapped block 4294967295 (level 1)
[   58.638430][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.658302][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.691097][ T4812] loop0: detected capacity change from 0 to 512
[   58.701997][ T4798] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.710523][ T4798] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.718157][ T4813] loop1: detected capacity change from 0 to 256
[   58.719148][ T4798] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.733881][ T4798] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.742788][ T4812] EXT4-fs: Ignoring removed nobh option
[   58.764171][ T4794] EXT4-fs (loop2): 2 truncates cleaned up
[   58.768466][ T4812] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.472: corrupted inode contents
[   58.784730][ T4812] EXT4-fs (loop0): Remounting filesystem read-only
[   58.798828][ T4813] FAT-fs (loop1): Directory bread(block 1285) failed
[   58.816794][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.835763][ T4812] EXT4-fs (loop0): 1 truncate cleaned up
[   58.845942][ T4812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.859423][   T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.870401][   T31] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   58.888136][ T4810] FAT-fs (loop1): Directory bread(block 1285) failed
[   58.895745][ T4810] FAT-fs (loop1): Directory bread(block 1285) failed
[   58.930044][ T4812] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.942316][ T4810] FAT-fs (loop1): Directory bread(block 1285) failed
[   58.949494][   T31] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   59.010982][ T4794] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   59.010982][ T4794]    program syz.2.469 not setting count and/or reply_len properly
[   59.054738][ T4821] bridge0: entered promiscuous mode
[   59.108837][ T4821] macvlan4: entered promiscuous mode
[   59.115974][ T4821] bridge0: port 1(macvlan4) entered blocking state
[   59.122652][ T4821] bridge0: port 1(macvlan4) entered disabled state
[   59.139809][ T4821] macvlan4: entered allmulticast mode
[   59.145344][ T4821] bridge0: entered allmulticast mode
[   59.177350][ T4821] macvlan4: left allmulticast mode
[   59.182782][ T4821] bridge0: left allmulticast mode
[   59.209424][ T4821] bridge0: left promiscuous mode
[   59.218841][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.477669][ T4829] SELinux:  Context � is not valid (left unmapped).
[   59.517389][ T4830] loop1: detected capacity change from 0 to 512
[   59.565153][ T4826] loop2: detected capacity change from 0 to 512
[   59.621006][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.633262][ T4830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.646220][ T4830] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.659033][ T4830] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.478: corrupted xattr block 33: invalid ea_ino
[   59.674774][ T4830] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   59.684306][ T4830] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.478: corrupted xattr block 33: invalid ea_ino
[   59.698640][ T4830] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   59.708629][ T4830] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.478: corrupted xattr block 33: invalid ea_ino
[   59.733918][ T4830] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   59.744849][ T4830] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.478: corrupted xattr block 33: invalid ea_ino
[   59.759099][ T4830] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.478: corrupted xattr block 33: invalid ea_ino
[   59.772894][ T4830] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   59.822508][ T4826] EXT4-fs (loop2): external journal device major/minor numbers have changed
[   60.029918][ T4826] block device autoloading is deprecated and will be removed.
[   60.059771][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.089278][ T4826] syz.2.477: attempt to access beyond end of device
[   60.089278][ T4826] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[   60.187755][ T4826] EXT4-fs (loop2): couldn't read superblock of external journal
[   60.716312][ T4855] capability: warning: `syz.5.487' uses 32-bit capabilities (legacy support in use)
[   60.785984][ T4857] syzkaller0: entered promiscuous mode
[   60.791747][ T4857] syzkaller0: entered allmulticast mode
[   61.039358][ T4871] loop2: detected capacity change from 0 to 526
[   61.058556][ T4871] EXT4-fs: quotafile must be on filesystem root
[   61.141133][ T4876] loop0: detected capacity change from 0 to 128
[   61.205770][ T4876] syz.0.494: attempt to access beyond end of device
[   61.205770][ T4876] loop0: rw=0, sector=121, nr_sectors = 120 limit=128
[   61.224922][ T4869] loop5: detected capacity change from 0 to 8192
[   61.278404][ T4881] netlink: 'syz.0.494': attribute type 39 has an invalid length.
[   61.349584][ T4868] xt_hashlimit: max too large, truncated to 1048576
[   61.421635][   T31] kworker/u8:1: attempt to access beyond end of device
[   61.421635][   T31] loop0: rw=1, sector=241, nr_sectors = 800 limit=128
[   61.468410][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.512362][ T4894] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   61.521148][ T4894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   61.950245][ T4926] loop1: detected capacity change from 0 to 512
[   62.592448][   T29] kauditd_printk_skb: 271 callbacks suppressed
[   62.592464][   T29] audit: type=1326 audit(1747054026.559:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.622164][   T29] audit: type=1326 audit(1747054026.559:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.645665][   T29] audit: type=1326 audit(1747054026.559:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.669389][   T29] audit: type=1326 audit(1747054026.559:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.693362][   T29] audit: type=1326 audit(1747054026.559:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.716725][   T29] audit: type=1326 audit(1747054026.559:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.740141][   T29] audit: type=1326 audit(1747054026.559:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.764002][   T29] audit: type=1326 audit(1747054026.559:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.788050][   T29] audit: type=1326 audit(1747054026.559:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.811822][   T29] audit: type=1326 audit(1747054026.559:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4929 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54e3de969 code=0x7ffc0000
[   62.845044][ T4930] loop2: detected capacity change from 0 to 2048
[   62.975152][ T4939] __nla_validate_parse: 6 callbacks suppressed
[   62.975178][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'.
[   62.991022][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'.
[   63.038124][ T4926] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.052627][ T4926] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.511: corrupted xattr block 33: invalid ea_ino
[   63.148527][ T4943] netlink: 'syz.4.515': attribute type 298 has an invalid length.
[   63.210651][ T4926] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   63.220199][ T4926] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.511: corrupted xattr block 33: invalid ea_ino
[   63.277496][ T4926] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   63.286803][ T4926] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.511: corrupted xattr block 33: invalid ea_ino
[   63.300741][ T4926] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   63.310862][ T4926] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.511: corrupted xattr block 33: invalid ea_ino
[   63.325133][ T4926] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.511: corrupted xattr block 33: invalid ea_ino
[   63.341458][ T4926] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[   63.950408][ T4974] gtp0: entered promiscuous mode
[   63.955467][ T4974] gtp0: entered allmulticast mode
[   63.960656][ T4974] team0: Device gtp0 is of different type
[   64.012312][ T4981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=4981 comm=syz.2.527
[   64.068412][ T4985] loop1: detected capacity change from 0 to 512
[   64.086257][ T4985] EXT4-fs: test_dummy_encryption option not supported
[   64.123147][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[   64.155048][   T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   64.167495][ T4996] loop2: detected capacity change from 0 to 1024
[   64.174954][   T36] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   64.196104][ T4996] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.203547][ T4996] EXT4-fs: Mount option(s) incompatible with ext2
[   64.367014][ T5017] syzkaller0: entered promiscuous mode
[   64.372578][ T5017] syzkaller0: entered allmulticast mode
[   64.431208][ T5021] loop5: detected capacity change from 0 to 1024
[   64.448260][ T5021] EXT4-fs: Ignoring removed nobh option
[   64.454121][ T5021] EXT4-fs: Ignoring removed bh option
[   64.523000][ T5021] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.543: Allocating blocks 385-513 which overlap fs metadata
[   64.544503][ T5028] loop2: detected capacity change from 0 to 512
[   64.551511][ T5028] EXT4-fs: test_dummy_encryption option not supported
[   64.574558][ T5021] EXT4-fs (loop5): pa ffff88810712b690: logic 16, phys. 129, len 24
[   64.582761][ T5021] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   64.607866][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'.
