last executing test programs:

3m33.662156114s ago: executing program 32 (id=3991):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
fremovexattr(r1, &(0x7f0000000040)=@random={'user.', 'GPL\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r4 = dup(r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
socket(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x7ffff000)
fallocate(r5, 0x0, 0x0, 0x1001f0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, 0x0)

3m28.249216572s ago: executing program 0 (id=4056):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2)

3m28.067728705s ago: executing program 33 (id=4060):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0x4}})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @empty}, @ethernet={0x1}, @hci={0x1f, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x45, 0x0, &(0x7f0000001000))
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, 0x0, 0x100, r3)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff3d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x350b}, @jmp={0x5, 0x0, 0xa, 0x7, 0xa, 0xfffffffffffffff8, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x8b, &(0x7f00000002c0)=""/139, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, r2, 0x1], 0x0, 0x10, 0x215b, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x0, 0xca, 0x6c, &(0x7f00000004c0)="c2125be241245692a52c35d0ccb21ac4fb4399e2241ae77811d38b816a60d6798cfcf2625441ce67431de14c0dbda86b84bf0c669b933c19f31b47dd0e5c805b6be0f16fad1621e50318961100ab421c51fd6183eddb95fe255b40a87589776eb3e2617594736183943d0f1d2a8824c832e22208ff9faa6470b8398ae2a879698cf05be503b7427416cec12ec4d7d6beaea2d3a98bdfe4a61bc2e06ca39b23482a47c51391b15c7068204014167f0c283e12d1b17c5f5561266e0f5f0ce3eea765f31719fb97332221c2", &(0x7f00000005c0)=""/108, 0x2, 0x0, 0xda, 0xc4, &(0x7f0000000640)="71973c888ba82d822e509893c0b8fc46edfa1a4aadceb47c33fc3385b1c1ca161e05f5a0a548fde25c9cb4411aef1ef914150cdeef07d43affa2226338ea74efaec4a88fe825626f2c16f3a13ad772f684ee7cfe9f98b85d461ee5414813f13bb1dc763b8b868c8c7d0c5d28a504be369c2c440e02578116f6c04a8173233bdf12b3d570bf44fb78cb673dc29641c844d4b735a07b0bb68b3d5c5b8573085568f795028f3abc82786327b22ec24050cfe967953c677ecbe6c920a8867bf760c8e4b666aaf1af197c76112302be8c6f0569161d4c49c897e43965", &(0x7f0000000740)="79dc1842cc0d5c4531bc28bf0944b5e9919771f26b5eaa227d5cae9e7eaa5115f4f171ca03dc6487a2ad390fa86410528bb371956998c3be43760025b2ca59139066880e72984d78375b7ae75453bf5a2ab65a0a3f3f86a080501ad5fd09a3ebd216145e674feba7db3dad479a61e1f1f697771395e50d16a24611dc09684a44baf7f78c928a545d51456161d10b31b79bbdceecef4b0ad1466e4370daa027af4b5649cb7ee0eee4698907c1478a0c94ce067c0469457b9cf514c72be62b38052f24ed5f", 0x1, 0x0, 0x10}, 0x50)

3m28.067413845s ago: executing program 0 (id=4062):
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
socket$inet(0x2, 0x1, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83e, 0x10, 0x2}, &(0x7f0000000280)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x48}]}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r7}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0)

3m27.406020894s ago: executing program 0 (id=4068):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
r0 = socket(0x1f, 0x5, 0x400)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = syz_pidfd_open(r2, 0x0)
pidfd_send_signal(r6, 0x2, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001ee328fe42eec235f071461a6bd618558da56c5a5e2f9a22c06f0674f4dff8bbcb5e47893d2faaf6cf6120651784d76a1e7b2117c425fbe141a8bc78495f74ceba91a33633fb501b10326d2c4495f587a0997ccdc5e9944f3caee4d25521d584dfa8c74b29829f6720a3d200000000"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
pipe(&(0x7f0000000480)={<r9=>0xffffffffffffffff})
r10 = ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0)
vmsplice(r10, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0x111}], 0x1, 0xf54653d2d537cf6e)
vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x12, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

3m26.548975946s ago: executing program 0 (id=4074):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}}, 0x8000)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)

3m26.422009728s ago: executing program 0 (id=4076):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @generic={0x95, 0x0, 0xe, 0x401, 0x491b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0xfb, 0x6, 0x1, 0x1, 0x100}, @generic={0x5, 0x7, 0x5, 0x2, 0x6c}, @jmp={0x5, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x10001, 0x41, &(0x7f0000000100)=""/65, 0x41100, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x10, 0x5}, 0x10, 0x4be1, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000400)=[{0x5, 0x3, 0x4, 0x8}, {0x2, 0x4, 0xc, 0x3}, {0x3, 0x3, 0x5, 0x2}, {0x0, 0x4, 0x9, 0x8}, {0x2, 0x4, 0xf, 0x4}, {0x0, 0x1, 0x1, 0x5}, {0x8, 0x3, 0x2, 0xa}], 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@errors_remount}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000002480)="$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")
socket(0x2a, 0xa, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x9, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0xb, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, 0x0, 0x0, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'xfrm0\x00'})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

3m25.59453113s ago: executing program 0 (id=4083):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0xbdc, 0x0}}], 0x1, 0x2040000, 0x0)

3m10.953539462s ago: executing program 34 (id=4083):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0xbdc, 0x0}}], 0x1, 0x2040000, 0x0)

2m50.635711815s ago: executing program 7 (id=4425):
socket$rxrpc(0x21, 0x2, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

2m50.157417912s ago: executing program 7 (id=4428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0)

2m50.108951393s ago: executing program 7 (id=4429):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
socket(0x1d, 0x2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b08000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)

2m49.831362487s ago: executing program 7 (id=4432):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
fremovexattr(r1, &(0x7f0000000040)=@random={'user.', 'GPL\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r4 = dup(r1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r7, &(0x7f0000004200)='t', 0x1)
sendfile(r7, r6, 0x0, 0x7ffff000)
fallocate(r5, 0x0, 0x0, 0x1001f0)
r8 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace(0x10, r8)

2m49.629790449s ago: executing program 7 (id=4435):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x434, &(0x7f0000000ec0)="$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")
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x2, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[@ANYBLOB="0e0c480a54109e9b369ba8630ecf674b9df13bf7fb8670a1a6414d7341d90b60a7f6b0e13e0fa4bfd8492e56dadeaab561bd55273363569ba70128c023d0447b89164e2029e63c86e982988aa590cb9505a629f1582b0c35d0061d"], 0x835, 0x0)

2m49.358190553s ago: executing program 7 (id=4441):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000862300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000159e000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x40000)

2m49.358059293s ago: executing program 35 (id=4441):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000862300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000159e000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x40000)

2m45.571123298s ago: executing program 8 (id=4480):
memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c416, &(0x7f00000000c0)={[{@dots}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@fat=@nfs}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@allow_utime}, {@nodots}, {@nodots}, {}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@nodots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}]}, 0x1, 0x1f0, &(0x7f0000000300)="$eJzs3cFqE1EUANCbmiYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadGNMYBjKj9ZxN7uS+l/fuDJlkk5sUha+3P0eWdWLnIA5i2om92Im58wAArpNpSvEtFdreCwDQjA0+/783vCUAYMtev3n78ulweHiU51nExflkNBkVj0X++Yvh4aP8p71q1sVkMrpxmX+cL393mOV342aZf1LMzy/TvYgY9eLh/SI/yz17Ncx/nd+P91uuHQAAAAAAAAAAAAAAAAAAAAAA2nI38rmV/X3295fzgzJfHC30B1rq39ONO93ysGoPlM6aKAoAAAAAAAAAAAAAAAAAAAD+MSennz6+G48/HFdBPyIWn+muGHN10ClfeKPB7Qc7UW/6oCyzxqKd8hRtt8DB6ou7SRDdv+Xq1A3yBtYarD29Kc2C1e+CeVuMK6f3ImL96g+O6m5+mlIaf7l3fHIaae3g6h7Rb/SOBAAAAAAAAAAAAAAAAAAA/6+FX33/JmtjQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQgur//2sEZxFxK/44eL7WbmTtFgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC19SMAAP//j3Mj5w==")
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
close(r1)
syz_emit_ethernet(0x7a, &(0x7f0000000600)=ANY=[@ANYBLOB="856b0100e400aaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff020000000000000000000000000001042081000002000000000800000086dd08"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000002aaf6aaaaaa1f08"], 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
syz_io_uring_setup(0x9fa, &(0x7f0000000200)={0x0, 0xcb9, 0x1000, 0x2, 0x28e}, &(0x7f0000000000), &(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000))

2m45.394556221s ago: executing program 8 (id=4484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x4400, 0xffffffff, 0x0, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r1, @ANYBLOB="4ca705f3f25790cc45d73bd54186f4418de25e2f322d4f20e0c5e7c8a145bbc826f09deebe765e64a9f041de403f0fc753f4f884a1f92948a6d84158533e090530686d00c52964a6ac17a0d75dcb0b2fbf548ab637538a876e06c7b4fd010146345a4e10e13e7643e4d991531181998e16e6c2d9043378d722dbf9affab0070ade2169d3058341de8ae58d74bac4666a8b421b7f400fb033918140681aa121d2c2744b4c58dd35d5fae85b8b63d903e09127708e786f7c49345449748f72", @ANYRESOCT=r1, @ANYRES16=r0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0xd212}, 0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
timer_create(0x4, &(0x7f0000000100)={0x0, 0x25, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)=<r9=>0x0)
timer_getoverrun(r9)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40401, 0x0)
ppoll(&(0x7f0000000380)=[{r3, 0x4044}, {r10, 0x4000}, {0xffffffffffffffff, 0x88}], 0x3, 0x0, 0x0, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000d80)=ANY=[@ANYBLOB="b6dba37220957db2b336181a"], 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x4010, r10, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10)
r13 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r13, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27)

2m44.456146235s ago: executing program 8 (id=4494):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (fail_nth: 11)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)

2m44.378224586s ago: executing program 8 (id=4496):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
fremovexattr(r1, &(0x7f0000000040)=@random={'user.', 'GPL\x00'})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7ffff000)
fallocate(r4, 0x0, 0x0, 0x1001f0)
r7 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace(0x10, r7)

2m43.801457874s ago: executing program 8 (id=4498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x80, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x80}}, 0x0)

2m42.385449824s ago: executing program 8 (id=4515):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffb, 0x12)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x20, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e7"}}, 0x2e)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001340)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x5}, 0x18)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38)

2m42.374675385s ago: executing program 36 (id=4515):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000100)=0xfffffffffffffffb, 0x12)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x20, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e7"}}, 0x2e)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001340)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r5}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x5}, 0x18)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38)

2m29.883240885s ago: executing program 6 (id=4671):
r0 = socket(0x10, 0x803, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r2, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
recvfrom(r2, 0x0, 0x0, 0x10002, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @local}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (fail_nth: 4)

2m29.006092048s ago: executing program 6 (id=4684):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18)
syz_usbip_server_init(0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'tunl0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x3, 0x4)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'veth0_to_batadv\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl0\x00', <r10=>0x0, 0x4, 0xff, 0x0, 0xfffffffd, 0x76, @rand_addr=' \x01\x00', @empty, 0x10, 0x10, 0x7, 0x9}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000b00)={0x77c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7e9c3430}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x34}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1b9}}, {{0x8}, {0x4}}, {{0x8, 0x1, r5}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x11}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x60, 0x7c, 0x5, 0x9}, {0xfffb, 0x4, 0x10, 0x5}, {0x8, 0x8, 0xbd, 0x5}]}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0xffffffffffffff41}, {0x8, 0x4, 0x7f10}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xa, 0x5, 0x5, 0xb16}, {0x35, 0x1, 0x6, 0x8001}, {0x3, 0x9, 0xf4, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f58}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0x77c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

2m28.478666525s ago: executing program 6 (id=4691):
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x1843, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0)
close(r1)

2m28.427861956s ago: executing program 6 (id=4696):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fremovexattr(r1, &(0x7f0000000040)=@random={'user.', 'GPL\x00'})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff000)
fallocate(r2, 0x0, 0x0, 0x1001f0)
r5 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace(0x10, r5)

2m27.814755595s ago: executing program 6 (id=4705):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10)
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
io_setup(0x3ff, &(0x7f0000000500))
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000001dc0)={0x1000f9, 0xc, 0x20070}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000300))

2m27.510346729s ago: executing program 6 (id=4707):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

2m27.510144709s ago: executing program 37 (id=4707):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

2m18.046946546s ago: executing program 4 (id=4830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)='}', 0x1}], 0x1}}], 0x3, 0x40080)
shutdown(r2, 0x1)

2m18.022944296s ago: executing program 4 (id=4832):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0)

2m17.906095228s ago: executing program 4 (id=4834):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x434, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDvrpP219cvoSqPpgUCBRHxSJq0lB64gEDiABISHMoxJGkV6jaoCRKtIggIlSOqxB1xrMRfwAkuCDghcYU7qlShXFo4Ga29mziOnebhxAF/PtImM7tjzXy9O/bMjjeArjWY/UkiDkbEbxHRV8uuLDBY+3d3cX7ir8X5iSQqlbf+TKrl7izOTxRFi9cdKDI9EelnSRxrUu/s1WsXx8vlqSt5fmTu0vsjs1evPTd9afzC1IWpy2Nnz54+NfrCmbHn2xJnFtedgY9mjh997Z0bb0ycu/HuT98kRfwNcWRubr3KwbUOPlmpbL2GXeRQXTrp6WBD2JBSrZtGb7X/90Uplk9eX7z6aUcbB2yrSqVSeaD14YUK8B+WRKdbAHRG8UWfzX+LbYeGHrvC7ZdqE6As7rv5VjvSE2leprdhfttOgxFxbuHvr7ItmtyHAABot++y8c+zzcZ/adTfF/p/vobSHxH3RcThiDgTEUci4v6IatkHI+KhDdbfuEiyevyT3tpUYOuUjf9ezNe2Vo7/itFf9Jfy3KFq/L3J+eny1Mn8PRmK3r1ZfnSNOr5/5dcvWh2rH/9lW1Z/MRbM23GrZ+/K10yOz41vJeZ6tz+JGOhpFn+ytBKQRMTRiBjYZB3TT9883urYveNfQxvWmSpfRzxVO/8L0RB/IVl7fXLkf1GeOjlSXBWr/fzL9Tdb1b+l+NsgO//7m17/S/H3J/XrtbMbr+P675+3nNNs9vrfk7y9Yt+H43NzV0Yj9iSv1xpdv3+sodzYcvks/qETzfv/4Vh+J45FRHYRPxwRj0TEo3nbH4uIxyPixBrx//jyE+9tPv7tlcU/uaHzv5zYE417midKF3/4dkWl/RuJPzv/p6upoXzPej7/1tOuzV3NAAAA8O+TRsTBSNLhpXSaDg/XfsN/JPan5ZnZuWfOz3xwebL2jEB/9KbFna6+uvuho/m0vsiPNeRP5feNvyztq+aHJ2bKk50OHrrcgRb9P/NHqdOtA7ad57Wge+n/0L30f+he+j90ryb9f18n2gHsvGbf/x93oB3Azmvo/5b9oIuY/0P30v+he+n/0JVm98W9H5KXkFiViHRXNENimxKd/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj38CAAD//xrP534=")
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
io_setup(0x2, &(0x7f0000002400))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
syz_clone3(&(0x7f00000002c0)={0x44100000, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[@ANYBLOB="0e0c480a54109e9b369ba8630ecf674b9df13bf7fb8670a1a6414d7341d90b60a7f6b0e13e0fa4bfd8492e56dadeaab561bd55273363569ba70128c023d0447b89164e2029e63c86e982988aa590cb9505a629f1582b0c35d0061d"], 0x835, 0x0)