[   64.640072][ T5038] loop1: detected capacity change from 0 to 512
[   64.662908][ T5038] EXT4-fs (loop1): 1 orphan inode deleted
[   64.669937][ T5038] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.680720][   T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1
[   64.701643][ T5043] loop0: detected capacity change from 0 to 128
[   64.720175][ T5043] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.767140][   T51] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1
[   64.795106][ T5049] FAULT_INJECTION: forcing a failure.
[   64.795106][ T5049] name failslab, interval 1, probability 0, space 0, times 0
[   64.807911][ T5049] CPU: 0 UID: 0 PID: 5049 Comm: syz.2.552 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   64.808007][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   64.808022][ T5049] Call Trace:
[   64.808029][ T5049]  <TASK>
[   64.808039][ T5049]  __dump_stack+0x1d/0x30
[   64.808117][ T5049]  dump_stack_lvl+0xe8/0x140
[   64.808196][ T5049]  dump_stack+0x15/0x1b
[   64.808216][ T5049]  should_fail_ex+0x265/0x280
[   64.808255][ T5049]  should_failslab+0x8c/0xb0
[   64.808322][ T5049]  __kvmalloc_node_noprof+0x126/0x4d0
[   64.808346][ T5049]  ? alloc_fdtable+0xf8/0x1b0
[   64.808379][ T5049]  alloc_fdtable+0xf8/0x1b0
[   64.808485][ T5049]  dup_fd+0x4c7/0x540
[   64.808513][ T5049]  ? _raw_spin_unlock+0x26/0x50
[   64.808542][ T5049]  ksys_unshare+0x346/0x6d0
[   64.808576][ T5049]  ? ksys_write+0x16e/0x1a0
[   64.808626][ T5049]  __x64_sys_unshare+0x1f/0x30
[   64.808657][ T5049]  x64_sys_call+0x2d4b/0x2fb0
[   64.808682][ T5049]  do_syscall_64+0xd0/0x1a0
[   64.808708][ T5049]  ? clear_bhb_loop+0x25/0x80
[   64.808731][ T5049]  ? clear_bhb_loop+0x25/0x80
[   64.808784][ T5049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.808805][ T5049] RIP: 0033:0x7fc54e3de969
[   64.808820][ T5049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.808868][ T5049] RSP: 002b:00007fc54ca47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   64.808886][ T5049] RAX: ffffffffffffffda RBX: 00007fc54e605fa0 RCX: 00007fc54e3de969
[   64.808898][ T5049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[   64.808954][ T5049] RBP: 00007fc54ca47090 R08: 0000000000000000 R09: 0000000000000000
[   64.809040][ T5049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.809075][ T5049] R13: 0000000000000000 R14: 00007fc54e605fa0 R15: 00007ffda37b6368
[   64.809095][ T5049]  </TASK>
[   65.046160][ T5060] syzkaller0: entered promiscuous mode
[   65.051967][ T5060] syzkaller0: entered allmulticast mode
[   65.173715][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[   65.196629][ T5071] loop4: detected capacity change from 0 to 512
[   65.214430][ T5071] EXT4-fs (loop4): 1 orphan inode deleted
[   65.226942][ T5071] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.238037][ T5073] af_packet: tpacket_rcv: packet too big, clamped from 4208 to 3952. macoff=96
[   65.249168][  T196] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1
[   65.317950][ T5081] loop0: detected capacity change from 0 to 512
[   65.351383][ T5081] EXT4-fs: test_dummy_encryption option not supported
[   65.422087][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[   65.472467][ T5097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5097 comm=syz.1.566
[   65.493373][ T5097] netlink: 'syz.1.566': attribute type 9 has an invalid length.
[   65.523424][ T5103] FAULT_INJECTION: forcing a failure.
[   65.523424][ T5103] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   65.537302][ T5103] CPU: 1 UID: 0 PID: 5103 Comm: syz.2.570 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   65.537381][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   65.537403][ T5103] Call Trace:
[   65.537410][ T5103]  <TASK>
[   65.537419][ T5103]  __dump_stack+0x1d/0x30
[   65.537443][ T5103]  dump_stack_lvl+0xe8/0x140
[   65.537477][ T5103]  dump_stack+0x15/0x1b
[   65.537521][ T5103]  should_fail_ex+0x265/0x280
[   65.537557][ T5103]  should_fail_alloc_page+0xf2/0x100
[   65.537594][ T5103]  __alloc_frozen_pages_noprof+0xff/0x360
[   65.537655][ T5103]  alloc_pages_mpol+0xb3/0x250
[   65.537750][ T5103]  vma_alloc_folio_noprof+0x1aa/0x300
[   65.537778][ T5103]  handle_mm_fault+0x1056/0x2ae0
[   65.537851][ T5103]  ? mas_walk+0xf2/0x120
[   65.537879][ T5103]  do_user_addr_fault+0x636/0x1090
[   65.537917][ T5103]  exc_page_fault+0x54/0xc0
[   65.537972][ T5103]  asm_exc_page_fault+0x26/0x30
[   65.537995][ T5103] RIP: 0033:0x7fc54e2aa35b
[   65.538013][ T5103] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b
[   65.538032][ T5103] RSP: 002b:00007fc54ca45fb0 EFLAGS: 00010202
[   65.538100][ T5103] RAX: 0000000000000000 RBX: 00007fc54e605fa0 RCX: 0000000000000000
[   65.538115][ T5103] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000001c0
[   65.538127][ T5103] RBP: 00007fc54ca47090 R08: 0000000000000000 R09: 0000000000000000
[   65.538138][ T5103] R10: 00002000000001c0 R11: 0000000000000000 R12: 0000000000000001
[   65.538151][ T5103] R13: 0000000000000000 R14: 00007fc54e605fa0 R15: 00007ffda37b6368
[   65.538172][ T5103]  </TASK>
[   65.538191][ T5103] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   65.803819][ T3877] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   65.815098][ T3877] CPU: 0 UID: 0 PID: 3877 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   65.815192][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   65.815210][ T3877] Call Trace:
[   65.815217][ T3877]  <TASK>
[   65.815225][ T3877]  __dump_stack+0x1d/0x30
[   65.815247][ T3877]  dump_stack_lvl+0xe8/0x140
[   65.815351][ T3877]  dump_stack+0x15/0x1b
[   65.815375][ T3877]  dump_header+0x81/0x220
[   65.815407][ T3877]  oom_kill_process+0x334/0x3f0
[   65.815464][ T3877]  out_of_memory+0x979/0xb80
[   65.815552][ T3877]  ? css_next_descendant_pre+0x138/0x160
[   65.815625][ T3877]  mem_cgroup_out_of_memory+0x13d/0x190
[   65.815666][ T3877]  try_charge_memcg+0x5e2/0x870
[   65.815706][ T3877]  charge_memcg+0x51/0xc0
[   65.815744][ T3877]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   65.815810][ T3877]  __read_swap_cache_async+0x1df/0x350
[   65.815842][ T3877]  swap_cluster_readahead+0x277/0x3e0
[   65.816118][ T3877]  swapin_readahead+0xde/0x6f0
[   65.816209][ T3877]  ? __filemap_get_folio+0x49f/0x650
[   65.816317][ T3877]  ? kvm_sched_clock_read+0x11/0x20
[   65.816356][ T3877]  ? sched_clock+0x3f/0x60
[   65.816384][ T3877]  ? swap_cache_get_folio+0x77/0x200
[   65.816410][ T3877]  do_swap_page+0x301/0x2460
[   65.816447][ T3877]  ? _raw_spin_unlock+0x26/0x50
[   65.816473][ T3877]  ? finish_task_switch+0xad/0x2b0
[   65.816497][ T3877]  ? __pfx_default_wake_function+0x10/0x10
[   65.816529][ T3877]  handle_mm_fault+0xb60/0x2ae0
[   65.816563][ T3877]  ? mas_walk+0xf2/0x120
[   65.816587][ T3877]  do_user_addr_fault+0x636/0x1090
[   65.816687][ T3877]  ? switch_fpu_return+0xe/0x20
[   65.816725][ T3877]  exc_page_fault+0x54/0xc0
[   65.816822][ T3877]  asm_exc_page_fault+0x26/0x30
[   65.816856][ T3877] RIP: 0033:0x7f6bbb6a11e5
[   65.816877][ T3877] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 <c3> 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74
[   65.816894][ T3877] RSP: 002b:00007ffecd143398 EFLAGS: 00010246
[   65.816910][ T3877] RAX: 0000000000000000 RBX: 00000000000000a6 RCX: 00007f6bbb6a11e3
[   65.816925][ T3877] RDX: 00007ffecd1433b0 RSI: 0000000000000000 RDI: 0000000000000000
[   65.816980][ T3877] RBP: 00007ffecd14341c R08: 000000002abd9a40 R09: 0000000000000000
[   65.816993][ T3877] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388
[   65.817004][ T3877] R13: 00000000000927c0 R14: 000000000000ff1d R15: 00007ffecd143470
[   65.817022][ T3877]  </TASK>
[   65.817029][ T3877] memory: usage 307200kB, limit 307200kB, failcnt 243
[   66.007568][ T5114] syzkaller0: entered promiscuous mode
[   66.013747][ T3877] memory+swap: usage 122992kB, limit 9007199254740988kB, failcnt 0
[   66.019762][ T5114] syzkaller0: entered allmulticast mode
[   66.090206][ T3877] kmem: usage 115948kB, limit 9007199254740988kB, failcnt 0
[   66.097778][ T3877] Memory cgroup stats for /syz5:
[   66.124356][ T3877] cache 0
[   66.132494][ T3877] rss 106496
[   66.136001][ T3877] shmem 0
[   66.139055][ T3877] mapped_file 0
[   66.142718][ T3877] dirty 0
[   66.145668][ T3877] writeback 0
[   66.149008][ T3877] workingset_refault_anon 35
[   66.153627][ T3877] workingset_refault_file 0
[   66.158140][ T3877] swap 81920
[   66.161468][ T3877] swapcached 139264
[   66.165502][ T3877] pgpgin 14432
[   66.168986][ T3877] pgpgout 14397
[   66.172452][ T3877] pgfault 18959
[   66.176153][ T3877] pgmajfault 7
[   66.179605][ T3877] inactive_anon 0
[   66.183345][ T3877] active_anon 131072
[   66.187254][ T3877] inactive_file 0
[   66.191139][ T3877] active_file 0
[   66.194603][ T3877] unevictable 0
[   66.198076][ T3877] hierarchical_memory_limit 314572800
[   66.203499][ T3877] hierarchical_memsw_limit 9223372036854771712
[   66.209846][ T3877] total_cache 0
[   66.213400][ T3877] total_rss 106496
[   66.217445][ T3877] total_shmem 0
[   66.220946][ T3877] total_mapped_file 0
[   66.225112][ T3877] total_dirty 0
[   66.228598][ T3877] total_writeback 0
[   66.232876][ T3877] total_workingset_refault_anon 35
[   66.238147][ T3877] total_workingset_refault_file 0
[   66.243224][ T3877] total_swap 81920
[   66.246954][ T3877] total_swapcached 139264
[   66.251535][ T3877] total_pgpgin 14432
[   66.255450][ T3877] total_pgpgout 14397
[   66.259558][ T3877] total_pgfault 18959
[   66.263636][ T3877] total_pgmajfault 7
[   66.267903][ T3877] total_inactive_anon 0
[   66.272353][ T3877] total_active_anon 131072
[   66.276881][ T3877] total_inactive_file 0
[   66.281462][ T3877] total_active_file 0
[   66.285563][ T3877] total_unevictable 0
[   66.289674][ T3877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.561,pid=5074,uid=0
[   66.304468][ T3877] Memory cgroup out of memory: Killed process 5074 (syz.5.561) total-vm:93880kB, anon-rss:936kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   66.342328][ T5123] loop1: detected capacity change from 0 to 512
[   66.349586][ T5123] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   66.362962][ T5123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   66.384460][ T5123] EXT4-fs (loop1): orphan cleanup on readonly fs
[   66.396546][ T5123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.576: bg 0: block 361: padding at end of block bitmap is not set
[   66.417096][ T5132] loop2: detected capacity change from 0 to 512
[   66.423992][ T5132] EXT4-fs: test_dummy_encryption option not supported
[   66.427058][ T5123] EXT4-fs (loop1): Remounting filesystem read-only
[   66.469177][ T5123] EXT4-fs (loop1): 1 truncate cleaned up
[   66.482005][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[   66.502894][ T5141] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.544888][ T5146] loop1: detected capacity change from 0 to 512
[   66.577493][ T5144] 9pnet_fd: Insufficient options for proto=fd
[   66.589979][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[   66.611891][ T5141] sctp: [Deprecated]: syz.5.582 (pid 5141) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.611891][ T5141] Use struct sctp_sack_info instead
[   66.632677][ T5146] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.690591][ T5151] team0 (unregistering): Port device team_slave_0 removed
[   66.711714][ T5151] team0 (unregistering): Port device team_slave_1 removed
[   66.737341][ T5161] tipc: Started in network mode
[   66.742520][ T5161] tipc: Node identity , cluster identity 4711
[   66.748736][ T5161] tipc: Failed to obtain node identity
[   66.754280][ T5161] tipc: Enabling of bearer <eth:ip6_vti0> rejected, failed to enable media
[   66.876395][ T5173] loop2: detected capacity change from 0 to 1024
[   66.883524][ T5173] EXT4-fs: inline encryption not supported
[   66.889581][ T5173] EXT4-fs: Ignoring removed bh option
[   66.980830][ T5179] syzkaller0: entered promiscuous mode
[   66.986542][ T5179] syzkaller0: entered allmulticast mode
[   67.010132][ T5189] loop4: detected capacity change from 0 to 512
[   67.029551][ T5189] EXT4-fs: test_dummy_encryption option not supported
[   67.043998][ T5189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'.