2m15.914721717s ago: executing program 4 (id=4849):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fremovexattr(r1, &(0x7f0000000040)=@random={'user.', 'GPL\x00'})
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001900)="$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")
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r3, 0x0, 0x7ffff000)
fallocate(r2, 0x0, 0x0, 0x1001f0)
r5 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace(0x10, r5)

2m15.69252245s ago: executing program 4 (id=4851):
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0)

2m15.536455382s ago: executing program 4 (id=4853):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0)
close(r1)

2m15.486098363s ago: executing program 38 (id=4853):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0)
close(r1)

3.678198776s ago: executing program 2 (id=6958):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
epoll_create(0x8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@minixdf}, {@errors_remount}, {@abort}, {@grpquota}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0)

2.866165458s ago: executing program 2 (id=6973):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff50d7, 0x6, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x6, 0x3, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mmap(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
munlockall()
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x0, 0x10}, 0x8)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00180853682a39ca0a257b0000000c0099000200000066000000140002012bc19b3351adedc1e5f44f636bc4b7a61400fe0030a2af88fecdc19598b9ad9e1e6557021400020180a1781823290372f443cdcc9f9b88e61400fe00e4037a8c80a5990c8616c63e61856bd5"], 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socket$nl_route(0x10, 0x3, 0x0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
tee(r2, r4, 0xfffffffffffffc01, 0x0)

1.819836383s ago: executing program 2 (id=6991):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

1.727791954s ago: executing program 2 (id=6995):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
epoll_create(0x8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@minixdf}, {@errors_remount}, {@abort}, {@grpquota}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0)

1.640351606s ago: executing program 1 (id=6999):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001"], 0x68}}, 0x0)

1.621911336s ago: executing program 1 (id=7000):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000e619fc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b708000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
read$ptp(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e)
socket$unix(0x1, 0x1, 0x0)
accept(r8, 0x0, 0x0)

1.471080018s ago: executing program 9 (id=7003):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_clone3(&(0x7f0000000340)={0x80004000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
unshare(0x2040400)
r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

1.445747809s ago: executing program 1 (id=7004):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}, {&(0x7f0000000e40)="0910d6e2c6b03c8aa1b3e291775153fcd97d972b549212f2018ca274a826aecfc33b4aee809bf81bfc0e00a9a28e37287df63adf4220c34a10f405a98a2ae055f0eb5487ab096ecce74875aafaab631519970b9c48a9119128309c3ab343d3106b6a3e1fd411955a1380765587388f63dac0c8caf3e85f02f0e09d28dd676eb923c4c142382da18488226dee149bf5bcb08906b53a282d1a9fd57ad3885a8a11dca8aa8590f839ecb180f3b36ec3002419f9f9c796f700ef0c26928c2bb89e669864e355d1e94eb6464ddb36134ed6738d03", 0xd2}, {&(0x7f0000000840)="7211359c68bd00bbadacb9d5a15c9d4c121cd6616e75029ea56fc7c0b2312af80cf36a8385201388c1a3911e04dff3cee09adda229f705724bd88738dbdc58ebe2678673ed181b0721cfc7195711e9ebe820abd58088703f24bc1c39745de97bf1bdc30c245243dfea6700da", 0x6c}, {&(0x7f0000000f80)="7656081d151b337f7a5796a8b85c78730c85d8fcc65cb0f218e983c26f513a86ea81b6cb3c6d70e06477a7735611ab14f8769f7f32ac724b78dcd4a3c08a5bf662a9b1991fd0bc179cada278354f4a94d7d841d0131314905a37416408ea593ddbf60fc788251d4fd7be4fc7a3f9d63b47ef10e95aa0f743af73d568337c5dc4811b41d6cba86062e7d5dcf9c8bcb905757462b243b8b0b4a6378cfe4676a218f1eb653002615270902a1358fcd559359c67c4d81734657d288d600d6d493e9516e89be9b7cc93606b2c3243f9d67e836ac4fbfbfa082546af4d403b4030dd548c6d338bfbede82ac55060eea171", 0xee}, {&(0x7f0000000a80)="76ba61976f9e845beec8df35443b2fce15d0c3dad16e0845363736a2bc3cd700fb7319db1eb188a40f299fb98f3e3f23491079b0a8ee28436be65c40067d8f19fc73b7162aee0bd97f74b574ffb3394c21f496b912ef930ec3edc8a96a1586d6b8999ceda77cc5856995eaeedf4af6f7edf2d8dcb05cbea2eb607101429d9c11eb617a06a7fa2ee431d1cf3df8800ecbabc9d1b22494dfa2b263b5065c59c4323b3e06970ee18d046c5efe", 0xab}, {&(0x7f0000001080)="55fb3125ebb9f9f2d8e1c0d762781afefca202c70ddb87f14aa97ddc944cb0431c36c080bed1deca5d7e1799869ffa75f7337d80ffcd0c9d7caf22727f1f2feacd59de52fe716c478a275d6f425d2baf49c79ea2cff4b9eea3d87209368ffe0ec9a2c74d1bcf0c723c29cbb58991676f343bc2805448fae5f7c9e9c7553b81af0bb79ad81643d32323d47c96627b96e829228bd08367c9c3f549123300b351f0697739a749379f9b2d30969cad2ad1e92e2b09e401ba0c55cf7d76c3c8bb4b588cdddfd5afb72126f61d1b124d47675257", 0xd1}], 0x6, 0x0, 0x0, 0x7a000000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x33a4646e79d212d8)
syz_usb_disconnect(r2)
r3 = open(&(0x7f0000000b40)='./cgroup\x00', 0x8000, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x12, &(0x7f00000009c0)=@raw=[@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f00000008c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, &(0x7f0000000b80)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x4, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x0, 0x5, 0x0, 0x9}, {0x1, 0x5, 0xf, 0x7}, {0x3, 0x1, 0xf, 0x8}, {0x2, 0x3, 0xb, 0x6}, {0x1, 0x5, 0x5, 0x2}, {0x3, 0x4, 0x5, 0xa}, {0x0, 0x3, 0x10, 0x8}, {0x2, 0x5, 0x10, 0xf}], 0x10, 0x5, @void, @value}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)

1.216855562s ago: executing program 9 (id=7008):
creat(0x0, 0x4)
utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}})

1.165409043s ago: executing program 9 (id=7009):
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x91e, 0x12)

1.123744973s ago: executing program 9 (id=7011):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x4d8, &(0x7f0000000540)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4, 0x7}}, './file0\x00'})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000019080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRES8=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000190c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x7fff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80), 0x80002, 0x0)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c)

1.123242784s ago: executing program 5 (id=7012):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002306000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000200"], 0x48)
perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
read$ptp(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r7, 0x0)
socket$unix(0x1, 0x1, 0x0)

925.333656ms ago: executing program 5 (id=7014):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a"], 0x68}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x88, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffe767}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x40080)
recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_pidfd_open(0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)

897.084776ms ago: executing program 5 (id=7015):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

851.128047ms ago: executing program 2 (id=7016):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mmap(&(0x7f00006dc000/0x2000)=nil, 0x2000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
munlockall()
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="55ff0872d40ec36ee50d93441207b7fbb99364d78f846fc5b56ead8d6f707435e690f3585c992bffeb9ff8afcd99e4d57282ae53dbd6630606a811c511700b000000008dab0000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2507000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x40)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x0, 0x10}, 0x8)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
sendto$inet6(r2, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="00180853682a39ca0a257b0000000c0099000200000066000000140002012bc19b3351adedc1e5f44f636bc4b7a61400fe0030a2af88fecdc19598b9ad9e1e6557021400020180a1781823290372f443cdcc9f9b88e61400fe00e4037a8c80a5990c8616c63e61856bd5"], 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x21ac6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r6, r8, 0xfffffffffffffc01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdd2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

806.467698ms ago: executing program 5 (id=7017):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c0002000700"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

775.173198ms ago: executing program 5 (id=7018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2490, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)

731.749549ms ago: executing program 1 (id=7020):
creat(&(0x7f0000000280)='./file0\x00', 0x4)
utimes(0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}})

722.152439ms ago: executing program 5 (id=7021):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4f8, 0x0, 0x9403, 0x0, 0x340, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0xa, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558)
utimes(0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
madvise(&(0x7f0000531000/0x1000)=nil, 0x1000, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="d1f57cbc173a36356f4175c7e8aa926bd835298f91600edffdf78640288067c076d8296fb3c4476e0eb8877525a6e7877bb3d4de9d07b83f248d8e3de9e1aee76b6ce438526e84f83f9ccfdf4d414f40e8fd272cf69cab8d7ff70ab84bddc2f9330d4af35861651ae360b9d8a7164d5ed40c237d91cb06ae590ad143a2dc5fdfb54fa262abcaa741afffecfdc449918972c21ca33e1f0123e8cf685a8f4f77699e085f9e46165baef8e9f4363c4ca13144c657af49362d2d235a548553a95ebb92", @ANYRES64=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(9'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x3, 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a0000000400000008000000080000000015000097f06055d2d39394802947fd6b15c8a64aa77e8734cd48ddc1c27fdc1fbc757df0dacf6e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
syz_io_uring_setup(0xe2d, &(0x7f0000000940)={0x0, 0x8343, 0x4, 0x3, 0x2c5}, &(0x7f0000000a00), &(0x7f0000000a40)=<r10=>0x0)
syz_io_uring_submit(0x0, r10, &(0x7f0000000a80)=@IORING_OP_SHUTDOWN={0x22, 0x28, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfa00c338f6b5f114})
add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

666.48481ms ago: executing program 1 (id=7022):
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x91e, 0x12)

666.13554ms ago: executing program 1 (id=7023):
mkdir(&(0x7f00000001c0)='./file0\x00', 0xa0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040))
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80800)
sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="b5fe3dd5448b21b58ee75dcd7fca80effae6a9316b2122c965", 0x19}, {&(0x7f0000000340)="21d36342e813ec10277dba1b7ad7ea13a7c5db50afc608794d8f6577603c0b192fdbf631fe4194493bd5c85b0b8ff3607300", 0x32}, {&(0x7f0000000380)="925cb330bef0699f9e7cd3d22049b5ddf0c6a17c9a0a85bf160b91c9a1a05814ee32cc0c4888ac77c49f0cfe32414efc4efe4c107e423a06153f5c61896fb6a507299ab505ef2f0361296b4740fb96aa5f1109faed12ed3bd5c62e8802e3a1bfb0c7e8f29d5f746b70bf8222116e28b04fd6c9f2af417c9b5b8f6add5d5b7f881f8f5946e5b6c8cceef7d1a562b0eb99ea9c4550cbf7686716e800d3f51678caa97f31a0a09d021a286ff3f0b3834625a2d29da2a822b28e62ee6779ed777df8056ce9b20bf1d407ef1ed7b898cacafa07c6174f1de156fe88bc2f1f1743ffa9d7018fcf63eeb6b90368f0b8c2c5d18491d9ae036be930", 0xf7}], 0x3, 0x0, 0x0, 0x40000c0}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
readahead(0xffffffffffffffff, 0x4, 0x81)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000ff0000000000faffff0318110000", @ANYRES32=r1, @ANYBLOB="8000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3})
r2 = socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

279.574025ms ago: executing program 3 (id=7025):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c61"], 0x68}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x88, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xed}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffe767}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x1b}}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x40080)
recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_pidfd_open(0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)

239.264066ms ago: executing program 3 (id=7026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
epoll_create(0x8)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@minixdf}, {@errors_remount}, {@abort}, {@grpquota}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = msgget$private(0x0, 0x0)
msgrcv(r1, 0x0, 0x0, 0x1, 0x2000)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})
msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0)

115.906888ms ago: executing program 9 (id=7027):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0)

96.772958ms ago: executing program 3 (id=7028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c0002000700"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

80.385398ms ago: executing program 9 (id=7029):
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000100)={'dvmrp0\x00'})
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x34, r7, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5e}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00')
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r10, @ANYRESDEC=r1, @ANYBLOB="000000000000000000000000000000000000000000f6ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003c"], 0x17c}}, 0x8084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000180100002020782500000000002020207b1af8940c000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

67.945949ms ago: executing program 3 (id=7030):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
io_uring_setup(0xc83, &(0x7f00000002c0)={0x0, 0xe185, 0x100, 0x3, 0x337, 0x0, r1})
listxattr(0x0, &(0x7f0000000380)=""/4096, 0x1000)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001440)={@pppoe={0x18, 0x0, {0x2, @random='\'H<0~\x00', 'rose0\x00'}}, {0x0}, &(0x7f0000001400), 0x15}, 0xa0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x4000010, r1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001a80)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001cc0)={0x7}, 0x8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001d40)={'virt_wifi0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20005)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8)
ioctl$BLKBSZSET(r1, 0x40081271, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
r3 = io_uring_setup(0x612f, 0x0)
io_uring_setup(0x249c, &(0x7f0000002000)={0x0, 0x8d99, 0x8000, 0x1, 0x262, 0x0, r3})
sendmmsg(r2, &(0x7f0000005540), 0x0, 0x940c1)
readahead(0xffffffffffffffff, 0x800, 0xc)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000005980)={&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, &(0x7f0000005800)=""/115, 0x73, 0x1, 0x0}, &(0x7f00000059c0)=0x40)
fsetxattr$system_posix_acl(r2, 0x0, &(0x7f00000060c0)={{}, {}, [{}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x2, 0xee00}], {0x4, 0x1}, [{0x8, 0x3, 0xee01}, {0x8, 0x3}, {0x8, 0x5, 0xffffffffffffffff}, {}, {0x8, 0x7}], {0x10, 0x2}, {0x20, 0x6}}, 0x7c, 0x1)

13.85091ms ago: executing program 3 (id=7031):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2490, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)

13.22535ms ago: executing program 2 (id=7032):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x10000002}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x78, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_emit_ethernet(0x22, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x40, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0)