[   67.065439][ T5189] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.074854][ T5192] FAULT_INJECTION: forcing a failure.
[   67.074854][ T5192] name failslab, interval 1, probability 0, space 0, times 0
[   67.087819][ T5192] CPU: 1 UID: 0 PID: 5192 Comm: syz.1.598 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   67.087854][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   67.087869][ T5192] Call Trace:
[   67.087877][ T5192]  <TASK>
[   67.087886][ T5192]  __dump_stack+0x1d/0x30
[   67.087968][ T5192]  dump_stack_lvl+0xe8/0x140
[   67.087993][ T5192]  dump_stack+0x15/0x1b
[   67.088035][ T5192]  should_fail_ex+0x265/0x280
[   67.088139][ T5192]  ? __pfx_cond_bools_destroy+0x10/0x10
[   67.088164][ T5192]  should_failslab+0x8c/0xb0
[   67.088201][ T5192]  __kmalloc_noprof+0xa5/0x3e0
[   67.088223][ T5192]  ? hashtab_duplicate+0x55/0x360
[   67.088262][ T5192]  ? __pfx_cond_bools_destroy+0x10/0x10
[   67.088336][ T5192]  hashtab_duplicate+0x55/0x360
[   67.088405][ T5192]  ? __kmalloc_noprof+0x1dd/0x3e0
[   67.088422][ T5192]  ? cond_policydb_dup+0xa3/0x4e0
[   67.088454][ T5192]  ? __pfx_cond_bools_copy+0x10/0x10
[   67.088570][ T5192]  cond_policydb_dup+0xd2/0x4e0
[   67.088592][ T5192]  security_set_bools+0xa0/0x340
[   67.088624][ T5192]  sel_commit_bools_write+0x1ea/0x270
[   67.088697][ T5192]  vfs_writev+0x3eb/0x870
[   67.088732][ T5192]  ? __pfx_sel_commit_bools_write+0x10/0x10
[   67.088768][ T5192]  ? mutex_lock+0xd/0x30
[   67.088858][ T5192]  do_writev+0xe7/0x210
[   67.088898][ T5192]  __x64_sys_writev+0x45/0x50
[   67.088924][ T5192]  x64_sys_call+0x2006/0x2fb0
[   67.089014][ T5192]  do_syscall_64+0xd0/0x1a0
[   67.089042][ T5192]  ? clear_bhb_loop+0x25/0x80
[   67.089070][ T5192]  ? clear_bhb_loop+0x25/0x80
[   67.089097][ T5192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.089119][ T5192] RIP: 0033:0x7f67555ce969
[   67.089133][ T5192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.089150][ T5192] RSP: 002b:00007f6753c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   67.089180][ T5192] RAX: ffffffffffffffda RBX: 00007f67557f5fa0 RCX: 00007f67555ce969
[   67.089196][ T5192] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003
[   67.089211][ T5192] RBP: 00007f6753c37090 R08: 0000000000000000 R09: 0000000000000000
[   67.089226][ T5192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.089240][ T5192] R13: 0000000000000000 R14: 00007f67557f5fa0 R15: 00007fff14467608
[   67.089263][ T5192]  </TASK>
[   67.146190][ T5189] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.459396][ T5206] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.469324][ T5206] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   67.505451][ T5211] loop2: detected capacity change from 0 to 1024
[   67.519876][ T5211] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   67.531023][ T5211] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   67.542656][ T5212] FAULT_INJECTION: forcing a failure.
[   67.542656][ T5212] name failslab, interval 1, probability 0, space 0, times 0
[   67.555568][ T5212] CPU: 1 UID: 0 PID: 5212 Comm: syz.4.606 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   67.555613][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   67.555629][ T5212] Call Trace:
[   67.555637][ T5212]  <TASK>
[   67.555646][ T5212]  __dump_stack+0x1d/0x30
[   67.555692][ T5212]  dump_stack_lvl+0xe8/0x140
[   67.555795][ T5212]  dump_stack+0x15/0x1b
[   67.555816][ T5212]  should_fail_ex+0x265/0x280
[   67.555892][ T5212]  should_failslab+0x8c/0xb0
[   67.555938][ T5212]  kmem_cache_alloc_noprof+0x50/0x310
[   67.555970][ T5212]  ? __kernfs_new_node+0x6d/0x350
[   67.555994][ T5212]  __kernfs_new_node+0x6d/0x350
[   67.556052][ T5212]  ? __rcu_read_unlock+0x4f/0x70
[   67.556098][ T5212]  ? __rcu_read_unlock+0x4f/0x70
[   67.556115][ T5212]  ? __rcu_read_unlock+0x4f/0x70
[   67.556134][ T5212]  ? kernfs_next_descendant_post+0xd3/0x110
[   67.556167][ T5212]  kernfs_new_node+0xd0/0x140
[   67.556251][ T5212]  __kernfs_create_file+0x4b/0x180
[   67.556277][ T5212]  ? __pfx_dev_attr_show+0x10/0x10
[   67.556312][ T5212]  ? __pfx_dev_attr_store+0x10/0x10
[   67.556346][ T5212]  sysfs_add_file_mode_ns+0x132/0x1c0
[   67.556419][ T5212]  internal_create_group+0x441/0x9e0
[   67.556453][ T5212]  sysfs_create_groups+0x3f/0xf0
[   67.556479][ T5212]  device_add_attrs+0x64/0x3e0
[   67.556504][ T5212]  ? kobject_put+0x10b/0x190
[   67.556582][ T5212]  device_add+0x37a/0x770
[   67.556607][ T5212]  netdev_register_kobject+0xe8/0x210
[   67.556634][ T5212]  ? register_netdevice+0x916/0xf10
[   67.556735][ T5212]  register_netdevice+0x931/0xf10
[   67.556769][ T5212]  tun_set_iff+0x5f1/0x890
[   67.556836][ T5212]  __tun_chr_ioctl+0x5f0/0x1490
[   67.556956][ T5212]  ? __pfx_tun_chr_ioctl+0x10/0x10
[   67.556978][ T5212]  tun_chr_ioctl+0x27/0x40
[   67.556998][ T5212]  __se_sys_ioctl+0xcb/0x140
[   67.557019][ T5212]  __x64_sys_ioctl+0x43/0x50
[   67.557042][ T5212]  x64_sys_call+0x19a8/0x2fb0
[   67.557141][ T5212]  do_syscall_64+0xd0/0x1a0
[   67.557161][ T5212]  ? clear_bhb_loop+0x25/0x80
[   67.557187][ T5212]  ? clear_bhb_loop+0x25/0x80
[   67.557214][ T5212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.557289][ T5212] RIP: 0033:0x7f05c945e969
[   67.557304][ T5212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.557333][ T5212] RSP: 002b:00007f05c7ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.557355][ T5212] RAX: ffffffffffffffda RBX: 00007f05c9685fa0 RCX: 00007f05c945e969
[   67.557371][ T5212] RDX: 0000200000000180 RSI: 00000000400454ca RDI: 000000000000000b
[   67.557385][ T5212] RBP: 00007f05c7ac7090 R08: 0000000000000000 R09: 0000000000000000
[   67.557400][ T5212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   67.557415][ T5212] R13: 0000000000000000 R14: 00007f05c9685fa0 R15: 00007ffcebaa22e8
[   67.557438][ T5212]  </TASK>
[   67.849154][ T5211] JBD2: no valid journal superblock found
[   67.855025][ T5211] EXT4-fs (loop2): Could not load journal inode
[   67.855137][ T5213] loop4: detected capacity change from 0 to 512
[   67.872506][ T5211] 9pnet: p9_errstr2errno: server reported unknown error �@�L��	O�!��L�8iHѡ
[   67.885579][   T29] kauditd_printk_skb: 242 callbacks suppressed
[   67.885594][   T29] audit: type=1400 audit(1747054031.889:1859): avc:  denied  { create } for  pid=5214 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   67.921857][   T29] audit: type=1400 audit(1747054031.919:1860): avc:  denied  { setopt } for  pid=5214 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   67.922268][ T5213] EXT4-fs mount: 18 callbacks suppressed
[   67.922285][ T5213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.961746][   T29] audit: type=1400 audit(1747054031.969:1861): avc:  denied  { write } for  pid=5210 comm="syz.2.604" name="rt_acct" dev="proc" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   67.978955][ T5213] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.027741][ T5222] syzkaller0: entered promiscuous mode
[   68.033605][ T5222] syzkaller0: entered allmulticast mode
[   68.040673][   T29] audit: type=1400 audit(1747054032.049:1862): avc:  denied  { setattr } for  pid=5209 comm="syz.4.606" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   68.093372][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'.
[   68.102522][   T29] audit: type=1400 audit(1747054032.109:1863): avc:  denied  { create } for  pid=5224 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   68.162046][   T29] audit: type=1400 audit(1747054032.159:1864): avc:  denied  { connect } for  pid=5224 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   68.235039][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.275040][   T29] audit: type=1400 audit(1747054032.269:1865): avc:  denied  { create } for  pid=5239 comm="syz.2.616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   68.295967][   T29] audit: type=1400 audit(1747054032.269:1866): avc:  denied  { mounton } for  pid=5239 comm="syz.2.616" path="/153/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   68.318946][   T29] audit: type=1400 audit(1747054032.269:1867): avc:  denied  { mount } for  pid=5239 comm="syz.2.616" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   68.341151][   T29] audit: type=1400 audit(1747054032.269:1868): avc:  denied  { write } for  pid=5239 comm="syz.2.616" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   68.367829][ T5243] loop0: detected capacity change from 0 to 512
[   68.375582][ T5243] EXT4-fs: test_dummy_encryption option not supported
[   68.427994][ T5243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'.
[   68.456925][ T5249] FAULT_INJECTION: forcing a failure.
[   68.456925][ T5249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   68.468924][ T5250] netlink: 'syz.4.619': attribute type 30 has an invalid length.
[   68.470359][ T5249] CPU: 0 UID: 0 PID: 5249 Comm: syz.2.618 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   68.470395][ T5249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   68.470409][ T5249] Call Trace:
[   68.470415][ T5249]  <TASK>
[   68.470461][ T5249]  __dump_stack+0x1d/0x30
[   68.470488][ T5249]  dump_stack_lvl+0xe8/0x140
[   68.470512][ T5249]  dump_stack+0x15/0x1b
[   68.470533][ T5249]  should_fail_ex+0x265/0x280
[   68.470644][ T5249]  should_fail+0xb/0x20
[   68.470681][ T5249]  should_fail_usercopy+0x1a/0x20
[   68.470705][ T5249]  _copy_from_user+0x1c/0xb0
[   68.470742][ T5249]  __sys_bpf+0x178/0x790
[   68.470840][ T5249]  __x64_sys_bpf+0x41/0x50
[   68.470873][ T5249]  x64_sys_call+0x2478/0x2fb0
[   68.470901][ T5249]  do_syscall_64+0xd0/0x1a0
[   68.470929][ T5249]  ? clear_bhb_loop+0x25/0x80
[   68.471005][ T5249]  ? clear_bhb_loop+0x25/0x80
[   68.471033][ T5249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.471060][ T5249] RIP: 0033:0x7fc54e3de969
[   68.471079][ T5249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.471131][ T5249] RSP: 002b:00007fc54ca47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   68.471155][ T5249] RAX: ffffffffffffffda RBX: 00007fc54e605fa0 RCX: 00007fc54e3de969
[   68.471171][ T5249] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a
[   68.471186][ T5249] RBP: 00007fc54ca47090 R08: 0000000000000000 R09: 0000000000000000
[   68.471278][ T5249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.471292][ T5249] R13: 0000000000000000 R14: 00007fc54e605fa0 R15: 00007ffda37b6368
[   68.471318][ T5249]  </TASK>
[   68.633627][ T5261] veth0: entered promiscuous mode
[   68.656033][ T5258] veth0: left promiscuous mode
[   68.679008][ T5263] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   68.686749][ T3383] IPVS: starting estimator thread 0...
[   68.733717][ T5271] netlink: 9412 bytes leftover after parsing attributes in process `+}[@'.
[   68.752419][ T5273] syzkaller0: entered promiscuous mode
[   68.757970][ T5273] syzkaller0: entered allmulticast mode
[   68.770690][ T5271] loop5: detected capacity change from 0 to 512
[   68.777611][ T5271] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.784401][ T5265] IPVS: using max 2064 ests per chain, 103200 per kthread
[   68.792075][ T5271] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.802678][ T5271] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[   68.818750][ T5271] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[   68.827966][ T5271] EXT4-fs (loop5): 1 truncate cleaned up
[   68.828539][ T5271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.870955][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.912142][ T5287] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[   68.923071][ T5287] netlink: 300 bytes leftover after parsing attributes in process `syz.2.631'.
[   68.955125][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[   68.986786][ T5294] loop2: detected capacity change from 0 to 512
[   68.994714][ T5294] EXT4-fs: test_dummy_encryption option not supported
[   69.022374][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'.
[   69.059294][ T5296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.635'.
[   69.068478][ T5296] netlink: 'syz.5.635': attribute type 1 has an invalid length.