0s ago: executing program 3 (id=7033):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000240)=0x2000003, 0x4) (fail_nth: 1)

kernel console output (not intermixed with test programs):

parsing attributes in process `syz.2.6263'.
[  458.664622][T22553] netlink: 'syz.3.6264': attribute type 1 has an invalid length.
[  458.824298][T22570] netlink: 'syz.5.6270': attribute type 25 has an invalid length.
[  458.845647][T22575] rdma_op ffff888167c44180 conn xmit_rdma 0000000000000000
[  458.921228][T22583] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6276'.
[  459.028668][T22598] loop5: detected capacity change from 0 to 512
[  459.035719][T22598] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  459.076236][T22600] lo speed is unknown, defaulting to 1000
[  459.116844][T22606] rdma_op ffff888118b8c180 conn xmit_rdma 0000000000000000
[  459.194562][T22613] netlink: 'syz.9.6288': attribute type 25 has an invalid length.
[  459.232230][T22618] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6289'.
[  459.282882][T22621] loop9: detected capacity change from 0 to 1024
[  459.290707][T22622] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  459.297271][T22622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  459.305035][T22622] vhci_hcd vhci_hcd.0: Device attached
[  459.313150][T22621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.331510][T22621] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  459.372506][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6294'.
[  459.386022][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6292'.
[  459.387075][T22632] bridge0: entered promiscuous mode
[  459.402391][T22632] bridge0: port 3(macsec1) entered blocking state
[  459.404469][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.409451][T22632] bridge0: port 3(macsec1) entered disabled state
[  459.426320][T22632] macsec1: entered allmulticast mode
[  459.432039][T22632] bridge0: entered allmulticast mode
[  459.438744][T22632] macsec1: left allmulticast mode
[  459.443991][T22632] bridge0: left allmulticast mode
[  459.449541][T22632] bridge0: left promiscuous mode
[  459.460053][T22623] vhci_hcd: connection closed
[  459.460602][T14680] vhci_hcd: stop threads
[  459.462026][T22640] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6295'.
[  459.465361][T14680] vhci_hcd: release socket
[  459.469614][T22640] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  459.491655][T14680] vhci_hcd: disconnect device
[  459.491946][ T1055] vhci_hcd: vhci_device speed not set
[  459.507392][T22643] rdma_op ffff888118b8f980 conn xmit_rdma 0000000000000000
[  459.535686][T22645] loop9: detected capacity change from 0 to 512
[  459.542846][T22645] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  459.597786][T22651] netlink: 'syz.3.6299': attribute type 1 has an invalid length.
[  459.629674][T22654] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6302'.
[  459.641951][T22656] loop9: detected capacity change from 0 to 512
[  459.658449][T22658] syz.3.6303: attempt to access beyond end of device
[  459.658449][T22658] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  459.673801][T22656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.686583][T22656] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.851616][T22677] random: crng reseeded on system resumption
[  459.859578][T22679] SELinux: syz.3.6307 (22679) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  460.101546][T22680] lo speed is unknown, defaulting to 1000
[  460.446122][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.665110][T22695] loop9: detected capacity change from 0 to 512
[  460.683052][T22695] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  460.716213][T22695] EXT4-fs (loop9): 1 truncate cleaned up
[  460.730147][T22695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.078033][T22706] lo speed is unknown, defaulting to 1000
[  461.518836][T22715] loop1: detected capacity change from 0 to 512
[  461.532895][T22715] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  461.563074][T22718] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  461.569676][T22718] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  461.578125][T22718] vhci_hcd vhci_hcd.0: Device attached
[  461.642347][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.693929][T22728] loop1: detected capacity change from 0 to 512
[  461.747665][T16963] vhci_hcd: vhci_device speed not set
[  461.770012][T22738] bridge0: entered promiscuous mode
[  461.791785][T22728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.806546][T22738] bridge0: port 3(macsec1) entered blocking state
[  461.813228][T22738] bridge0: port 3(macsec1) entered disabled state
[  461.823451][T22738] macsec1: entered allmulticast mode
[  461.829183][T22738] bridge0: entered allmulticast mode
[  461.829540][   T29] kauditd_printk_skb: 546 callbacks suppressed
[  461.829573][   T29] audit: type=1326 audit(1747398354.196:16515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.9.6321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8b58ee969 code=0x0
[  461.835646][T16963] usb 5-1: new full-speed USB device number 9 using vhci_hcd
[  461.873728][T22728] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.887634][T22738] macsec1: left allmulticast mode
[  461.893434][T22738] bridge0: left allmulticast mode
[  461.905716][T22738] bridge0: left promiscuous mode
[  461.944444][T22703] lo speed is unknown, defaulting to 1000
[  461.952169][T22720] vhci_hcd: connection reset by peer
[  461.957978][T14656] vhci_hcd: stop threads
[  461.962524][T14656] vhci_hcd: release socket
[  461.967246][T14656] vhci_hcd: disconnect device
[  462.041452][T22753] SELinux: syz.5.6325 (22753) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  462.066788][T22703] chnl_net:caif_netlink_parms(): no params data found
[  462.136879][T22703] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.144009][T22703] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.151511][T22703] bridge_slave_0: entered allmulticast mode
[  462.158330][T22703] bridge_slave_0: entered promiscuous mode
[  462.165655][T22703] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.172761][T22703] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.180144][T22703] bridge_slave_1: entered allmulticast mode
[  462.186907][T22703] bridge_slave_1: entered promiscuous mode
[  462.211444][T22703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.222663][T22703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.249201][T22703] team0: Port device team_slave_0 added
[  462.256387][T22703] team0: Port device team_slave_1 added
[  462.275922][T22703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.283036][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.310396][T22703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.324754][T22703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  462.331956][T22703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  462.359214][T22703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.392664][T22703] hsr_slave_0: entered promiscuous mode
[  462.399310][T22703] hsr_slave_1: entered promiscuous mode
[  462.406810][T22703] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  462.415435][T22703] Cannot create hsr debugfs directory
[  462.536146][   T29] audit: type=1326 audit(1747398354.941:16516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.560031][   T29] audit: type=1326 audit(1747398354.941:16517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.583967][   T29] audit: type=1326 audit(1747398354.941:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.608022][   T29] audit: type=1326 audit(1747398354.941:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.632376][   T29] audit: type=1326 audit(1747398354.941:16520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.663648][T22763] hub 9-0:1.0: USB hub found
[  462.668643][T22763] hub 9-0:1.0: 8 ports detected
[  462.696409][   T29] audit: type=1326 audit(1747398354.994:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.720466][   T29] audit: type=1326 audit(1747398354.994:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.744994][   T29] audit: type=1326 audit(1747398354.994:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.768940][   T29] audit: type=1326 audit(1747398355.067:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.9.6328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  462.839297][T14673] bond0 (unregistering): (slave gretap1): Releasing active interface
[  462.868640][T14673] 
 (unregistering): Released all slaves
[  462.876510][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.878441][T14673] bond1 (unregistering): Released all slaves
[  462.900951][T14673] bond2 (unregistering): Released all slaves
[  462.920344][T14673] " (unregistering): Released all slaves
[  462.928051][T22777] __nla_validate_parse: 6 callbacks suppressed
[  462.928071][T22777] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6334'.
[  462.930467][T14673] bond0 (unregistering): Released all slaves
[  462.971572][T22781] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  462.978341][T22781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  462.987061][T22781] vhci_hcd vhci_hcd.0: Device attached
[  463.007267][T14673] tipc: Left network mode
[  463.025907][T22789] loop1: detected capacity change from 0 to 1024
[  463.039293][T22789] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  463.048488][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6335'.
[  463.059994][T22782] vhci_hcd: connection closed
[  463.062346][T14656] vhci_hcd: stop threads
[  463.072160][T14656] vhci_hcd: release socket
[  463.076680][T14656] vhci_hcd: disconnect device
[  463.082930][T14673] hsr_slave_0: left promiscuous mode
[  463.088647][T14673] hsr_slave_1: left promiscuous mode
[  463.247400][T22703] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  463.256185][T22703] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  463.265142][T22703] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  463.274031][T22703] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  463.311405][T22703] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.323905][T22703] 8021q: adding VLAN 0 to HW filter on device team0
[  463.334530][T14672] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.341780][T14672] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.353657][T14672] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.360866][T14672] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.447899][T22703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.480474][T22808] loop9: detected capacity change from 0 to 512
[  463.492675][T22808] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.505667][T22808] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.522973][T22808] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6342'.
[  463.543081][T22703] veth0_vlan: entered promiscuous mode
[  463.552862][T22703] veth1_vlan: entered promiscuous mode
[  463.571614][T22703] veth0_macvtap: entered promiscuous mode
[  463.579549][T22703] veth1_macvtap: entered promiscuous mode
[  463.592962][T22703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.605628][T22703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.618074][T22818] SELinux: syz.5.6343 (22818) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  463.624106][T22703] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.640817][T22703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.649593][T22703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.658414][T22703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.707902][T22821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6344'.
[  463.824834][T22830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6346'.
[  463.920800][T22837] hub 9-0:1.0: USB hub found
[  463.925588][T22837] hub 9-0:1.0: 8 ports detected
[  464.673989][T22853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6355'.
[  464.723801][T22858] FAULT_INJECTION: forcing a failure.
[  464.723801][T22858] name failslab, interval 1, probability 0, space 0, times 0
[  464.736649][T22858] CPU: 1 UID: 0 PID: 22858 Comm: syz.3.6357 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  464.736695][T22858] Tainted: [W]=WARN
[  464.736704][T22858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  464.736718][T22858] Call Trace:
[  464.736726][T22858]  <TASK>
[  464.736737][T22858]  __dump_stack+0x1d/0x30
[  464.736809][T22858]  dump_stack_lvl+0xe8/0x140
[  464.736832][T22858]  dump_stack+0x15/0x1b
[  464.736906][T22858]  should_fail_ex+0x265/0x280
[  464.736992][T22858]  ? selinux_bpf_prog_load+0x36/0xf0
[  464.737030][T22858]  should_failslab+0x8c/0xb0
[  464.737077][T22858]  __kmalloc_cache_noprof+0x4c/0x320
[  464.737109][T22858]  selinux_bpf_prog_load+0x36/0xf0
[  464.737184][T22858]  security_bpf_prog_load+0x54/0xa0
[  464.737244][T22858]  bpf_prog_load+0xe6b/0x1070
[  464.737291][T22858]  ? security_bpf+0x2b/0x90
[  464.737337][T22858]  __sys_bpf+0x51d/0x790
[  464.737438][T22858]  __x64_sys_bpf+0x41/0x50
[  464.737473][T22858]  x64_sys_call+0x2478/0x2fb0
[  464.737512][T22858]  do_syscall_64+0xd0/0x1a0
[  464.737544][T22858]  ? clear_bhb_loop+0x40/0x90
[  464.737566][T22858]  ? clear_bhb_loop+0x40/0x90
[  464.737587][T22858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.737627][T22858] RIP: 0033:0x7f04cc31e969
[  464.737647][T22858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.737672][T22858] RSP: 002b:00007f04ca987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  464.737697][T22858] RAX: ffffffffffffffda RBX: 00007f04cc545fa0 RCX: 00007f04cc31e969
[  464.737714][T22858] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  464.737731][T22858] RBP: 00007f04ca987090 R08: 0000000000000000 R09: 0000000000000000
[  464.737747][T22858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.737818][T22858] R13: 0000000000000000 R14: 00007f04cc545fa0 R15: 00007fff22545338
[  464.737845][T22858]  </TASK>
[  465.017559][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6358'.
[  465.035989][T22860] bridge0: entered promiscuous mode
[  465.043104][T22860] bridge0: port 3(macsec1) entered blocking state
[  465.049692][T22860] bridge0: port 3(macsec1) entered disabled state
[  465.061296][T22860] macsec1: entered allmulticast mode
[  465.066649][T22860] bridge0: entered allmulticast mode
[  465.073043][T22860] macsec1: left allmulticast mode
[  465.078129][T22860] bridge0: left allmulticast mode
[  465.086291][T22860] bridge0: left promiscuous mode
[  465.131098][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.162456][T22870] loop9: detected capacity change from 0 to 512
[  465.169934][T22870] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  465.227254][T22880] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  465.233803][T22880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  465.241607][T22880] vhci_hcd vhci_hcd.0: Device attached
[  465.297638][T22889] hub 9-0:1.0: USB hub found
[  465.302833][T22889] hub 9-0:1.0: 8 ports detected
[  465.312395][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6365'.
[  465.322394][T22881] vhci_hcd: connection closed
[  465.322519][T14672] vhci_hcd: stop threads
[  465.332340][T14672] vhci_hcd: release socket
[  465.336778][T14672] vhci_hcd: disconnect device
[  465.358615][T22897] loop5: detected capacity change from 0 to 512
[  465.365694][T22897] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  465.377516][T22897] EXT4-fs (loop5): 1 truncate cleaned up
[  465.383592][T22897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.691150][T22901] lo speed is unknown, defaulting to 1000
[  465.844556][T22908] netlink: 'syz.1.6370': attribute type 1 has an invalid length.
[  465.876776][T22909] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6372'.
[  466.150598][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6377'.
[  466.208597][T22924] bridge0: entered promiscuous mode
[  466.217019][T22924] bridge0: port 3(macsec1) entered blocking state
[  466.223664][T22924] bridge0: port 3(macsec1) entered disabled state
[  466.241031][T22924] macsec1: entered allmulticast mode
[  466.246756][T22924] bridge0: entered allmulticast mode
[  466.272347][T22924] macsec1: left allmulticast mode
[  466.277590][T22924] bridge0: left allmulticast mode
[  466.297521][T22924] bridge0: left promiscuous mode
[  466.333200][T22939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  466.339870][T22939] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  466.347781][T22939] vhci_hcd vhci_hcd.0: Device attached
[  466.437376][T22940] vhci_hcd: connection closed
[  466.437788][T14672] vhci_hcd: stop threads
[  466.447301][T14672] vhci_hcd: release socket
[  466.451746][T14672] vhci_hcd: disconnect device
[  466.709975][T16963] usb 5-1: enqueue for inactive port 0
[  466.715722][T16963] usb 5-1: enqueue for inactive port 0
[  466.747416][T22951] netlink: 'syz.3.6383': attribute type 1 has an invalid length.
[  466.772203][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.779873][T22953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.785326][T16963] vhci_hcd: vhci_device speed not set
[  466.792909][T22953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.800541][T22953] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.824876][T22954] bridge0: entered promiscuous mode
[  466.831687][T22954] bridge0: port 3(macsec1) entered blocking state
[  466.838501][T22954] bridge0: port 3(macsec1) entered disabled state
[  466.845311][T22954] macsec1: entered allmulticast mode
[  466.850677][T22954] bridge0: entered allmulticast mode
[  466.857238][T22954] macsec1: left allmulticast mode
[  466.862533][T22954] bridge0: left allmulticast mode
[  466.868170][T22954] bridge0: left promiscuous mode
[  466.870809][   T29] kauditd_printk_skb: 278 callbacks suppressed
[  466.870827][   T29] audit: type=1326 audit(1747398359.487:16803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.3.6384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04cc31e969 code=0x0
[  466.960751][   T29] audit: type=1326 audit(1747398359.592:16804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  466.984637][   T29] audit: type=1326 audit(1747398359.592:16805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.008372][   T29] audit: type=1326 audit(1747398359.592:16806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.032309][   T29] audit: type=1326 audit(1747398359.592:16807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.056145][   T29] audit: type=1326 audit(1747398359.592:16808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.079909][   T29] audit: type=1326 audit(1747398359.592:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.103817][   T29] audit: type=1326 audit(1747398359.592:16810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.127568][   T29] audit: type=1326 audit(1747398359.592:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.151736][   T29] audit: type=1326 audit(1747398359.592:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22963 comm="syz.1.6388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  467.186548][T22964] hub 9-0:1.0: USB hub found
[  467.191335][T22964] hub 9-0:1.0: 8 ports detected
[  467.299184][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.318823][T22982] netlink: 'syz.5.6394': attribute type 1 has an invalid length.
[  467.343394][T22984] rdma_op ffff8881348df180 conn xmit_rdma 0000000000000000
[  467.410139][T22994] syz.5.6400: attempt to access beyond end of device
[  467.410139][T22994] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  467.412824][T22995] bridge0: entered promiscuous mode
[  467.432294][T22995] bridge0: port 3(macsec1) entered blocking state
[  467.439351][T22995] bridge0: port 3(macsec1) entered disabled state
[  467.446557][T22995] macsec1: entered allmulticast mode
[  467.452254][T22995] bridge0: entered allmulticast mode
[  467.459284][T22995] macsec1: left allmulticast mode
[  467.464509][T22995] bridge0: left allmulticast mode
[  467.491176][T22995] bridge0: left promiscuous mode
[  467.790438][T23011] netlink: 'syz.1.6406': attribute type 1 has an invalid length.
[  467.816018][T23015] loop1: detected capacity change from 0 to 512
[  467.822661][T23015] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  468.005844][T23033] hub 9-0:1.0: USB hub found
[  468.010955][T23033] hub 9-0:1.0: 8 ports detected
[  468.115101][T23042] loop9: detected capacity change from 0 to 512
[  468.122265][T23042] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  468.153274][T23049] loop9: detected capacity change from 0 to 512
[  468.162295][T23049] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  468.174493][T23049] EXT4-fs (loop9): 1 truncate cleaned up
[  468.181030][T23049] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.280998][T23047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.282916][T23054] __nla_validate_parse: 3 callbacks suppressed
[  468.282937][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6423'.
[  468.479695][T23062] lo speed is unknown, defaulting to 1000
[  469.027447][T23078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6429'.
[  469.040428][T23078] bridge0: entered promiscuous mode
[  469.046837][T23078] bridge0: port 3(macsec1) entered blocking state
[  469.053601][T23078] bridge0: port 3(macsec1) entered disabled state
[  469.060270][T23078] macsec1: entered allmulticast mode
[  469.065638][T23078] bridge0: entered allmulticast mode
[  469.071594][T23078] macsec1: left allmulticast mode
[  469.076793][T23078] bridge0: left allmulticast mode
[  469.082772][T23078] bridge0: left promiscuous mode
[  469.158751][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6434'.
[  469.350669][T23104] hub 9-0:1.0: USB hub found
[  469.355694][T23104] hub 9-0:1.0: 8 ports detected
[  469.465136][T23107] lo speed is unknown, defaulting to 1000
[  469.803734][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.077831][T23123] loop1: detected capacity change from 0 to 512
[  470.085131][T23123] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  470.093861][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6440'.
[  470.119189][T23119] bridge0: entered promiscuous mode
[  470.126801][T23119] bridge0: port 3(macsec1) entered blocking state
[  470.134060][T23119] bridge0: port 3(macsec1) entered disabled state
[  470.141513][T23119] macsec1: entered allmulticast mode
[  470.146867][T23119] bridge0: entered allmulticast mode
[  470.153506][T23128] syz.1.6445: attempt to access beyond end of device
[  470.153506][T23128] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  470.171337][T23119] macsec1: left allmulticast mode
[  470.176472][T23119] bridge0: left allmulticast mode
[  470.192079][T23119] bridge0: left promiscuous mode
[  470.199676][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6447'.
[  470.302448][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6449'.
[  470.315775][T23143] bridge0: entered promiscuous mode
[  470.322994][T23143] bridge0: port 3(macsec1) entered blocking state
[  470.330136][T23143] bridge0: port 3(macsec1) entered disabled state
[  470.336891][T23143] macsec1: entered allmulticast mode
[  470.342389][T23143] bridge0: entered allmulticast mode
[  470.348435][T23143] macsec1: left allmulticast mode
[  470.353630][T23143] bridge0: left allmulticast mode
[  470.366188][T23143] bridge0: left promiscuous mode
[  470.531941][T23153] loop1: detected capacity change from 0 to 512
[  470.549899][T23153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.563391][T23153] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.580361][T23153] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6451'.
[  470.694262][T23163] rdma_op ffff88812da38180 conn xmit_rdma 0000000000000000
[  470.723522][T23165] loop5: detected capacity change from 0 to 512
[  470.731010][T23165] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  470.847630][T23172] loop5: detected capacity change from 0 to 512
[  470.864934][T23172] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  470.880451][T23174] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6458'.
[  470.895951][T23174] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  470.915940][T23172] EXT4-fs (loop5): 1 truncate cleaned up
[  470.922649][T23172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  470.946278][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6459'.
[  470.989800][T23181] syz.9.6460: attempt to access beyond end of device
[  470.989800][T23181] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  471.283233][T23202] rdma_op ffff8881234a9580 conn xmit_rdma 0000000000000000
[  471.299881][T23204] loop9: detected capacity change from 0 to 512
[  471.346174][T23204] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  471.379563][T23195] lo speed is unknown, defaulting to 1000
[  471.703633][T23224] loop9: detected capacity change from 0 to 1024
[  471.787770][T23224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.816696][T23224] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  471.889231][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.974811][   T29] kauditd_printk_skb: 171 callbacks suppressed
[  471.974830][   T29] audit: type=1326 audit(1747398364.851:16984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.017440][   T29] audit: type=1326 audit(1747398364.893:16985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.042271][   T29] audit: type=1326 audit(1747398364.893:16986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.066654][   T29] audit: type=1326 audit(1747398364.893:16987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.090565][   T29] audit: type=1326 audit(1747398364.893:16988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.115115][   T29] audit: type=1326 audit(1747398364.893:16989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.139907][   T29] audit: type=1326 audit(1747398364.893:16990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.163804][   T29] audit: type=1326 audit(1747398364.893:16991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.188469][   T29] audit: type=1326 audit(1747398364.893:16992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.197182][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.212191][   T29] audit: type=1326 audit(1747398364.893:16993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.1.6475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fece0a4e969 code=0x7ffc0000
[  472.276817][T23248] rdma_op ffff88812da39580 conn xmit_rdma 0000000000000000
[  472.431565][T23256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  472.438270][T23256] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  472.446826][T23256] vhci_hcd vhci_hcd.0: Device attached
[  472.492231][T23264] syz.9.6485: attempt to access beyond end of device
[  472.492231][T23264] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  472.540704][T23269] xt_TCPMSS: Only works on TCP SYN packets
[  472.579433][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6484'.
[  472.594523][T23258] vhci_hcd: connection closed
[  472.594911][T14672] vhci_hcd: stop threads
[  472.604093][T14672] vhci_hcd: release socket
[  472.608561][T14672] vhci_hcd: disconnect device
[  472.624595][ T1055] vhci_hcd: vhci_device speed not set
[  472.665167][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.741285][T23279] SELinux: syz.5.6489 (23279) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  472.934956][T23284] hub 9-0:1.0: USB hub found
[  472.940051][T23284] hub 9-0:1.0: 8 ports detected
[  473.147102][T23307] loop1: detected capacity change from 0 to 1024
[  473.169689][T23307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.220584][T23304] lo speed is unknown, defaulting to 1000
[  473.287508][T23307] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  473.348028][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.534063][T23336] loop1: detected capacity change from 0 to 512
[  473.541417][T23336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  473.562390][T23334] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5)
[  473.569080][T23334] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  473.576812][T23334] vhci_hcd vhci_hcd.0: Device attached
[  473.584397][T23336] EXT4-fs (loop1): 1 orphan inode deleted
[  473.590237][T23336] EXT4-fs (loop1): 1 truncate cleaned up
[  473.601079][T23336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.619475][T23336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6511'.
[  473.646105][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.690788][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6510'.
[  473.700817][T23338] vhci_hcd: connection closed
[  473.701834][T14672] vhci_hcd: stop threads
[  473.710897][T14672] vhci_hcd: release socket
[  473.715455][T14672] vhci_hcd: disconnect device
[  473.737802][T23351] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6513'.
[  473.751393][ T1055] vhci_hcd: vhci_device speed not set
[  473.774555][T23351] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  473.963393][T23357] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.141851][T23363] lo speed is unknown, defaulting to 1000
[  474.276712][T23372] SELinux: syz.9.6519 (23372) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  474.361960][T23375] loop5: detected capacity change from 0 to 1024
[  474.370551][T23375] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  474.480690][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6526'.
[  474.496210][T23385] bridge0: entered promiscuous mode
[  474.503670][T23385] bridge0: port 3(macsec1) entered blocking state
[  474.510384][T23385] bridge0: port 3(macsec1) entered disabled state
[  474.517705][T23385] macsec1: entered allmulticast mode
[  474.523131][T23385] bridge0: entered allmulticast mode
[  474.529555][T23385] macsec1: left allmulticast mode
[  474.534827][T23385] bridge0: left allmulticast mode
[  474.542178][T23385] bridge0: left promiscuous mode
[  474.773358][T23407] loop1: detected capacity change from 0 to 512
[  474.788969][T23407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.802436][T23407] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.847185][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6532'.
[  474.869558][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.965699][T23415] pim6reg1: entered promiscuous mode
[  474.971421][T23415] pim6reg1: entered allmulticast mode
[  474.979860][T23415] siw: device registration error -23
[  475.132903][T23419] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6536'.
[  475.142070][T23419] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  475.183800][T23423] hub 9-0:1.0: USB hub found
[  475.188951][T23423] hub 9-0:1.0: 8 ports detected
[  475.368155][T23431] loop1: detected capacity change from 0 to 512
[  475.374865][T23431] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  475.447789][T23434] loop9: detected capacity change from 0 to 128
[  475.494176][T23434] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  475.520329][T23439] loop5: detected capacity change from 0 to 128
[  475.557199][T23434] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  475.557632][T23439] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  475.606735][T23439] ext4 filesystem being mounted at /308/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  475.758261][T23445] loop1: detected capacity change from 0 to 1024
[  475.893630][T23445] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  475.905360][T23449] SELinux: syz.2.6545 (23449) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  475.963118][T23450] loop3: detected capacity change from 0 to 128
[  476.011623][T23450] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  476.064880][T23450] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  476.127351][T23455] loop1: detected capacity change from 0 to 512
[  476.156699][T23455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  476.222888][T23455] EXT4-fs (loop1): 1 truncate cleaned up
[  476.258327][T23455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.473558][T23455] lo speed is unknown, defaulting to 1000
[  476.687065][T18283] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  476.750280][T23460] loop5: detected capacity change from 0 to 1024
[  476.788089][T23460] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  476.818391][T23462] SELinux: failed to load policy
[  476.865507][T23467] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6549'.
[  476.874970][T23467] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  476.929453][T22703] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  476.998348][T17191] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  477.007812][T23475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6551'.
[  477.021753][T23475] bridge0: entered promiscuous mode
[  477.028780][T23475] bridge0: port 3(macsec1) entered blocking state
[  477.035284][T23475] bridge0: port 3(macsec1) entered disabled state
[  477.044863][T23475] macsec1: entered allmulticast mode
[  477.050246][T23475] bridge0: entered allmulticast mode
[  477.058623][T23475] macsec1: left allmulticast mode
[  477.063841][T23475] bridge0: left allmulticast mode
[  477.072409][   T29] kauditd_printk_skb: 120 callbacks suppressed
[  477.072422][   T29] audit: type=1326 audit(1747398370.195:17114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23472 comm="syz.3.6551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04cc31e969 code=0x0
[  477.103563][T23475] bridge0: left promiscuous mode
[  477.103764][T23482] loop2: detected capacity change from 0 to 512
[  477.132771][T23482] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  477.132949][T23486] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6555'.
[  477.150631][T23486] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  477.192849][T23489] loop9: detected capacity change from 0 to 1024
[  477.206733][T23489] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  477.221567][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.245204][T23492] loop5: detected capacity change from 0 to 1024
[  477.247266][T23494] program syz.1.6557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  477.275364][T23492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.290897][T23492] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  477.308248][T23499] syz.2.6559: attempt to access beyond end of device
[  477.308248][T23499] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  477.336378][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.355355][T23504] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6560'.
[  477.365718][T23504] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  477.399888][T23508] loop9: detected capacity change from 0 to 1024