[   69.103791][ T5302] loop5: detected capacity change from 0 to 1024
[   69.120171][ T5302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.130483][ T5302] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.141972][ T5302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   69.151735][ T5302] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.637: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.166412][ T5302] EXT4-fs (loop5): Remounting filesystem read-only
[   69.173320][ T5302] EXT4-fs (loop5): 1 orphan inode deleted
[   69.179881][ T5302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.193211][ T5302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.301666][ T5310] FAULT_INJECTION: forcing a failure.
[   69.301666][ T5310] name failslab, interval 1, probability 0, space 0, times 0
[   69.314474][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.5.639 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   69.314514][ T5310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   69.314528][ T5310] Call Trace:
[   69.314534][ T5310]  <TASK>
[   69.314541][ T5310]  __dump_stack+0x1d/0x30
[   69.314562][ T5310]  dump_stack_lvl+0xe8/0x140
[   69.314589][ T5310]  dump_stack+0x15/0x1b
[   69.314605][ T5310]  should_fail_ex+0x265/0x280
[   69.314679][ T5310]  should_failslab+0x8c/0xb0
[   69.314709][ T5310]  kmem_cache_alloc_noprof+0x50/0x310
[   69.314834][ T5310]  ? skb_clone+0x151/0x1f0
[   69.314855][ T5310]  skb_clone+0x151/0x1f0
[   69.314925][ T5310]  nfnetlink_rcv+0x305/0x1690
[   69.314947][ T5310]  ? __rcu_read_unlock+0x4f/0x70
[   69.314966][ T5310]  ? refill_obj_stock+0x155/0x220
[   69.314988][ T5310]  ? mod_objcg_state+0x40e/0x530
[   69.315009][ T5310]  ? should_fail_ex+0x30/0x280
[   69.315071][ T5310]  ? xas_load+0x413/0x430
[   69.315089][ T5310]  ? cgroup_rstat_updated+0xa3/0x510
[   69.315117][ T5310]  ? xas_load+0x413/0x430
[   69.315199][ T5310]  ? __rcu_read_unlock+0x4f/0x70
[   69.315224][ T5310]  ? memcg_list_lru_alloc+0xc2/0x490
[   69.315253][ T5310]  ? _raw_spin_unlock+0x26/0x50
[   69.315340][ T5310]  ? mod_objcg_state+0x40e/0x530
[   69.315453][ T5310]  ? should_fail_ex+0x30/0x280
[   69.315524][ T5310]  ? __rcu_read_unlock+0x4f/0x70
[   69.315543][ T5310]  ? should_fail_ex+0xdb/0x280
[   69.315588][ T5310]  netlink_unicast+0x59e/0x670
[   69.315642][ T5310]  netlink_sendmsg+0x58b/0x6b0
[   69.315698][ T5310]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.315766][ T5310]  __sock_sendmsg+0x142/0x180
[   69.315793][ T5310]  ____sys_sendmsg+0x31e/0x4e0
[   69.315817][ T5310]  ___sys_sendmsg+0x17b/0x1d0
[   69.315854][ T5310]  __x64_sys_sendmsg+0xd4/0x160
[   69.315878][ T5310]  x64_sys_call+0x2999/0x2fb0
[   69.315980][ T5310]  do_syscall_64+0xd0/0x1a0
[   69.316002][ T5310]  ? clear_bhb_loop+0x25/0x80
[   69.316023][ T5310]  ? clear_bhb_loop+0x25/0x80
[   69.316091][ T5310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.316188][ T5310] RIP: 0033:0x7f6bbb66e969
[   69.316203][ T5310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.316220][ T5310] RSP: 002b:00007f6bb9cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.316239][ T5310] RAX: ffffffffffffffda RBX: 00007f6bbb895fa0 RCX: 00007f6bbb66e969
[   69.316251][ T5310] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000007
[   69.316313][ T5310] RBP: 00007f6bb9cd7090 R08: 0000000000000000 R09: 0000000000000000
[   69.316324][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.316336][ T5310] R13: 0000000000000000 R14: 00007f6bbb895fa0 R15: 00007ffecd143058
[   69.316356][ T5310]  </TASK>
[   69.342658][ T5312] syzkaller0: entered promiscuous mode
[   69.376481][ T5316] loop2: detected capacity change from 0 to 512
[   69.379939][ T5312] syzkaller0: entered allmulticast mode
[   69.458115][ T5316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.625593][ T5316] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   69.699589][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'.
[   69.752099][ T5329] loop4: detected capacity change from 0 to 512
[   69.767394][ T5329] EXT4-fs: test_dummy_encryption option not supported
[   69.828195][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[   69.860553][ T5345] loop5: detected capacity change from 0 to 1024
[   69.872004][ T5345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.898201][ T5345] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   69.927035][ T5345] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   69.947048][ T5345] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.652: lblock 2 mapped to illegal pblock 2 (length 1)
[   69.961970][ T5345] EXT4-fs (loop5): Remounting filesystem read-only
[   69.978845][ T5345] EXT4-fs (loop5): 1 orphan inode deleted
[   69.984983][ T5345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.998046][ T5345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.216085][ T5374] syzkaller0: entered promiscuous mode
[   70.221692][ T5374] syzkaller0: entered allmulticast mode
[   70.238332][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.271069][ T5347] loop0: detected capacity change from 0 to 512
[   70.290502][ T5380] loop1: detected capacity change from 0 to 512
[   70.297625][ T5380] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   70.311922][ T5380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[   70.321228][ T5380] EXT4-fs (loop1): orphan cleanup on readonly fs
[   70.337357][ T5380] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set
[   70.337830][ T5383] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.358444][ T5380] EXT4-fs (loop1): Remounting filesystem read-only
[   70.359897][ T5383] team0: Port device bond1 added
[   70.372970][ T5380] EXT4-fs (loop1): 1 truncate cleaned up
[   70.378818][ T5387] loop0: detected capacity change from 0 to 2048
[   70.381141][ T5380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   70.401682][ T5380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   70.415536][ T5388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'.
[   70.436805][ T5380] 9pnet_fd: Insufficient options for proto=fd
[   70.442493][ T5387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.685779][ T5401] loop5: detected capacity change from 0 to 512
[   70.693335][ T5399] ALSA: seq fatal error: cannot create timer (-19)
[   70.701619][ T5401] EXT4-fs: test_dummy_encryption option not supported
[   70.795384][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.850016][ T5410] netlink: 'syz.2.669': attribute type 13 has an invalid length.
[   70.894554][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.938412][ T5415] loop0: detected capacity change from 0 to 128
[   70.956110][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.963425][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.977337][ T5415] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   71.003518][ T5415] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.048283][ T5415] SELinux:  policydb version 2121020796 does not match my version range 15-34
[   71.057703][ T5415] SELinux: failed to load policy
[   71.135405][ T5410] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.144100][ T5410] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.152569][ T5410] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.160965][ T5410] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.274842][ T5435] bond0: entered promiscuous mode
[   71.280155][ T5435] bond0: entered allmulticast mode
[   71.286480][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.295655][ T5435] bond0 (unregistering): Released all slaves
[   71.371152][ T5422] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   71.389818][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.412374][ T5444] loop1: detected capacity change from 0 to 512
[   71.419859][ T5444] EXT4-fs: test_dummy_encryption option not supported
[   71.452698][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.511814][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.572588][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.667573][ T5464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5464 comm=syz.5.687
[   71.692420][   T37] bridge_slave_1: left allmulticast mode
[   71.698195][   T37] bridge_slave_1: left promiscuous mode
[   71.703942][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.713152][   T37] bridge_slave_0: left allmulticast mode
[   71.719245][   T37] bridge_slave_0: left promiscuous mode
[   71.725053][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.811386][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.821596][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.831175][   T37] bond0 (unregistering): Released all slaves
[   71.872936][   T37] tipc: Disabling bearer <udp:syz0>
[   71.878241][   T37] tipc: Left network mode
[   71.918021][   T37] hsr_slave_0: left promiscuous mode
[   71.952669][   T37] hsr_slave_1: left promiscuous mode
[   71.965925][ T5484] FAULT_INJECTION: forcing a failure.
[   71.965925][ T5484] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   71.979353][ T5484] CPU: 0 UID: 0 PID: 5484 Comm: syz.1.695 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   71.979465][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   71.979477][ T5484] Call Trace:
[   71.979482][ T5484]  <TASK>
[   71.979488][ T5484]  __dump_stack+0x1d/0x30
[   71.979506][ T5484]  dump_stack_lvl+0xe8/0x140
[   71.979523][ T5484]  dump_stack+0x15/0x1b
[   71.979536][ T5484]  should_fail_ex+0x265/0x280
[   71.979606][ T5484]  should_fail_alloc_page+0xf2/0x100
[   71.979634][ T5484]  __alloc_frozen_pages_noprof+0xff/0x360
[   71.979659][ T5484]  alloc_pages_mpol+0xb3/0x250
[   71.979680][ T5484]  folio_alloc_mpol_noprof+0x39/0x80
[   71.979773][ T5484]  shmem_get_folio_gfp+0x3cf/0xd40
[   71.979809][ T5484]  shmem_write_begin+0xa8/0x190
[   71.979886][ T5484]  generic_perform_write+0x181/0x490
[   71.979984][ T5484]  shmem_file_write_iter+0xc5/0xf0
[   71.980012][ T5484]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   71.980039][ T5484]  vfs_write+0x49d/0x8d0
[   71.980128][ T5484]  ksys_write+0xda/0x1a0
[   71.980163][ T5484]  __x64_sys_write+0x40/0x50
[   71.980184][ T5484]  x64_sys_call+0x2cdd/0x2fb0
[   71.980203][ T5484]  do_syscall_64+0xd0/0x1a0
[   71.980222][ T5484]  ? clear_bhb_loop+0x25/0x80
[   71.980241][ T5484]  ? clear_bhb_loop+0x25/0x80
[   71.980269][ T5484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.980287][ T5484] RIP: 0033:0x7f67555cd41f
[   71.980300][ T5484] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   71.980316][ T5484] RSP: 002b:00007f6753c36df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   71.980331][ T5484] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f67555cd41f
[   71.980342][ T5484] RDX: 0000000000100000 RSI: 00007f674b817000 RDI: 0000000000000004
[   71.980352][ T5484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000729
[   71.980423][ T5484] R10: 00000000000003c8 R11: 0000000000000293 R12: 0000000000000004
[   71.980434][ T5484] R13: 00007f6753c36ef0 R14: 00007f6753c36eb0 R15: 00007f674b817000
[   71.980451][ T5484]  </TASK>
[   71.980538][   T37] veth1_macvtap: left promiscuous mode
[   72.093221][ T5492] loop2: detected capacity change from 0 to 512
[   72.094349][   T37] veth0_macvtap: left promiscuous mode
[   72.099318][ T5492] EXT4-fs: test_dummy_encryption option not supported
[   72.108808][   T37] veth1_vlan: left promiscuous mode
[   72.219819][   T37] veth0_vlan: left promiscuous mode
[   72.313998][ T5452] chnl_net:caif_netlink_parms(): no params data found
[   72.343995][ T5500] netlink: 'syz.4.699': attribute type 39 has an invalid length.
[   72.378576][ T5507] netlink: 'syz.1.702': attribute type 13 has an invalid length.
[   72.392513][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.400161][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.407891][ T5452] bridge_slave_0: entered allmulticast mode
[   72.415360][ T5452] bridge_slave_0: entered promiscuous mode
[   72.424618][ T5509] loop5: detected capacity change from 0 to 512
[   72.436905][ T5509] EXT4-fs: inline encryption not supported
[   72.445800][ T5509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.476379][ T5509] EXT4-fs (loop5): 1 truncate cleaned up
[   72.483469][ T5509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.691038][ T5507] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.699571][ T5507] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.708004][ T5507] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.716708][ T5507] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.730385][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.737620][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.745187][ T5452] bridge_slave_1: entered allmulticast mode
[   72.751854][ T5452] bridge_slave_1: entered promiscuous mode
[   72.796084][ T5452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.809151][ T5452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.844846][ T5452] team0: Port device team_slave_0 added
[   72.852247][ T5452] team0: Port device team_slave_1 added
[   72.894519][ T5553] loop1: detected capacity change from 0 to 512
[   72.902158][ T5553] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   72.911332][   T29] kauditd_printk_skb: 307 callbacks suppressed
[   72.911394][   T29] audit: type=1326 audit(1747054036.909:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   72.913178][ T5558] loop4: detected capacity change from 0 to 1024
[   72.917582][   T29] audit: type=1326 audit(1747054036.909:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   72.962629][ T5558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.971291][   T29] audit: type=1326 audit(1747054036.909:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   72.980271][ T5558] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   73.002948][   T29] audit: type=1326 audit(1747054036.909:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.003046][   T29] audit: type=1326 audit(1747054036.909:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.054611][ T5558] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   73.060061][   T29] audit: type=1326 audit(1747054036.909:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.090406][ T5558] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.711: lblock 2 mapped to illegal pblock 2 (length 1)
[   73.091910][   T29] audit: type=1326 audit(1747054036.909:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.106296][ T5558] EXT4-fs (loop4): Remounting filesystem read-only
[   73.130028][   T29] audit: type=1326 audit(1747054036.909:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.130083][   T29] audit: type=1326 audit(1747054036.909:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5557 comm="syz.4.711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c945e969 code=0x7ffc0000
[   73.136721][ T5558] Quota error (device loop4): qtree_write_dquot: dquota write failed
[   73.194229][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.201308][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.207181][ T5562] loop2: detected capacity change from 0 to 512
[   73.227854][ T5452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.245776][ T5452] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.245958][ T5558] EXT4-fs (loop4): 1 orphan inode deleted
[   73.252868][ T5452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.269343][ T5553] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.709: Failed to acquire dquot type 0
[   73.284953][ T5452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.299205][ T5558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.307858][ T5562] EXT4-fs: test_dummy_encryption option not supported
[   73.333600][ T5558] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.353804][ T5553] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   73.375740][   T37] IPVS: stop unused estimator thread 0...