[  477.407186][T23508] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  477.457396][T23513] loop5: detected capacity change from 0 to 1024
[  477.475589][T23513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.489422][T23513] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  477.519891][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.542004][T23523] loop9: detected capacity change from 0 to 512
[  477.549048][T23523] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  477.562288][T23523] EXT4-fs (loop9): 1 truncate cleaned up
[  477.568671][T23523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.684311][   T29] audit: type=1326 audit(1747398370.846:17115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.729386][T23523] lo speed is unknown, defaulting to 1000
[  477.768822][T23532] loop2: detected capacity change from 0 to 512
[  477.773542][   T29] audit: type=1326 audit(1747398370.866:17116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.775547][T23532] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  477.798884][   T29] audit: type=1326 audit(1747398370.866:17117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.798981][   T29] audit: type=1326 audit(1747398370.866:17118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.799014][   T29] audit: type=1326 audit(1747398370.866:17119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.799102][   T29] audit: type=1326 audit(1747398370.866:17120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.799140][   T29] audit: type=1326 audit(1747398370.866:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.799173][   T29] audit: type=1326 audit(1747398370.866:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.799274][   T29] audit: type=1326 audit(1747398370.866:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26e8ae969 code=0x7ffc0000
[  477.827949][T23534] loop3: detected capacity change from 0 to 1024
[  477.996490][T23534] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  478.104782][T23543] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  478.138169][T23542] syz.2.6573: attempt to access beyond end of device
[  478.138169][T23542] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  478.255791][T23556] loop2: detected capacity change from 0 to 1024
[  478.285272][T23556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.299086][T23556] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  478.332954][T23552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.333231][T20628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.346024][T23563] hub 9-0:1.0: USB hub found
[  478.354562][T23563] hub 9-0:1.0: 8 ports detected
[  478.442328][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.482556][T23574] __nla_validate_parse: 1 callbacks suppressed
[  478.482572][T23574] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6584'.
[  478.500864][T23574] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  478.534920][T23577] syz.9.6585: attempt to access beyond end of device
[  478.534920][T23577] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  478.628170][T23575] loop2: detected capacity change from 0 to 8192
[  478.656758][T23581] loop3: detected capacity change from 0 to 1024
[  478.671478][T23581] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  478.752582][T23587] syz.9.6588: attempt to access beyond end of device
[  478.752582][T23587] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  478.850294][T23594] loop9: detected capacity change from 0 to 512
[  478.857588][T23594] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  478.869478][T23594] EXT4-fs (loop9): 1 truncate cleaned up
[  478.875728][T23594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.938057][T23602] FAULT_INJECTION: forcing a failure.
[  478.938057][T23602] name failslab, interval 1, probability 0, space 0, times 0
[  478.950928][T23602] CPU: 0 UID: 0 PID: 23602 Comm: syz.3.6593 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  478.950974][T23602] Tainted: [W]=WARN
[  478.950981][T23602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  478.950993][T23602] Call Trace:
[  478.951000][T23602]  <TASK>
[  478.951008][T23602]  __dump_stack+0x1d/0x30
[  478.951033][T23602]  dump_stack_lvl+0xe8/0x140
[  478.951067][T23602]  dump_stack+0x15/0x1b
[  478.951150][T23602]  should_fail_ex+0x265/0x280
[  478.951184][T23602]  should_failslab+0x8c/0xb0
[  478.951253][T23602]  __kmalloc_noprof+0xa5/0x3e0
[  478.951277][T23602]  ? _ib_alloc_device+0x39/0x440
[  478.951375][T23602]  ? __rcu_read_unlock+0x4f/0x70
[  478.951405][T23602]  _ib_alloc_device+0x39/0x440
[  478.951429][T23602]  siw_newlink+0xcf/0x680
[  478.951458][T23602]  nldev_newlink+0x366/0x3f0
[  478.951660][T23602]  ? __pfx_nldev_newlink+0x10/0x10
[  478.951691][T23602]  rdma_nl_rcv+0x47c/0x5a0
[  478.951711][T23602]  ? selinux_nlmsg_lookup+0x99/0x8b0
[  478.951748][T23602]  netlink_unicast+0x5a1/0x670
[  478.951835][T23602]  netlink_sendmsg+0x58b/0x6b0
[  478.951858][T23602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.951877][T23602]  __sock_sendmsg+0x145/0x180
[  478.951973][T23602]  ____sys_sendmsg+0x31e/0x4e0
[  478.952002][T23602]  ___sys_sendmsg+0x17b/0x1d0
[  478.952045][T23602]  __x64_sys_sendmsg+0xd4/0x160
[  478.952082][T23602]  x64_sys_call+0x2999/0x2fb0
[  478.952201][T23602]  do_syscall_64+0xd0/0x1a0
[  478.952226][T23602]  ? clear_bhb_loop+0x40/0x90
[  478.952278][T23602]  ? clear_bhb_loop+0x40/0x90
[  478.952299][T23602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.952324][T23602] RIP: 0033:0x7f04cc31e969
[  478.952344][T23602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.952367][T23602] RSP: 002b:00007f04ca987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.952453][T23602] RAX: ffffffffffffffda RBX: 00007f04cc545fa0 RCX: 00007f04cc31e969
[  478.952466][T23602] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000008
[  478.952478][T23602] RBP: 00007f04ca987090 R08: 0000000000000000 R09: 0000000000000000
[  478.952489][T23602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.952501][T23602] R13: 0000000000000000 R14: 00007f04cc545fa0 R15: 00007fff22545338
[  478.952526][T23602]  </TASK>
[  479.271089][T23606] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6595'.
[  479.280258][T23606] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  479.380113][T23610] lo speed is unknown, defaulting to 1000
[  479.485678][T23614] loop2: detected capacity change from 0 to 1024
[  479.509754][T23614] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  479.528210][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6596'.
[  479.785829][T23640] rdma_op ffff88810cc87180 conn xmit_rdma 0000000000000000
[  479.799823][T23638] hub 9-0:1.0: USB hub found
[  479.804600][T23638] hub 9-0:1.0: 8 ports detected
[  479.810508][T23642] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6607'.
[  479.819699][T23642] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  479.915249][T23652] loop2: detected capacity change from 0 to 512
[  479.933283][T23652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  479.946480][T23652] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.962196][T23652] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6611'.
[  480.153204][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6616'.
[  480.315746][T23673] rdma_op ffff888119549180 conn xmit_rdma 0000000000000000
[  480.337434][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.370349][T23678] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6619'.
[  480.380298][T23678] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  480.903099][T23690] lo speed is unknown, defaulting to 1000
[  481.033723][T23699] SELinux: syz.3.6626 (23699) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  481.202757][T20628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.299275][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6627'.
[  481.321035][T23706] syz.5.6629: attempt to access beyond end of device
[  481.321035][T23706] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  481.376618][T23713] rdma_op ffff888119549980 conn xmit_rdma 0000000000000000
[  481.421692][T23720] hub 9-0:1.0: USB hub found
[  481.426683][T23720] hub 9-0:1.0: 8 ports detected
[  481.843306][   T29] kauditd_printk_skb: 550 callbacks suppressed
[  481.843321][   T29] audit: type=1326 audit(1747398375.213:17674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8b58e5927 code=0x7ffc0000
[  481.874198][   T29] audit: type=1326 audit(1747398375.213:17675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8b588ab39 code=0x7ffc0000
[  481.897903][   T29] audit: type=1326 audit(1747398375.213:17676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  481.922133][   T29] audit: type=1326 audit(1747398375.223:17677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8b58e5927 code=0x7ffc0000
[  481.946753][   T29] audit: type=1326 audit(1747398375.223:17678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8b588ab39 code=0x7ffc0000
[  481.959855][T23732] loop3: detected capacity change from 0 to 1024
[  481.971177][   T29] audit: type=1326 audit(1747398375.223:17679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  481.980373][T23732] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  482.001561][   T29] audit: type=1326 audit(1747398375.244:17680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8b58e5927 code=0x7ffc0000
[  482.036245][   T29] audit: type=1326 audit(1747398375.244:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe8b588ab39 code=0x7ffc0000
[  482.059965][   T29] audit: type=1326 audit(1747398375.244:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  482.084300][   T29] audit: type=1326 audit(1747398375.276:17683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz.9.6634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8b58e5927 code=0x7ffc0000
[  482.241566][T23738] netlink: 'syz.5.6639': attribute type 1 has an invalid length.
[  482.345275][T23748] loop2: detected capacity change from 0 to 512
[  482.353102][T23748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  482.369072][T23748] EXT4-fs (loop2): 1 truncate cleaned up
[  482.395073][T23748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.417672][T23759] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6643'.
[  482.632891][T23761] SELinux: syz.1.6646 (23761) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  482.753839][T23769] lo speed is unknown, defaulting to 1000
[  482.984397][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6649'.
[  483.121110][T23775] bridge0: entered promiscuous mode
[  483.138592][T23775] bridge0: port 3(macsec1) entered blocking state
[  483.145225][T23775] bridge0: port 3(macsec1) entered disabled state
[  483.151900][T23775] macsec1: entered allmulticast mode
[  483.157228][T23775] bridge0: entered allmulticast mode
[  483.214252][T23775] macsec1: left allmulticast mode
[  483.219416][T23775] bridge0: left allmulticast mode
[  483.230768][T23775] bridge0: left promiscuous mode
[  483.253071][T23779] bridge0: entered promiscuous mode
[  483.260308][T23779] bridge0: port 3(macsec1) entered blocking state
[  483.266892][T23779] bridge0: port 3(macsec1) entered disabled state
[  483.274432][T23779] macsec1: entered allmulticast mode
[  483.280582][T23779] bridge0: entered allmulticast mode
[  483.286670][T23779] macsec1: left allmulticast mode
[  483.291930][T23779] bridge0: left allmulticast mode
[  483.306354][T23779] bridge0: left promiscuous mode
[  483.326695][T23786] loop5: detected capacity change from 0 to 1024
[  483.353798][T23786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.369335][T23786] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  483.397818][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.421904][T23793] loop5: detected capacity change from 0 to 1024
[  483.437835][T23793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.452801][T23793] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  483.479723][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.738135][T20628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.774112][T23804] loop9: detected capacity change from 0 to 1024
[  483.781444][T23804] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  483.804825][T23807] loop2: detected capacity change from 0 to 1024
[  483.818812][T23807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.834178][T23807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  483.860512][T20628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.945531][T23822] FAULT_INJECTION: forcing a failure.
[  483.945531][T23822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  483.958814][T23822] CPU: 0 UID: 0 PID: 23822 Comm: syz.2.6662 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  483.958848][T23822] Tainted: [W]=WARN
[  483.958855][T23822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  483.958867][T23822] Call Trace:
[  483.958874][T23822]  <TASK>
[  483.958895][T23822]  __dump_stack+0x1d/0x30
[  483.958921][T23822]  dump_stack_lvl+0xe8/0x140
[  483.958980][T23822]  dump_stack+0x15/0x1b
[  483.959001][T23822]  should_fail_ex+0x265/0x280
[  483.959045][T23822]  should_fail+0xb/0x20
[  483.959159][T23822]  should_fail_usercopy+0x1a/0x20
[  483.959184][T23822]  _copy_from_user+0x1c/0xb0
[  483.959243][T23822]  ___sys_sendmsg+0xc1/0x1d0
[  483.959277][T23822]  __x64_sys_sendmsg+0xd4/0x160
[  483.959319][T23822]  x64_sys_call+0x2999/0x2fb0
[  483.959340][T23822]  do_syscall_64+0xd0/0x1a0
[  483.959362][T23822]  ? clear_bhb_loop+0x40/0x90
[  483.959438][T23822]  ? clear_bhb_loop+0x40/0x90
[  483.959520][T23822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.959540][T23822] RIP: 0033:0x7ff26e8ae969
[  483.959554][T23822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.959570][T23822] RSP: 002b:00007ff26cf17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.959662][T23822] RAX: ffffffffffffffda RBX: 00007ff26ead5fa0 RCX: 00007ff26e8ae969
[  483.959673][T23822] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  483.959685][T23822] RBP: 00007ff26cf17090 R08: 0000000000000000 R09: 0000000000000000
[  483.959707][T23822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.959783][T23822] R13: 0000000000000000 R14: 00007ff26ead5fa0 R15: 00007ffcc1a4c318
[  483.959800][T23822]  </TASK>
[  484.173323][T23826] __nla_validate_parse: 1 callbacks suppressed
[  484.173344][T23826] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6664'.
[  484.191983][T23826] tipc: Started in network mode
[  484.196942][T23826] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  484.204367][T23826] tipc: Enabled bearer <eth:vlan0>, priority 10
[  484.240498][T23834] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  484.247218][T23834] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  484.250097][T23838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'.
[  484.254957][T23834] vhci_hcd vhci_hcd.0: Device attached
[  484.306900][T23830] bridge0: entered promiscuous mode
[  484.327745][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'.
[  484.337527][T23830] bridge0: port 3(macsec1) entered blocking state
[  484.344124][T23830] bridge0: port 3(macsec1) entered disabled state
[  484.353205][T23830] macsec1: entered allmulticast mode
[  484.358549][T23830] bridge0: entered allmulticast mode
[  484.371188][T23830] macsec1: left allmulticast mode
[  484.376443][T23830] bridge0: left allmulticast mode
[  484.397345][T23850] loop3: detected capacity change from 0 to 1024
[  484.397519][T23852] loop5: detected capacity change from 0 to 512
[  484.404754][T23850] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  484.429661][T23830] bridge0: left promiscuous mode
[  484.441154][T23852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.453808][ T2969] vhci_hcd: vhci_device speed not set
[  484.460590][T23852] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.471580][T23835] vhci_hcd: connection closed
[  484.473155][T14672] vhci_hcd: stop threads
[  484.482303][T14672] vhci_hcd: release socket
[  484.486787][T14672] vhci_hcd: disconnect device
[  484.512859][T23852] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6671'.
[  484.522738][ T2969] usb 5-1: new full-speed USB device number 10 using vhci_hcd
[  484.532282][ T2969] usb 5-1: enqueue for inactive port 0
[  484.539181][ T2969] usb 5-1: enqueue for inactive port 0
[  484.580027][ T2969] usb 5-1: enqueue for inactive port 0
[  484.596107][T23863] loop3: detected capacity change from 0 to 512
[  484.603448][T23863] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  484.649314][ T2969] vhci_hcd: vhci_device speed not set
[  484.791059][T23873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=59219 sclass=netlink_audit_socket pid=23873 comm=syz.3.6676
[  484.889511][T23880] syz.3.6679: attempt to access beyond end of device
[  484.889511][T23880] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  485.118986][T23890] loop2: detected capacity change from 0 to 512
[  485.142470][T23890] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  485.265400][ T3392] tipc: Node number set to 10005162
[  485.381893][T23907] loop3: detected capacity change from 0 to 128
[  485.468033][T23907] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.497630][T23907] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  485.591969][T23911] loop1: detected capacity change from 0 to 128
[  485.618907][T23911] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.632301][T23911] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  486.084927][T23918] syz.9.6690: attempt to access beyond end of device
[  486.084927][T23918] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  486.228227][T23923] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5)
[  486.234797][T23923] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  486.242601][T23923] vhci_hcd vhci_hcd.0: Device attached
[  486.332764][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6691'.
[  486.353240][T23924] vhci_hcd: connection closed
[  486.353503][T14672] vhci_hcd: stop threads
[  486.362549][T14672] vhci_hcd: release socket
[  486.367039][T14672] vhci_hcd: disconnect device
[  486.418148][ T2969] vhci_hcd: vhci_device speed not set
[  486.870121][T23933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.913207][T22703] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  487.030325][   T29] kauditd_printk_skb: 413 callbacks suppressed
[  487.030344][   T29] audit: type=1326 audit(1747398380.661:18097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.059960][T23936] lo speed is unknown, defaulting to 1000
[  487.079612][T23941] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  487.093943][   T29] audit: type=1326 audit(1747398380.703:18098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.118755][   T29] audit: type=1326 audit(1747398380.703:18099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.143433][   T29] audit: type=1326 audit(1747398380.703:18100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.167301][   T29] audit: type=1326 audit(1747398380.703:18101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.191871][   T29] audit: type=1326 audit(1747398380.703:18102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.215554][   T29] audit: type=1326 audit(1747398380.703:18103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.239806][   T29] audit: type=1326 audit(1747398380.703:18104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.263547][   T29] audit: type=1326 audit(1747398380.703:18105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.287996][   T29] audit: type=1326 audit(1747398380.703:18106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23940 comm="syz.3.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  487.500089][T23949] loop9: detected capacity change from 0 to 1024
[  487.536227][T23952] hub 9-0:1.0: USB hub found
[  487.543431][T23952] hub 9-0:1.0: 8 ports detected
[  487.589345][T23949] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  487.645726][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.723598][T20838] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  487.880555][T23976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.172491][T23978] hub 9-0:1.0: USB hub found
[  488.177261][T23978] hub 9-0:1.0: 8 ports detected
[  488.203432][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6709'.
[  488.321363][T23983] lo speed is unknown, defaulting to 1000
[  488.368239][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6711'.
[  488.477452][T23991] netlink: 'syz.3.6712': attribute type 21 has an invalid length.
[  488.492074][T23991] loop3: detected capacity change from 0 to 1024
[  488.499940][T23991] EXT4-fs: Ignoring removed mblk_io_submit option
[  488.512204][T23991] EXT4-fs: Ignoring removed nobh option
[  488.518181][T23991] EXT4-fs: Ignoring removed bh option
[  488.546666][T23991] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal
[  488.628760][T24000] loop5: detected capacity change from 0 to 512
[  488.638724][T24000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  488.660435][T24000] EXT4-fs (loop5): 1 truncate cleaned up
[  488.676604][T24000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.703850][T24010] loop9: detected capacity change from 0 to 512
[  488.712248][T24010] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  488.734308][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.748992][T24010] EXT4-fs (loop9): 1 truncate cleaned up
[  488.779812][T24012] hub 9-0:1.0: USB hub found
[  488.790248][T24010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.802860][T24012] hub 9-0:1.0: 8 ports detected
[  489.088246][T24025] lo speed is unknown, defaulting to 1000
[  489.215594][T24031] FAULT_INJECTION: forcing a failure.
[  489.215594][T24031] name failslab, interval 1, probability 0, space 0, times 0
[  489.228550][T24031] CPU: 0 UID: 0 PID: 24031 Comm: syz.5.6725 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  489.228669][T24031] Tainted: [W]=WARN
[  489.228675][T24031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  489.228687][T24031] Call Trace:
[  489.228693][T24031]  <TASK>
[  489.228701][T24031]  __dump_stack+0x1d/0x30
[  489.228721][T24031]  dump_stack_lvl+0xe8/0x140
[  489.228739][T24031]  dump_stack+0x15/0x1b
[  489.228754][T24031]  should_fail_ex+0x265/0x280
[  489.228822][T24031]  should_failslab+0x8c/0xb0
[  489.228895][T24031]  kmem_cache_alloc_node_noprof+0x57/0x320
[  489.228919][T24031]  ? __alloc_skb+0x101/0x320
[  489.228950][T24031]  __alloc_skb+0x101/0x320
[  489.229012][T24031]  netlink_alloc_large_skb+0xba/0xf0
[  489.229071][T24031]  netlink_sendmsg+0x3cf/0x6b0
[  489.229120][T24031]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.229137][T24031]  __sock_sendmsg+0x145/0x180
[  489.229162][T24031]  ____sys_sendmsg+0x31e/0x4e0
[  489.229184][T24031]  ___sys_sendmsg+0x17b/0x1d0
[  489.229216][T24031]  __x64_sys_sendmsg+0xd4/0x160
[  489.229265][T24031]  x64_sys_call+0x2999/0x2fb0
[  489.229286][T24031]  do_syscall_64+0xd0/0x1a0
[  489.229309][T24031]  ? clear_bhb_loop+0x40/0x90
[  489.229327][T24031]  ? clear_bhb_loop+0x40/0x90
[  489.229372][T24031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.229391][T24031] RIP: 0033:0x7f854ddce969
[  489.229405][T24031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.229460][T24031] RSP: 002b:00007f854c437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.229477][T24031] RAX: ffffffffffffffda RBX: 00007f854dff5fa0 RCX: 00007f854ddce969
[  489.229488][T24031] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  489.229500][T24031] RBP: 00007f854c437090 R08: 0000000000000000 R09: 0000000000000000
[  489.229534][T24031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.229548][T24031] R13: 0000000000000000 R14: 00007f854dff5fa0 R15: 00007fffa10208b8
[  489.229571][T24031]  </TASK>
[  489.485012][T24033] 9pnet_fd: Insufficient options for proto=fd
[  489.540207][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6728'.
[  489.564335][T24038] bridge0: port 3(macsec1) entered blocking state
[  489.570987][T24038] bridge0: port 3(macsec1) entered disabled state
[  489.579010][T24038] macsec1: entered allmulticast mode
[  489.584575][T24038] bridge0: entered allmulticast mode
[  489.591836][T24038] macsec1: left allmulticast mode
[  489.596904][T24038] bridge0: left allmulticast mode
[  489.611076][T24046] loop2: detected capacity change from 0 to 1024
[  489.618747][T24046] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  489.653002][T24052] rdma_op ffff888104333580 conn xmit_rdma 0000000000000000
[  489.679107][T24054] loop3: detected capacity change from 0 to 512
[  489.686482][T24054] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  489.744808][T24063] loop3: detected capacity change from 0 to 1024
[  489.753290][T24063] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  489.906268][T24075] syz.3.6738: attempt to access beyond end of device
[  489.906268][T24075] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  489.970788][T24079] hub 9-0:1.0: USB hub found
[  489.975652][T24079] hub 9-0:1.0: 8 ports detected
[  490.088959][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.134296][T24083] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6741'.
[  490.144867][T24083] siw: device registration error -23
[  490.207066][T24089] rdma_op ffff88812da38580 conn xmit_rdma 0000000000000000
[  490.456993][T24103] netlink: 24 bytes leftover after parsing attributes in process `wg1'.
[  490.529701][T24111] loop9: detected capacity change from 0 to 1024
[  490.540447][T24111] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  490.574817][T24116] rdma_op ffff888119c7cd80 conn xmit_rdma 0000000000000000
[  490.637651][T24125] loop2: detected capacity change from 0 to 512
[  490.649135][T24125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.662087][T24125] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.679988][T24125] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6758'.
[  490.775053][T24132] loop3: detected capacity change from 0 to 1024
[  490.782322][T24132] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  490.933339][T24139] FAULT_INJECTION: forcing a failure.
[  490.933339][T24139] name failslab, interval 1, probability 0, space 0, times 0
[  490.946129][T24139] CPU: 0 UID: 0 PID: 24139 Comm: syz.3.6761 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  490.946195][T24139] Tainted: [W]=WARN
[  490.946204][T24139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  490.946216][T24139] Call Trace:
[  490.946222][T24139]  <TASK>
[  490.946230][T24139]  __dump_stack+0x1d/0x30
[  490.946258][T24139]  dump_stack_lvl+0xe8/0x140
[  490.946342][T24139]  dump_stack+0x15/0x1b
[  490.946428][T24139]  should_fail_ex+0x265/0x280
[  490.946473][T24139]  should_failslab+0x8c/0xb0
[  490.946513][T24139]  kmem_cache_alloc_noprof+0x50/0x310
[  490.946610][T24139]  ? sctp_get_port_local+0x420/0xab0
[  490.946641][T24139]  sctp_get_port_local+0x420/0xab0
[  490.946673][T24139]  sctp_do_bind+0x398/0x4b0
[  490.946701][T24139]  sctp_connect_new_asoc+0x153/0x3a0
[  490.946732][T24139]  sctp_sendmsg+0xf10/0x18d0
[  490.946856][T24139]  ? selinux_socket_sendmsg+0x81/0x1b0
[  490.946892][T24139]  ? __pfx_sctp_sendmsg+0x10/0x10
[  490.947006][T24139]  inet_sendmsg+0xc5/0xd0
[  490.947049][T24139]  __sock_sendmsg+0x102/0x180
[  490.947087][T24139]  ____sys_sendmsg+0x31e/0x4e0
[  490.947121][T24139]  ___sys_sendmsg+0x17b/0x1d0
[  490.947187][T24139]  __x64_sys_sendmsg+0xd4/0x160
[  490.947218][T24139]  x64_sys_call+0x2999/0x2fb0
[  490.947286][T24139]  do_syscall_64+0xd0/0x1a0
[  490.947392][T24139]  ? clear_bhb_loop+0x40/0x90
[  490.947419][T24139]  ? clear_bhb_loop+0x40/0x90
[  490.947448][T24139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.947510][T24139] RIP: 0033:0x7f04cc31e969
[  490.947531][T24139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.947554][T24139] RSP: 002b:00007f04ca987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.947575][T24139] RAX: ffffffffffffffda RBX: 00007f04cc545fa0 RCX: 00007f04cc31e969
[  490.947609][T24139] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003
[  490.947626][T24139] RBP: 00007f04ca987090 R08: 0000000000000000 R09: 0000000000000000
[  490.947641][T24139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.947657][T24139] R13: 0000000000000000 R14: 00007f04cc545fa0 R15: 00007fff22545338
[  490.947683][T24139]  </TASK>
[  491.419665][T24154] rdma_op ffff88814bd08d80 conn xmit_rdma 0000000000000000
[  491.574760][T24162] loop1: detected capacity change from 0 to 1024
[  491.596060][T24163] hub 9-0:1.0: USB hub found
[  491.600950][T24163] hub 9-0:1.0: 8 ports detected
[  491.618568][T24162] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  491.660316][T24174] syz.3.6776: attempt to access beyond end of device
[  491.660316][T24174] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  491.721722][T24180] IPv6: NLM_F_CREATE should be specified when creating new route
[  491.770721][T20628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.790958][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6779'.
[  491.844287][T24193] FAULT_INJECTION: forcing a failure.
[  491.844287][T24193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  491.858311][T24193] CPU: 1 UID: 0 PID: 24193 Comm:  Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  491.858411][T24193] Tainted: [W]=WARN
[  491.858419][T24193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  491.858435][T24193] Call Trace:
[  491.858443][T24193]  <TASK>
[  491.858454][T24193]  __dump_stack+0x1d/0x30
[  491.858479][T24193]  dump_stack_lvl+0xe8/0x140
[  491.858561][T24193]  dump_stack+0x15/0x1b
[  491.858577][T24193]  should_fail_ex+0x265/0x280
[  491.858610][T24193]  should_fail+0xb/0x20
[  491.858644][T24193]  should_fail_usercopy+0x1a/0x20
[  491.858786][T24193]  _copy_from_user+0x1c/0xb0
[  491.858884][T24193]  copy_from_sockptr_offset+0x66/0xa0
[  491.858967][T24193]  do_ip6t_set_ctl+0x5d1/0x840
[  491.859000][T24193]  ? kstrtoull+0x111/0x140
[  491.859036][T24193]  ? __rcu_read_unlock+0x4f/0x70
[  491.859068][T24193]  nf_setsockopt+0x199/0x1b0
[  491.859160][T24193]  ipv6_setsockopt+0x11a/0x130
[  491.859191][T24193]  tcp_setsockopt+0x98/0xb0
[  491.859299][T24193]  sock_common_setsockopt+0x69/0x80
[  491.859337][T24193]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  491.859456][T24193]  __sys_setsockopt+0x184/0x200
[  491.859511][T24193]  __x64_sys_setsockopt+0x64/0x80
[  491.859537][T24193]  x64_sys_call+0x2bd5/0x2fb0
[  491.859565][T24193]  do_syscall_64+0xd0/0x1a0
[  491.859596][T24193]  ? clear_bhb_loop+0x40/0x90
[  491.859623][T24193]  ? clear_bhb_loop+0x40/0x90
[  491.859663][T24193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.859688][T24193] RIP: 0033:0x7ff26e8ae969
[  491.859708][T24193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.859806][T24193] RSP: 002b:00007ff26cf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  491.859830][T24193] RAX: ffffffffffffffda RBX: 00007ff26ead5fa0 RCX: 00007ff26e8ae969
[  491.859846][T24193] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  491.859918][T24193] RBP: 00007ff26cf17090 R08: 0000000000000330 R09: 0000000000000000
[  491.859933][T24193] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  491.859948][T24193] R13: 0000000000000000 R14: 00007ff26ead5fa0 R15: 00007ffcc1a4c318
[  491.859973][T24193]  </TASK>
[  491.944573][   T29] kauditd_printk_skb: 241 callbacks suppressed
[  491.944594][   T29] audit: type=1326 audit(1747398385.795:18346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.120541][   T29] audit: type=1326 audit(1747398385.795:18347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.149225][   T29] audit: type=1326 audit(1747398385.868:18348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.173754][   T29] audit: type=1326 audit(1747398385.868:18349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.197610][   T29] audit: type=1326 audit(1747398385.868:18350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.222213][   T29] audit: type=1326 audit(1747398385.868:18351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.245982][   T29] audit: type=1326 audit(1747398385.868:18352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.270613][   T29] audit: type=1326 audit(1747398385.868:18353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24190 comm="syz.3.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.359531][T24216] FAULT_INJECTION: forcing a failure.
[  492.359531][T24216] name failslab, interval 1, probability 0, space 0, times 0
[  492.372435][T24216] CPU: 1 UID: 0 PID: 24216 Comm: +}[@ Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  492.372512][T24216] Tainted: [W]=WARN
[  492.372521][T24216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  492.372537][T24216] Call Trace:
[  492.372544][T24216]  <TASK>
[  492.372552][T24216]  __dump_stack+0x1d/0x30
[  492.372573][T24216]  dump_stack_lvl+0xe8/0x140
[  492.372592][T24216]  dump_stack+0x15/0x1b
[  492.372660][T24216]  should_fail_ex+0x265/0x280
[  492.372814][T24216]  should_failslab+0x8c/0xb0
[  492.372855][T24216]  kmem_cache_alloc_node_noprof+0x57/0x320
[  492.372887][T24216]  ? __alloc_skb+0x101/0x320
[  492.372935][T24216]  __alloc_skb+0x101/0x320
[  492.373001][T24216]  tipc_msg_create+0x47/0x230
[  492.373046][T24216]  tipc_group_create_event+0xf4/0x310
[  492.373073][T24216]  tipc_group_proto_rcv+0xcda/0xd10
[  492.373211][T24216]  tipc_sk_proto_rcv+0x140/0xb00
[  492.373289][T24216]  ? alloc_pages_mpol+0x202/0x250
[  492.373314][T24216]  ? alloc_frozen_pages_noprof+0x90/0x110
[  492.373415][T24216]  tipc_sk_filter_rcv+0x1812/0x1930
[  492.373448][T24216]  ? security_inode_alloc+0x37/0x100
[  492.373553][T24216]  ? should_fail_ex+0x30/0x280
[  492.373583][T24216]  ? xas_load+0x413/0x430
[  492.373603][T24216]  ? xas_load+0x413/0x430
[  492.373625][T24216]  ? cgroup_rstat_updated+0xa3/0x510
[  492.373749][T24216]  ? try_charge_memcg+0x174/0x870
[  492.373864][T24216]  ? page_counter_charge+0x207/0x230
[  492.373886][T24216]  ? __rcu_read_unlock+0x4f/0x70
[  492.373908][T24216]  ? bcmp+0x5e/0x90
[  492.374008][T24216]  ? __rcu_read_unlock+0x4f/0x70
[  492.374038][T24216]  tipc_sk_rcv+0x4dc/0x1850
[  492.374078][T24216]  ? kmalloc_reserve+0x84/0x190
[  492.374152][T24216]  tipc_node_xmit+0x18b/0x890
[  492.374212][T24216]  tipc_node_distr_xmit+0x1a5/0x200
[  492.374254][T24216]  tipc_group_delete+0x236/0x290
[  492.374277][T24216]  tipc_sk_leave+0xa9/0x270
[  492.374357][T24216]  tipc_release+0x83/0xd10
[  492.374384][T24216]  ? get_pid_task+0x96/0xd0
[  492.374488][T24216]  sock_close+0x68/0x150
[  492.374511][T24216]  ? __pfx_sock_close+0x10/0x10