[   73.376866][ T5452] hsr_slave_0: entered promiscuous mode
[   73.388109][ T5452] hsr_slave_1: entered promiscuous mode
[   73.389132][ T3877] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.417561][ T5562] __nla_validate_parse: 6 callbacks suppressed
[   73.417581][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[   73.423264][ T5553] EXT4-fs (loop1): 1 truncate cleaned up
[   73.444784][ T5553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.485362][ T5570] loop4: detected capacity change from 0 to 512
[   73.513641][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.531689][ T5570] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.711: Failed to acquire dquot type 1
[   73.550930][ T5570] EXT4-fs (loop4): 1 truncate cleaned up
[   73.568981][ T5452] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   73.569438][ T5570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.592876][ T5452] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   73.602347][ T5452] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   73.613851][ T5584] loop2: detected capacity change from 0 to 1024
[   73.619327][ T5452] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   73.632272][ T5570] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.670373][ T5570] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.690591][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.716636][ T5452] 8021q: adding VLAN 0 to HW filter on device team0
[   73.731553][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.738685][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.755197][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.762336][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.826519][ T5604] 9pnet_virtio: no channels available for device 127.0.0.1
[   73.864935][   T37] bridge_slave_1: left allmulticast mode
[   73.870765][   T37] bridge_slave_1: left promiscuous mode
[   73.876427][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.911452][   T37] bridge_slave_0: left allmulticast mode
[   73.912717][ T5607] loop4: detected capacity change from 0 to 512
[   73.917186][   T37] bridge_slave_0: left promiscuous mode
[   73.929406][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.937442][ T5607] EXT4-fs: test_dummy_encryption option not supported
[   73.966918][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'.
[   74.128481][   T37] hsr_slave_0: left promiscuous mode
[   74.138483][ T5622] loop4: detected capacity change from 0 to 512
[   74.147157][   T37] hsr_slave_1: left promiscuous mode
[   74.175623][ T5622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.199350][   T37] team0 (unregistering): Port device team_slave_1 removed
[   74.215858][   T37] team0 (unregistering): Port device team_slave_0 removed
[   74.226861][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.242376][ T5622] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.271377][ T5622] SELinux:  Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped).
[   74.317415][ T5452] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.332442][ T5630] loop1: detected capacity change from 0 to 128
[   74.339987][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.379283][ T5580] chnl_net:caif_netlink_parms(): no params data found
[   74.499705][ T5643] loop1: detected capacity change from 0 to 1024
[   74.509460][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.517539][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.545956][ T5580] bridge_slave_0: entered allmulticast mode
[   74.559353][ T5580] bridge_slave_0: entered promiscuous mode
[   74.605249][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.612500][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.659071][ T5580] bridge_slave_1: entered allmulticast mode
[   74.665780][ T5580] bridge_slave_1: entered promiscuous mode
[   74.715425][ T5643] loop1: detected capacity change from 0 to 2048
[   74.723431][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.756590][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.774469][ T5452] veth0_vlan: entered promiscuous mode
[   74.802917][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.813234][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.825091][ T5452] veth1_vlan: entered promiscuous mode
[   74.861688][ T5580] team0: Port device team_slave_0 added
[   74.876074][ T5580] team0: Port device team_slave_1 added
[   74.900825][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.907890][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.934435][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.969966][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.977213][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.003320][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.034400][ T5662] 9pnet: Could not find request transport: f
[   75.041971][ T5452] veth0_macvtap: entered promiscuous mode
[   75.059832][ T5580] hsr_slave_0: entered promiscuous mode
[   75.066070][ T5580] hsr_slave_1: entered promiscuous mode
[   75.072273][ T5580] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.079966][ T5580] Cannot create hsr debugfs directory
[   75.087376][ T5452] veth1_macvtap: entered promiscuous mode
[   75.119758][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.146847][ T5452] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.149719][ T5672] loop4: detected capacity change from 0 to 512
[   75.169762][ T5672] EXT4-fs: test_dummy_encryption option not supported
[   75.180908][ T5452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.189788][ T5452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.198622][ T5452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.202753][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'.
[   75.207481][ T5452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.267250][ T5580] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   75.283564][ T5580] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   75.298095][ T5580] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   75.308627][ T5580] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   75.366328][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.381864][ T5580] 8021q: adding VLAN 0 to HW filter on device team0
[   75.447567][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.454778][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.471738][  T196] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.479119][  T196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.607554][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.741269][ T5580] veth0_vlan: entered promiscuous mode
[   75.750099][ T5580] veth1_vlan: entered promiscuous mode
[   75.767771][ T5580] veth0_macvtap: entered promiscuous mode
[   75.785512][ T5580] veth1_macvtap: entered promiscuous mode
[   75.808160][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.818708][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.851936][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.872867][ T5580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.883429][ T5580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.919733][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.938596][ T5580] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.947572][ T5580] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.956416][ T5580] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.965155][ T5580] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.008196][    T9] ==================================================================
[   76.016449][    T9] BUG: KCSAN: data-race in wg_socket_set_peer_endpoint / wg_socket_set_peer_endpoint
[   76.025939][    T9] 
[   76.028266][    T9] read to 0xffff88811a89cde8 of 2 bytes by task 3393 on cpu 1:
[   76.036244][    T9]  wg_socket_set_peer_endpoint+0x1d5/0x440
[   76.042244][    T9]  wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0
[   76.048687][    T9]  wg_packet_handshake_receive_worker+0x3d9/0x5d0
[   76.055315][    T9]  process_scheduled_works+0x4cb/0x9d0
[   76.060798][    T9]  worker_thread+0x582/0x770
[   76.065412][    T9]  kthread+0x486/0x510
[   76.069586][    T9]  ret_from_fork+0x4b/0x60
[   76.074008][    T9]  ret_from_fork_asm+0x1a/0x30
[   76.078783][    T9] 
[   76.081112][    T9] write to 0xffff88811a89cde8 of 16 bytes by task 9 on cpu 0:
[   76.088668][    T9]  wg_socket_set_peer_endpoint+0x3b6/0x440
[   76.094579][    T9]  wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0
[   76.101021][    T9]  wg_packet_handshake_receive_worker+0x406/0x5d0
[   76.107462][    T9]  process_scheduled_works+0x4cb/0x9d0
[   76.113023][    T9]  worker_thread+0x582/0x770
[   76.117628][    T9]  kthread+0x486/0x510
[   76.121764][    T9]  ret_from_fork+0x4b/0x60
[   76.126199][    T9]  ret_from_fork_asm+0x1a/0x30
[   76.130985][    T9] 
[   76.133416][    T9] Reported by Kernel Concurrency Sanitizer on:
[   76.139678][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) 
[   76.152047][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   76.162219][    T9] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
[   76.169531][    T9] ==================================================================
[   76.249682][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.739'.