[  492.374598][T24216]  __fput+0x29b/0x650
[  492.374620][T24216]  ____fput+0x1c/0x30
[  492.374637][T24216]  task_work_run+0x131/0x1a0
[  492.374663][T24216]  resume_user_mode_work+0x6a/0x70
[  492.374692][T24216]  syscall_exit_to_user_mode+0x77/0xb0
[  492.374791][T24216]  do_syscall_64+0xdd/0x1a0
[  492.374892][T24216]  ? clear_bhb_loop+0x40/0x90
[  492.374913][T24216]  ? clear_bhb_loop+0x40/0x90
[  492.374993][T24216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.375018][T24216] RIP: 0033:0x7fe8b58ee969
[  492.375039][T24216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.375061][T24216] RSP: 002b:00007fe8b3f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[  492.375085][T24216] RAX: 0000000000000003 RBX: 00007fe8b5b15fa0 RCX: 00007fe8b58ee969
[  492.375114][T24216] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  492.375126][T24216] RBP: 00007fe8b3f57090 R08: 0000000000000000 R09: 0000000000000000
[  492.375173][T24216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.375185][T24216] R13: 0000000000000000 R14: 00007fe8b5b15fa0 R15: 00007ffd3f3ddf68
[  492.375205][T24216]  </TASK>
[  492.731535][T24222] SELinux:  Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped).
[  492.741812][   T29] audit: type=1326 audit(1747398386.624:18354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.3.6792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.765904][   T29] audit: type=1326 audit(1747398386.624:18355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.3.6792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cc31e969 code=0x7ffc0000
[  492.863486][T24236] syz.2.6799: attempt to access beyond end of device
[  492.863486][T24236] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  492.892661][T24238] hub 9-0:1.0: USB hub found
[  492.897550][T24238] hub 9-0:1.0: 8 ports detected
[  493.998322][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6819'.
[  494.013298][T24287] bridge0: port 3(macsec1) entered blocking state
[  494.020372][T24287] bridge0: port 3(macsec1) entered disabled state
[  494.027418][T24287] macsec1: entered allmulticast mode
[  494.032913][T24287] bridge0: entered allmulticast mode
[  494.038932][T24287] macsec1: left allmulticast mode
[  494.044086][T24287] bridge0: left allmulticast mode
[  494.079930][T24293] netlink: 'syz.2.6820': attribute type 1 has an invalid length.
[  494.087938][T24293] netlink: 'syz.2.6820': attribute type 4 has an invalid length.
[  494.095943][T24293] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6820'.
[  494.110622][T24293] FAULT_INJECTION: forcing a failure.
[  494.110622][T24293] name failslab, interval 1, probability 0, space 0, times 0
[  494.123425][T24293] CPU: 0 UID: 0 PID: 24293 Comm: syz.2.6820 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  494.123508][T24293] Tainted: [W]=WARN
[  494.123515][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  494.123530][T24293] Call Trace:
[  494.123587][T24293]  <TASK>
[  494.123595][T24293]  __dump_stack+0x1d/0x30
[  494.123621][T24293]  dump_stack_lvl+0xe8/0x140
[  494.123643][T24293]  dump_stack+0x15/0x1b
[  494.123661][T24293]  should_fail_ex+0x265/0x280
[  494.123698][T24293]  should_failslab+0x8c/0xb0
[  494.123756][T24293]  kmem_cache_alloc_node_noprof+0x57/0x320
[  494.123781][T24293]  ? __alloc_skb+0x101/0x320
[  494.123881][T24293]  __alloc_skb+0x101/0x320
[  494.123918][T24293]  netlink_ack+0xfd/0x500
[  494.123959][T24293]  netlink_rcv_skb+0x192/0x220
[  494.124038][T24293]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  494.124230][T24293]  rtnetlink_rcv+0x1c/0x30
[  494.124256][T24293]  netlink_unicast+0x5a1/0x670
[  494.124300][T24293]  netlink_sendmsg+0x58b/0x6b0
[  494.124336][T24293]  ? __pfx_netlink_sendmsg+0x10/0x10
[  494.124360][T24293]  __sock_sendmsg+0x145/0x180
[  494.124392][T24293]  sock_write_iter+0x165/0x1b0
[  494.124425][T24293]  ? __pfx_sock_write_iter+0x10/0x10
[  494.124525][T24293]  vfs_write+0x49d/0x8d0
[  494.124561][T24293]  ksys_write+0xda/0x1a0
[  494.124623][T24293]  __x64_sys_write+0x40/0x50
[  494.124654][T24293]  x64_sys_call+0x2cdd/0x2fb0
[  494.124679][T24293]  do_syscall_64+0xd0/0x1a0
[  494.124727][T24293]  ? clear_bhb_loop+0x40/0x90
[  494.124752][T24293]  ? clear_bhb_loop+0x40/0x90
[  494.124777][T24293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.124802][T24293] RIP: 0033:0x7ff26e8ae969
[  494.124820][T24293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.124866][T24293] RSP: 002b:00007ff26cf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  494.124888][T24293] RAX: ffffffffffffffda RBX: 00007ff26ead5fa0 RCX: 00007ff26e8ae969
[  494.124904][T24293] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[  494.124919][T24293] RBP: 00007ff26cf17090 R08: 0000000000000000 R09: 0000000000000000
[  494.124933][T24293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.124948][T24293] R13: 0000000000000000 R14: 00007ff26ead5fa0 R15: 00007ffcc1a4c318
[  494.124969][T24293]  </TASK>
[  494.401659][T24300] hub 9-0:1.0: USB hub found
[  494.406475][T24300] hub 9-0:1.0: 8 ports detected
[  494.421342][T24302] loop3: detected capacity change from 0 to 512
[  494.427954][T24302] EXT4-fs: Ignoring removed mblk_io_submit option
[  494.436813][T24302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.505701][T24302] netlink: 'syz.3.6824': attribute type 1 has an invalid length.
[  494.513555][T24302] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6824'.
[  494.555675][T24302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.595373][T24308] loop3: detected capacity change from 0 to 1024
[  494.621108][T24308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.634935][T24308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  494.662555][T22703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.680283][T24316] loop9: detected capacity change from 0 to 512
[  494.698575][T24316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.711934][T24316] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  494.725192][T24316] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #2: comm syz.9.6829: corrupted inode contents
[  494.737408][T24322] loop3: detected capacity change from 0 to 512
[  494.737484][T24316] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #2: comm syz.9.6829: mark_inode_dirty error
[  494.744835][T24322] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  494.756982][T24316] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #2: comm syz.9.6829: corrupted inode contents
[  494.767222][T24322] EXT4-fs (loop3): 1 truncate cleaned up
[  494.785049][T24322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.817551][T24316] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.6829: mark_inode_dirty error
[  494.835586][T24316] FAULT_INJECTION: forcing a failure.
[  494.835586][T24316] name failslab, interval 1, probability 0, space 0, times 0
[  494.849155][T24316] CPU: 1 UID: 0 PID: 24316 Comm: syz.9.6829 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  494.849196][T24316] Tainted: [W]=WARN
[  494.849276][T24316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  494.849293][T24316] Call Trace:
[  494.849301][T24316]  <TASK>
[  494.849312][T24316]  __dump_stack+0x1d/0x30
[  494.849400][T24316]  dump_stack_lvl+0xe8/0x140
[  494.849426][T24316]  dump_stack+0x15/0x1b
[  494.849447][T24316]  should_fail_ex+0x265/0x280
[  494.849490][T24316]  should_failslab+0x8c/0xb0
[  494.849593][T24316]  __kmalloc_noprof+0xa5/0x3e0
[  494.849612][T24316]  ? qtree_write_dquot+0x70/0x300
[  494.849642][T24316]  ? get_partial_node+0x2e0/0x320
[  494.849733][T24316]  qtree_write_dquot+0x70/0x300
[  494.849774][T24316]  ? ___slab_alloc+0x275/0x900
[  494.849799][T24316]  v2_write_dquot+0xda/0x140
[  494.849899][T24316]  dquot_commit+0x219/0x260
[  494.849925][T24316]  ext4_write_dquot+0x126/0x1d0
[  494.849946][T24316]  ext4_mark_dquot_dirty+0x95/0xd0
[  494.849966][T24316]  __dquot_alloc_space+0x36f/0x8a0
[  494.850047][T24316]  ext4_mb_new_blocks+0x91b/0x2050
[  494.850161][T24316]  ? ext4_ext_search_right+0x310/0x4e0
[  494.850182][T24316]  ? ext4_inode_to_goal_block+0x1be/0x1e0
[  494.850272][T24316]  ext4_ext_map_blocks+0xfe6/0x3620
[  494.850305][T24316]  ? jhash+0x2a6/0x310
[  494.850342][T24316]  ext4_map_blocks+0x5ab/0xd00
[  494.850383][T24316]  _ext4_get_block+0x10a/0x350
[  494.850419][T24316]  ext4_get_block_unwritten+0x2a/0xb0
[  494.850453][T24316]  ext4_block_write_begin+0x300/0x970
[  494.850554][T24316]  ? __pfx_ext4_get_block_unwritten+0x10/0x10
[  494.850593][T24316]  ? folio_mapping+0xb9/0x120
[  494.850622][T24316]  ext4_write_begin+0x43c/0xc30
[  494.850655][T24316]  ext4_da_write_begin+0x1e8/0x580
[  494.850676][T24316]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[  494.850749][T24316]  generic_perform_write+0x181/0x490
[  494.850791][T24316]  ext4_buffered_write_iter+0x1ee/0x3c0
[  494.850820][T24316]  ? ext4_file_write_iter+0xfe/0xf00
[  494.850859][T24316]  ext4_file_write_iter+0x383/0xf00
[  494.850889][T24316]  ? kstrtouint_from_user+0x9f/0xf0
[  494.850952][T24316]  ? avc_policy_seqno+0x15/0x30
[  494.850976][T24316]  ? selinux_file_permission+0x213/0x360
[  494.851020][T24316]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  494.851114][T24316]  vfs_write+0x49d/0x8d0
[  494.851146][T24316]  ksys_write+0xda/0x1a0
[  494.851173][T24316]  __x64_sys_write+0x40/0x50
[  494.851207][T24316]  x64_sys_call+0x2cdd/0x2fb0
[  494.851290][T24316]  do_syscall_64+0xd0/0x1a0
[  494.851335][T24316]  ? clear_bhb_loop+0x40/0x90
[  494.851360][T24316]  ? clear_bhb_loop+0x40/0x90
[  494.851386][T24316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.851451][T24316] RIP: 0033:0x7fe8b58ee969
[  494.851471][T24316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.851494][T24316] RSP: 002b:00007fe8b3f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  494.851517][T24316] RAX: ffffffffffffffda RBX: 00007fe8b5b15fa0 RCX: 00007fe8b58ee969
[  494.851534][T24316] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005
[  494.851613][T24316] RBP: 00007fe8b3f57090 R08: 0000000000000000 R09: 0000000000000000
[  494.851625][T24316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.851636][T24316] R13: 0000000000000000 R14: 00007fe8b5b15fa0 R15: 00007ffd3f3ddf68
[  494.851656][T24316]  </TASK>
[  494.851665][T24316] EXT4-fs error (device loop9): ext4_write_dquot:6915: comm syz.9.6829: Failed to commit dquot type 0
[  494.933351][T24327] loop1: detected capacity change from 0 to 1024
[  494.978762][T24329] loop5: detected capacity change from 0 to 764
[  494.983171][T24327] EXT4-fs: Ignoring removed orlov option
[  494.992645][T24329] FAULT_INJECTION: forcing a failure.
[  494.992645][T24329] name failslab, interval 1, probability 0, space 0, times 0
[  495.000263][T24327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.002787][T24329] CPU: 1 UID: 0 PID: 24329 Comm: syz.5.6833 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  495.002830][T24329] Tainted: [W]=WARN
[  495.002839][T24329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  495.002924][T24329] Call Trace:
[  495.002933][T24329]  <TASK>
[  495.002944][T24329]  __dump_stack+0x1d/0x30
[  495.002973][T24329]  dump_stack_lvl+0xe8/0x140
[  495.002999][T24329]  dump_stack+0x15/0x1b
[  495.003021][T24329]  should_fail_ex+0x265/0x280
[  495.003099][T24329]  should_failslab+0x8c/0xb0
[  495.003140][T24329]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  495.003171][T24329]  ? kasprintf+0x83/0xb0
[  495.003205][T24329]  kvasprintf+0x8a/0x110
[  495.003302][T24329]  kasprintf+0x83/0xb0
[  495.003415][T24329]  alloc_bprm+0x133/0x660
[  495.003446][T24329]  ? should_fail+0xb/0x20
[  495.003488][T24329]  do_execveat_common+0x12e/0x750
[  495.003524][T24329]  ? getname_flags+0x154/0x3b0
[  495.003624][T24329]  __x64_sys_execveat+0x73/0x90
[  495.003683][T24329]  x64_sys_call+0x2dae/0x2fb0
[  495.003720][T24329]  do_syscall_64+0xd0/0x1a0
[  495.003752][T24329]  ? clear_bhb_loop+0x40/0x90
[  495.003781][T24329]  ? clear_bhb_loop+0x40/0x90
[  495.003865][T24329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.003893][T24329] RIP: 0033:0x7f854ddce969
[  495.003914][T24329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.003938][T24329] RSP: 002b:00007f854c437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  495.003967][T24329] RAX: ffffffffffffffda RBX: 00007f854dff5fa0 RCX: 00007f854ddce969
[  495.003984][T24329] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  495.004000][T24329] RBP: 00007f854c437090 R08: 0000000000001000 R09: 0000000000000000
[  495.004016][T24329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.004036][T24329] R13: 0000000000000000 R14: 00007f854dff5fa0 R15: 00007fffa10208b8
[  495.004078][T24329]  </TASK>
[  495.104035][T24331] lo speed is unknown, defaulting to 1000
[  495.290105][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6831'.
[  495.459368][T24346] loop5: detected capacity change from 0 to 1024
[  495.508666][T24346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.514072][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.543977][T24346] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  495.611792][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.771233][T20838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.797790][T24372] hub 9-0:1.0: USB hub found
[  495.807494][T24372] hub 9-0:1.0: 8 ports detected
[  495.855736][T24375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6847'.
[  495.870744][T24375] bridge0: entered promiscuous mode
[  495.878010][T24375] bridge0: port 3(macsec1) entered blocking state
[  495.884677][T24375] bridge0: port 3(macsec1) entered disabled state
[  495.891587][T24375] macsec1: entered allmulticast mode
[  495.897659][T24375] bridge0: entered allmulticast mode
[  495.905488][T24375] macsec1: left allmulticast mode
[  495.910785][T24375] bridge0: left allmulticast mode
[  495.934553][T24375] bridge0: left promiscuous mode
[  496.078300][T24384] loop2: detected capacity change from 0 to 1024
[  496.085472][T24384] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  496.139473][T22703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.157952][T24387] rdma_op ffff888120e98180 conn xmit_rdma 0000000000000000
[  496.448107][T24420] loop3: detected capacity change from 0 to 1024
[  496.478241][T24420] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6858: Failed to acquire dquot type 0
[  496.516592][T24420] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  496.552071][T24420] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6858: corrupted inode contents
[  496.572190][T24420] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.6858: mark_inode_dirty error
[  496.611434][T24420] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6858: corrupted inode contents
[  496.656643][T24420] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.6858: mark_inode_dirty error
[  496.697082][T24420] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6858: corrupted inode contents
[  496.727177][T24420] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  496.743490][T24448] loop2: detected capacity change from 0 to 1024
[  496.763455][T24420] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.6858: corrupted inode contents
[  496.777428][T24448] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  496.804755][T24420] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.6858: mark_inode_dirty error
[  496.811541][   T29] kauditd_printk_skb: 466 callbacks suppressed
[  496.811561][   T29] audit: type=1326 audit(1747398390.928:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  496.827378][T24465] hub 9-0:1.0: USB hub found
[  496.853785][T24420] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  496.864050][T24420] EXT4-fs (loop3): 1 truncate cleaned up
[  496.870032][T24465] hub 9-0:1.0: 8 ports detected
[  496.875558][T24420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.899157][T24420] ext4: Unknown parameter ''
[  496.907973][   T29] audit: type=1326 audit(1747398390.928:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  496.931940][   T29] audit: type=1326 audit(1747398390.928:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  496.956296][   T29] audit: type=1326 audit(1747398390.928:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  496.980619][   T29] audit: type=1326 audit(1747398390.928:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.004621][   T29] audit: type=1326 audit(1747398390.928:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.028590][   T29] audit: type=1326 audit(1747398390.928:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.052697][   T29] audit: type=1326 audit(1747398390.928:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.076737][   T29] audit: type=1326 audit(1747398390.928:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.100752][   T29] audit: type=1326 audit(1747398390.928:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24463 comm="syz.9.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b58ee969 code=0x7ffc0000
[  497.215892][T24484] syz.1.6872: attempt to access beyond end of device
[  497.215892][T24484] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  497.291384][T24494] cgroup: Unknown subsys name 'audit'
[  497.495564][T24506] loop2: detected capacity change from 0 to 164
[  497.508057][T24506] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82
[  497.950508][T24530] loop5: detected capacity change from 0 to 512
[  497.965112][T24530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.979079][T24530] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  497.994194][T24530] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.6881: corrupted inode contents
[  498.008433][T24530] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.6881: mark_inode_dirty error
[  498.021133][T24530] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.6881: corrupted inode contents
[  498.035249][T24530] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.6881: mark_inode_dirty error
[  498.227475][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.285127][T24564] loop9: detected capacity change from 0 to 512
[  498.298867][T24564] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  498.412309][T24580] hub 9-0:1.0: USB hub found
[  498.417599][T24580] hub 9-0:1.0: 8 ports detected
[  498.813908][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6891'.
[  498.827899][T24626] bridge0: port 3(macsec1) entered blocking state
[  498.834680][T24626] bridge0: port 3(macsec1) entered disabled state
[  498.841880][T24626] macsec1: entered allmulticast mode
[  498.847234][T24626] bridge0: entered allmulticast mode
[  498.853179][T24626] macsec1: left allmulticast mode
[  498.858338][T24626] bridge0: left allmulticast mode
[  499.238646][T24649] loop9: detected capacity change from 0 to 1024
[  499.253365][T22703] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.263532][T24649] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  499.343076][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6900'.
[  499.362747][T24654] bridge0: entered promiscuous mode
[  499.372060][T24654] bridge0: port 3(macsec1) entered blocking state
[  499.378951][T24654] bridge0: port 3(macsec1) entered disabled state
[  499.386417][T24654] macsec1: entered allmulticast mode
[  499.391798][T24654] bridge0: entered allmulticast mode
[  499.398062][T24654] macsec1: left allmulticast mode
[  499.403308][T24654] bridge0: left allmulticast mode
[  499.409160][T24663] syz.9.6902: attempt to access beyond end of device
[  499.409160][T24663] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  499.423675][T24654] bridge0: left promiscuous mode
[  499.581066][T24681] hub 9-0:1.0: USB hub found
[  499.586017][T24681] hub 9-0:1.0: 8 ports detected
[  499.760940][T24695] loop5: detected capacity change from 0 to 1024
[  499.770815][T24695] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  499.865733][T24706] syz.3.6916: attempt to access beyond end of device
[  499.865733][T24706] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  500.242742][T24725] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.252536][T24733] loop3: detected capacity change from 0 to 1024
[  500.264368][T24733] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  500.275662][T24733] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  500.288601][T24733] JBD2: no valid journal superblock found
[  500.294459][T24733] EXT4-fs (loop3): Could not load journal inode
[  500.370755][T24733] Cannot find add_set index 0 as target
[  500.386255][T24733] SELinux: security_context_str_to_sid (ùÿ) failed with errno=-22
[  500.442691][T24747] loop3: detected capacity change from 0 to 512
[  500.450296][T24747] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  500.454712][T24749] loop9: detected capacity change from 0 to 512
[  500.480379][T24749] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.493388][T24749] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.510977][T24749] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6929'.
[  500.553363][T24758] rdma_op ffff88814f764980 conn xmit_rdma 0000000000000000
[  500.675574][T24769] hub 9-0:1.0: USB hub found
[  500.680764][T24769] hub 9-0:1.0: 8 ports detected
[  500.929977][T24771] loop2: detected capacity change from 0 to 8192
[  501.248466][T24782] loop5: detected capacity change from 0 to 512
[  501.273787][T24782] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  501.325161][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.338510][T24780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6937'.
[  501.398518][T24789] loop5: detected capacity change from 0 to 1024
[  501.406842][T24789] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  501.417357][T24787] loop9: detected capacity change from 0 to 1024
[  501.451544][T24787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.469807][T24787] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  501.506059][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.554449][T24802] syz.5.6948: attempt to access beyond end of device
[  501.554449][T24802] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  501.723161][   T29] kauditd_printk_skb: 309 callbacks suppressed
[  501.723179][   T29] audit: type=1326 audit(1747398396.083:19139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.754010][   T29] audit: type=1326 audit(1747398396.083:19140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.820966][   T29] audit: type=1326 audit(1747398396.135:19141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.827728][T24819] loop5: detected capacity change from 0 to 764
[  501.844757][   T29] audit: type=1326 audit(1747398396.135:19142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.844850][   T29] audit: type=1326 audit(1747398396.135:19143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.844883][   T29] audit: type=1326 audit(1747398396.135:19144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.899392][T24819] iso9660: Unknown parameter '0x0000000000000003'
[  501.930779][   T29] audit: type=1326 audit(1747398396.135:19145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.955298][   T29] audit: type=1326 audit(1747398396.135:19146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  501.978987][   T29] audit: type=1326 audit(1747398396.146:19147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  502.003471][   T29] audit: type=1326 audit(1747398396.146:19148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24813 comm="syz.5.6952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854ddce969 code=0x7ffc0000
[  502.041498][T24821] hub 9-0:1.0: USB hub found
[  502.047551][T24821] hub 9-0:1.0: 8 ports detected
[  502.093368][T24830] loop5: detected capacity change from 0 to 1024
[  502.099760][T24832] loop2: detected capacity change from 0 to 1024
[  502.101100][T24830] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  502.107272][T24832] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  502.169727][T24836] loop5: detected capacity change from 0 to 512
[  502.176578][T24836] EXT4-fs: Ignoring removed mblk_io_submit option
[  502.186264][T24836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.231328][T24836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.537939][T24855] rdma_op ffff88810330f980 conn xmit_rdma 0000000000000000
[  502.545676][T24857] syz.9.6966: attempt to access beyond end of device
[  502.545676][T24857] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  502.675315][T24863] loop5: detected capacity change from 0 to 128
[  502.709251][T24863] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  502.773391][T24863] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  502.817831][T24868] loop9: detected capacity change from 0 to 1024
[  502.861372][T24868] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  503.098201][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6975'.
[  503.130117][T24883] bridge0: entered promiscuous mode
[  503.138603][T24883] bridge0: port 3(macsec1) entered blocking state
[  503.146136][T24883] bridge0: port 3(macsec1) entered disabled state
[  503.153246][T24883] macsec1: entered allmulticast mode
[  503.158650][T24883] bridge0: entered allmulticast mode
[  503.164970][T24883] macsec1: left allmulticast mode
[  503.170232][T24883] bridge0: left allmulticast mode
[  503.178285][T24883] bridge0: left promiscuous mode
[  503.461681][T24892] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6977'.
[  503.472352][T18283] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  503.491703][T24894] rdma_op ffff88812da3a980 conn xmit_rdma 0000000000000000
[  503.516273][T24898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6980'.
[  503.569712][T24905] loop3: detected capacity change from 0 to 1024
[  503.577704][T24905] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  503.592075][T24907] loop5: detected capacity change from 0 to 512
[  503.599571][T24907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  503.611818][T24907] EXT4-fs (loop5): 1 truncate cleaned up
[  503.617918][T24907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.708928][T24912] syz.3.6985: attempt to access beyond end of device
[  503.708928][T24912] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  503.756657][T24915] rdma_op ffff88812da3a980 conn xmit_rdma 0000000000000000
[  503.820882][T24913] lo speed is unknown, defaulting to 1000
[  503.871905][T24918] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6987'.
[  503.960149][T24924] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6989'.
[  503.980717][T24926] rdma_op ffff888119558980 conn xmit_rdma 0000000000000000
[  503.996699][T24928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6991'.
[  504.073113][T24932] loop3: detected capacity change from 0 to 512
[  504.087534][T24932] EXT4-fs: Ignoring removed mblk_io_submit option
[  504.095066][T24936] loop2: detected capacity change from 0 to 1024
[  504.103801][T24936] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  504.118203][T24932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.202601][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7000'.
[  504.219665][T24947] bridge0: entered promiscuous mode
[  504.226986][T24947] bridge0: port 3(macsec1) entered blocking state
[  504.226995][T24932] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.243216][T24947] bridge0: port 3(macsec1) entered disabled state
[  504.250211][T24947] macsec1: entered allmulticast mode
[  504.255667][T24947] bridge0: entered allmulticast mode
[  504.263087][T24947] macsec1: left allmulticast mode
[  504.268427][T24947] bridge0: left allmulticast mode
[  504.274184][T24947] bridge0: left promiscuous mode
[  504.305720][T24958] netlink: 43 bytes leftover after parsing attributes in process `syz.9.7002'.
[  504.330139][T24960] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7001'.
[  504.486170][T24968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7005'.
[  504.637955][T18283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.657531][T24981] loop9: detected capacity change from 0 to 512
[  504.682245][T24981] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.695129][T24981] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  504.721274][T24981] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.7011'.
[  504.819527][T24992] loop3: detected capacity change from 0 to 512
[  504.826242][T24992] EXT4-fs: Ignoring removed mblk_io_submit option
[  504.834669][T24992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  504.879192][T24996] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7014'.
[  504.961102][T25002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7017'.
[  504.990705][T24992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.134888][T25015] hub 9-0:1.0: USB hub found
[  505.142286][T25015] hub 9-0:1.0: 8 ports detected
[  505.525991][T25025] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7025'.
[  505.535175][T25025] tipc: Enabling of bearer <eth:vla> rejected, failed to enable media
[  505.568927][T25027] loop3: detected capacity change from 0 to 1024
[  505.576383][T25027] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  505.680753][T17191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.706919][T25033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7028'.
[  505.808537][T25048] FAULT_INJECTION: forcing a failure.
[  505.808537][T25048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.821749][T25048] CPU: 0 UID: 0 PID: 25048 Comm: syz.3.7033 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  505.821841][T25035] ==================================================================
[  505.821843][T25048] Tainted: [W]=WARN
[  505.821852][T25048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  505.821876][T25048] Call Trace:
[  505.821882][T25048]  <TASK>
[  505.821891][T25048]  __dump_stack+0x1d/0x30
[  505.821917][T25048]  dump_stack_lvl+0xe8/0x140
[  505.821944][T25048]  dump_stack+0x15/0x1b
[  505.821967][T25048]  should_fail_ex+0x265/0x280
[  505.822035][T25048]  should_fail+0xb/0x20
[  505.822074][T25048]  should_fail_usercopy+0x1a/0x20
[  505.822100][T25048]  _copy_from_user+0x1c/0xb0
[  505.822151][T25048]  do_ip_setsockopt+0x338/0x2240
[  505.822203][T25048]  ip_setsockopt+0x58/0x110
[  505.822238][T25048]  raw_setsockopt+0xbd/0x150
[  505.822280][T25048]  sock_common_setsockopt+0x69/0x80
[  505.822368][T25048]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  505.822468][T25048]  __sys_setsockopt+0x184/0x200
[  505.822631][T25048]  __x64_sys_setsockopt+0x64/0x80
[  505.822656][T25048]  x64_sys_call+0x2bd5/0x2fb0
[  505.822685][T25048]  do_syscall_64+0xd0/0x1a0
[  505.822717][T25048]  ? clear_bhb_loop+0x40/0x90
[  505.822785][T25048]  ? clear_bhb_loop+0x40/0x90
[  505.822820][T25048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.822848][T25048] RIP: 0033:0x7f04cc31e969
[  505.822868][T25048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  505.822895][T25048] RSP: 002b:00007f04ca987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  505.822920][T25048] RAX: ffffffffffffffda RBX: 00007f04cc545fa0 RCX: 00007f04cc31e969
[  505.823066][T25048] RDX: 0000000000000032 RSI: 0000000000000000 RDI: 0000000000000003
[  505.823082][T25048] RBP: 00007f04ca987090 R08: 0000000000000004 R09: 0000000000000000
[  505.823160][T25048] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  505.823190][T25048] R13: 0000000000000000 R14: 00007f04cc545fa0 R15: 00007fff22545338
[  505.823226][T25048]  </TASK>
[  506.032710][T25035] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  506.039381][T25035] 
[  506.041711][T25035] write to 0xffffffff86870570 of 8 bytes by task 25048 on cpu 0:
[  506.049436][T25035]  data_alloc+0x27d/0x2b0
[  506.053875][T25035]  prb_reserve+0x808/0xaf0
[  506.058325][T25035]  vprintk_store+0x56d/0x860
[  506.062939][T25035]  vprintk_emit+0x178/0x650
[  506.067478][T25035]  vprintk_default+0x26/0x30
[  506.072254][T25035]  vprintk+0x1d/0x30
[  506.076375][T25035]  _printk+0x79/0xa0
[  506.080345][T25035]  dump_stack_print_info+0xee/0x1b0
[  506.085654][T25035]  __dump_stack+0x11/0x30
[  506.090001][T25035]  dump_stack_lvl+0xe8/0x140
[  506.094615][T25035]  dump_stack+0x15/0x1b
[  506.098790][T25035]  should_fail_ex+0x265/0x280
[  506.103505][T25035]  should_fail+0xb/0x20
[  506.107708][T25035]  should_fail_usercopy+0x1a/0x20
[  506.112757][T25035]  _copy_from_user+0x1c/0xb0
[  506.117403][T25035]  do_ip_setsockopt+0x338/0x2240
[  506.122445][T25035]  ip_setsockopt+0x58/0x110
[  506.126966][T25035]  raw_setsockopt+0xbd/0x150
[  506.131615][T25035]  sock_common_setsockopt+0x69/0x80
[  506.136834][T25035]  __sys_setsockopt+0x184/0x200
[  506.141700][T25035]  __x64_sys_setsockopt+0x64/0x80
[  506.146734][T25035]  x64_sys_call+0x2bd5/0x2fb0
[  506.151423][T25035]  do_syscall_64+0xd0/0x1a0
[  506.155942][T25035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.161846][T25035] 
[  506.164174][T25035] read to 0xffffffff86870570 of 8 bytes by task 25035 on cpu 1:
[  506.171914][T25035]  prb_reserve+0x221/0xaf0
[  506.176352][T25035]  vprintk_store+0x56d/0x860
[  506.180949][T25035]  vprintk_emit+0x178/0x650
[  506.185470][T25035]  vprintk_default+0x26/0x30
[  506.190069][T25035]  vprintk+0x1d/0x30
[  506.194072][T25035]  _printk+0x79/0xa0
[  506.198006][T25035]  ib_get_eth_speed+0x33d/0x4b0
[  506.202883][T25035]  siw_query_port+0x3a/0x2d0
[  506.207491][T25035]  ib_query_port+0x390/0x3d0
[  506.212097][T25035]  ib_setup_port_attrs+0x14a/0x1430
[  506.217321][T25035]  add_one_compat_dev+0x261/0x360
[  506.222366][T25035]  rdma_dev_init_net+0x182/0x210
[  506.227345][T25035]  ops_init+0x227/0x2e0
[  506.231547][T25035]  setup_net+0x13b/0x5f0
[  506.235839][T25035]  copy_net_ns+0x565/0x720
[  506.240278][T25035]  create_new_namespaces+0x20e/0x410
[  506.245781][T25035]  copy_namespaces+0x1ad/0x210
[  506.250589][T25035]  copy_process+0xd1b/0x1f90
[  506.255217][T25035]  kernel_clone+0x16c/0x5b0
[  506.259772][T25035]  __x64_sys_clone+0xe6/0x120
[  506.264569][T25035]  x64_sys_call+0x2c59/0x2fb0
[  506.269295][T25035]  do_syscall_64+0xd0/0x1a0
[  506.273833][T25035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  506.279752][T25035] 
[  506.282236][T25035] value changed: 0x000000000006f620 -> 0x000000000010f800
[  506.289467][T25035] 
[  506.291888][T25035] Reported by Kernel Concurrency Sanitizer on:
[  506.298135][T25035] CPU: 1 UID: 0 PID: 25035 Comm: syz.9.7029 Tainted: G        W           6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) 
[  506.312244][T25035] Tainted: [W]=WARN
[  506.316056][T25035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  506.326127][T25035] ==================================================================
[  505.821708][T25035] lo speed is unknown, defaulting to 1000